The Enhanced MITRE ATT&CK® Coverage Tracker is an Excel tool for SOCs to measure and improve detection coverage of cyber threats. It simplifies tracking of security readiness against ATT&CK® tactics and techniques, offering a customizable, user-friendly interface for SOC analysts.

Documentación de RSMap

This repository contains scripts to map security control frameworks to various cloud service providers' security posture management (CSPM) reports.

The plugin-driven server agent for collecting & reporting metrics.

GAP (gathering, analysis and propagation) is a penetration testing framework to investigate information with open-source intelligence.

Android "add payment card" form - This app demonstrates how simple it is to add payment card data to your app with VeryGoodSecurity

O'Reilly copy of https://github.com/BenHall/marked, forked from https://github.com/markedjs/marked

test-repo

Automates RDS encryption for SOC2/CMMC compliance. Includes scripts for creating encrypted RDS snapshots and new instances from these snapshots, enhancing data security. Streamlines compliance and management, offering a robust solution for secure RDS encryption, reducing manual effort.

This template repo is used for managing SOC2 compliance using nothing, but github.

The Vanta Control Set maps common compliance standards from their requirements to controls and provides them in an easy to consume machine-readable format.

Unearth host mismatches between Kolide & Google Workspace

Demo full-stack implementation of the Metriport API.

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

Designed for developers and compliance teams, the soc2 CLI tool utilizes the Go programming language and Cobra framework to offer an automated solution for evaluating SOC2 compliance. By assessing key areas such as Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Policy Pipeline : place an SDLC around your compliance documentation with a pipeline that renders policy-as-code to human friendly formats