Templates

PDF Excel Word 2 products

Phase 0 + Shadow AI Pack

The assessment that finds every AI system in your estate, paired with the workbook that inventories and scores them. Map the footprint, then govern it. 14% off buying separately.

PDF Excel Word 5 products

Phase 0 + Risk & Readiness Pack

The front-door assessment plus the four workbooks that prove readiness to the people who ask — ransomware, tabletop, cyber insurance and shadow AI. 24% off buying separately.

From $934.00 View →

PDF 3 licences in 3 bundles

The Operator's Manual — C2 Command Layer

The capstone above all six pillars: one seat that conducts the whole department. Intake from four employee doorways, visible approval gates, one living risk register, and observability into every AI channel — with the agent layer and MCP wiring that runs it.

PDF 3 licences in 1 bundle

Pillar 05 — The Incident Response Operating System

An operating system for the worst day — the right people in one room, on one clock, with 90% of the hardest choices already made. Built on NIST 800-61 Rev. 3, with the offline runbook, the notification clocks and a ready-to-run tabletop.

PDF 3 licences in 2 bundles

Pillar 04 — The AI-SOC Operating System

Read every alert, resolve the routine, escalate only what needs a human. A reducer that overlays your existing SIEM, EDR, identity and cloud — human-gated, auditable, and capped at an autonomy level you can defend.

PDF 3 licences in 3 bundles

Pillar 01 — The Compliance Operating System

Map controls once, satisfy every framework. A continuous, registry-driven compliance program across SOC 2, ISO 27001, HIPAA, PCI, CMMC, DORA and NIS2 — plus the ISO 42001 and EU AI Act layer most guides still omit.

PDF ZIP 3 licences in 2 bundles

Pillar 01 Companion — The Living ISMS

The database behind the control register. A homegrown ISMS with automatic evidence decay, an eleven-prompt agent layer and an MCP interface — the engineered companion to Pillar 01. Ships with the schema, the prompt library and all eleven JSON Schemas.

Compliance: Method & Machine

Pillar 01 — The Compliance Operating System, plus The Living ISMS. Read the method, then build the system that runs it. 15% off buying separately.

PDF Excel Word 5 products

Compliance Program Starter

The Pillar 01 operating system plus the two workbooks most first programs actually need — SOC 2 Readiness and the NIST CSF 2.0 Self-Assessment — with both PDF readiness checklists included. 24% off buying separately.

From $620.00 View →

PDF 3 licences in 4 bundles

Pillar 06 — The Fractional CISO Operating System

The capstone hub: a human-owned register that aggregates every security stream into board-legible, quantified risk. The 2026 pricing ladder, the first 90 days, the five-page board deck, and the layer the AI vCISO platforms structurally cannot replace.

PDF ZIP 3 licences in 4 bundles

Pillar 06 Companion — The 2026 AI Risk Register

The register that inventories every AI system, model and agent in your business, classifies it against the 2026 regulatory map, scores it on autonomy and blast radius, and routes remediation to real suppliers. Full schema, five classification rule tables, 41 build prompts.

AI Risk Register Pack

Pillar 06 — The Fractional CISO Operating System, plus The 2026 AI Risk Register. The practice and the system: own the register and know how to run it. 15% off buying separately.

PDF ZIP 3 licences in 2 bundles

Pillar 06 Companion — The Enterprise Risk Register

Seed to sale for risk: from the engagement that found it to the purchase order that closes it. Offensive scoping, a coverage matrix that knows what has gone stale, treatment as a budgeted project, and priced solutions with the ROI attached.

The Register Family

Pillar 06 plus both registers — The Enterprise Risk Register as the hub and The 2026 AI Risk Register as the AI stream. The hub, the stream, and the practice that owns them. 19% off buying separately.

PDF ZIP 3 products

From $638.00 View →

Register & Machine

The Enterprise Risk Register plus The Living ISMS. The register asks whether a risk is treated by control X; the control graph answers whether X is real. Both sides of the seam. 14% off buying separately.

PDF Excel Word 3 products

Fractional CISO Practice Pack

The Pillar 06 operating system plus the two workbooks that run it — vCISO Client-in-a-Box for the portfolio and the CISO 90-Day Onboarding Workbook for every new engagement. 19% off buying separately.

From $798.00 View →

PDF 3 licences in 2 bundles

Pillar 02 — AI-Augmented DevSecOps Risk Register

Run a continuous, AI-triaged security program across 100+ apps as a solo engineer. Platform-first discovery, SAST/SCA/secrets/DAST, a self-healing risk register, and tiered Claude triage — on free and near-free parts.

PDF 3 licences in 2 bundles

Pillar 03 — AI-Augmented PTaaS Lane

An authorized, sandboxed autonomous offense lane that proves bugs — a crashing proof-of-vulnerability or live exploit chain, paired with a candidate patch, under the same register and human gate as Pillar 02. Design-stage guide, published before the build.

PDF 3 licences in 1 bundle

Bug-Hunter Automation

The continuous discovery layer between Pillars 02 and 03 — shift-left source analysis, autonomous runtime testing, and a validation gate in the middle that files findings instead of noise. Ten sections, eight working appendices.

Pillar 04 — AI-SOC Complete

The whole AI-SOC pillar — the operating system that reduces your alerts, the reference architecture that designs the system underneath it, and the hardware build guide that lands it on one machine you hold. 19% off buying separately.

PDF 3 products

From $358.00 View →

PDF ZIP 3 licences in 2 bundles

C2 Companion — The Operator Node DIY Build

The box the security department runs on. Self-host the living risk register, the ISMS and the evidence vault on one hardened machine — zero inbound, hardware-rooted, on your keys, severable in one step. Ships with the scoping module and the AI data-handling annex as editable templates.

Self-Host Starter

C2 — The Operator's Manual plus the Operator Node DIY Build. The operating model and the box it runs on. 15% off buying separately.

Operator on a Box

The Operator's Manual plus SOC in a Box — the command layer and the hardened machine to run it on. Sovereign by construction: your vault, your gates, your hardware. 14% off buying separately.

PDF 2 products

Complete Security Program Pillars

The whole programme — the Phase 0 assessment that scopes it, all six pillars, and the C2 command layer that conducts them — the compliance operating system, the DevSecOps risk register, the Bug-Hunter discovery layer, the PTaaS proof lane, both halves of the AI-SOC pillar, and the Fractional CISO operating system they all report into. Discovery to detection to remediation as one program, and the operator node it all runs on. 29% off buying separately.

PDF 12 products

From $1462.00 View →

DevSecOps + PTaaS Bundle

Pillars 02 and 03 together — the always-on risk register that finds patterns, and the authorized offense lane that proves them. 14% off buying separately.

PDF 2 products

Architecture & Build Featured

Build Series Vol. 01 — Detection & Monitoring

Wazuh, Suricata and Zeek assembled into a stack one person can operate, with the tuning and detection validation that almost every deployment skips.

PDF in 7 bundles

Architecture & Build Featured

Build Series Vol. 02 — Asset Inventory & Discovery

Discovery tells you what is out there. The source of truth holds what you have decided about it. The control lives in the reconciliation between them, not in either list.

PDF in 7 bundles

Build Series Vol. 03 — Vulnerability Management

Finding what is exploitable, fixing what matters, and proving both — with a prioritisation model that still works when the severity score is missing.

Build Series Vol. 04 — Incident Response Lab

The capability to investigate, contain and report — built before you need it, including the reporting clocks measured in hours rather than days.

Build Series Vol. 05 — Backup & Recovery

Copies an attacker holding domain admin cannot reach, and restores you have actually performed and timed — including the full-estate rebuild nobody plans for.

Build Series Vol. 06 — Identity & Access

One front door, authenticators that survive phishing, privileged identities separated from daily work, and access that genuinely ends when people do.

PDF in 7 bundles

Build Series Vol. 07 — Endpoint Hardening & Configuration

Baselines per system class, enforced continuously and measured for drift, across a fleet that includes machines you do not manage and cannot reach on a network.

Build Series Vol. 08 — Network Segmentation & Zero Trust

The containment substrate the rest of the series assumes: isolating a host, keeping a compromised endpoint away from the backups, restricting an unmanaged device to a narrow slice.

Build Series Vol. 09 — Cloud & SaaS Security Posture

The control plane where the estate actually lives — misconfiguration, privilege graphs, public exposure, and the SaaS tenants nobody has ever baselined.

Build Series Vol. 10 — Email & Domain Defense

Domain authentication all the way to enforcement, transport security, portfolio hygiene, and the monitoring that tells you when someone is impersonating you.

EU Cyber Resilience Act Workbook

Article 14 reporting readiness and the road to December 2027 — the scope test, the reporting clocks, Annex I requirements mapped to controls, the technical documentation set, and conformity assessment routes. Neither DORA nor NIS2 covers this.

Build Series Foundation Bundle

Volumes 02, 01 and 06 — inventory, detection and identity. The three everything else depends on.

PDF 3 products

$238.00 View →

Complete Build Series

All ten volumes in reading order — a security department built out of open source, with control mappings, validation harnesses and honest buy lines throughout. 24% off buying separately.

PDF 10 products

$743.00 View →

Open SOC Architecture + Build Foundation

The Open SOC Reference Architecture plus Build Series Volumes 02, 01 and 06 — the system-level design, then the three planes everything else depends on.

$357.00 View →

Open SOC Architecture + Complete Build Series

The reference architecture and all ten build volumes — the whole system-level design plus every plane built end to end, in the recommended build order. 25% off buying separately.

PDF 11 products

$854.00 View →

SOC 2 + Build Foundation

SOC 2 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$637.00 View →

ISO 27001 + Build Foundation

ISO 27001:2022 Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$637.00 View →

HIPAA + Build Foundation

HIPAA Readiness Accelerator plus Build Series Volumes 02, 01 and 06 — the workbook that identifies the requirements, and the three volumes that make them real.

$637.00 View →

PDF Word 2 licences in 2 bundles

CTI Program Maturity Assessment

Nine domains, forty-five statements, and two ceiling rules that stop you scoring yourself a three. The front door to the line — find out where the program actually is before spending anything.

From $49.00 View →

Threat Intelligence

CTI Maturity Assessment — Auto-Scoring

The same forty-five statements as a spreadsheet that applies both ceiling rules and ranks your gaps for you — six tabs, 98 formulas, nothing hardcoded.

Excel 2 licences in 1 bundle

From $49.00 View →

PDF Word 2 licences in 2 bundles

Build Your Own Threat Intelligence Program

The anchor. Ten sections taking a small team from no capability to a running CTI program in ninety days, on MISP and the open-source CIRCL stack — with an honest ceiling on what a DIY program can ever do.

Excel 2 licences in 2 bundles

Threat Intelligence

Feed Selection Matrix

Sixty-two open sources pre-scored on the six criteria that are the same for everyone — you supply the two that are not. Six tabs, 411 formulas, an eight-criterion rubric and a cut line at 18 of 40.

From $49.00 View →

PDF Word 2 licences in 1 bundle

CTI Analyst Runbook Library

Eighteen procedures for the things that actually land in an analyst queue. One page each, each ending in a decision rather than a suggestion — with an escalation matrix and an execution log.

PDF Word 2 licences in 1 bundle

Threat Intel Policy & Governance Pack

Six adoptable documents covering marking, handling, sharing, retention, membership, and machine access — with DORA Article 45, NIS2 Article 29 and ISO 27001 mappings. The governance a sharing programme is required to have and almost never does.

PDF Word Excel 6 products

Threat Intelligence Starter Kit

All six CTI products — assessment, auto-scoring tool, the build workbook, the feed matrix, eighteen analyst runbooks and the policy pack. 24% off buying separately.

From $483.00 View →

PDF Word Excel 3 products

CTI Essentials

The three products that get a program running — the build workbook, the maturity assessment, and the feed matrix. 19% off buying separately.

From $198.00 View →

Cyber Range Featured

R01 — Range Foundations

The anchor volume: hardware sizing with an honest cost model, Proxmox and Ludus as the substrate, three-zone isolation, and the four-tier reset architecture that decides whether your range gets used daily or becomes a museum. Includes the Range Build Planner.

PDF Excel in 1 bundle

R02 — The Adversary Environment Corpus

What to put in the range and how to curate what you maintain — the GOAD family for Active Directory, Vulhub for per-CVE containers, cloud and IaC targets, organised into five handling tiers by reset cost and risk, with the maintenance treadmill made explicit.

Cyber Range Featured

R03 — The Fresh Vulnerability Pipeline

The flagship: from a KEV/NVD/EUVD identifier to a reproduced environment, a validated detection, and a remediation check — as a repeatable six-stage pipeline rather than a heroic weekend. Written for the post-2026 reality where four in five CVEs arrive un-enriched. Includes the CVE Repro Template.

PDF ZIP in 1 bundle

$199.00 View →

R04 — The Defend Side

Instrument the range so a detection test actually means something. Log fidelity first, then Wazuh or Elastic with Velociraptor, Suricata and Zeek, driven by Atomic Red Team and Caldera, with detections written as portable Sigma and validated in CI against the corpus.

R05 — Exercise Design & Purple Team Operations

The capstone: turn the validated stack into scored exercises. Time-to-detect and time-to-contain as the primary metrics, ATT&CK coverage mapping, evidence capture and after-action reporting — bridging the tabletop most teams already run into a live run against instrumented infrastructure.

Range Safety & Authorization Pack

The governance layer that lets the range ship — nine fill-and-sign documents so a security leader can stand up a defensible posture in an afternoon rather than discovering the need for it during an incident. Word to edit, PDF to sign.

Word PDF in 1 bundle

Range Build Planner

The live calculator that catches the wrong hardware call before you buy it — seven working tabs and 86 formulas covering purpose weighting, VM inventory with linked-clone math, host fit analysis, a three-year on-prem-vs-cloud cost model with payback, VLAN plan and reset-time log.

Excel in 1 bundle

$49.00 View →

Range Scenario Card Deck

Printable attack-and-defend scenario cards for running range exercises away from a screen — a ready deck of scenarios you can deal onto a table for a tabletop, a training session, or the warm-up before a live purple-team run.

$29.00 View →

PDF Excel Word ZIP 8 products

Complete Range Line

All five volumes plus both build tools and the Range Runbook Library — the whole facility, from isolation architecture to scored purple-team exercises. 24% off buying separately.

$632.00 View →

Pillar 04 Companion — The Open SOC Reference Architecture

The open-source SOC diagram everyone shares has two commercial products on it. This is the corrected version — six planes, 24 components with verified licenses and named replacements, an AI analyst plane with a defensible autonomy ceiling, and three sized builds with honest hour counts.

PDF in 4 bundles

Security Program Pillars

Pillar 04 Companion — SOC in a Box

The Open SOC reference architecture landed on one machine you can hold — a coreboot NUC with the Management Engine disabled, Nitrokey as the root of trust, three disks mapped to three storage tiers, and a 14-test acceptance suite you run before pointing a single agent at it.

Cyber Insurance Featured

Cyber Insurance Workbook

Everything you need to prepare, apply for, and manage cyber insurance — 8 tabs, 167 live formulas, built for security teams who need to hold their own with brokers and underwriters.

Excel Word in 3 bundles

Post-Quantum Migration Kit

The board will ask about quantum. Have the inventory and the plan — one row per cryptographic use, a Mosca check that tells you whether you are already late, four migration waves, a vendor questionnaire with hard stops, and the deadline calendar behind all of it.

ZIP 3 licences in 3 bundles

Synthetic Media & Deepfake Defense Kit

Thirty seconds of audio clones a voice. Defend your executives, staff and brand from cloned voices and fake video — and produce AI-generated content with the consent, disclosure and provenance every platform and regime now requires. Two halves: Defend and Produce.

Agentic AI Security Program Kit

Your AI agents can act — book, email, deploy, pay. Inventory them, fence them, test them, log them: 27 fields per agent, a blast-radius tier, a guardrail standard with per-action gates, OWASP ASI threat modelling with 18 test cases, and the playbook for the hour after one goes wrong.

Excel Word 2 licences in 4 bundles

Shadow AI Inventory & Risk Scoring Workbook

Discover, inventory, and score every unapproved AI tool in your environment — 10 tabs, 589 formulas, pre-seeded with 15 real-world shadow AI tools and a defensible 10-factor risk model.

vCISO Client-in-a-Box

27 tabs, 1,565 formulas — a complete client management system for solo vCISOs and small teams. NIST CSF 2.0 assessments, risk registers, roadmaps, and a portfolio dashboard for 20 clients. Includes the 584-paragraph Practitioner User Guide.

Excel Word 3 licences in 2 bundles

M&A Cyber Diligence Workbook

The active cyber diligence workbook for M&A deal teams — auto-generated deal recommendations, cost modeling, and deal-term mechanism mapping across a 10-day sprint framework.

VC Cyber Diligence Workbook

Stage-aware VC diligence for Pre-Seed through Series B+ — founder assessment, investment thesis scoring, pipeline tracking, cap table analysis, and IC memo output. 16 tabs built around the question: what would have to go right for 10x?

Tabletop Exercise Pack

The IR exercise programme management system for a security team — 10 research-calibrated scenarios, 13 tabs of maturity scorecard, gap tracker and executive dashboard, and a 687-paragraph facilitator guide. For maturing your own IR practice over time; if you need a single ninety-minute session for a room of executives, the Executive Tabletop Exercise Kit is that.

Excel Word 3 licences in 5 bundles

2026 CISO Budget Workbook

Input five values on the Assumptions tab — revenue, IT budget, headcount, industry, maturity — and the entire workbook calculates itself. Three budget-sizing methods, 50+ line items, CRQ for boards, and board talking points with your actual numbers.

Incident Response

2026 Ransomware Readiness Workbook

18 tabs of operational crisis preparedness — 80-control readiness assessment, 8 pre-built IR playbook cards with DO NOT lists, ransom decision framework with OFAC gate, and regulatory matrix covering all 2026 mandates.

Excel Word 3 licences in 7 bundles

SOC 2 Readiness Accelerator

20-tab SOC 2 program covering assessment through Type 2 audit — 100+ controls, 35 required policies, 7 pre-populated operational logs, and an executive dashboard with three auto-calculated readiness metrics.

Excel Word 3 licences in 5 bundles

HIPAA Readiness Accelerator

The 23-tab HIPAA programme workbook — Privacy Rule, Breach Notification and all three safeguard sets in one place, plus IoMT, telemedicine, AI clinical decision support, biometric and pediatric registers, BAA tracking, evidence, training and an executive dashboard. Largest product in the catalogue.

Enterprise Questionnaire Response Kit

14-tab operational efficiency toolkit for responding to security questionnaires — 400+ pre-written answers mapped to CAIQ v4, SIG, VSA, and HECVAT, AI governance supplements, deal pipeline tracking, and a trust portal content planner.

ISO 27001:2022 Readiness Accelerator

20-tab ISMS implementation workbook for ISO 27001:2022 — all 93 Annex A controls across 4 themes, 11 new 2022 controls, Clauses 4–10 ISMS framework, transition gap analysis from 2013, and policy library.

Excel Word 3 licences in 2 bundles

PCI DSS v4.0.1 Readiness Accelerator

12-tab PCI DSS v4.0.1 workbook — all 12 requirement domains, SAQ type selector, 51 future-dated requirements tracker, e-commerce script security controls, and QSA-ready evidence register. Built for the March 2025 mandatory transition.

Excel Word ZIP 3 licences in 3 bundles

CMMC 2.0 Readiness Accelerator

12-tab CMMC 2.0 workbook — all 110 NIST 800-171 practices with DoD SPRS weights, auto-calculated SPRS score, Level determination decision tree, SSP builder, POA&M tracker, and C3PAO readiness checklist. Phase 2 is suspended; the self-assessment, the SPRS score and DFARS 7012 are not.

DORA + NIS2 EU Compliance Workbook

14-tab EU regulatory compliance workbook covering all 5 DORA pillars, NIS2 Article 21 measures, dual framework applicability decision tree, penalty calculator (2% DORA / €10M NIS2), and cross-framework mapping across 17 control domains.

Excel PowerPoint Word 3 licences in 5 bundles

CISO Board Reporting Pack

Everything you need to brief the board on cybersecurity — editable Excel metrics workbook, 25-slide PowerPoint deck template, and a user guide covering what boards actually want to hear and how to answer the questions you will get.

Excel Word 3 licences in 7 bundles

NIST CSF 2.0 Self-Assessment Workbook

14-tab NIST CSF 2.0 workbook — all 106 Subcategories with verbatim NIST.CSWP.29 outcome statements, Current/Target tier dropdowns, Organizational Profile Generator, heatmap, gap analysis pre-seeded with 12 high-gap 2026 scenarios, and crosswalks to SP 800-53r5, SP 800-171r3, CIS Controls v8.1, and ISO 27001:2022.

Excel Word 3 licences in 2 bundles

GDPR & DPIA Compliance Workbook

20-tab GDPR compliance workbook — Controller ROPA, Processor ROPA, DSR log with 30-day SLA tracking, 72-hour breach deadline calculator, TIA template, DPF certification tracker, and DPIA template with WP29 9-factor trigger test. Updated for April 2026 research baseline.

2026 US Privacy Program Workbook

17-tab US state privacy compliance workbook covering the 20-state wave — CCPA/CPRA, MODPA, VCDPA, CPA, and 16 more — with auto-generated obligation matrix, DSR tracker, consent management log, ADMT register, and enforcement reference.

CCPA Cybersecurity Audit & Privacy Risk Assessment Kit

The assessment kit and audit workplan California actually asks for — applicability calculator, per-activity risk assessment template and register, ADMT addendum, the 18-component audit workplan with auditor-independence checklist, report skeleton, and the §7124 certification cover. Assessments for existing processing are due 31 December 2027.

ZIP 3 licences in 4 bundles

EU AI Act Compliance Clock

Transparency is live; high-risk is December 2027. Classify every AI system you provide or deploy, close the Article 50 duties that already apply, and run the deployer and provider programmes to the date that binds each one — with the US state overlay alongside.

AI Program Complete

Classify your AI against the law, fence the agents that can act on your estate, and hold the risk somewhere an auditor can read it. The three halves of an AI programme that most organisations buy one incident at a time. 19% off buying separately.

PDF ZIP 3 products

From $518.00 View →

Synthetic Media & Agents

The agents that can publish, and the disclosure regime that lands the moment they do. Fence what the agent may post, then discharge the labelling, provenance and consent obligations that attach to it. 14% off buying separately.

From $211.00 View →

Disclosure & Consent Pack

What you have to tell people about the automated and synthetic systems you point at them — the ADMT pre-use notice and opt-out California requires, and the labels, provenance and likeness releases synthetic media requires. One notice-and-consent practice, two regimes. 15% off buying separately.

Article 50, Both Sides

The duty and the discharge. The AI Act tells you disclosure applies; the synthetic-media kit is how you actually do it — caption, platform label, C2PA credentials, consent and a register — across every regime that asks. 15% off buying separately.

Excel Word ZIP 2 products

EU Regulatory Estate

The two EU regimes that reach almost every regulated business at once — operational resilience and third-party risk under DORA and NIS2, and the AI Act obligations arriving on top of them. 14% off buying separately.

EU AI Act + Risk Register Pack

The clock that tells you which date binds each AI system, and the register that holds them once they are scored. Classify against the Act, then keep the answer somewhere an auditor can read it. 15% off buying separately.

PCI DSS for Healthcare Kit

Healthcare takes card payments too — and PCI is assessed separately from HIPAA by people who do not care that you have a Security Rule programme. One control set for both, the SAQ decision that vendors keep getting wrong, and the dual clock when an incident touches PHI and cardholder data at once.

HIPAA Security Rule 2027 Readiness Kit

The 2027 Security Rule is already written. "Addressable" disappears — MFA, encryption, an asset inventory with a network map, 72-hour restoration, annual audits, six-monthly scans and annual business-associate verification all become required. Get ahead of it while OCR keeps enforcing the current rule.

UK Cyber Security & Resilience Act Kit

MSPs are in scope, and it is twenty-four hours to notify. The CAF-aligned kit for the UK Bill — scope test, CAF v4.0 crosswalk, 24/72-hour notice templates, the MSP customer-notice duty, designated-supplier readiness, and the map to NIS2 and DORA.

ZIP 2 licences in 3 bundles

CIRCIA 72/24 Reporting Readiness Pack

Know in ten minutes whether CIRCIA covers you, decide in one call whether an incident is reportable, and have the report drafted inside the first day — the two-gate covered-entity worksheet, the four-prong decision tree, the 72/24 clock runbook, and a report pre-fill with a JSON Schema twin for your SOAR. Built on the NPRM, with a free update when the final rule publishes.

CRA Conformity Package

Full CRA applies 11 December 2027 — the technical file, the SBOM and the CE declaration, ready to fill. Classify by core function, meet Annex I, choose the route, build the Annex VII file, ship the SBOM, declare the support period, sign the Annex V declaration.

CRA 24-Hour Reporting Clock

The clock starts 11 September 2026. The runbook for the 24 hours after you learn a vulnerability in your product is being exploited — the actively-exploited evidence test, the 24/72/14-day sequencer, field-complete ENISA notification drafts, the PSIRT/CSIRT RACI, and a CVD policy you can publish as-is.

ZIP in 3 bundles

CISO 90-Day Onboarding Workbook

The 12-tab assessment workbook for a CISO joining a company — stakeholder mapping, a deep program gap assessment against the frameworks that organization cares about, quick-win tracker, board briefing builder, and the 30/60/90-day milestone framework. For the employed CISO who needs the analysis in depth; if you are arriving fractionally, on an interim basis, or into a seat nobody has held before, start with The First 100 Days Kit.

Incident Response Runbook Library

18 runbooks × 3 formats (54 files) — complete IR runbook library covering every major 2026 threat scenario, from ransomware multi-extortion to vishing to Magecart. ZIP delivery with Word, PDF, and Markdown versions of every runbook.

Cyber Insurance

Cyber Insurance Readiness Checklist

A concise checklist covering the controls underwriters check before quoting — MFA, backups, endpoint, email security, and IR — with a quick self-scoring mechanism to spot coverage red flags before you talk to a broker.

Compliance

SOC 2 Readiness Checklist (Type I & II)

The key controls, evidence items, and policy gaps auditors check at every SOC 2 engagement — organized by Trust Service Criteria with a pre-audit readiness rating.

Compliance

HIPAA Compliance Checklist 2026

Updated for the 2026 Security Rule Final Rule — covers all 12 new mandatory requirements plus the core Administrative, Physical, and Technical safeguards in a single actionable checklist.

Incident Response

Ransomware Preparation Checklist

The pre-incident checklist for ransomware preparedness — backup validation, identity hardening, IR contacts, communication templates, and the ransom decision questions to answer before an attack hits.

College Cyber Privacy Guide

A practical privacy and security guide for college students — accounts, devices, campus Wi-Fi, social media, AI tools, and identity protection covered in plain language.

Pre-Teen Cyber Privacy Checklist

A simple online safety and privacy checklist for pre-teens (ages 9–12) and the parents reviewing it with them — covering apps, gaming, passwords, and what to share online.

Teen Cyber Privacy Playbook

A comprehensive digital privacy and online safety guide for teenagers — social media, gaming, AI tools, relationships, identity protection, and what your data is actually worth.

Smart Home & IoT Security Checklist

Device hardening and network segmentation checklist for smart home setups — routers, cameras, smart speakers, thermostats, and everything else on your home network.

Social Media Privacy & AI Workbook

Platform-by-platform privacy settings guide for major social networks plus an AI tool awareness section — what each platform does with your data and how to tighten it.

Password Manager Migration Workbook

A step-by-step guide to evaluating, selecting, and migrating to a password manager — comparison framework, migration checklist, and post-migration hardening steps.

Digital Legacy Workbook

Document your digital accounts, assets, subscriptions, and access wishes for estate planning — so your family can act quickly and nothing is permanently lost.

Security Awareness Training Deck

25-slide editable PowerPoint security awareness training deck — phishing, passwords, social engineering, AI threats, and incident reporting. Compatible with Google Slides, Keynote, and LibreOffice.

PowerPoint

$39.99 View →

Home Network Security Audit Checklist

2-page printable audit for your home Wi-Fi — router hardening, WPA3, network segmentation (Main / Guest / IoT), DNS filtering, IoT device inventory, and a 90-day re-audit cycle. The average home has 22+ connected devices; most routers ship insecure.

$4.99 View →

Password Manager Migration Workbook

4-page printable workbook to inventory, prioritize, and migrate all your accounts to a password manager — 30+ account types pre-listed in 4 priority tiers, 2FA migration tracker, lockout prevention checklist. Works with Bitwarden, 1Password, Proton Pass, and more.

$4.99 View →

Family Online Safety Contract

4-page two-way family internet agreement updated for 2026 — AI chatbots, deepfakes, sextortion, and gaming strangers addressed in age-appropriate language. Parents promise things too (the two-column design is why teens actually sign it). Ages 8-17.

$4.99 View →

Personal Cyber Insurance Checklist

2-page before-you-buy checklist for personal cyber insurance — 10 coverage questions, 8 fine-print red flags, and a side-by-side quote comparison worksheet. Includes the #1 most-excluded coverage type that most buyers never think to ask about.

$6.50 View →

Family Incident Response Runbook

Fillable 4-page playbook for when an account gets hacked — pre-fill family contacts and fraud hotlines now, then follow the First 60 Minutes / Next 24 Hours / Cleanup Week checklists when it happens. 24 fillable fields + 30 priority-ordered checkboxes.

$9.00 View →

Cybersecurity Career Planner & Study Tracker 2026

8-page fillable career planner covering 16 certifications — Cert Decision Framework (8 scenarios), 2026 cost reference (Sec+ $404, CISSP $749, OSCP $1,649+), Domain Mastery Tracker, Practice Exam Score Log with "Am I Ready?" rubric, and weekly study tracker. Updated for SY0-701 and April 2026 CISSP CBK.

$9.99 View →

Family Cyber Drill — Tabletop Pack

8-page printable with 3 dinner-table scenarios (smishing, AI voice cloning, gaming scam) plus a fillable Family Safe Word Card — the #1 defense against AI voice clone scams. Each scenario is 20 minutes with discussion questions tuned for ages 8-17.

$11.99 View →

Digital Estate Planning Workbook

7-page printable for your executor — accounts, passwords (via manager succession), crypto wallet guidance, platform legacy settings (Apple Legacy Contact, Google Inactive Account Manager, Facebook Memorialization), and RUFADAA authorization language. Passwords never go in a will; this is what goes instead.

Identity Theft Recovery Binder

Fillable 8-page binder built around FCRA §605B — the 4-business-day bureau block most identity theft kits skip. Includes a §605B dispute letter, §609(e) creditor records demand, phone scripts for banks/bureaus/debt collectors, Master Dispute Tracker, and 2026-verified bureau addresses. 21 fillable fields.

Small Business Cyber Starter Kit

13-page fillable kit for solo founders and 2-25 person businesses — 2026 cyber insurance pre-fill worksheet (19 carrier questions), 7 starter policies (AUP, Password, Data Handling, Privacy Notice, IR Plan, Onboarding/Offboarding, Vendor Risk), and a 90-day implementation roadmap. 67 text fields + 66 checkboxes.

$24.99 View →

Senior Cyber Safety Workbook

The dignified, 2026-current guide to elder cyber fraud — romance scam 4-phase playbook, AI voice cloning defense, government impersonation field guide, and fillable Family Safe Word card. For adult children buying for aging parents.

$9.99 View →

WFH / Remote Worker Security Kit

Four-page fillable PDF for remote employees and freelancers — home office audit, 2026 VPN comparison, AI tool risk policy, signed BYOD mini-policy, and monthly self-audit grid. Updated for post-quantum VPNs and co-working space security.

$7.99 View →

Family Cyber Safety Pack

Everything your family needs to be cyber-safe in 2026 — Home Network Audit, Family Online Safety Contract (AI/deepfake-aware), 3-scenario Cyber Drill with fillable Safe Word card, and IR Runbook for account compromise. 16% off individual.

ZIP 4 products

$25.00 View →

Business & Financial Cyber Pack

Lock down your accounts, protect your money, recover from identity theft, and pass your cyber insurance application — Password Manager Workbook, Cyber Insurance Checklist, Identity Theft Recovery Binder (FCRA §605B), and SMB Starter Kit. 19% off individual.

ZIP 4 products

$45.00 View →

Elder Fraud Recovery Pack

Built for the worst week — Senior Cyber Safety Workbook, Identity Theft Recovery Binder (FCRA §605B), and Family IR Runbook, plus a 2-page triage guide that tells you which workbook to open first based on what you discovered. 18% off individual.

$31.00 View →

Complete Cyber Library

The entire consumer catalog — 10 products covering family safety, financial protection, career planning, and small business documentation. 54 pages, scenario-based bundle index showing what to open first for any situation. 25% off individual.

ZIP 10 products

$84.00 View →

Compliance Trifecta Bundle

SOC 2 + HIPAA + ISO 27001:2022 readiness in one bundle — the three certifications every enterprise buyer asks for. 19% off list.

From $1198.00 View →

Compliance Big 5 Bundle

SOC 2 + HIPAA + ISO 27001 + PCI DSS + CMMC 2.0 — every major compliance framework an auditor or regulator will ask about. 25% off list.

Excel Word 5 products

From $1871.00 View →

Federal Contractor Pack

CMMC 2.0 + NIST CSF 2.0 + PCI DSS for defense and federal contractors — built for DoD, GSA, and agency RFP responses. 19% off list.

From $918.00 View →

Healthcare Security Pack

HIPAA + SOC 2 + Ransomware Readiness for healthcare SaaS and digital health. Healthcare ransomware is 31% of all attacks. 19% off list.

From $1038.00 View →

Global SaaS Compliance Pack

SOC 2 + ISO 27001 + GDPR/DPIA for B2B SaaS going international — US enterprise + EU data subjects in one bundle. 19% off list.

From $1198.00 View →

Privacy Dual Coverage Bundle

2026 US state privacy program + EU GDPR/DPIA — every SaaS selling to US and EU customers needs both. 14% off list.

Excel Word 2 products

From $678.00 View →

New CISO Starter Pack

CISO 90-Day Onboarding + NIST CSF 2.0 Assessment + CISO Budget Workbook + Board Reporting Pack — your Day-90 board meeting in a bundle. 19% off list.

Excel Word 4 products

From $837.00 View →

Excel Word PowerPoint 3 products

Board Preparation Bundle

CISO Budget Workbook + CISO Board Reporting Pack + NIST CSF 2.0 — everything a CISO needs for the quarterly board cycle. 19% off list.

From $598.00 View →

Excel Word PowerPoint 5 products

CISO Executive Suite

CISO 90-Day Onboarding + Budget + Board Pack + NIST CSF 2.0 + Tabletop Exercise Pack — the most complete CISO toolkit in the catalog. 25% off list.

From $896.00 View →

Excel Word PowerPoint 3 products

vCISO Starter Pack

vCISO Client-in-a-Box + NIST CSF 2.0 Assessment + CISO Board Reporting Pack — drop-in kit for fractional CISOs running concurrent clients. 19% off list.

From $758.00 View →

Excel Word PowerPoint 6 products

vCISO Complete Practice

vCISO Client-in-a-Box + CISO 90-Day Onboarding + NIST CSF 2.0 + Budget + SOC 2 + Board Pack — complete vCISO practice toolkit. 24% off list.

From $1533.00 View →

Risk & Readiness Pack

Ransomware Readiness + Tabletop Exercise Pack + Cyber Insurance Workbook + Shadow AI Inventory — show underwriters and your CEO your program maturity. 19% off list.

Excel Word 4 products

From $837.00 View →

Deal-Cycle Pack

M&A Cyber Diligence + VC Startup Due Diligence + Enterprise Questionnaire Response Kit — for deal advisors, corp dev, and VCs running cyber DD. 19% off list.

ZIP 2 licences in 4 bundles

From $518.00 View →

Cyber Insurance Featured

Cyber Insurance Application Readiness Kit

Answer the cyber insurance questionnaire honestly and still get approved — a 37-control self-assessment that sorts your fixes the way underwriters actually score them, an evidence binder skeleton, broker email templates, and an answer bank with truthful wording for the partial controls that get claims denied.

ZIP 3 licences in 3 bundles

Director's Cyber Oversight Kit

What a director should ask, and what a good answer looks like. Twelve questions with the good-answer and weak-answer patterns, the evidence log that proves oversight happened, and the charter, calendar and self-assessment regulators, plaintiffs and insurers now expect. No technical background assumed.

Critical Infrastructure Regime Kit

One baseline, every regulator. Power, pipelines, water, rail and nuclear — which regimes bind each asset, what changed in 2026 and what lands by 2030, twenty control families mapped across all of them, and the incident clocks that run in hours.

OT Security Program Kit for the Plant

Segment the plant, fence vendor remote access, survive the outage. For the plant with a flat network, a vendor VPN, SCADA on an ageing hypervisor and a safety PLC on the same VLAN — the IEC 62443 zones-and-conduits programme, sequenced for a plant that cannot stop.

M365 Security Posture Kit

Assess what a compromised Microsoft 365 account can actually reach, and close the gaps, before an insurer or auditor asks. Licence-tier-aware blast-radius scoring, a CIS-aligned hardening baseline, and one identity review covering Conditional Access, Entra ID Protection and PIM.

M365 Posture + Response

The M365 Security Posture Kit plus the IR Runbook Library. Know what a compromised account can reach, and have the runbook ready when one is. 15% off buying separately.

Google Workspace Security Posture Kit

Assess what a compromised Google Workspace account can actually reach, scored against your edition, and close the gaps before an insurer or auditor asks. The Workspace counterpart to the M365 kit, built around the two blind spots a login audit cannot see: a granted OAuth token, and shared-drive sharing that looks like a leak.

Okta / Identity Provider Security Posture Kit

What a compromised Okta account or a leaked API token can reach — not one suite's mailbox and files, but every downstream application Okta fronts. The identity-provider layer of the Cloud Identity Posture set, with API tokens and OAuth scope creep weighted the way a trust root deserves.

Salesforce Security Posture Kit

What a misconfigured Salesforce org actually exposes — to a compromised user, a malicious OAuth grant, or an anonymous visitor who never logged in. The 2025–2026 breach wave did not start with a compromised account, and this kit scores the two entry points that did it above the one the other posture kits share.

GitHub / GitLab Security Posture Kit

What a leaked CI/CD secret, a poisoned Action tag or an overprivileged pipeline token can actually reach, and whether you would know before your published packages did. The 2025–2026 supply-chain incidents needed no compromised identity at all, and this kit scores the workflow mechanics that let them through.

AI-Built / Vibe-Coded App Security Posture Kit

Your AI builder shipped fast. Did it also ship a public database, a leaked API key, and a coding agent that will run whatever it reads next? A stack assessment, not a platform one — builder, database, hosting, AI coding tool and MCP, embedded agent — for the founder who needs to know what is exposed before it becomes an incident.

Vibe-Coded App + Pipeline

The AI-Built / Vibe-Coded App Security Posture Kit plus the GitHub / GitLab Security Posture Kit. The app stack and the pipeline that ships it, assessed with one method. 15% off buying separately.

Android Application Security Posture Kit

What a decompiled APK, a rooted device or an intercepted connection can actually reach, scored against OWASP MASVS v2.0 rather than a generic checklist. Hardcoded secrets pass Play Protect; only a review catches them. The Android half of a mobile pair whose scores are directly comparable with the iOS kit.

iOS Application Security Posture Kit

A locked-down platform does not mean a locked-down app. What a jailbroken device, a decompiled IPA or an intercepted connection can actually reach, scored against OWASP MASVS v2.0. App Store review does not catch a hardcoded key either. The iOS half of a mobile pair whose scores are directly comparable with the Android kit.

Mobile App Security Posture Bundle

The Android and iOS Application Security Posture Kits together. One MASVS v2.0 backbone, one set of scoring bands, each platform's own controls — so a product that ships on both gets directly comparable numbers. 15% off buying separately.

Docker & Kubernetes Security Posture Kit

An exposed dashboard with no password, a pod's auto-mounted token, a wildcard RBAC binding, an etcd port on the internet: one attack chain from container to cloud account. Docker and Kubernetes assessed together in a single pass, scored against both CIS benchmarks, for the platform team that inherited the cluster.

ZIP 3 licences

AWS Cloud Infrastructure Posture Kit

Three in four scanned AWS accounts have something publicly exposed right now. What one exposed S3 bucket, one over-permissioned IAM role or one leaked access key can actually reach — scored against the CIS AWS Foundations Benchmark v3.0.0. First of a three-cloud trilogy on one scoring scale.

Azure Cloud Infrastructure Posture Kit

One compromised identity reached Key Vault, Storage and Virtual Machines in minutes, in a chain Microsoft's own security team documented in 2026. Azure's dominant risk is identity, not raw exposure, and this kit is shaped for it: Key Vault and Storage weighted highest, both the CIS Azure and Microsoft Cloud Security Benchmarks cited, and no re-run of the Entra ID review M365-01 already did. Second of the three-cloud trilogy on one scoring scale.

Google Cloud Platform Posture Kit

Google Cloud has the best network-exposure numbers of the three clouds by a wide margin, and almost exactly the same identity problem as the other two. This kit is about the gap between those facts: 8% exposed, 87% with weak IAM. Scored against CIS GCP Foundation Benchmark v4.0.0, with an AI/ML workload surface the other two cloud kits do not have. Third of the trilogy on one scoring scale.

Cloud Infrastructure Posture Bundle

The AWS, Azure and Google Cloud Infrastructure Posture Kits together. Three clouds whose top misconfigurations barely overlap, assessed with the same five modules on one scoring scale, so a multi-cloud estate gets three directly comparable numbers. 20% off buying separately.

From $478.00 View →

Enterprise Data Warehouse & AI Pipeline Security Posture Kit

Every table in your warehouse was access-controlled for the analyst who queries it by hand. None of that was written for a nightly retraining job, a RAG layer or a write-back agent. One assessment across Snowflake, Databricks, BigQuery or Redshift and the AI layered on top — with two blast-radius surfaces no other kit has: what the RAG layer can reach, and who can rewrite what the AI tells every employee.

ZIP 3 licences

Cloud Identity Posture Bundle

The M365, Google Workspace, Okta, Salesforce and GitHub / GitLab security posture kits together, for the vCISO or MSP whose clients run any mix of them. One mental model, five platforms: the front door, both suites, the CRM and the pipeline. 25% off buying separately.

ZIP 5 products

From $746.00 View →

Data Center Assessment Kit

Where your data physically lives — at rest, in transit and in backup — and what sits next to it. One data centre and colocation assessment across colo, cloud regions, hosted private, edge and air-gapped estates, merging EN 50600, SOC 2 and ISO 27001 with the residency regimes and the 2026 tenancy risks.

ZIP 3 licences in 5 bundles

MSP & MSSP Assessment Kit

Your MSP is your administrative plane. Assess what they hold, how they reach you, what they can evidence, what the contract says and whether you could leave — with a scenario that proves you can act the night they are breached.

Vendor Risk Operations Kit

The programme is designed — this is how you run it, vendor by vendor, and what you hand the examiner. The dossier, a quarterly scorecard whose rating has consequences, an annual review that ends in a decision, the incident playbook, a tested exit plan, an AI overlay with hard stops, and a Register of Information builder with ten quality checks aimed at the failures supervisors actually flag.

TPRM Program Kit

Tier your vendors in an afternoon, then run the programme — a seven-factor tiering model everything else computes from, a 150-question bank across 15 domains (with an AI-vendor domain) mapped to CSF 2.0 / ISO 27001 / SOC 2, 20 contract clauses with a fallback ladder, an ERR-01-compatible risk register, monitoring cadence, and fourth-party concentration scoring.

ZIP 2 licences in 4 bundles

I've Been Breached — The First 72 Hours Command Kit

It's 6 a.m. and everything is encrypted. This is what you do, and what you don't — a printable Hour-Zero card with the call order (insurer before any vendor, because off-panel forensics can void coverage), a workbook computing 25 notification clocks from your discovery time, the eight-gate ransom decision, and eleven communications templates.

Executive Tabletop Exercise Kit

Eight board-ready scenarios, ninety minutes each — 64 injects that each name the decision they force and the question to ask the room, a decision log that pre-fills and scores itself on time-to-decide, and an after-action report carrying the regulatory evidence statement for NYDFS 500.16(d), DORA Art. 11 and NIS2 Art. 20. A billable engagement in a box.

Security Metrics & KPI Library

Stop reporting patch counts. 86 defined metrics with formulas, source systems, starting targets and an anti-gaming note each, mapped to CSF 2.0 / ISO 27001 / CIS v8 / SOC 2 and to the regimes that pull them — plus the twelve to start with at any maturity, a protection-level sheet that turns targets into priced decisions the board owns, and a dashboard that rolls one data-entry sheet into board, exec and ops views.

The First 100 Days Kit

New seat, empty seat, or fractional seat — the hundred days that decide your tenure. Four entry modes auto-filter a 34-task plan, a 14-domain baseline including AI governance and personal liability, a budget builder in percent of revenue and IT, and the role charter and fractional engagement letter with a no-certification-without-verification clause.

NYDFS Part 500 Compliance Kit

Certification is April 15 — this decides whether you can sign it. A 19-section crosswalk whose summary produces the Certification-vs-Acknowledgment recommendation, all sixteen 500.3 policy areas with board-approval tracking, both filing forms pre-drafted with a two-signatory review record, the 72-hour and 24-hour notice templates, and the board report mapped to the six 500.4(c) topics.

SEC 8-K Item 1.05 Materiality Workbook

Four business days — have the materiality process before you need it. 12-factor scoring with Known/Unknown flags, a timestamped clock log that evidences "without unreasonable delay", computed 8-K and 8-K/A deadlines, and the language-to-avoid table for the wording that enforcement has actually punished.

Sell-Side Cyber Exit Readiness Kit

Look clean before they look. Run the buyer's cyber diligence on yourself 6–18 months out: a pre-mortem that scores the company today and at launch and sets escrow avoided against programme cost, the 41-artifact data room a buyer will ask for, a funded remediation programme, and a disclosure builder that turns every finding into fix, disclose or price.

M&A Cyber Due Diligence Kit

Find the breach before you buy it — a 3–4 week diligence method for mid-market add-ons and roll-ups. 46 phased requests, four interview tracks, and a red-flag model with anchored scoring that outputs cost-to-cure in basis points of EV and a proposed escrow multiple, with each SPA lever mapped back to the finding that justifies it.

Both Sides of the Deal

The M&A Cyber Due Diligence Kit + the Sell-Side Cyber Exit Readiness Kit — the same eight-domain method run as a buyer and as a seller. The disclosure schedules are structured around the buyer reps, so the two kits answer each other. 15% off buying them separately.

From $508.00 View →

ZIP Excel Word 2 products

M&A Diligence Complete

The M&A Cyber Due Diligence Kit + the M&A Cyber Diligence Workbook — the engagement method and the deal model together. Run the diligence with one, price the findings with the other. 15% off buying them separately.

Critical Infrastructure Complete

The plant, the regulators above it, the federal reporting duty, the drill and the board layer — five products covering an operator end to end, from the vendor VPN that should already be off to the evidence log a director keeps. 25% off buying separately.

ZIP 5 products

From $1046.00 View →

Utility Board Package

The regime calendar an operator is judged against, and the twelve questions a director should be asking about it. What management owes the regulator, and what the board records having asked. 15% off buying separately.

Excel Word ZIP 3 products

Defense Supplier Pack

The CMMC self-assessment and SPRS score you are certifying to, the provider holding your admin rights, and the federal incident clock underneath both. What a DIB contractor is actually accountable for while Phase 2 is suspended. 19% off buying separately.

From $598.00 View →

Excel Word ZIP 3 products

Healthcare Now & Next

The whole HIPAA programme, the Security Rule change coming in 2027, and the payment side neither covers. Three products across the compliance a healthcare organisation is actually assessed on. 19% off buying separately.

From $718.00 View →

Healthcare Provider Risk

The billing company holds your cardholder data and your PHI, and the MSP holds the admin rights over both. Assess the payment side and the provider that runs it. 15% off buying separately.

Board Package

What the board asks, the numbers behind the answers, and the exercise it should watch. The director layer plus the two management tools a board actually sees output from. 19% off buying separately.

From $278.00 View →

Infrastructure Providers Pack

The two parties that run your estate for you — the MSP with delegated admin, and the facility where the data physically sits. Same assessment discipline applied to both. 15% off buying separately.

From $168.00 View →

Resilience Estate Pack

Where the estate sits, what you do the morning it is encrypted, and what the insurer will ask before either. Assess the facility, rehearse the incident, evidence the controls. 19% off buying separately.

From $478.00 View →

Both Sides of the MSP

The duties a UK managed service provider owes, and the assessment its customers are about to run on it. Read your own regime and your customers’ checklist in one purchase. 14% off buying separately.

Provider Risk Pack

The vendor programme, and a deep assessment of the vendor that holds your admin rights. Run every supplier properly, then run your MSP properly — because one row in a register does not cover the party with delegated admin on your tenant. 14% off buying separately.

From $211.00 View →

Vendor Risk Complete

The TPRM Program Kit + the Vendor Risk Operations Kit — design the programme, then actually run it. Tiering, questionnaires and clauses on one side; dossiers, scorecards, exit tests and the Register of Information on the other.

New CISO Starter

The First 100 Days Kit + the Cyber Insurance Application Readiness Kit + the First 72 Hours Command Kit — the plan, the fastest honest baseline, and the crisis card. The same first month. 19% off buying them separately.

From $438.00 View →

The Regime Clocks

Four regulators, four clocks, one incident — the First 72 Hours Command Kit plus the CIRCIA, SEC 8-K and NYDFS Part 500 kits. The problem is sequencing: the confidential federal report precedes the public 8-K, and only the SEC clock waits for a materiality determination. 19% off buying them separately.

ZIP 4 products

From $557.00 View →

Before & After

The Cyber Insurance Application Readiness Kit + the First 72 Hours Command Kit — qualify for the cover, then know not to void it at 6 a.m. 15% off buying them separately.

ZIP Excel Word 2 products

Cyber Insurance Complete

The Application Readiness Kit + the Cyber Insurance Workbook — get bound, then stay insurable. The kit runs the application and builds the evidence binder; the workbook is the standing programme between renewals. 15% off buying them separately.

$253.00 View →

CRA Manufacturer Set

The whole CRA line in one purchase — scope the obligation, run the Article 14 clock that is already live, and produce the technical file, SBOM and CE declaration for December 2027. 19% off buying the three separately.

PDF ZIP 3 products

$358.00 View →

Product Security Complete

Everything a product vendor owes the EU and the crypto clock in one purchase — the CRA scope test, the Article 14 reporting runbook, the technical file with SBOM and CE declaration, and the post-quantum inventory and migration plan. 19% off buying the four separately.

PDF ZIP 4 products

$517.00 View →

First 100 Days + Quantum

The kit for the job you just took, and the answer to the question the board will ask in your first quarter. 14% off buying them separately.

CRA Governance + Reporting

EU Cyber Resilience Act Workbook + CRA 24-Hour Reporting Clock — the governance half and the operational half of the CRA in one purchase. 14% off buying them separately. For the conformity artefacts as well, see the CRA Manufacturer Set.

$211.00 View →

IR Stack Bundle

Ransomware Readiness Workbook + Tabletop Exercise Pack — prepare, practice, and survive a ransomware incident. 15% off individual pricing.

Excel Word 2 products

From $381.00 View →

vCISO Ops Bundle

vCISO Client-in-a-Box + Shadow AI Inventory + CISO Budget Workbook — the three tools every vCISO needs to run a full program. 19% off individual pricing.