Marketplace
Cybersecurity Marketplace

Welcome to our Cybersecurity Marketplace

The IRM Cybersecurity Marketplace is a free catalog of cybersecurity tools and solutions across 24 categories, curated for startups, SaaS companies, and SMBs.

  • 24 categories
  • Free for startups & SMBs
  • Curated by certified experts

Contact Us

All Products

216Products
floating circle
CloudQuery Logo Image

CloudQuery

Cloud Security

CloudQuery transforms multi-cloud sprawl into a unified asset inventory: extensible, queryable cloud config and security data.

Free
Visit
Logo for SOC 2 Gap Assessment

SOC 2 Gap Assessment

Governance Risk & Compliance (GRC)

The SOC 2 Gap Assessment is a free tool that measures your organization against the AICPA 2017 Trust Services Criteria (with Revised Points of Focus, 2022) used in SOC 2 examinations. Assess all 61 criteria across Security, Availability, Processing Integrity, Confidentiality and Privacy at the SOC 2 Type I or SOC 2 Type II level; generate a downloadable report that includes a remediation roadmap.

Free
Visit
Logo for ISO 27001 Gap Assessment

ISO 27001 Gap Assessment

Governance Risk & Compliance (GRC)

The ISO 27001 Gap Assessment is a free tool that measures your organization against ISO/IEC 27001:2022, the international standard for Information Security Management Systems (ISMS). Assess the Clause 4 to 10 management system requirements at the Clauses Only (Level 1) scope, or add all 93 Annex A controls at the Clauses & Annex Controls (Level 2) scope; generate a downloadable report that includes a remediation roadmap.

Free
Visit
Logo for ISO 42001 Gap Assessment

ISO 42001 Gap Assessment

Governance Risk & Compliance (GRC)

The ISO 42001 Gap Assessment is a free tool that measures your organization against ISO/IEC 42001:2023, the international standard for Artificial Intelligence Management Systems (AIMS). Assess the Clause 4 to 10 management system requirements at a Basic (Level 1) scope, or a Standard (Level 2) scope; generate a downloadable report that includes a remediation roadmap.

Free
Visit
Logo for CIS Gap Assessment

CIS Gap Assessment

Governance Risk & Compliance (GRC)

The CIS Gap Assessment is a free tool that measures your organization against the 56 Implementation Group 1 (IG1) Safeguards of the CIS Critical Security Controls v8.1, the essential cyber hygiene baseline every enterprise should implement first, with likelihood and impact risk scoring, a ranked gap list, and a downloadable report with a prioritized remediation roadmap.

Free
Visit
Logo for Canada Cybersecurity Baseline Assessment

Canada Cybersecurity Baseline Assessment

Governance Risk & Compliance (GRC)

The Cybersecurity Baseline Assessment is a free tool that measures a small or medium organization against CAN/DGSI 104:2021 (Rev 2:2026), Canada's national standard for baseline cyber security controls, with likelihood and impact risk scoring, a ranked gap list, and a downloadable report with a prioritized remediation roadmap.

Free
Visit
Image of AI Governance Playbook

AI Governance Playbook

AI Governance & Risk

The AI Governance Playbook is a free tool that builds a tailored AI governance framework for a small business adopting AI-powered apps, agentic systems or agentic workflows, with findings, recommendations and a 90-day plan aligned to the NIST AI RMF, ISO/IEC 42001 and the EU AI Act.

Free
Visit
Openwall Logo

Openwall - John the Ripper

Penetration Testing

Openwall - John the Ripper is an Open Source password security auditing and password recovery tool available for many operating systems.

Free
Visit
ManageEngine Endpoint Central Logo

ManageEngine Endpoint Central

Patch Management

Unified endpoint management for patching and security.Protect and streamline your IT infrastructure with automated patching, asset intelligence, remote troubleshooting, digital employee experience, data security, attack surface management, ransomware protection, and more from a single console.

Free
Visit
AWS Logo

Cloud-native (AWS Systems Manager free tier)

Patch Management

Cloud-native (AWS Systems Manager free tier) + unattended-upgrades (Linux). AWS service for patching, configuration, and automation (free tier available)

Free
Visit
Zabbix Logo

Zabbix

Network Monitoring

Enterprise-class open-source monitoring solution for networks and applications

Free
Visit
PRTG Logo

PRTG

Network Monitoring

Network monitoring software with free tier for up to 100 sensors

Free
Visit
Our Blogs

Cybersecurity & AI insights

Our Industry Certifications

Our diverse industry experience and expertise in AI, Cybersecurity & Information Risk Management, Data Governance, Privacy and Data Protection Regulatory Compliance is endorsed by leading educational and industry certifications for the quality, value and cost-effective products and services we deliver to our clients.

Copyright © 2026 IRM Consulting & Advisory. All Rights Reserved.