MITRE ATT&CK
FrameworkThe shared vocabulary for adversary behaviour. Map coverage, find the gaps.
Open sourceReference
Frameworks, cheat sheets, reports, and templates from primary sources.
The shared vocabulary for adversary behaviour. Map coverage, find the gaps.
Open sourceA programme-level structure that translates security work into business language.
Open sourceThe baseline web risk list every application security conversation starts from.
Open sourcePractical, opinionated guidance for the controls developers actually implement.
Open sourceA starting structure for detection, triage, comms and post-incident review.
Open sourceCanonical vulnerability identifiers, and the place to check before you panic.
Open source