Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
MITRE ATT&CK® serves as a comprehensive, publicly-accessible repository detailing the tactics and techniques employed by adversaries, grounded in actual observations from the field. This repository acts as a crucial resource for shaping targeted threat models and strategies across various sectors, including private enterprises, government agencies, and the broader cybersecurity industry. By establishing ATT&CK, MITRE is advancing its commitment to creating a safer world through collaborative efforts aimed at enhancing cybersecurity efficacy. The ATT&CK framework is freely available to individuals and organizations alike, making it an invaluable tool for improving security practices. Adversaries often engage in active reconnaissance scans to collect pertinent information that aids in their targeting efforts, utilizing direct network traffic to probe victim infrastructure rather than employing indirect methods. This proactive approach to gathering intelligence underscores the importance of vigilance in cybersecurity to counter such tactics effectively.
Description
SD Elements helps AppSec teams cope with fast-growing development demands by spelling out which security controls each project needs at the design stage. It follows a Security by Design approach, meaning it looks at architecture, data use, and compliance needs early, identifies relevant risks, and turns them into concrete requirements while changes are still cheap and low-friction. Many teams see security review time drop by 30–50% and fewer late surprises before release.
The platform generates project-specific requirements mapped to standards such as NIST, OWASP, PCI, and ISO, and pairs them with concise implementation guidance developers can act on. This lets small AppSec groups support security for portfolios of 100+ applications without adding headcount, while driving consistent, policy-aligned expectations across teams and products instead of ad hoc checklists.
SD Elements connects to Jira, CI/CD pipelines, and other engineering tools so security work is delivered and tracked in the same systems developers already use. Traceability is a core capability: every requirement is linked to its underlying risk, relevant standards, and evidence of implementation. AppSec leaders and directors get clear views of coverage, posture, and progress across applications, making it easier to reduce risk, support audits, and report meaningful security metrics to senior leadership.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Pris IP Manager
No
AirCISO
Yes
Archer
No
Azure Industrial IoT
No
Checkmarx
No
Datto EDR
Yes
Devici
No
GitLab
No
Group-IB Threat Intelligence
Yes
IBM AIX
No
Integrations
Pris IP Manager
Yes
AirCISO
No
Archer
Yes
Azure Industrial IoT
Yes
Checkmarx
Yes
Datto EDR
No
Devici
Yes
GitLab
Yes
Group-IB Threat Intelligence
No
IBM AIX
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Please contact us for pricing
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
Yes
Vendor Details
Company Name
MITRE ATT&CK
Country
United States
Website
attack.mitre.org
Vendor Details
Company Name
Security Compass
Founded
2004
Country
Canada
Website
www.securitycompass.com/sdelements/
Product Features
Product Features
Risk Management
Alerts/Notifications
No
Auditing
No
Business Process Control
No
Compliance Management
No
Corrective Actions (CAPA)
No
Dashboard
No
Exceptions Management
No
IT Risk Management
No
Internal Controls Management
No
Legal Risk Management
No
Mobile Access
No
Operational Risk Management
No
Predictive Analytics
No
Reputation Risk Management
No
Response Management
No
Risk Assessment
No