Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Fork is a SaaS platform designed for threat modeling that enables both security and product teams to conduct ongoing, risk-oriented assessments of applications by utilizing the established PASTA (Process for Attack Simulation and Threat Analysis) framework. This allows teams to swiftly identify the most probable and significant risks in less than two hours while ensuring that security measures are aligned with business objectives. By merging specialized threat libraries with current vulnerability information and threat intelligence, Fork accurately quantifies residual risks and aids in conducting business impact analyses. The platform also implements quality controls throughout the threat modeling process to enhance overall effectiveness. Additionally, Fork features a consolidated security insights dashboard that links threats directly to the attack surface of your application, while incorporating recognized frameworks and taxonomies like MITRE, OWASP, CWE, CVE (with EPSS), CAPEC, ATT&CK, D3FEND, and ASVS, which facilitates focused mitigation strategies and practical outcomes. This comprehensive approach not only enhances security posture but also fosters collaboration between technical and business teams.

Description

MITRE ATT&CK® serves as a comprehensive, publicly-accessible repository detailing the tactics and techniques employed by adversaries, grounded in actual observations from the field. This repository acts as a crucial resource for shaping targeted threat models and strategies across various sectors, including private enterprises, government agencies, and the broader cybersecurity industry. By establishing ATT&CK, MITRE is advancing its commitment to creating a safer world through collaborative efforts aimed at enhancing cybersecurity efficacy. The ATT&CK framework is freely available to individuals and organizations alike, making it an invaluable tool for improving security practices. Adversaries often engage in active reconnaissance scans to collect pertinent information that aids in their targeting efforts, utilizing direct network traffic to probe victim infrastructure rather than employing indirect methods. This proactive approach to gathering intelligence underscores the importance of vigilance in cybersecurity to counter such tactics effectively.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

AirCISO No 
Checkmarx Yes 
Datto EDR No 
Filigran No 
FortiGuard IPS Service No 
Group-IB Threat Intelligence No 
ManageEngine Log360 No 
Mandiant Managed Defense Yes 
OpenCTI Yes 
PQShield No 
Qualys Container Security Yes 
ServiceNow Yes 
Sprocket Security No 
Tenable One Cloud Exposure (CNAPP) Yes 
Veracode Yes 

Integrations

AirCISO Yes 
Checkmarx No 
Datto EDR Yes 
Filigran Yes 
FortiGuard IPS Service Yes 
Group-IB Threat Intelligence Yes 
ManageEngine Log360 Yes 
Mandiant Managed Defense No 
OpenCTI No 
PQShield Yes 
Qualys Container Security No 
ServiceNow No 
Sprocket Security Yes 
Tenable One Cloud Exposure (CNAPP) No 
Veracode No 

Pricing Details

$75,000/yr
Starting at $75,000/year

Up to $150,000/year for 500–2,000 threat models
Free Trial No 
Free Version Yes 

Pricing Details

No price information available.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

VerSprite Cybersecurity

Founded

2007

Country

United States

Website

forktm.com

Vendor Details

Company Name

MITRE ATT&CK

Country

United States

Website

attack.mitre.org

Product Features

Alternatives

Alternatives

DarkIQ Reviews

DarkIQ

Searchlight Cyber