Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Fork is a SaaS platform designed for threat modeling that enables both security and product teams to conduct ongoing, risk-oriented assessments of applications by utilizing the established PASTA (Process for Attack Simulation and Threat Analysis) framework. This allows teams to swiftly identify the most probable and significant risks in less than two hours while ensuring that security measures are aligned with business objectives. By merging specialized threat libraries with current vulnerability information and threat intelligence, Fork accurately quantifies residual risks and aids in conducting business impact analyses. The platform also implements quality controls throughout the threat modeling process to enhance overall effectiveness. Additionally, Fork features a consolidated security insights dashboard that links threats directly to the attack surface of your application, while incorporating recognized frameworks and taxonomies like MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS, which facilitates focused mitigation strategies and practical outcomes. This comprehensive approach not only enhances security posture but also fosters collaboration between technical and business teams.
Description
MITRE ATT&CK® serves as a comprehensive, publicly-accessible repository detailing the tactics and techniques employed by adversaries, grounded in actual observations from the field. This repository acts as a crucial resource for shaping targeted threat models and strategies across various sectors, including private enterprises, government agencies, and the broader cybersecurity industry. By establishing ATT&CK, MITRE is advancing its commitment to creating a safer world through collaborative efforts aimed at enhancing cybersecurity efficacy. The ATT&CK framework is freely available to individuals and organizations alike, making it an invaluable tool for improving security practices. Adversaries often engage in active reconnaissance scans to collect pertinent information that aids in their targeting efforts, utilizing direct network traffic to probe victim infrastructure rather than employing indirect methods. This proactive approach to gathering intelligence underscores the importance of vigilance in cybersecurity to counter such tactics effectively.
API Access
Has API
Yes
API Access
Has API
No
Integrations
AirCISO
No
Checkmarx
Yes
Datto EDR
No
Filigran
No
FortiGuard IPS Service
No
Group-IB Threat Intelligence
No
ManageEngine Log360
No
Mandiant Managed Defense
Yes
OpenCTI
Yes
PQShield
No
Integrations
AirCISO
Yes
Checkmarx
No
Datto EDR
Yes
Filigran
Yes
FortiGuard IPS Service
Yes
Group-IB Threat Intelligence
Yes
ManageEngine Log360
Yes
Mandiant Managed Defense
No
OpenCTI
No
PQShield
Yes
Pricing Details
$75,000/yr
Starting at $75,000/year
Up to $150,000/year for 500–2,000 threat models
Up to $150,000/year for 500–2,000 threat models
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
VerSprite Cybersecurity
Founded
2007
Country
United States
Website
forktm.com
Vendor Details
Company Name
MITRE ATT&CK
Country
United States
Website
attack.mitre.org