How Forest works
Forest moves from capability data to scores, benchmarks, and recommendations through a deterministic engine you can trace.
Last updated June 1, 2026
Forest works in a straight line: you describe your program, the platform scores it, and you get benchmarks, recommendations, and a roadmap you can act on.
The flow
You assess your capabilities using the CAMP model, scoring current and target maturity and setting criticality.
The Forest Intelligence Service (FIS) derives your scores from those inputs.
FIS benchmarks you against a privacy-preserving peer average for your industry and size.
It generates recommendations and projects a roadmap based on priority.
The engine behind it
The Forest Intelligence Service is the engine that produces scores, benchmarks, recommendations, and roadmap projections. It is deterministic and explainable. The same inputs always produce the same outputs, and every result traces back to the inputs that created it. There is no hidden judgment in the numbers.
That matters because security spending and program decisions get challenged. When a CFO asks why a capability ranks where it does, you can show the maturity scores, the criticality, and the rule that produced the result.
What drives scoring
Capabilities drive scoring. Recommendations come from CAMP priority and deterministic rules, not from preference. Contracts let you track spend and renewals, and they enrich your view of tool coverage, but they do not move your scores on their own.
To learn the scoring model in detail, see What CAMP is and Understanding maturity levels. When you are ready to begin, go to Completing your first baseline.