Lockdown Enterprise

Free

Lockdown Enterprise is an enterprise support subscription for Ansible Lockdown, a tool used to achieve recognized security benchmark compliance for CIS (Center for Internet Security) or STIG (Secure Technical Implementation Guides). It provides prioritized support, pre-release builds, and early access to new features and updates, recommended by Mitre for meeting regulatory compliance requirements like PCI, HIPAA, NIST, CMMC, and FedRAMP.

FEATURES

The author has not provided features for this tool yet. If you are the author, please sign in or claim the tool to add features by clicking the icon above.

ALTERNATIVES

Eramba

A community-driven GRC solution that is simple, affordable, and open-source.

Free

GRC

Cytrusst

Cytrusst is an integrated cybersecurity platform that combines GRC, attack surface management, cloud security posture management, and third-party risk management with support for multiple compliance frameworks.

Commercial

GRC

Drata

Drata is a cloud-based platform that automates security and compliance processes, evidence collection, and audit preparation for various industry standards and regulations.

Commercial

GRC

A-Lign

A-LIGN provides cybersecurity compliance audits and certifications, offering a range of services including SOC 2, ISO 27001, HITRUST, and FedRAMP, along with a technology platform for audit management.

Commercial

GRC

AWS Artifact

On-demand access to AWS and ISV compliance reports with time-saving benefits.

Free

GRC

FutureFeed

A tool for achieving and proving compliance with NIST 800-171 and CMMC cybersecurity requirements

Commercial

GRC

ServiceNow Governance Risk and Compliance (GRC)

ServiceNow Governance, Risk, and Compliance (GRC) is an integrated suite of products that enables organizations to build operational resilience, mitigate risks, and ensure compliance across the enterprise through a unified platform, data model, AI-powered insights, and automated workflows.

Commercial

GRC

SAP GRC

SAP GRC and cybersecurity solutions provide integrated capabilities for managing enterprise risk, compliance, international trade, cybersecurity, and identity and access governance, leveraging predictive analytics, real-time monitoring, and automation.

Commercial

GRC

PINNED

ImmuniWeb® Discovery

ImmuniWeb Discovery is an attack surface management platform that continuously monitors an organization's external digital assets for security vulnerabilities, misconfigurations, and threats across domains, applications, cloud resources, and the dark web.

Attack Surface Management

InfoSecHired

An AI-powered career platform that automates the creation of cybersecurity job application materials and provides company-specific insights for job seekers.

Resources

Mandos Brief Newsletter

A weekly newsletter providing cybersecurity leadership insights, industry updates, and strategic guidance for security professionals advancing to management positions.

Resources

OSINTLeak

OSINTLeak is a tool for discovering and analyzing leaked sensitive information across various online sources to identify potential security risks.

Digital Forensics

Checkmarx SCA

A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.

Application Security

Check Point CloudGuard WAF

A cloud-native web application and API security solution that uses contextual AI to protect against known and zero-day threats without signature-based detection.

Application Security

Orca Security

A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.

Cloud Security

DryRun

A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.

Application Security