SimpleRisk in the wild

Reviews, coverage, and recognition

A running record of where SimpleRisk shows up: independent reviews, industry coverage, tool roundups, and more than a decade of talks and podcasts. Spot something we missed? Let us know and we will add it.

Reviews & directories

SimpleRisk on G2G2 · verified user reviews & ratings SimpleRisk on SourceForgeSourceForge · reviews & ratings SimpleRisk on GoodFirmsGoodFirms · reviews & pricing SimpleRisk product profileGRC-Review Best Open-Source GRC Tools ComparedInfoSecFlow · CISO Assistant vs Eramba vs SimpleRisk Eramba vs SimpleRisk vs Isora GRCSaltyCloud Open Source GRC Software BenefitsKraft Business

Recognition

Black Hat ArsenalSelected for the Arsenal every year since 2013:2013201420152016201720182019202020212022202320242025
SecTor ArsenalSelected for the SecTor Arsenal in Toronto:20252026
2014 Toolsmith Tool of the Year: SimpleRiskby Russ McRee · HolisticInfoSec Best toolsmith tool of the last ten yearsby Russ McRee · HolisticInfoSec · 2016

Press & coverage

SimpleRisk: Enterprise risk management simplifiedHelp Net Security · 2022 Five Free Risk Management Tools That Add Valueby Ed Moyle · Security Intelligence SimpleRisk: Risk management simplifiedby Mirko Zorz · Help Net Security · 2016 Best Open Source Risk Assessment ToolsHackersmail · 2015 ToolSmith: SimpleRisk, Enterprise Risk Management Simplifiedby Russ McRee · HolisticInfoSec · 2014 Threat modeling in the name of securityby Russ McRee · SANS Internet Storm Center Risky Businessby Robert Sorensen · SANS Reading Room Risks and Rewards in Securityby Sarah Vonnegut · Checkmarx · 2014 (archived) Black Hat 2013: 5 Cool Hacking Tools To Check Outby Robert Westervelt · CRN · 2013 Containerized, Open Source Risk Management ft. SimpleRiskby Zach Gates · Bevel (archived) SimpleRisk: Open Source Risk Management ToolConcise Courses Drozer and SimpleRisk: Two Useful Pentesting Toolsby Henry Dalziel · Concise Courses SimpleRisk Enterprise Risk Management Platformby Mourad Ben Lakhoua · SecTechno · 2013 (archived) Enterprise Risk Management for the Massesby Josh Sokol · WebAdminBlog · 2013 (archived) SimpleRisk: Herramienta Open Source para Gestión de RiesgosITCraud · 2013 (Spanish)
SimpleRisk: Powerful risk management and GRCby Aamir Lakhani · Dr. Chaos (page no longer available)

Talks, podcasts & webinars

OWASP Global Webinar: SimpleRiskJosh Sokol · OWASP · YouTube Interview with the creator of SimpleRisk, Josh SokolBrakeing Down Security · podcast What keeps cybersecurity professionals asleep at night?Dialed In with Kyle Burt · Spotify The Top 10 Risk Management Mistakes CISOs Still MakeJosh Sokol · YouTube Josh Sokol at Black Hat USA 2019Black Hat USA · 2019 SimpleRisk: Open Source Enterprise Risk ManagementClass Central · free course listing Convincing Your Management that Risk Management Doesn't SuckJosh Sokol · BSides Las Vegas · 2013
Paul's Security Weekly, Episode 411with Russ McRee · Security Weekly · 2015 (page no longer available)