You don't need an integrated SaaS to do a GRC self-assessment, and you don't need a global deployment to handle an incident. Back in the day we did it all in bound ledgers, by hand, in ink. But those days sucked and nobody appreciates materially-OOB deliverables, so I made these apps to let me do pretty much the same things inside client environments without introducing… anything.
Each app is a container for your JSON-formatted data, running offline in browser memory, capable of ephemeral, localStorage, and indexedDB storage. No footprint, no elevations, no dependencies, and no network traffic. Suitable for operating entirely within permissionless and air-gapped networks with managed browsers.
01 Comply 763 KB
Multi-framework compliance self-assessment
Maturity scoring across multiple frameworks. Record maturity, priority, evidence and plans to visualize heatmaps and crossmappings against NIST CSF.
02 Assess 382 KB
Quantitative risk register
A board-ready risk register with inherent and residual scoring on a 5×5 likelihood × impact matrix. Track exposure, treatment plans, and response strategy across multiple workspaces.
03 Respond 420 KB
Incident-response case management
Portable, single-user DFIR-lite Case Management in your browser. Built for NIST 800-61 / TLP 2.0.
04 Record 444 KB
Timestamped event log & timeline assembler
A timestamped event logger. Capture events as they happen, or recreate a master timeline from logs with global timestamps for incident response and after-action reporting.
05 Recover 347 KB
Business continuity & disaster-recovery planner
Inventory technology assets, map dependencies, document backup state, and walk tabletop exercises against ransomware, outages, and vendor failures.
06 Practice 418 KB
Tabletop exercise in a box
Create and run old-school, paper-based IR tabletops in-house. If you played TSR-era D&D, you can run a world-class tabletop. It is in your blood.
07 Hunt 428 KB
Build and track threat hunting efforts
Find threats you didn’t know you already knew about with detection-based threat hunting. Build and run hunts from the library or create your own, including custom datasources.
Offline Productivity Suite
A suite of portable productivity apps that run offline in your local browser for minimal footprint and zero external connections or dependencies. Task tracking, kanban, notes, maps, flows, and more.
Explore the suitePick whichever fits how you work. They're all equally official and they all do the same thing.
OPTION 01 · LIGHTEST
Visit pumagrc2.greykit.com (or any other). The app loads. You're done. Browser caches the file — works offline after the first visit.
OPTION 02 · PORTABLE
Right-click → Save Page As. You now have a portable, offline-forever copy. Open it from a USB stick, a sandboxed VM, an air-gapped laptop.
OPTION 03 · POLISHED
Desktop or phone app with auto-updates, no app store required. Chrome / Edge: Chromium: Save and Share → Install. Safari iOS: Share → Add to Home.
The single-page HTML IS the source. There's nothing to build, include, or compile — each app is 100% human readable with inline documentation.
