---
title: Risk page
description: Create and manage risk profiles, and review the configuration of a
  single profile.
editUrl: true
head: []
template: doc
sidebar:
  hidden: false
  attrs: {}
pagefind: true
draft: false
---

The **Risk** item in the main navigation is where you create and tune risk profiles for your account. A profile decides how Prefactor turns declared span-type capabilities into a risk classification for each run — category weights, action multipliers, and score thresholds. You assign a profile to an agent to control how those declarations are scored.

For how weights and multipliers combine into a score, see [risk profile](/platform/concepts/risk-profile).

## Profiles list

Every profile configured for your account is listed here. Open one to review or edit its configuration; use **Create profile** to add a new one.

### Create risk profile

Use **Create profile** to open the creation form. Fields:

- **Name** (required) and **Description**.
- **Start from template** — choose one preset; it pre-fills weights and related fields.
- **Data category values** — weights for the categories under Standard PII, Sensitive data, and GDPR Article 9 Special Categories. Each category has a weight from 0 to 10 and an inclusion toggle. Excluding a category drops it from the profile regardless of the weight; including a category with weight 0 keeps it in scope but contributes nothing to scores.
- **Action risk multipliers** (advanced) — Destroy data, Financial transactions, External communication, Create data, Update data, and Read data. Actions also have an inclusion toggle. Excluded actions are not allowed under the profile's agreed risk.
- **Risk level thresholds** — **Medium ≥**, **High ≥**, and **Critical ≥** (numeric inputs within the allowed range).

Saving returns you to the list with the new profile in it. Open it for the full configuration below.

## Profile detail

Opening a profile shows its score thresholds, agreed risk scope, category scores, action multipliers, and the agents currently assigned to it.

### Score thresholds

Low, Medium, High, and Critical each map to a threshold value configured in the profile, with each band running from one threshold up to the next. If the values are not strictly ascending (medium > 0, high > medium, critical > high), the section shows an error — fix the values under **Edit**.

### Agreed risk

The scope an agent using this profile is agreed to operate within: which actions it may perform and which data categories it may touch. Prefactor compares the agent's declared capabilities against this scope on the [Overview tab](/admin-ui/agent/overview) of the agent and flags anything that exceeds it.

### Category scores

The categories the profile scores against, with their weights, grouped under Standard PII, Sensitive data, and GDPR Special Categories (Article 9). Zero-weight categories are hidden — included categories with no weight are still part of the agreed scope but do not contribute to the score.

### Action multipliers

Each included action type carries a multiplier. Values above 1 amplify that action in the risk score; 1 is neutral; below 1 reduces it. Actions excluded from agreed risk are not listed.

### Agents using this profile

Lists agents currently linked to this profile, each linking to that agent's overview.

## Actions

### Editing a profile

Use **Edit** to change the profile's name, description, category weights and inclusion, action multipliers and inclusion, and thresholds. The same fields are available when creating a profile. Editing does not re-offer the **Start from template** picker; templates only apply when a profile is first created.

### Deleting a profile

**Delete profile** is in the action menu. Agents that used the profile keep the association in their history and the configuration is preserved for audit, but no new instances will be scored against it.

## Related

- [Risk profile](/platform/concepts/risk-profile) — what a risk profile is and how category weights, multipliers, and thresholds combine into a risk level.
- [Agents page](/admin-ui/agents) — agents list; assign a profile when registering or editing an agent.
- [Prefactor introduction](/platform) — how risk profiles fit into the platform.