To streamline standardized documentation, facilitate document editing, and support consultants in audit tasks, the Quality Management department of itrust consulting  introduced "ARIANA" (Assistance for Reporting on Information system Audits with Normative Assessment). This powerful tool is crafted on integrated Word and Excel VBA programs, ensuring a seamless experience. ARIANA enhances efficiency by enabling easy navigation, maintaining standardized formatting, and providing reliable document editing capabilities.

TRICK Service is a full-featured risk management tool, assisting you in assessing risk, planning actions, and running your information security management system (ISMS). It accompanies you throughout the whole risk management process; starting with the definition of the risk context, covering risk estimation and treatment, and communicating the results. TRICK Service prepares you to be certified for ISO 27001, to comply with the requirements of the GDPR, or to respond to CSSF circular 12/544. It covers a wide variety of features such as quantitative/qualitative analysis of risk scenarios, estimation of Return on Security Investment (ROSI), embedding of custom or pre-defined catalogues for rated security controls (27002, GDPR, 22301, IoT, …), multi-user support and access control, import/export, and versioning.

DRAW (Dependencies for a Risk Analysis on a WhiteBoard) is an open source tool by itrust consulting and is used to represent assets and their corresponding dependencies in a graphical manner. The assets are represented as nodes in the graph and the dependency is represented as an edge from one asset to another. The asset carries information of the name of the asset and its type example the asset may be a Financial, Business process etc. The edge carries the dependency information and also the probability information. Probability implies the chances that an asset impacts the other asset.

Website   Project GIT

'TRICK Free to use' is the freeware version of TRICK Service, a full-featured risk management tool, assisting you in assessing risk, planning actions, and running your information security management system (ISMS).

Malwasm, a reverse engineering tool, developed under the itrust initiated project Malware.lu.

The purpose of malwasm is to help reverse engineers analyse malicious software. The tool combines both static and dynamic analysis. Malwasm executes a malware via sandbox (virtual machine), logs the entire activity (opcode, registry value, etc.), and then uses a web browser to display the information.

A unified Cryptography Certification and Verification tool (CryptoCeVerif) with a dedicated set of cryptography-oriented tools, based on open standards and architectures. CryptoCeVerif is aimed at enhancing and automating various crucial aspects of security SDLC such as requirements engineering and cryptographic software verification and validation comprising verifiable and reproducible builds, with support for dynamic asset and SW artefact linking in heterogenous environments, e.g., source code to test case and requirements linking with built-in relation evaluators (e.g., loop detection, coverage calculators).

OpenARIANA helps to write security policies and procedures. By structuring information that generally comes from ISO standards, combining it and customizing it according to a company’s needs, it generates policies in the format desired by the customer, and templates to document observations and decisions of an auditor.

eTuP is a utility that permits point-to-point encryption in networks. It consists of two agents (one in the source (local) network, one at the destination (remote) device) that forward all Ethernet traffic from one place to another, over a tunneling protocol. The tunnel can be encrypted on-demand, thus securing all connections between the remote device and the network.

A vulnerability assessment tool for personal computers and servers running the Windows operating system. After installation of a light software client on machines spread over the monitored network, Software Checker informs the user of the installed software, key elements of the configuration, potential vulnerability of the software according to vulnerability databases such as OSVDB and the latest version of trusted software. Using standardised protocols, it could be integrated into a global detection system assessing the level of risk and detecting installed malware.

The current version of Software checker verifies whether the Windows operating system contains software with security vulnerabilities and informs the user of new software updates. Future developments will manage this information centrally, collecting information from other operating systems and using it for predicting potential attacks and planning upgrades.

A multi-antivirus scanner solution to perform malware infection analysis of suspicious files. It increases the probability to detect a malware by the use of multiple antivirus solutions.

A Linux toolbox for Information System vulnerability testing. This distribution integrates open source applications with a home-made environment (script, configuration, shell code …). The purpose of this distribution is to have an image of a fully operational system when we have to realise a penetration test.