Pinned Loading

1. dnsdrift dnsdrift Public

   Detects changes to the DNS, email authentication and TLS posture of your domains. Diffs against a baseline, so it reports what changed rather than what is merely imperfect.

   Python

2. entsec-threat-modeling entsec-threat-modeling Public

   Threat modeling for enterprise design reviews. Structured intake in, prioritized findings and control gaps out, mapped to NIST CSF 2.0, ISO 27001, SOC 2 and CIS v8.

   Python

3. fleetdrift fleetdrift Public

   Detects changes to the software installed across your endpoint fleet. Diffs against a baseline, so it reports what moved rather than what is merely present.

   Python

4. idpdrift idpdrift Public

   Detects changes to identity and access posture. Diffs your directory against a baseline, so it reports what moved rather than everything that is imperfect.

   Python

5. logcoverage logcoverage Public

   Finds the gap between what your detections require, what your SIEM ingests, and what your systems emit. Reports which ATT&CK coverage is live and which exists on paper only.

   Python

6. vendorreview vendorreview Public

   Third-party security review. Structured intake and the vendor's own evidence in, a defensible decision with named gaps and the questions worth asking out.

   Python