Cybersecurity risk assessments that management can act on
CyberRiskGuardian turns a cybersecurity risk assessment into a structured, repeatable process. Every scenario follows one causal chain, every number is shown with its assumptions, and every recommendation ends in a decision for management.
- Threat source
- Weakness
- Affected asset
- Cybersecurity event
- Consequence for the organization
Each scenario follows this chain, from threat source to consequence for the organization.
What it does
- Builds 20 candidate scenarios from your context and selects the 10 most material
- Estimates threat probability, exploitation, expected and maximum damage, resilience and criticality, with a confidence level for each
- Scores technical vulnerabilities with CVSS v4.0 and says when CVSS does not apply
- Compares residual risk with the risk your organization tolerates
- Proposes treatment measures with costs, owners and controls shared across scenarios
- Writes the management report, key risk indicators and a roadmap from 0 to 24 months
- Drafts security policies in French and English (Security Policy Writer)
CyberRiskGuardian is a decision-support tool. Its estimates are analytical hypotheses to validate with your teams; decisions stay with management.
Licences
The Community Edition is free. Paid editions add the full quantitative toolkit, compliance and sector packs, the desktop app, the hosted ontology service and support.
| Community | Educational | Professional | Team | Enterprise | MSSP and partners | |
|---|---|---|---|---|---|---|
| For | Students and non-profit organisations | Colleges, CEGEPs and universities | Independent consultants and analysts | Organizations with up to 10 users | Large and regulated organizations | Providers assessing many clients |
| Price per year (CAD) | Free | Reduced educational price, on quote | From $600 per user | From $4,000 | On quote | On quote |
| Core plugin and methodology | Included | Included | Included | Included | Included | Included |
| Full quantification, CVSS v4.0, sensitivity analysis | Basic | Included | Included | Included | Included | Included |
| Compliance packs (Law 25, NIST CSF 2.0, ISO 27001/27005 and more) | Not included | 2 included | Add-on | 2 included | All included | All included |
| Sector packs | Not included | Higher education | Add-on | 1 included | All included | All included |
| Security Policy Writer | Not included | Included | Add-on | Included | Included | Included |
| Educator Edition (cases, exercises, rubrics) | Student exercises | Included | Not included | Not included | Not included | Not included |
| CyberRiskGuardian Desktop | Free for students and non-profits | Included | Included | Included | Included | Included |
| Hosted CRGO ontology service | Local server only | Fair use | Included | Included | Higher limits | Per-client metering |
| Installation and customization | Not included | Included | Not included | Optional | Included | Onboarding |
| Support | GitHub issues | Email, business days | Email, within 2 business days | Named contact | Partner channel | |
| Download from GitHub | Request a quote | Contact us | Contact us |
Scroll the table sideways to see every licence.
Online orders are processed by Paddle, our reseller and merchant of record, which handles payment, invoices and sales taxes. Institutions that need a purchase order can be invoiced directly.
Educational licence for colleges and universities
Students learning on their own use CyberRiskGuardian free. Institutions that want the paid editions, the desktop app, installation on their systems and a scenario set built for their courses take the educational licence, at a significantly reduced price.
To get a quote, send:
- your institution and department
- the courses or programs that will use it
- the approximate number of students and instructors
- your procurement requirements, if you need a purchase order or a direct invoice
Who uses it free
Students using CyberRiskGuardian for personal learning, and non-profit organisations assessing their own risks, use the Community Edition and the desktop app free. Using it to deliver paid work, or inside a company or government body, needs a commercial licence.