Tools
Tools · Free to start
Small tools for the parts of security work that shouldn’t be manual.
Practical tools for security teams, cloud engineers, consultants, GRC teams, and builders who need to move faster across frameworks, controls, policies, mappings, and implementation work.
SecFrame
19 security frameworks, one explorer.
Browse, compare, and cross-walk security frameworks side by side. Use plain-English explanations, AI control explainers, remediation guidance, CLI checks, and cross-framework mappings to move from control text to action.
SecPolicy
Generate aligned security policies in minutes.
Spec your organisation, select frameworks, and generate tailored security policies with cross-framework control mapping. Export editable documents that can be reviewed, customised, and dropped into your ISMS or internal security program.
Learn AI
A structured path from AI basics to deployment.
Guided learning resources for engineers and security professionals getting started with AI. Covers foundations, prompt engineering, agents, and practical deployment patterns — no fluff.
AI Sec Risks
AI security risks mapped to controls across the full AI stack.
A structured reference for security architects mapping AI-specific risks — from data poisoning to prompt injection — to controls from NIST, OWASP, MITRE ATLAS, ENISA, EU AI Act, and more.
CloudCerts
Your personalised cloud certification roadmap across AWS, GCP, and Azure.
Tell it your experience level and focus area — Security, DevOps, Architecture, and more — and get a personalised certification roadmap across the big three cloud providers. No more guessing where to start.
How they work together
Use SecFrame to understand controls. Use SecPolicy to turn them into policy.
Start with SecFrame
Explore frameworks, decode controls, compare requirements, and understand what a control means before implementing or mapping it.
Then use SecPolicy
Generate policy documents aligned to the frameworks you care about, with control mappings included for review, governance, and audit workflows.