Summiting the Pyramid

September 10, 2026

Project Summary

Summiting the Pyramid helps defenders measure the depth and quality of detection coverage beyond an ATT&CK heatmap. This release introduces implementation coverage, which measures how many behaviorally distinct ways of performing a technique an analytic can observe, alongside detection quality, which evaluates the robustness and precision of the signals behind that visibility.

Problem

Defenders need a clear, consistent way to understand the depth and quality of detection coverage across evolving adversary behavior.

Solution

Advance practical methods and tools that help organizations evaluate coverage, identify gaps, and strengthen detection engineering.

Impact

Teams will build detections that are harder for adversaries to evade, more effective in practice, and focused on the behaviors that matter most.

Project Resources:

Project Announcement Project Website GitHub

---

Funding Research Participants

---