SimpleRisk
ATH Infosystems · Software Development
Certification per Microsoft Marketplace.
Evidence tier Source Confirmed · 2 captures on record
What the publisher says
As described on Microsoft Marketplace.
SimpleRisk is a free, open-source risk management platform designed to help organizations identify, assess, prioritize, track, and manage security and operational risks.
Key Features of SimpleRisk:
Show the rest of the publisher’s description (14 more lines)
- Open-source platform for organizational risk management.
- Supports risk identification, assessment, and prioritization.
- Provides risk mitigation and treatment tracking.
- Supports security controls and compliance management.
- Provides centralized visibility into organizational risks.
- Suitable for security, compliance, and enterprise risk management environments.
SimpleRisk Usage:
$ sudo su
$ cd /opt
$ docker start simplerisk
$ docker ps
Access the SimpleRisk interface: http://YOUR_SERVER_IP:8443
Disclaimer:
SimpleRisk is an open-source risk management platform. Users are responsible for configuring access controls, networking, security policies, backups, and data protection before deploying SimpleRisk in a production environment.
Agent build and provenance
See the full provenance
The layer-by-layer build, the evidence behind each claim, the risk basis and the cross-marketplace links are open to any account. Some rows are disclosed, some the source leaves Unknown; a free account shows you which.
Compliance
- FedRAMPConfirmedNot listed90%, registry-checkedNo FedRAMP Marketplace entry matched this vendor's domain, checked 2026-08-27registry recordas observed 2026-08-27
Confirmed means matched to a public authoritative registry. Claimed means the vendor or its listing states it, not yet cross-checked. A framework not shown was not found in any source we hold, which is not evidence against it. Not listed means a scoped registry check found no match for this vendor's domain: a No is a scoped registry check, not a compliance judgment. Confidence bands: 95% domain-verified, 90% registry-checked, 80% self-attested, 70% weak signal. Self-attested items marked “vendor's site” are gathered from the vendor's own website and are not verified by us.
Vendor
External enrichment · as of 2026-08-29
Reconciled on 9/3/2026
Sources
Publisher resources
1 linkLinked repositories
Unknown means this listing does not publish a repository. It is not a statement that the code is closed, and a linked repository is not a claim that the publisher wrote it: the registry computes that relationship privately and does not publish it.
Evidence risk is the share of the build you cannot see before you deploy, not a security rating. Sign in to see the layer-by-layer basis for this band.