Pick the security stack you run (or are considering) and the platforms you need to protect. See it plotted against MITRE ATT&CK and MITRE D3FEND, where the gaps are, and which products close them.
MITRE ATT&CK Enterprise · MITRE D3FEND ontology ·
What do you run?
Click a product chip to change its licence tier or add-ons. ·
Where do you need protection?
Pick the closest match. You can fine-tune this later.
Submit to Virtual Graffiti for review
Tell us who you are and we'll email you a copy of this report. One of our sales representatives will also follow up.
You'll get a copy of this report by email, and one of our sales team representatives will contact you soon.
You'll get a copy of this report by email, and one of our team representatives will contact you shortly.
How the mapping works: each product is mapped to security capabilities. Each capability is mapped to official ATT&CK mitigations (Prevent), ATT&CK data components (Detect, counted only when the stack collects every data component required by at least one ATT&CK detection analytic for a selected platform), and D3FEND defensive techniques. D3FEND-to-ATT&CK links are inferred through D3FEND's shared digital-artifact model, so treat D3FEND-only cells as indicative. A few capabilities with no ATT&CK mitigation (for example DDoS, deception, brand protection) carry curated technique mappings. Coverage shows where a control type applies; real-world effectiveness depends on licensing, configuration, log onboarding and operations. Pen testing, BAS and IR services are shown as assurance and do not raise coverage. Licence tiers and add-ons reflect vendor packaging at the time of writing (for example FortiGuard ATP/UTP/Enterprise, SonicWall APSS/MPSS, Sophos Standard/Xstream, WatchGuard Basic/Total, Palo Alto Core and Precision AI Pro bundles, Microsoft 365 E3/E5 and add-ons); confirm current SKUs with the vendor before quoting. This tool is general guidance and is not tailored to every unique business case; results should be validated through an assessment of the customer's environment. MITRE ATT&CK® and D3FEND™ are trademarks of The MITRE Corporation.