Practical instruments for people who have to budget for compliance and track what is actually being exploited. Nothing here asks you to create an account, and nothing here collects your data unless you explicitly ask us to get in touch.
Governance Estimate Generator
An instant budgetary planning range across nine frameworks — CMMC Levels 1 and 2, NIST SP 800-171, NIST 800-53/RMF, ISO/IEC 27001, SOC 2, HIPAA, CIS Controls and the NIST AI RMF. Calculates in your browser; nothing is transmitted.
Open the estimatorThreat Intel Board
A customer-safe view of actively exploited CVEs and tracked actors over a rolling ninety-day window. Every row carries its source, every date is the one the source published, and the board states its own age rather than claiming to be current.
Open the boardThreat Landscape Heat Map
Actors against sectors, attack vectors against ATT&CK tactics, and NIST SP 800-171 control families against sectors. Any column resting on a single instrument is labelled as such, so a nought is never mistaken for an all-clear.
Open the heat mapsThreat Trajectory
How fast exploited vulnerabilities are accumulating, which weakness classes are driving it, and which actors are pressing which sectors. Each panel states whether its figures were counted, quoted from CISA, or assessed by an analyst.
Open the trajectoryWhy the dates on our feeds are sometimes blank
Most free threat feeds calculate a due date when the source does not state one. We do not. If a date is not published by an authoritative source, we leave it empty rather than compute something that looks authoritative and is not. The same discipline applies to attribution: we repeat what a named researcher assessed, with their confidence level and the date they said it, and we do not originate attribution of our own.