SRID Full demo | Mithril Guard

01 / Overview

The executive view of the application assessment.

System Risk Intelligence DocumentDemo

See the risk.Find the blind spots.Focus the next effort.

Exposure
How often real users interact with this part of the app.
Volatility
How often things change and where integration risk is higher.
Impact
What a failure would mean for the business.

From application map to next action

Last updated

16 May 2025Assessment data09:42Local time

01 / Overview

The executive view of the application assessment.

System Risk Intelligence DocumentDemo

See the risk.Find the blind spots.Focus the next effort.

Exposure
How often real users interact with this part of the app.
Volatility
How often things change and where integration risk is higher.
Impact
What a failure would mean for the business.

From application map to next action

01Map the systemSee where risk sitsComponents become a clear application map, scored from low to critical.Explore

02Find blind spotsSee what is not protectedCoverage gaps reveal missing test cases, API checks, and end-to-end journeys.Explore

03Prioritize actionKnow what to fix firstRisk and missing coverage combine into a focused, ranked mitigation plan.Explore

02 / Component & risk map

See the application’s highest-risk areas by component and the reasoning behind each risk score.

ShopEaseCore application

Risk level

Low1–25Moderate26–50High51–75Critical76–125

Main component

Authentication

Level 2

Component view · combined risk and coverage across this area

50/ 125

Moderate

Moderate risk because it is used constantly, the code changes little, and a failure would block core business.

Assessed as a whole component. All 4 sub-components inherit this 50/125 risk, so coverage is what sets them apart.

Risk drivers

Usage: Constantly
Volatility: Small changes
Impact: Core business blocked

Sub-components

Coverage

Partial coverage at 36.9% across 14 scenarios — TC 96.9%, API 40.6%, E2E 21.9%.

TCExcellent96.9%

APIPartial40.6%

E2ELow21.9%

5 of 8 happy paths lack end-to-end tests.
1 of 8 happy paths lacks api tests.
1 of 6 important negatives has no checks at all.
5 of 6 important negatives lack end-to-end tests.

Medium priority: worth strengthening once P1–P2 gaps are closed.

Main component

Products

Level 2

Component view · combined risk and coverage across this area

125/ 125

Critical

Critical risk because it is used constantly, the code changes rapidly, and a failure would block core business.

Assessed as a whole component. All 3 sub-components inherit this 125/125 risk, so coverage is what sets them apart.

Risk drivers

Usage: Constantly
Volatility: Rapid change
Impact: Core business blocked

Sub-components

Coverage

Low coverage at 16.7% across 6 scenarios — TC 100%, API 16.7%, E2E 0%.

TCExcellent100%

APILow16.7%

E2ENone0%

3 of 3 happy paths lack end-to-end tests.
2 of 3 happy paths lack api tests.
3 of 3 important negatives lack end-to-end tests.
3 of 3 important negatives lack api tests.

Top priority: serious risk with weak coverage. Act here first.

Main component

Payment3rd party

Level 2

Component view · combined risk and coverage across this area

125/ 125

Critical

Critical risk, driven by Payment processing: it is used constantly, the code changes little and it depends on a third-party service, and a failure would block core business.

The highest of 2 sub-components sets this score: Payment processing at 125/125. Across them: 2 critical.

Risk drivers

Usage: Constantly
Volatility: Small changes · third-party
Impact: Core business blocked

Sub-components

Coverage

Low coverage at 20% across 4 scenarios — TC 100%, API 25%, E2E 0%.

TCExcellent100%

APIPartial25%

E2ENone0%

1 of 2 happy paths lacks api tests.
2 of 2 happy paths lack end-to-end tests.
2 of 2 important negatives lack api tests.
2 of 2 important negatives lack end-to-end tests.

Top priority: serious risk with weak coverage. Act here first.

03 / Coverage map

See what protects each component today and where test coverage is still missing.

Coverage by main component, sub-component and scenario
Component	Risk	Overall	TC	API	E2E
	Moderate	36.9% — Partial	96.9% — Excellent	40.6% — Partial	21.9% — Low
	Moderate	52.5% — Good	87.5% — Excellent	62.5% — Good	37.5% — Partial
Create an account with emailHappy path		50% — Good	TC present	API present	—E2E missing
Verify an email addressHappy path		50% — Good	TC present	API present	—E2E missing
Accept the account invitationHappy path		50% — Good	TC present	API present	—E2E missing
Complete account setupHappy path		100% — Excellent	TC present	API present	E2E present
Sign in after registrationHappy path		100% — Excellent	TC present	API present	E2E present
Reject a duplicate emailImportant negative		0% — None	—TC missing	—API missing	—E2E missing
Reject an expired invitationImportant negative		10% — Low	TC present	—API missing	—E2E missing
Require mandatory profile fieldsImportant negative		60% — Good	TC present	—API missing	E2E present
	Moderate	55% — Good	100% — Excellent	50% — Good	50% — Good
Sign in with valid credentialsHappy path		100% — Excellent	TC present	API present	E2E present
Reject an incorrect passwordImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Moderate	30% — Partial	100% — Excellent	50% — Good	0% — None
Reset a password by emailHappy path		50% — Good	TC present	API present	—E2E missing
Reject a reused reset linkImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Moderate	10% — Low	100% — Excellent	0% — None	0% — None
Restore an active sessionHappy path		10% — Low	TC present	—API missing	—E2E missing
Reject an expired sessionImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Critical	16.7% — Low	100% — Excellent	16.7% — Low	0% — None
	Critical	30% — Partial	100% — Excellent	50% — Good	0% — None
Browse the product catalogHappy path		50% — Good	TC present	API present	—E2E missing
Exclude unpublished productsImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Critical	10% — Low	100% — Excellent	0% — None	0% — None
Find a product by nameHappy path		10% — Low	TC present	—API missing	—E2E missing
Handle an empty search resultImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Critical	10% — Low	100% — Excellent	0% — None	0% — None
View product detailsHappy path		10% — Low	TC present	—API missing	—E2E missing
Handle a removed productImportant negative		10% — Low	TC present	—API missing	—E2E missing
	High	30% — Partial	100% — Excellent	50% — Good	0% — None
Add a product to the cartHappy path		50% — Good	TC present	API present	—E2E missing
Prevent quantities above stockImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Critical	20% — Low	100% — Excellent	25% — Partial	0% — None
	Critical	10% — Low	100% — Excellent	0% — None	0% — None
Confirm a successful payment3PHappy path		10% — Low	TC present	—API missing	—E2E missing
Handle a provider timeout3PImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Critical	30% — Partial	100% — Excellent	50% — Good	0% — None
Show the payment confirmationHappy path		50% — Good	TC present	API present	—E2E missing
Prevent a duplicate orderImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Moderate	55% — Good	100% — Excellent	50% — Good	50% — Good
	Moderate	55% — Good	100% — Excellent	50% — Good	50% — Good
Send a contact requestHappy path		100% — Excellent	TC present	API present	E2E present
Require an email addressImportant negative		10% — Low	TC present	—API missing	—E2E missing
	Moderate	55% — Good	100% — Excellent	50% — Good	50% — Good
View contact detailsHappy path		100% — Excellent	TC present	API present	E2E present
Handle missing contact detailsImportant negative		10% — Low	TC present	—API missing	—E2E missing

Coverage legend

None0–5%Low>5–<25%Partial25–<50%Good50–75%Excellent>75–100%

04 / Mitigation plan

Showing the highest-risk components with the lowest test coverage.

Priority gaps list

Top 5 main components with API or E2E gaps, ranked by risk and coverage.

Ranked priority gaps by main component
Rank	Main component	Risk	Coverage	Key gap	Recommended start
1	Products	Critical125	16.7%	API + E2E gaps	Product details · Search
2	Payment	Critical125	20%	API + E2E gaps	Payment processing · Confirmation
3	Cart	High75	30%	API + E2E gaps	—
4	Authentication	Moderate50	36.9%	TC + API + E2E gaps	Session handling · Forgotten password
5	Contacts	Moderate32	55%	API + E2E gaps	Contact details · Contact form

Main component

Products

Risk score

125Critical

Missing scenario coverage

These scenarios lack test coverage and drive the need for action.

Sub-components

Catalog125
Product details125
Search125

Scenario summary

6 Scenarios
3 Happy paths3 Important negatives
3 Happy pathsmissing critical checks
3 Important negativesmissing critical checks

Missing checks in Products
Scenario	Type	TC	API	E2E
Browse the product catalogCatalog	Happy path	TC present	API present	E2E missing
Exclude unpublished productsCatalog	Important negative	TC present	API missing	E2E missing
Find a product by nameSearch	Happy path	TC present	API missing	E2E missing
Handle an empty search resultSearch	Important negative	TC present	API missing	E2E missing
View product detailsProduct details	Happy path	TC present	API missing	E2E missing
Handle a removed productProduct details	Important negative	TC present	API missing	E2E missing

Main component

Payment

Risk score

125Critical

Missing scenario coverage

These scenarios lack test coverage and drive the need for action.

Sub-components

Payment processing125
Confirmation100

Scenario summary

4 Scenarios
2 Happy paths2 Important negatives
2 Happy pathsmissing critical checks
2 Important negativesmissing critical checks

Missing checks in Payment
Scenario	Type	TC	API	E2E
Confirm a successful paymentPayment processing	Happy path	TC present	API missing	E2E missing
Handle a provider timeoutPayment processing	Important negative	TC present	API missing	E2E missing
Show the payment confirmationConfirmation	Happy path	TC present	API present	E2E missing
Prevent a duplicate orderConfirmation	Important negative	TC present	API missing	E2E missing

Main component

Cart

Risk score

75High

Missing scenario coverage

These scenarios lack test coverage and drive the need for action.

Sub-components

None

Scenario summary

2 Scenarios
1 Happy path1 Important negative
1 Happy pathmissing critical checks
1 Important negativemissing critical checks

Missing checks in Cart
Scenario	Type	TC	API	E2E
Add a product to the cart	Happy path	TC present	API present	E2E missing
Prevent quantities above stock	Important negative	TC present	API missing	E2E missing

Main component

Authentication

Risk score

50Moderate

Missing scenario coverage

These scenarios lack test coverage and drive the need for action.

Sub-components

Forgotten password50
Login50
Session handling50
Sign up50

Scenario summary

14 Scenarios
8 Happy paths6 Important negatives
5 Happy pathsmissing critical checks
6 Important negativesmissing critical checks

Missing checks in Authentication
Scenario	Type	TC	API	E2E
Create an account with emailSign up	Happy path	TC present	API present	E2E missing
Verify an email addressSign up	Happy path	TC present	API present	E2E missing
Accept the account invitationSign up	Happy path	TC present	API present	E2E missing
Reject a duplicate emailSign up	Important negative	TC missing	API missing	E2E missing
Reject an expired invitationSign up	Important negative	TC present	API missing	E2E missing
Require mandatory profile fieldsSign up	Important negative	TC present	API missing	E2E present
Reject an incorrect passwordLogin	Important negative	TC present	API missing	E2E missing
Reset a password by emailForgotten password	Happy path	TC present	API present	E2E missing
Reject a reused reset linkForgotten password	Important negative	TC present	API missing	E2E missing
Restore an active sessionSession handling	Happy path	TC present	API missing	E2E missing
Reject an expired sessionSession handling	Important negative	TC present	API missing	E2E missing

Main component

Contacts

Risk score

32Moderate

Missing scenario coverage

These scenarios lack test coverage and drive the need for action.

Sub-components

Contact details32
Contact form32

Scenario summary

4 Scenarios
2 Happy paths2 Important negatives
0 Happy pathsmissing critical checks
2 Important negativesmissing critical checks

Missing checks in Contacts
Scenario	Type	TC	API	E2E
Require an email addressContact form	Important negative	TC present	API missing	E2E missing
Handle missing contact detailsContact details	Important negative	TC present	API missing	E2E missing