https://www.simplyblock.io/blog/open-source-tools-for-threat-and-risk-management/