ResilAI
ResilAI is an AI event readiness platform that integrates security telemetry and validates with deterministic scoring. It provides three-layer translations for executives, managers and IT, and is open-sourced under GNU AGPL-3.0.
Updated: 2026-10-27
What is ResilAI?
ResilAI helps organizations assess AI incident readiness: The platform integrates with security telemetry, verifies status with 100% deterministic scoring, and outputs three layers of content—what executives should check for readiness, what managers need to know about changes, and where IT can find evidence. Founded in 2025, the project is open-source under GNU AGPL-3.0. It treats incident drills as ongoing work and emphasizes evidence chains and hierarchical communication.
Who is it for?
- Security leaders who need to report to management on AI incident readiness.
- Healthcare and legal institutions in regulated industries that need to preserve evidence chains.
- Security teams that wish to self-deploy and review source code.
Key features
5Definitive Scoring
The official emphasis is on 100% definitive verification of the score, with conclusions that are reproducible and auditable.
Three-Layer Output
Generates statements from the perspectives of executives, managers, and IT based on the same status, eliminating communication gaps between different roles.
Security Telemetry Integration
Integrates existing security telemetry data and does not require building a separate monitoring system.
Control Set Alignment
Embeds the NIST CSF 2.0 control set and provides playbooks for the healthcare and legal industries.
Open Source License
Adopts GNU AGPL-3.0, allowing organizations to review and self-deploy the software.
How to use ResilAI
- Update the playbooks every quarter to incorporate emerging risks.
- First integrate one or two core telemetry sources and get the scoring process up and running.
- Prepare reports and operation and maintenance materials using the three-layer translations.
- Identify gaps against the NIST control set and supplement exercises in accordance with industry playbooks.
- It structures security communication in layers, with each layer only addressing the concerns relevant to its audience, thereby reducing the distortion of information during transmission.
- Overall, the effectiveness of such tools depends on whether the users have clear goals.
- It is recommended to take the time to read the official documentation and changelog before formal adoption to confirm whether the functional scope, data permissions and billing rules match your own business processes.
- For uncertain details, prioritize confirmation through official customer service or the help center, and do not rely on third-party information to make important decisions.
- At the same time, any automation should retain the manual review link.
- especially in scenarios involving funds, external communication or legal obligations, humans are still the ultimate responsible parties.
- The value of tools does not lie in replacing judgment, but in freeing humans from repetitive work so that they have time to handle more complex issues.
- The scoring results only reflect readiness and do not equate to execution effectiveness in actual incidents.
- drills cannot be skipped.
- Update the scoring baseline after each drill and track improvement trends.
Traffic & popularity
Data month Sep 2026
ResilAI receives about 59.1K visits per month.
Monthly visits
7 monthsEstimated from third-party traffic data.
