Designed by Security Governance Experts

Key Features

Business Impact Analysis

A structured questionnaire helps you define the impact of breaches of confidentiality, integrity or availability.

Component Libraries

Threats and controls are combined in reusable components – you choose the components you find relevant.

Track Control Weaknesses

Efficiently track security weaknesses, configure notifications and grant temporary exceptions for deviations. 

Reporting Engine

Export any information to Microsoft Word, using a powerful template editing system.

The idea

Why another risk management application?

This application was inspired by the day-to-day needs of the security governance team of a European central bank. The team needed a methodology that can be applied to a flexible scope (e.g., from a single IT service to an entire ISMS), while being able to rely on arbitrary sources for the selection of controls to be implemented. It is quantitative and all steps are easily reproducible, which helps you avoid “finger in the air” risk assessments and “black box” results.

Risk assessments should not be limited to certain standards or frameworks. Security experts should be able to choose controls from CIS, ISO27001, OWASP, BSI basic protection, NIST, or any other source, if suitable for the task at hand and for the scope of the risk assessment to be drafted.

How to use cob.ra

Our Services

cob.ra as SaaS

The application is hosted by us on AWS in the Frankfurt region (eu-central-1). It is connected to your identity provider via SAML or OIDC. You primarily manage access with roles which are mapped to your local groups.

500 EUR / month (unlimited users)

cob.ra on premises

Of course, you can also run cob.ra wherever you are able to run a Docker container, be it in your own data centre or cloud infrastructure. You can use a variety of additional customization options, and cob.ra can be integrated with your existing infrastructure.

1,000 EUR / month (unlimited users)

We'd like to hear from you!

Get started

Explore some more detailed description of the features.

Try it out yourself.

Simply send an email – you’ll get a username and a password in return. No credit card needed, no subscription to any newsletter.

Just get in touch.

We will be happy to help and to answer any question you might have.



Tabea Schinke

ts@cob-ra.eu