Governance · Risk · Compliance
Download our on-premises security tools.
Community Edition tools for governance, risk, compliance and security training, free to use. They run on-premises, on your own server, so your data never leaves your environment. See each one at work below, then download it for Windows, Linux or Docker.
ISO/IEC 27001:2022
Offset Assure
Build the management system, prove the controls, and walk into the certification audit ready. For ISO/IEC 27001:2022, on your own server.
It runs on one machine, inside your network. No cloud account, no license server, and nothing leaves the machine you install it on.
SAMA Cyber Security Framework
Offset Irtiqa
Score every control from 0 to 5 against SAMA's own scale, and work towards level 3. For SAMA Cyber Security Framework, on your own server.
It runs on one machine, inside your network. No cloud account, no license server, and nothing leaves the machine you install it on.
HIPAA Security & Breach Notification Rules
Offset Abide
Do the risk analysis, decide the addressable specifications and record why, and be ready when OCR asks. For HIPAA Security Rule and Breach Notification Rule, on your own server.
It runs on one machine, inside your network. No cloud account, no license server, and nothing leaves the machine you install it on.
NIST SP 800-53 Rev. 5
Offset Anchor
Apply a baseline, tailor it, fill in the parameters, and work towards an authorization. For NIST SP 800-53 Rev. 5, on your own server.
It runs on one machine, inside your network. No cloud account, no license server, and nothing leaves the machine you install it on.
NIST CSF 2.0
Offset Align
Work through the Framework, set your tiers and both profiles, and see the gap between them. For NIST Cybersecurity Framework 2.0, on your own server.
It runs on one machine, inside your network. No cloud account, no license server, and nothing leaves the machine you install it on.
ISO 27001 security awareness training
Offset Aware
Security awareness training for your staff, on your own server. 46 courses in four packs - ISO 27001, HIPAA, and SAMA for banks or finance companies - with a quiz after each one, certificate upload, staff import from a spreadsheet, reminder emails, and a record of who has done what for your ISO 27001 auditor.
It runs on one machine, inside your network. No cloud account, and no employee data leaves the building.
More tools on the way. Tell us what you need
Downloading and installing.
Are the products free?
Yes. Every product is free to use and runs on your own server: no cloud account, no per-seat pricing, and your data never leaves the machine you install it on.
Windows, Linux or Docker: which should I pick?
Windows and Linux install the product directly on the server as a background service. Docker runs it without installing anything else on the machine, and works the same on both. If you have never used Docker, each product has a step-by-step Docker guide that starts with installing Docker itself.
How do I know a download is genuine?
Only download from this website. Each Linux bundle comes with a .sha256 file so you can check it arrived intact, and updates installed from inside a product are checked against Offset Security's signature: anything unsigned or altered is refused.
How do I update to a new version?
An administrator can update from inside the product, under Settings. It downloads the new version, checks it, installs it, and puts the old version back if the new one does not start. Each product page has the details.
What if I get stuck?
Each product page has the full install guide, and every download includes one too. Otherwise email info@offsetsecurity.net.
Getting ready for an audit?
Our practitioners can help you set it up, scope your programme and close the gaps before your auditor arrives.
Prefer email? Write to info@offsetsecurity.net with your requirements.