Base
Hardened build
minimal ports, security patches applied at build time
SimpleRisk GRC and Risk Management on Ubuntu 24.04 LTS
Azure
Security
Open source governance, risk and compliance for managing your organisation's risk register.
Overview
SimpleRisk is the widely used open source governance, risk and compliance (GRC) platform. Capture and score risks using CLASSIC, CVSS, DREAD or OWASP methodologies, plan and track mitigations and management reviews, run compliance audits against frameworks and controls, manage assets, and report on the whole organisation's risk posture from one shared risk register.
It suits risk and compliance teams, security functions and IT governance teams that want a GRC system they run and own rather than a paid external service, from a single risk owner to a busy multi department programme.
Why the cloudimg image
The cloudimg image installs SimpleRisk behind nginx with PHP 8.3 and a bundled local MariaDB, with the database schema already loaded and the setup wizard already completed and closed, so you land on the sign in page rather than an exposed first run wizard. Nothing sensitive ships: a unique MariaDB password and a unique administrator password are generated on the first boot of every VM and written to a root only file, there is no default administrator login, and the MariaDB database that holds your risk register is bound to loopback only and never exposed to the network. Backed by 24/7 cloudimg support.
Common uses
- Maintain a shared risk register with CLASSIC, CVSS, DREAD or OWASP scoring
- Plan and track mitigations and management reviews to reduce risk over time
- Run compliance audits against frameworks and controls
See it running
Real screenshots taken while testing this image against its deployment guide.
More in Security
KeePass Password Manager
Security
KeePass is a free, open source password manager that stores all your passwords in a highly encrypted database. The datab...
CrowdSec
Security
This image runs CrowdSec, the free and open source collaborative behavioural security engine.
Ollama GPU-Accelerated LLM Server
Security
This image runs Ollama 0.30, the easiest way to run open large language models locally - pull and serve Llama, Mistral, ...
OWASP ZAP
Security
This image runs OWASP ZAP (the Zed Attack Proxy), the world's most widely used open source web-application security scan...
step-ca
Security
This image runs step-ca, the open source online certificate authority from Smallstep for secure, automated X.509 and ACM...
Trivy Security Scanner
Security
This image runs Trivy, the open source, Apache-2.0 licensed all-in-one security scanner from Aqua Security.