Cybersecurity Resources

Knowledge base of adversary tactics and techniques based on real-world observations.

Countermeasure knowledge graph mapping defensive techniques to ATT&CK threats.

Adversarial threat landscape for AI systems — tactics targeting ML models.

Security and privacy controls for information systems and organizations.

Voluntary framework for managing and reducing cybersecurity risk.

Guidance for managing risks associated with AI systems.

The official catalog of publicly disclosed cybersecurity vulnerabilities.

U.S. government repository of vulnerability management data with CVSS scoring.

Archive of public exploits and corresponding vulnerable software.

The most critical security risks to web applications.

Concise best-practice guides for application security topics.

Comprehensive framework for testing the security of web applications.

Best practices and research for securing cloud computing environments.

Cybersecurity control framework mapped to leading standards and regulations.

Public registry of cloud provider security controls and assessments.

Free training resources for Microsoft virtualization and security technologies.

Free courses, exercises, and resources from the U.S. cybersecurity agency.

Free online courses covering operating systems, networking, and security fundamentals.