Toxic Access Combination Detector

Data Security Posture Management lives or dies on one question: which accounts can both see sensitive data and destroy or move it out? This simulator renders a live 3D entitlement graph — accounts, the roles they hold, and the datasets those roles reach — and runs a real risk-scoring pass across it, flagging every "toxic combination" where read access and destructive rights (delete or export) land on the same account and dataset. Stack a redundant role onto a safe account to watch privilege creep create a new toxic path in real time, or flip on automated least-privilege enforcement and watch the risk engine revoke the offending rights and the blast-radius paths vanish.