Make the risk visible.
Map threats, the top event and consequences. Put the barriers where they belong, so everyone can follow the same story.
Explore the method A clearer picture. A stronger response.
Know what will hold.
Before it has to.
Your most important risks deserve more than a document.
Bring threats, barriers and the people behind them into one living picture.
No credit card · Every feature for one week · Your first bowtie stays viewable
Less explaining the diagram. More improving what it tells you.
THE RISK PICTURE
Ransomware. One risk, every angle.
THREATSCONSEQUENCES
Stolen credentials1 preventive barrier
HAZARD
Networked IT estate
TOP EVENTRansomware executes
Operations stop1 recovery barrier
Malicious attachment1 preventive barrier
EffectiveEndpoint protectionDetection & isolation
Wider compromise1 recovery barrier
EffectiveDegradedFailed★ critical┄ escalation factor
Select a barrier. See the responsibility behind the green dot.
BARRIER DETAIL
Effective
Strong access controls
Require phishing-resistant authentication and a managed device for administrative access.
Priya ShahSecurity operations
KEEP IT EFFECTIVEAccess policy proof testCheck scheduled
Try a password-only sign-in through every administrative entry point. Each attempt should be denied.
BARRIER DETAIL
Degraded
Isolated recovery copies
A backup is only a recovery barrier when your team can restore from it.
Jordan LeePlatform engineering
KEEP IT EFFECTIVERestore a priority workload8 days overdue
The assurance check is overdue. Barrier health reflects the gap, so the team knows where to focus.
BARRIER DETAIL
Effective
Incident response
Contain affected systems, revoke compromised sessions and coordinate recovery with an accountable lead.
Alex MorganIncident response
KEEP IT EFFECTIVEContainment tabletopCheck scheduled
Rehearse an affected segment being isolated. Verify that essential, unaffected services remain available.
Owners. Assurance. Action.Illustrative scenario · No sign-in needed
Different industries. The same need for clarity.
IT & cyber securityProcess safetyHealthcareAviationConstruction & HSE
01 / WHY SOLIDBOWTIE EXISTS
Because the real test
isn’t the audit.
It’s what happens next.
A risk assessment should change what happens next. Give people a shared understanding of what can go wrong—and the confidence to ask whether the barriers are still working.
Make that belief part of the everydayWHAT · LIVING BOWTIES
Purpose, made practical.HOW · VISIBLE & OWNED
WHYProtect
what matters.
what matters.
02 / HOW IT WORKS
From “we have a plan”
to “we know our next move.”
One clear path from hazard to harm.
Three habits that keep the picture useful.
Put a name behind it.
Give each barrier an owner, a health assessment and the assurance work that keeps it effective.
Look inside a barrierAct on what changes.
Spot overdue checks, review weak pathways and use incident outcomes to challenge your assumptions.
Build your living picture03 / WHAT WE BUILT
A workshop is the start.
This is what comes after.
A focused workspace for the diagram,
the discussion and the follow-through.
START WITH SOMETHING REAL
From blank page to shared understanding.
Describe your operation for an editable AI draft, or start with a detailed template. Your expertise turns the starting point into a risk assessment.
Find your starting point ↗YOUR STARTING POINT
“We run a SaaS platform. What prevents a compromised account from exposing customer data?”
ThreatsBarriersConsequences
AI drafts. Your team reviews.The right conversation,
one pathway at a time.
Focus a busy diagram. Find failed barriers, missing owners and overdue checks without losing the bigger picture.
All pathwaysNeeds attention ↗Review together
A green dot should
have a reason.
Scheduled checks live with the barrier. When work becomes overdue, its health reflects that change.
Recovery proof testAssigned to the platform lead
OverdueBring the expertise.
Leave with ownership.
Work together in real time, give viewers a seat at the discussion, and take the barrier register into your next review.
AMPSJL
Owners, editors & viewers.
A role for every perspective.
THE DIFFERENCE YOU FEEL
Less “where’s that file?”
More “who’s on it?”
- A diagram saved after the workshop
- A risk picture your team can keep current
- A control listed without follow-through
- An owner, a health signal and a next check
- An incident discussed in isolation
- Outcomes linked back to the barriers
A SMALL START. A SERIOUS STEP FORWARD.
Your next risk review
starts here.
Try one complete bowtie with every feature for a week.
Keep it viewable afterwards. Upgrade when you’re ready to keep building.
Starter
€0 / forever
One bowtie. Edit for a week, then view forever.
- ✓Every feature included
- ✓Full team editing for 1 week
- ✓1 bowtie
- ✓Everything stays viewable after
For active teams
Team
€19 / editor / month
For risk teams that work together.
- ✓Editing stays unlocked
- ✓Unlimited bowties
- ✓Unlimited editors & realtime collaboration
- ✓Every product feature
- ✓Priority email support
Enterprise
Custom
For regulated, audited environments.
- ✓Everything in Team
- ✓Google sign-in today, SSO roadmap
- ✓Onboarding with your methodology
- ✓Audit & assurance support, SLA
Prices exclude VAT. After 1 week, Starter becomes read-only. Upgrade restores editing instantly; cancel anytime.
A FEW GOOD QUESTIONS
Before you start.
Still thinking it through?
Talk to the people behind SolidBowtie ↗
What is a bowtie diagram?
It maps threats, a top event, consequences and the barriers between them on one page. Our guide, What is the bowtie method?, shows the full anatomy.
Is SolidBowtie really free?
Yes. Build one bowtie with every feature for a week without a card. It then becomes read-only but stays viewable forever. Teams keep editing for €19 per editor per month.
How is this different from drawing a bowtie in PowerPoint or Visio?
A drawing freezes in time. SolidBowtie connects every barrier to its owner, health, assurance work and incident history, so the picture keeps telling the truth.
Do I have to start from a blank page?
No. Copy one of twenty complete templates or describe your operation and let AI create an editable first draft.
START WITH ONE RISK THAT MATTERS
Make the next conversation
the one that changes things.
Bring the risk. Find the weak spots. Give your team a next move.
Build my first bowtie →No credit card. No blank-page pressure.