Register. Simulate. Decide.
The risk register your team manages and the Monte Carlo you defend in a gate review — the same model, in one browser tab. Import your P6 or MS Project plan, score and quantify every risk, and set contingency you can prove.
Your risk register has always lived in one tool your Monte Carlo in another RiskForesight is the one place where the register you manage and the simulation you defend are the same model.
Why RiskForesight
One place, one model
Your risk register and your Monte Carlo are the same rows — manage, score and simulate risks without exporting to a second desktop tool.
01Web-native by design
Any browser, anywhere. No desktop install, no IT rollout — live in a day.
02Verifiable by default
Seed-reproducible engine: same inputs give byte-identical results you can defend in a gate review.
03Integrated cost + schedule
One model for QSRA and ICSRA — Joint Confidence Level and defensible contingency without gluing tools together.
04AI-assisted across the workflow
A copilot with typed, confirmation-gated tools — from risk identification to report narrative.
05Risk lives in two tools that don't talk
A register that can't simulate
Enterprise risk registers manage, score and report risks — then hand the quantification off to another tool, or don't do it at all.
A simulator that isn't your register
Monte Carlo runs in a separate Windows desktop tool. You export the plan, re-key the risks, and reconcile two versions by hand.
Two sources of truth
The register and the model drift apart, results get trapped in static exports, and the numbers are hard to defend in a gate review.
Meanwhile schedules slip and budgets overrun — and “what's our real exposure?” gets answered by stitching tools together.
The register is the base of your QRA model
This living register is your system of record — and the single source the QRA model runs on. Open QRA Model and the very same rows simulate in front of you. No export, no re-keying, no second tool.
| Discrete | RSK-0031 | Geotech worse than survey | 15 | High | €3.1M | +21d |
| Discrete | RSK-0024 | Subcontractor default | 10 | Medium | €2.4M | +9d |
| Calendar | RSK-0007 | Adverse weather window | 15 | High | €0.64M | +11d |
| Discrete | RSK-0018 | Permit approval delay | 16 | High | €1.2M | +14d |
| Discrete | RSK-0002 | Long-lead equipment slip | 9 | Medium | €0.88M | +7d |
| Discrete | RSK-0045 | Client-driven design change | 6 | Medium | €1.5M | +5d |
| Discrete | RSK-0052 | Vessel availability shortfall | 12 | High | €1.9M | +12d |
| Discrete | RSK-0058 | Corrosion protection failure | 8 | Medium | €0.72M | +6d |
Configure it to your methodology
RiskForesight adapts to how your organisation scores risk — not the other way round. Everything below is yours to shape from the admin console — no services engagement, no code. Tap an icon to see it move.
A P6-class schedule editor, in the browser
Import your XER, then view and edit the CPM schedule — WBS tree, activity grid and a risk-adjusted Gantt. It is the very model the Monte Carlo runs on: no export, no round-trip to a separate scheduling tool.
One click from register to P80
Hit Run and the register you just saw becomes a full Monte Carlo — no export. Schedule-health checks flag problems as you build, so you catch them before you commit the run. The engine runs entirely server-side, follows AACE RP 57R-09 practice, and reproduces byte-identical outputs from the same seed: auditable, not anecdotal.
One project, or the whole portfolio
The same register scales up. Aggregate risk from frontline projects to programme and enterprise level — see the connections between risks that span projects, and roll critical exposure into a board report without re-keying a thing.
- Manage risk from a single project up to the enterprise in one register.
- Spot growing risks and emerging trends across projects before they compound.
- Roll cost & schedule exposure up to a board-ready view — P80 contingency included.
- Show each collaborator what their security role allows — not every data point.
Everything a risk team needs
From the living risk register that is your system of record to integrated cost & schedule Monte Carlo — all on one model, in one browser tab.
Risk register & database
The system of record: configurable fields, qualitative 5×5 scoring and quantitative ranges, pre/post-mitigation, action plans and lessons — every row ready to simulate, with a full audit trail.
Schedule Risk (QSRA)
Duration uncertainty, discrete risk events and multi-calendar CPM — deterministic critical path on every iteration.
Cost Risk (ICSRA)
How much should you set aside? Integrated cost + schedule analysis with post-mitigation effects and JCL — a contingency figure you can justify line by line.
Sensitivity & drivers
Criticality Index, Schedule Sensitivity Index (CI × σ-ratio), Spearman tornado and sensitivity-by-exclusion across milestones, hammocks and costs — the few risks that actually move the finish date.
Distribution palette
Beta-PERT, Triangular, Trigen, Uniform and Normal — three-point duration ranges per task or group.
Risk Calendars
Probabilistic downtime, weather and blackout windows modelled directly against the schedule.
Correlations, links & branching
Risk-to-activity and cost mappings, pairwise correlations, and probabilistic links and branching.
Import & schedule health
XER (Primavera P6), MSPDI and MPP (MS Project) via one engine — with DCMA-14-style quality checks before you simulate.
Reports & Tables
A drag-and-drop report builder and column-level Tables designer — folder-scoped, exported to multi-sheet Excel and PDF, or pushed to your BI stack via API.
Dashboards
KPIs, a 5×5 risk matrix, severity mix, a due-risk calendar and a live top-10 by EMV — refreshed in real time.
Portfolio analytics
Exposure trends over time and EMV rolled up across your WBS — grouped and sliced by status, folder or owner.
Team workspace & roles
A shared organisation workspace with role-based access, member management and notifications — intuitive enough for engineers and PMs, not just risk specialists, and enforced in the database (RLS).
An analyst's copilot, built in
The copilot legacy risk tools don't have: frontier LLMs wired into the product through typed, confirmation-gated tools. Restricted installs can pin a no-egress mode — your risk data never has to leave.
AI chat assistant
A copilot with 50+ typed tools over the same permission-guarded data.
Risk identification
Surface candidate risks from your plan and project narrative.
Assessment help
Suggest likelihood, impact ranges and fitting distributions.
Quality checks
Validate probabilities, impacts and distributions before you run.
Mapping suggestions
Recommend the activities and cost items each risk actually drives.
Schedule narrative
Summarise the schedule and results in plain language, ready to review.
Report narrative
Auto-draft schedule and results narratives, ready to send.
Lessons learned
Capture lessons on close; resurface them on similar projects (RAG).
Knowledge repository
Semantic search across your documents and past projects (RAG).
Human-in-the-loop
Every write needs your explicit confirmation. You stay in control.
Numbers the room will actually trust
Quantitative risk only changes a decision if stakeholders believe it. RiskForesight makes the model transparent, interactive and presentation-ready — built for live risk workshops and board reviews, not just analysts.
What-if, side by side
Compare scenarios live in a workshop — before-and-after on one screen, so the trade-off is obvious to everyone in the room.
Cause → effect, made visible
The risk-driver method shows one cause driving many activities — stakeholders see why the finish date moves, not just that it does.
Risk-adjusted Gantt & cashflow
Auto-visualise the schedule and spend the way risk actually reshapes them — presentation-ready, fully customisable.
Stress-test mitigations first
Stochastically test mitigation proposals and read the cost-benefit — so contingency and actions are money well spent.
Grounded in evidence
Blend lessons-learned, actual performance and historical weather into the model — defensible, not gut-feel.
Transparent by design
Clear process flows and an interface occasional users can follow — the model is auditable and the room can trust it.
Built for how teams work today
| Legacy desktop QSRA | RiskForesight | |
|---|---|---|
| Register & simulation | Two separate tools | One model — manage and simulate the same rows |
| Handoff to quantify | Export, re-key, reconcile | None — the register is the model |
| Delivery | Single Windows desktop | Web-native — any browser, anywhere |
| Risk-driver method | Limited / manual | One cause → many activities, natively |
| Probabilistic logic | Rare | Links, branching & risk calendars |
| Cost + schedule | Separate tools | Integrated ICSRA with Joint Confidence Level |
| Schedule health | Add-on / none | DCMA-14 checks built in |
| AI assistance | None / limited | Copilot + lessons (RAG) across the workflow |
| Collaboration | File hand-offs | Shared multi-tenant workspace |
| Deployment | Weeks–months of IT | Live in a day — cloud or on-prem |
Controls your security team will actually check
Built for the industries where risk analysis is mandatory — defense, energy, construction, infrastructure — with the controls their security teams expect.
Row-level security
Per-tenant isolation enforced in the database itself, not just the app — continuously regression-tested.
Full audit trail
Every change logged and reversible, for accountability and defensible results.
SOC 2-ready controls
Data retention, right-to-erasure and PII redaction built in.
Hardened by design
Strict CSP & HSTS, OAuth sign-in, captcha-protected, MFA — with error monitoring and health checks.
AI egress control
Pin a no-egress mode: AI features disabled or routed only where you allow.
Cloud or on-prem
Self-host for data residency and air-gapped environments.
Know your P80 before your board asks.
Build your risk register, import a schedule and run your first full Monte Carlo on the same model today — one place, free, no credit card.