CRML

CRML

CRML is a declaritive language for writing cyberrisk as code

Product HuntOpen SourceLaunched Feb 9, 2026130#9 of the day

About CRML

We have infrastructure as a code, network as a code but dont have anything as Risk As a Code. CRML is an open, declarative, engine-agnostic and Control / Attack framework–agnostic Cyber Risk Modeling Language. It provides a YAML/JSON format for describing cyber risk models, telemetry mappings, simulation pipelines, dependencies, and output requirements — without forcing you into a specific quantification method, simulation engine, or security-control / threat catalog.

The person behind CRML

CRML's team page →

More Open Source launches

Made CRML? Ask us to remove this listing or your details.