Free tool
Defense Stack Map
List the security tools, processes and programs you run. The map places each one in its layer of protection and scores every layer against the CIS Controls minimum baseline, so you can see where to invest next.
🔒 Saved only in this browser. It runs entirely in your browser — nothing is uploaded.
Layers of protection
Environments in use
In place
Partial
Planned
Missing
Not applicable
Each half is scored against the minimum baseline (CIS Controls v8.1 IG1), weighted by priority. The fill shows the share in each status; the percentage counts in place fully and partial as half.
Security pillars
Every control counts toward each pillar it supports.
Threats addressed
Number of controls in place or partly in place that mitigate each threat.
Control inventory
Select a row to change its layers, capabilities, environment or status.
Want this scored against how well your controls actually work? AffinityOne assesses each control and tracks the program that closes your gaps.
Get early access to AffinityOne
Plan the fixes in Affinity PM
How the map works
- Layers of protection. Five technical layers (perimeter, network, endpoint, application, data) protect your critical assets. The human layer, security operations and policy management sit underneath and apply everywhere.
- On-prem and cloud. Each technical layer is split into an on-prem half and a cloud half. If you have no presence in one, turn it off under Environments in use and it is left out of the score.
- The minimum baseline. Every layer is scored against the CIS Controls v8.1 Implementation Group 1 safeguards, the published minimum for essential cyber hygiene. Anything beyond that is listed under "Beyond the minimum" and only counts if you give it a priority.
- The score. A capability counts in full when a control providing it is in place and half when it is partial. Priorities weight the result: Critical counts three times as much as Nice to have.
- Known products are placed for you. Type or paste product names and the map fills in the layers and capabilities they provide. Open any control to adjust them.
Your map is saved only in this browser. Use Export → Backup to keep a copy or move it to another device.