The number of newly disclosed vulnerabilities has been growing for more than a decade and the emergence of cloud-native infrastructure has only escalated the pace. With so many new vulnerabilities to fix, dozens of free and open-source tools are available to help assess and mitigate cyber risk. This white paper outlines the most-useful free and open-source tools to help IT security teams get started with effective cyber risk measurement, management and mitigation.