Product, 2023.11–2025.08

SecurityHero RMF

SecurityHero RMF is a risk assessment and visualization system that automates the NIST RMF (SP 800-37) process for cloud environments. It grew out of the observation that cloud risk management still relied on manual assessment, weak visualization, and indirect vulnerability indicators. The system works in four stages: Cloud Twin, which collects assets through cloud APIs and builds a topology graph; Risk Assessment, based on vulnerability scanning; Risk Control, which proposes controls from NIST SP 800-53; and Control Assessment, which checks those controls with penetration testing. Version 1.0 targeted OpenStack (2024) and version 2.0 became an AWS SaaS (2025). Joonho Seo led the project as PM and head of development from the initial concept in November 2023. The software was registered for copyright as PNU Cloud RMF (C-2024-038211), transferred as know-how to ReTrust Co., Ltd. together with CASB in July 2025, and, after the move to SaaS, officially listed on AWS Marketplace.

Where

PNU Cloud RMF → SecurityHero RMF

My role

PM and development lead

Status

completed

NIST RMF-based cloud risk assessment and visualization system. 1.0 on OpenStack (2024) → 2.0 as AWS SaaS (2025)