Eramba
A community driven GRC solution that doesn't break the bank. Trusted by a community of thousands for over a decade, eramba is simple, affordable, open software for Governance, Risk, and Compliance. Built by a small team, used by a community of thousands. The real fuel that keeps eramba running and improving is its global community of users that leverage our simple and open code, documentation, forum, release planning and business model. Our open and free, well proven GRC software has helped a huge number of organizations around the world to certify Standards, build Risk frameworks, trace Incidents, manage Projects, Etc. For free, without users or data limitations. Without ties.
FEATURES
ALTERNATIVES
Lockdown Enterprise is a subscription service for Ansible Lockdown to automate security benchmark compliance.
A tool for achieving and proving compliance with NIST 800-171 and CMMC cybersecurity requirements
A compliance management platform that simplifies CMMC Level 1 certification for defense contractors through guided workflows, policy templates, and evidence management tools.
ISO2HANDLE is a powerful software that provides a total solution for Q&R professionals, trusted by over 50,000 users and 750+ organizations worldwide.
PINNED
Mandos Brief Newsletter
A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.
PTJunior
An AI-powered penetration testing platform that autonomously discovers, exploits, and documents vulnerabilities while generating NIST-compliant reports.
CTIChef.com Detection Feeds
A tiered cyber threat intelligence service providing detection rules from public repositories with varying levels of analysis, processing, and guidance for security teams.
OSINTLeak
OSINTLeak is a tool for discovering and analyzing leaked sensitive information across various online sources to identify potential security risks.
ImmuniWeb® Discovery
ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.