Framework
Browse 83 framework tools
FEATURED
OT compliance monitoring platform with automated control validation and AI
Framework for measuring cyber resiliency maturity of weapon systems
Cross-mapping tool for reusing compliance evidence across multiple frameworks
Protocol for requesting transparency info about cloud services
Framework for managing risks in AI/ML models through structured documentation
NIST Cybersecurity Framework implementation and compliance consulting services
Compliance automation platform with 50+ frameworks and evidence collection
GRC platform for managing cyber security programs, compliance, and risk assessment
AI-powered cyber risk management platform for compliance, risk quantification
An open-source framework that enables building and deploying AI-powered security automation tools for both offensive and defensive cybersecurity operations using over 300 AI models.
A visual guide that maps attack vectors and exploitation techniques for identifying vulnerabilities in GitHub Actions configurations and CI/CD pipelines.
A framework for testing and exploiting race condition vulnerabilities through concurrent request analysis and timing attack automation.
C3 is a framework by WithSecureLabs for rapid prototyping of custom command and control channels that integrates with existing offensive security toolkits.
CrowdFMS is a CrowdStrike framework that automates malware sample collection from VirusTotal using YARA rule-based notifications and the Private API system.
A cloud-focused attack simulation framework that provides granular, self-contained offensive techniques mapped to MITRE ATT&CK for red team exercises.
IronBee is an open source web application security sensor framework that provides detection and prevention capabilities for web application vulnerabilities.
Hapi is a Node.js web application framework that provides built-in functionality for building scalable server-side applications and APIs with security features and plugin architecture.
Needle is a discontinued open source modular framework for iOS application security assessments that was compatible with iOS 9 and iOS 10 before being replaced by Objection.
A specification/framework for extending default C2 communication channels in Cobalt Strike
A Microsoft framework for secure and efficient sharing of cybersecurity information between trusted parties to reduce cybersecurity risks.
