Average Ratings 0 Ratings
Average Ratings 0 Ratings
Similar Products
-
SOCRadar Extended Threat IntelligenceSOCRadar Extended Threat Intelligence is a holistic platform designed from the ground up to proactively detect and assess cyber threats, providing actionable insights with contextual relevance. Organizations increasingly require enhanced visibility into their publicly accessible assets and the vulnerabilities associated with them. Relying solely on External Attack Surface Management (EASM) solutions is inadequate for mitigating cyber risks; instead, these technologies should form part of a comprehensive enterprise vulnerability management framework. Companies are actively pursuing protection for their digital assets in every potential exposure area. The conventional focus on social media and the dark web no longer suffices, as threat actors continuously expand their methods of attack. Therefore, effective monitoring across diverse environments, including cloud storage and the dark web, is essential for empowering security teams. Additionally, for a thorough approach to Digital Risk Protection, it is crucial to incorporate services such as site takedown and automated remediation. This multifaceted strategy ensures that organizations remain resilient against the evolving landscape of cyber threats.
-
Predict360Predict360, by 360factors, is a risk and compliance management and intelligence platform that automates workflows and enhances reporting for banks, credit unions, financial services organizations, and insurance companies. The SaaS platform integrates regulations and obligations, compliance management, risks, controls, KRIs, audits and assessments, policies and procedures, and training in a single cloud-based SaaS platform and delivers robust analytics and insights that empower customers to predict risks and streamline compliance. Happy with your current GRC but lacking a true analytics and BI tool for intuitive executive and Board reports? Ask about Lumify360 from 360factors - a predictive analytics platform that can work alongside any GRC. Keep your process management workflows intact while providing stakeholders with the timely reports and dashboards they need.
-
Interfacing Integrated Management System (IMS)Interfacing’s Integrated Management System (IMS ) is an AI-supported platform that brings BPM, QMS, Document Control, and GRC together in one environment. Teams use IMS to design and manage processes, govern documentation, oversee risks, and demonstrate compliance with complete visibility and reliable audit evidence. Built for sectors that depend on strict oversight, such as aerospace, life sciences, public sector, and financial services, IMS offers real-time monitoring, automated workflows, and AI-driven analytics that strengthen quality and lower operational exposure. The system is ISO 27001 certified and validated for 21 CFR Part 11, ensuring secure and compliant use in regulated operations. IMS also provides low-code automation, process mining, audit tools, training management, CAPA workflows, and dashboards that help organizations improve performance and maintain regulatory control. AI enhances governance, improves precision, and supports continuous compliance.
-
iVerifyUtilize iVerify to enhance the security of your iOS device and identify any alterations made to your smartphone. With straightforward instructional guides, iVerify simplifies the management of your online presence and account security. By safeguarding your team's mobile devices, you can effectively stay ahead of potential vulnerabilities; the platform provides metrics that display the progress on security guides, ensures your operating system is current, and reveals any signs of compromise. iVerify works to protect your devices and online accounts from threats and detects security breaches by monitoring for indicators of iOS exploitation and by scanning for known harmful files and directories. While it can identify many instances of compromise, it does not guarantee the detection of every threat. Therefore, it remains crucial to minimize your risk of attacks and restrict the amount of sensitive information accessible on your phone and through your online accounts. Furthermore, regularly reviewing your security practices can further enhance your overall protection against emerging threats.
-
RealCISORealCISO is a compliance intelligence platform for two audiences: MSPs and MSSPs managing security across multiple clients, and enterprise teams running compliance in-house. MSPs, MSSPs, and security consultants use it to run compliance assessments, manage cyber risk, track remediation, and report to boards — all in one place. Assessments map directly to NIST CSF, SOC 2, NIST 800-171, HIPAA, CIS Controls, CMMC, and 30+ other frameworks. Instead of months of spreadsheet work, clients get a clear picture of where they stand and what to fix — in days. Over 3,000 security providers rely on RealCISO to deliver vCISO services at scale. Built by practitioners. Founded by Brian Haugli — former DoD, former VP & CSO at The Hanover Insurance Group, CISSP, and co-author of the NIST CSF book published by Wiley.
-
D&B Risk AnalyticsGlobally, teams in risk, procurement, and compliance are under pressure to manage geopolitical risks and business risks. Third-party risks are impacted by the complexity of domestic and international businesses, as well as complex and diverse regulations. It is crucial that companies proactively manage third-party relationships. This cutting-edge platform, powered by D&B Data Cloud's 520M+ Global Business Records with 2B+ annual updates for third-party risks, is an AI-powered solution that mitigates and monitors counterparty risk on a continual basis. D&B Risk Analytics uses best-in class risk data, including alerts for high-risk purchases and match points of more than a billion. This helps to drive informed decisions. Intelligent workflows allow for quick and thorough screening. Receive alerts on key business indicators.
-
HyperproofCompliance work eats engineering time. Hyperproof exists to give that time back by automating the parts of GRC that don't need a human: pulling evidence out of GitHub, Jira, ServiceNow, Snyk, and cloud storage on a schedule, running recurring tests against high-frequency controls, and kicking off a task automatically the moment something fails instead of waiting for the next audit cycle to find out. Under the hood, Hyperproof maps one control to 160+ frameworks (SOC 2, ISO 27001, HIPAA, NIST, and others), so a control tested once can satisfy several standards instead of forcing teams to rebuild the same work per framework. AI agents handle the first pass on evidence review and gap-flagging, leaving humans to make the actual judgment calls rather than hunting down documentation. Teams using it report cutting audit prep by roughly 350 hours a year, a 66% drop in duplicate controls, and about $150K saved annually on control orchestration. It also scales to messier org charts, with the ability to scope controls by business unit or entity instead of flattening everything into one program. Built in 2018 out of the Seattle area, Hyperproof is used by engineering and security-heavy orgs like Reddit, Fortinet, Appian, and Outreach that are tired of treating compliance as a manual, spreadsheet and email process and want it to run more like the rest of their infrastructure: automated, monitored, and auditable.
-
HSI DonesafeHSI Donesafe redefines EHS management with a no-code, cloud-based platform that transforms complex processes into streamlined, user-friendly workflows. Trusted across industries, Donesafe consolidates tracking, management, and reporting into one accessible platform, making compliance simpler and safety more effective. Donesafe’s adaptable design allows teams to customize workflows, forms, and dashboards to meet evolving compliance needs. With tools for incident reporting, audits, training, and risk assessment, staying ahead of regulatory changes has never been easier. Key Features: - Customizable workflows to align with regulations - Real-time insights for live safety tracking - Scalable design that grows with your team - Streamlined compliance tools for smooth audits and reporting Empower your EHS team to achieve safety excellence with HSI Donesafe.
-
DaylightDaylight combines cutting-edge agentic AI with top-tier human skills to offer an advanced managed detection and response service that transcends mere notifications, striving to “take command” of your cybersecurity landscape. It ensures comprehensive monitoring of your entire environment, leaving no gaps, while providing context-sensitive protection that adapts and evolves based on your systems and historical incidents, including communications through platforms like Slack. This service boasts an exceptionally low rate of false positives, the quickest detection and response times in the industry, and seamless integration with your existing IT and security tools, accommodating limitless platforms and integrations while delivering actionable insights through AI-enhanced dashboards without unnecessary noise. With Daylight, you receive true comprehensive threat detection and response without the need for escalations, round-the-clock expert assistance, tailored response workflows, extensive visibility across your environment, and quantifiable enhancements in analyst efficiency and response time, all designed to transition your security operations from a reactive stance to a proactive command approach. This holistic approach not only empowers your team but also fortifies your defenses against evolving threats in the digital landscape.
-
GOAT RiskGOAT Risk™, Easy-to-use, Low-Cost, Risk Management Software The painless way to manage your risk so you can focus on managing your business. GOAT's low-cost, secure and simple risk management software tool allows you to collaborate, track, report, and manage your business risks from anywhere in the world. All for the price of a daily coffee. Subscriptions starting at £30/mo Perfect for non-risk experts: Risk experts created it - so you don’t have to be one. It comes with pre-populated templates, risk tips and explanations. Anyone can use it without any prior training. Works 'straight out of the box' There are no lengthy consultations or expensive, drawn-out implementations. It is ready to use right out of the box. In just minutes, you can start managing your risks. Low cost and transparent pricing Select a plan that suits your needs starting from just £30/mo. You can cancel at any time. It's risk-free!
Description
IriusRisk is an open Threat Modeling platform that can be used by any development and operations team – even those without prior security training. Whether your organization follows a framework or not, we can work with all the threat modeling methodologies, such as STRIDE, TRIKE, OCTAVE and PASTA. We support organisations in financial services, insurance, industrial automation, healthcare, private sector and more.
IriusRisk is the industry's leading threat modeling and secure design solution in Application Security. With enterprise clients including Fortune 500 banks, payments, and technology providers, it empowers security and development teams to ensure applications have security built-in from the start - using its powerful threat modeling platform.
Whether teams are implementing threat modeling from scratch, or scaling-up their existing operations, the IriusRisk approach results in improved speed-to-market, collaboration across security and development teams, and the avoidance of costly security flaws.
Description
Threat modeling serves as a fundamental aspect of the Microsoft Security Development Lifecycle (SDL), acting as an engineering strategy aimed at uncovering potential threats, attacks, vulnerabilities, and countermeasures that may impact your application. This technique not only aids in the identification of risks but also influences the design of your application, aligns with your organization's security goals, and mitigates potential hazards. The Microsoft Threat Modeling Tool simplifies the process for developers by utilizing a standardized notation that helps visualize system components, data flows, and security boundaries. Additionally, it assists those involved in threat modeling by highlighting various classes of threats to consider, depending on the architectural design of their software. Crafted with the needs of non-security professionals in mind, this tool enhances accessibility for all developers, offering straightforward guidance on the creation and evaluation of threat models, ultimately fostering a more secure software development practice. By integrating threat modeling into their workflow, developers can proactively address security concerns before they escalate into serious issues.
API Access
Has API
Yes
API Access
Has API
No
Integrations
AWS CloudFormation
Yes
Amazon Web Services (AWS)
Yes
Azure DevOps
Yes
CA Flowdock
Yes
Cucumber
Yes
CucumberStudio
Yes
FortifyData
Yes
GitHub
Yes
IriusRisk
No
JUnit
Yes
Integrations
AWS CloudFormation
No
Amazon Web Services (AWS)
No
Azure DevOps
No
CA Flowdock
No
Cucumber
No
CucumberStudio
No
FortifyData
No
GitHub
No
IriusRisk
Yes
JUnit
No
Pricing Details
Enterprise licences can vary depending on integrations and threat modeling requirements. Please do contact us for a more detailed breakdown. Pricing is done by threat model and not by user to keep costs manageable and predictable.
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
IriusRisk
Country
Spain
Website
www.iriusrisk.com/
Vendor Details
Company Name
Microsoft
Founded
1975
Country
United States
Website
www.microsoft.com/en-us/securityengineering/sdl/threatmodeling
Product Features
Risk Management
Alerts/Notifications
Yes
Auditing
Yes
Business Process Control
Yes
Compliance Management
Yes
Corrective Actions (CAPA)
Yes
Dashboard
Yes
Exceptions Management
Yes
IT Risk Management
Yes
Internal Controls Management
Yes
Legal Risk Management
No
Mobile Access
No
Operational Risk Management
Yes
Predictive Analytics
Yes
Reputation Risk Management
No
Response Management
No
Risk Assessment
Yes
