Quantitative Risk Matrix

Most risk matrices fall apart because the numbers are vibes. One team calls an impact a 5, another calls it a 2, and nobody can agree why.

This tool forces the hard part first: define what each impact level and likelihood level actually means. That could be dollars, headlines, or hours of downtime. Once the definitions are set, the matrix shows the severity bands and a summary of the quantitative levels.

It also supports JSON load/save so you can hand the definitions to another team without retyping them.

You can find it at /riskmatrix.