Control Validation Compass

Threat modeling aide & purple team content repository, pointing security & intelligence teams to 10,000+ publicly-accessible technical and policy controls and 2,100+ offensive security tests, aligned with nearly 600 common attacker techniques

Choose a feature to get started (watch the overview here):

Risk (Threat Alignment)

Control Validation Compass Risk Workflow

Best for: Purple, CTI, Blue, & Red teams

Threat Modeling

Control Validation Compass Threat Modeling

Best for: CTI & Risk teams

Control Stack

Control Validation Control Stack Workflow

Best for: Security engineering & Blue teams

TTP Research

TTP Research

Best for: Purple, CTI, Blue, & Red teams

Knowledge Center

Star Fork