GPT Plugins*
Beleid & Procedure generator
Niemand zou tijd moeten verspillen aan het opnieuw uitvinden van het wiel. Daarom hebben we een GPT* gemaakt om lijsten te genereren van vereiste beleidsregels en procedures en hun inhoud, in lijn met de vereisten die je moet implementeren.
Vulnerability inzichten
Elke dag worden er duizenden kwetsbaarheden ontdekt in verschillende softwareoplossingen, bibliotheken en online services die bepalen in welke mate je kwetsbaar bent. Om u te helpen tijd te winnen, hebben we een GPT* gemaakt met een lijst met alle details
Uw eigen GRC leraar
Je kan niet vanaf het begin overal perfect in zijn, zeker niet in het uitgebreide domein van GRC. Daarom is onze tutor er om je te helpen je vaardigheden te verbeteren, zodat je gerelateerde certificeringen kunt behalen. We raden je ten zeerste aan deze GPT* te gebruiken op je mobiele apparaat en de conversatiemodus te gebruiken, zodat je echt kunt worden uitgedaagd in lijn met je expertise en in het domein van jouw keuze.
NIS2 Scope & Implementation assistant
Uw persoonlijke assistent om u te begeleiden bij de implementatie van NIS2. Vraag verduidelijking voor specifieke concepten, vereisten en best practices om u te helpen de vereisten van de richtlijn efficiënt te implementeren.
ISO27001:2022 Implementatie assistent
Uw persoonlijke assistent om u te begeleiden bij de implementatie van ISO27001:2022. Vraag verduidelijking voor specifieke concepten, vereisten en best practices om u te helpen de vereisten van de norm efficiënt te implementeren.
Brainframe ChatGPT plugin - ISO27001 Implementation assistant
Primary & supporting asset identification
Get guidance during the identification of your primary and supporting assets
Brainframe ChatGPT plugin - Primary and supporting asset identification
* ChatGPT Plus-abonnement vereist
Open source
Ready to use policies & procedures
A set of policies, standards and control procedures with mapping to ISO27001, GDPR, HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.
These policies and procedures can be provided separately as part of your Brainframe instance, with a full integration into all our modules.
Center for Cybersecurity Belgium policy templates
A set of useful company policies provided by the Center of Cybersecurity Belgium (CCB). These reference documents are templates of Policies, instructions, inventories, lists, etc. and conform with the CyberFundamentals Assurance Level “Basic”.
Their objective is to allow you to quickly and easily implement a cybersecurity policy in your company.
Each model can be freely adapted, completed and customized according to your needs.
Software/Tools
Cyber security does not always need to be very expensive. Below is a curated list of open source or broad free usage tools you can use to improve your cyber posture
Network security & monitoring
- Wireshark: A network protocol analyser used for network troubleshooting, analysis, and communication protocol development.
- Snort: A network intrusion detection system (NIDS) capable of performing real-time traffic analysis and packet logging.
- Bro/Zeek: A powerful network analysis framework that focuses on security
- OpenNMS: An enterprise-grade network management application platform.
- Nmap: A network scanner used for network discovery and security auditing
- Nagios: A monitoring system that enables organizations to identify and resolve IT infrastructure problems.
- Pfsense: Probably the best and most flexible open source firewall around
- PacketFence: Free and open source network access control (NAC) solution with many integrated features (captive-portal for registration and remediation, central wired/wireless and VPN management, insustry-leading BYOD capabilities, 802.1x and RBAC support, anomaly detection with layer-2 isolation, ...)
- OpenSense: From Virtual Private Networking to Intrusion Detection, Best in class, FREE Open Source Project.
Endpoint protection
- Avast: Known for its solid protection against viruses and malware, including several features typically found in paid software. It includes a basic password manager, network security inspector, and even a hardened browser.
- Malwarebytes: A very nice and complete malware solution that is free for personal use
- AVG Antivirus: Now owned by Avast, offers similar protection to Avast. It's well-regarded for its effective detection of malicious software, user-friendly interface, and minimal impact on system performance.
- Bitdefender: Bitdefender is praised for its sleek design and minimalistic approach to antivirus protection.
- Kaspersky: Kaspersky's free version provides top-rated malware protection along with extra features like a VPN and password manager
- ClamAV: An antivirus engine designed for detecting Trojans, viruses, malware, and other malicious threats on mail gateways.
- OSSEC: An open-source, host-based intrusion detection system (HIDS) that performs log analysis, file integrity checking, policy monitoring, rootkit detection, and real-time alerting.
- Suricata: A high-performance network IDS, IPS, and network security monitoring engine.
- Wazuh: A security monitoring tool that provides host-based intrusion detection.
- chkrootkit: A tool to locally check for signs of a rootkit.
- Rkhunter: A Unix-based tool for scanning backdoors, rootkits, and local exploits.
- virustotal: Website to quickly scan any file/url for viruses/malware using many different anti-virus solutions
- Lookyloo: Check and review URLs and website and visualize their behaviour.
Email security
- GoPhish - A powerful phishing framework that makes it easy to test your organization's exposure to phishing
- SpamAssassin: A widely used tool for filtering and identifying spam. It uses a variety of spam detection techniques including DNS-based and fuzzy-checksum-based spam detection, Bayesian filtering, external programs, blacklists, and online databases.
- DKIM - Not really a tool, but so essential and free to implement
- DMARC - Similar to DKIM, not a tool but essential
- Pandora - quick, private and simple suspicious document analysis. (you can also just forward a mail to, [email protected] and receive a full analysis)
Source code analysis (SAST/SCA/Mobile)
- Snyk: Scan your own code and 3rd party code as well as your infrastructure code for vulnerabilities
- SonarQube: A widely used tool for continuous inspection of code quality. It performs automatic reviews to detect bugs, code smells, and security vulnerabilities.
- Brakeman: a static analysis tool specifically designed for Ruby on Rails applications. It scans Rails applications for security vulnerabilities.
- Bandit: A tool designed to find common security issues in Python code. It processes each file, builds an AST from it, and runs appropriate plugins against the AST nodes.
- FindSecBugs: A security-specific plugin for SpotBugs (formerly FindBugs), which is used for Java programs. It can identify security flaws in Java applications.
- ESLint: Statically analyzes your code to quickly find problems. It is built into most text editors and you can run ESLint as part of your continuous integration pipeline.
- OWASP Dependency-Check: Dependency-Check is a Software Composition Analysis (SCA) tool that attempts to detect publicly disclosed vulnerabilities contained within a project’s dependencies. It does this by determining if there is a Common Platform Enumeration (CPE) identifier for a given dependency. If found, it will generate a report linking to the associated CVE entries.
- Retire.js: Focused on JavaScript, Retire.js identifies the use of JavaScript libraries with known vulnerabilities.
- OSS Index: A free service by Sonatype, which provides information about known vulnerabilities in open-source software components.
Web application security, system/cloud security and vulnerability management
- OWASP ZAP: A penetration testing tool for finding vulnerabilities in web applications.
- SQLMap: An automated tool for SQL injection and database takeover.
- Nikto: A web server scanner which performs comprehensive tests against web servers.
- Arachni: A feature-full, modular, high-performance Ruby framework aimed at web application security testing.
- w3af: A web application attack and audit framework for web application security testing.
- OpenVAS: A framework of several services and tools offering vulnerability scanning and management.
- MobSF - Mobile Security Framework (MobSF) is a security research platform for mobile applications in Android, iOS and Windows Mobile. MobSF can be used for a variety of use cases such as mobile application security, penetration testing, malware analysis, and privacy analysis
- Nessus Essentials: A widely used vulnerability scanner with high-speed discovery, configuration auditing, and sensitive data discovery
- Burp Suite Free Edition: An integrated platform for performing security testing of web applications.
- Metasploit Framework: A tool for developing and executing exploit code against a remote target machine.
- PwnDoc - A pentest reporting application making it simple and easy to write your findings and generate a customizable Docx report
- Lynis: Open-source security auditing tool to do automated security auditing, compliance testing, vulnerability detection, configuration and asset management, software patch management, system hardening, ...
- CloudGrappler: Open-source tool detects activity in cloud environments. CloudGrappler is a purpose-built tool designed for effortless querying of high-fidelity and single-event detections related to well-known threat actors in popular cloud environments such as AWS and Azure
- CVE Prioritizer: CVE_Prioritizer is a powerful tool that helps you prioritize vulnerability patching by combining CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. It provides valuable insights into the likelihood of exploitation and the potential impact of vulnerabilities on your information system.
- Faction: PenTesting Report Generation and Collaboration Framework
- Trufflehog: TruffleHog is an open-source scanner that identifies and addresses exposed secrets throughout your entire technology stack.
- ScoutSuite: Scout Suite is an open source multi-cloud security-auditing tool, which enables security posture assessment of cloud environments
- Harden 365: Harden365 is an Open Source security tool that can be used to hardening Microsoft 365 tenant with CIS and Microsoft recommendations. The Harden community is an association law 1901. It aims to help companies, especially an SMB or TPE, to improve the security of its information system.
- PurpleOps: Purple Team Management Platform. Create assessments aligned with MITRE ATT&CK, leveraging data from sources like Atomic Red Team and SIGMA. Centralise blue and red team data for evaluation. Iterate and improve organisational cybersecurity capabilities.
DNS security
- Subdominator: CLI tool for detecting subdomain takeovers
- DNS-Dumpster: Free domain research tool that can discover hosts related to a domain. Finding visible hosts from the attackers perspective is an important part of the security assessment process.
- Whois record: Free lookup of ownership, registration and contact information about a given domain name
SSL Certificates
- SSL-Labs: Free online service performs a deep analysis of the configuration of any SSL web server on the public Internet
Hardware and firmware security
- EMBA: The security analyzer for firmware of embedded devices (Enhanced firmware extraction process, UEFI analysis, Firmware diffing mechanisms, user mode emulation, system emulation, ...)
Identity management
- Keycloak: Open Source Identity and Access Management. Add authentication to applications and secure services with minimum effort. No need to deal with storing users or authenticating users. Keycloak provides user federation, strong authentication, user management, fine-grained authorization, and more.
- Adalanche: Adalanche gives instant results, showing you what permissions users and groups have in an Active Directory. It is useful for visualizing and exploring who can take over accounts, machines or the entire domain, and can be used to find and show misconfigurations.
- SOAPHound: Open-source tool to collect Active Directory data via ADWS. SOAPHound is an alternative to a number of open source security tools which are commonly used to extract Active Directory data via LDAP protocol. SOAPHound is able to extract the same information without directly communicating to the LDAP server. Instead, LDAP queries are wrapped within a series of SOAP messages, which are sent to the ADWS server using NET TCP Binding communication channel. Following, ADWS server unwraps the LDAP queries and forwards them to the LDAP server running on the same Domain Controller. As a result, LDAP traffic is not sent via the wire and therefore is not easily detected by common monitoring tools.
- Pink castle: Ping Castle is a tool designed to assess quickly the Active Directory security level with a methodology based on risk assessment and a maturity framework.
- Bastillion: Bastillion is a web-based SSH console that centrally manages administrative access to systems. Web-based administration is combined with management and distribution of user's public SSH keys. Key management and administration is based on profiles assigned to defined users. Administrators can login using two-factor authentication with Authy or Google Authenticator. From there they can manage their public SSH keys or connect to their systems through a web-shell. Commands can be shared across shells to make patching easier and eliminate redundant command execution.
- Harden AD: Hardening Active directory tool
Security Information and Event Management (SIEM) and Log management
- Wazuh: Unified XDR and SIEM protection for endpoints and cloud workloads
- ELK Stack: A collection of three open-source tools (Elasticsearch, Logstash, Kibana) for searching, analyzing, and visualizing data in real-time.
- OSSIM: A SIEM software that provides threat detection, incident response, and compliance management.
- Graylog: A log management and analysis tool for security and debugging.
- Apache Metron: Integrates a variety of open source big data technologies to offer a centralized tool for security monitoring and analysis.
- MasterParser: MasterParser stands as a robust Digital Forensics and Incident Response tool meticulously crafted for the analysis of Linux logs within the var/log directory. Specifically designed to expedite the investigative process for security incidents on Linux systems, MasterParser adeptly scans supported logs, such as auth.log for example, extract critical details including SSH logins, user creations, event names, IP addresses and much more.
- Tracecat: Open source Tines / Splunk SOAR alternative
- SELKS: Free and open source IDS/IPS/Network Security Monitoring platform
Password managers
- Passbolt - Password manager built for organizations that take their security and privacy seriously
- KeePass: A password manager helping you to manage your passwords securely.
- Bitwarden: a free and open-source password management service that stores sensitive information in an encrypted vault. It is known for its ease of use and cross-platform compatibility.
Incident response, Risk assessment, Threat intelligence, Posture management
- AWS Kill switch - a Lambda function (and proof of concept client) that an organization can implement in a dedicated "Security" account to give their security engineers the ability to quickly deploy restrictions during a security incident
- TheHive - Open source and free Security Incident Response Platform designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly
- Cortex - Tries to solve a common problem frequently encountered by SOCs, CSIRTs and security researchers in the course of threat intelligence, digital forensics and incident response: how to analyze observables they have collected, at scale, by querying a single tool instead of several
- MISP: A platform for sharing threat intelligence and malware information.
- Monarc: A tool and a method allowing an optimised, precise and repeatable risk assessment.
- Yeti: Aims to bridge the gap between CTI and DFIR practitioners by providing a Forensics Intelligence platform and pipeline for DFIR teams
- Web-Check: Comprehensive, on-demand open source intelligence for any website. Web Check offers thorough open-source intelligence and enables users to understand a website’s infrastructure and security posture, equipping them with the knowledge to understand, optimize, and secure their online presence.
- Shodan: Shodan is the world's first search engine for Internet-connected devices. Discover how Internet intelligence can help you make better decisions
- CrowdSec: Curated Threat Intelligence, Powered by the Crowd
Secure file sharing
- LinShare: Specially designed to secure paperless file sharings within companies that put privacy and traceability in the heart of their problems of exchange, LinShare provides a simple solution completely intuitive. Linshare allows employees to "upload files into their space", "share files with internal or external collaborators" and "offers several features to securely exchange"
Automation
- Shuffle: Shuffle is an open source automation platform, built for and by the security professionals. Security operations is complex, but it doesn't have to be. Built to work well with MSSP's and other service providers in mind.
Various
- ProxMox: Proxmox delivers powerful, enterprise-grade solutions with full access to all functionality for everyone - highly reliable and secure. The software-defined and open platforms are easy to deploy, manage and budget for. They offer a solution for Virtualization, backups and email security
Feel free to suggest things we can list on our community page that will help people improve their security: