We make risk assessment of enterprise IT systems faster and more reliable for cyber security professionals. SPYDERISK automates four processes: It finds all the threats in a system, following the web of attack paths; it calculates risk based on the threat likelihood and business impact; it proposes mitigations, drawn from a detailed knowledge base; and finally, it generates the reports needed to get compliance certification. This is vital because right now such risk analysis is generally done manually and is therefore time-consuming and error-prone.