diff --git a/README.md b/README.md
index 27ab6b5..a766beb 100644
--- a/README.md
+++ b/README.md
@@ -13,9 +13,9 @@ SPDX-License-Identifier: Apache-2.0
 
 **Self-hosted, graph-native cloud security — prioritize what attackers can actually reach.**
 
-[![OpenSourceOM console — demo graph](docs/assets/console.png)](https://opensourceom.org)
+![OpenSourceOM console — demo graph](docs/assets/console.gif)
 
-The screenshot is the web console after `docker compose up` and `om scan demo` — internet-exposed `web-1` on a path to `prod-db`, plus public S3 and an over-privileged admin role.
+The clip is the web console after `docker compose up` and `om scan demo` — internet-exposed `web-1` on a path to `prod-db`, plus public S3 and an over-privileged admin role.
 
 OpenSourceOM Core is the platform behind [opensourceom.org](https://opensourceom.org): collectors that ingest cloud inventory and security signals, a graph engine that models attack paths, and APIs/UI to explore risk in context.
 
diff --git a/docs/assets/console.gif b/docs/assets/console.gif
new file mode 100644
index 0000000..e52495c
Binary files /dev/null and b/docs/assets/console.gif differ