The CIA triad names the three pillars of information security: Confidentiality (only authorized parties read the data), Integrity (data isn't tampered with), and Availability (systems stay up under load). Real budgets can't max out all three — money spent on encryption isn't spent on redundant servers.
Budget constraint: C + I + A ≤ 150 (0-100 each)
Block probability: P_block = 1 − e^(−k · P / 100)
Breach probability: P_breach = 1 − P_block = e^(−k · P / 100)
This 2D build swaps the 3D pylon plaza for three flat attack lanes ending in a defense wall (bar height = current protection score) plus a live ternary triangle: the marker's position shows how lopsided your split is (drag it to redistribute your whole existing budget across all three pillars at once — its distance from center is exactly the "balanced / lopsided / exposed" spread), and its ring size shows total spend. A side panel plots the exponential curve itself with a moving dot per pillar, and a rolling chart shows the measured breach rate closing in on the theoretical average of the three pillars' breach probabilities.
- Sliders — set each pillar's investment directly; raising one above the 150-point cap proportionally pulls the other two down.
- Triangle drag — grab the marker to redistribute the same total budget across all three pillars in one gesture.
- Attack rate — how many phishing / tampering / DDoS events spawn per 10 seconds.
- Block decay k — how sharply the block-probability curve saturates; higher k means early investment pays off faster.
Real-world relevance: this is the same trade-off a CISO faces allocating a fixed security budget — and the same exponential-return curve shows up in penetration-test pass rates as defenses mature.