Replace spreadsheets with a self-hosted application. NIST, ISO 27001, CIS, and SOC 2 aligned out of the box.
Purpose-built for small and mid-size IT organizations that need control, visibility, and compliance alignment.
Self-hosted means your risk data never leaves your infrastructure. No vendor lock-in. No SaaS surprises.
Interactive dashboards, heat maps, and risk trend analysis. See what matters in seconds, not spreadsheet edits.
Attach documents, screenshots, and audit logs. Build an immutable evidence trail for compliance reviews.
Every change is logged. Every risk is versioned. Export to Excel for auditor handoff in seconds.
Docker Compose deployment in 5 minutes. Bare metal installer for air-gapped environments. No dependencies.
Local authentication, OAuth2, SAML SSO. Multi-factor authentication support. Role-based access control.
Pre-mapped and ready to go. No manual framework alignment needed.
All six functions mapped: GV, ID, PR, DE, RS, RC. Enterprise-grade risk categorization.
Annex A control alignment. Perfect for ISO certification and audit preparation.
All 18 controls mapped. Prioritize what matters most to your organization.
Control family references for federal compliance and defense contractors.
Trust Services Criteria alignment. Demonstrate control effectiveness to auditors.
Explore our live demo. No signup required.
Browse a pre-loaded risk register with 10 representative IT risks. Explore the dashboard with heat maps and risk distribution charts, dive into individual risks with detailed scoring and evidence attachments, and see how the audit trail captures every change.
Access the demo:
https://risks-demo.jermsmit.com/
No signup required. Browse read-only access to experience the full interface and capabilities.
Launch Demo →From spreadsheet chaos to production-grade risk management.
Docker: Run in production in 5 minutes with Docker Compose. Bare Metal: Self-contained installer for air-gapped environments. Your Infrastructure: No vendor dependencies.
Use our intuitive form to capture risks across 32 fields. Auto-calculate risk scores. Align to frameworks automatically. Attach evidence in seconds.
Real-time dashboards show your risk landscape. Immutable audit trail tracks every change. Export to Excel for compliance reviews. Schedule reviews and track progress.
See the live demo first, then let's discuss how this fits your organization's risk management needs.