CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +37 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

FedRAMP Automation

Open Source Multi-Cloud AWS Control Tower

Docker Enterprise Edition Security Controls for Compliance

Secure SDLC process template

Gathers AWS inventory and outputs CSV in the format for FedRAMP SSP

Open source tool for processing OSCAL based FedRAMP SSPs

Coalfire AWS RAMP/pak Reference Architecture

FedRAMP Dashboard BPA Order

NIST OSCAL SDK and CLI

FedRAMP SSP API in Python

Coalfire GCP RAMP/pak Reference Architecture

A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about General Data Protection Regulation (GDPR).

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

Coalfire Azure RAMP/pak Reference Architecture

dockerized-cloudsplot, CloudSploit is a security and configuration scanner that can detect hundreds of threats in your AWS account. Don't let a single misstep compromise your entire infrastructure.

Deploy Anchore Enterprise in an environment of your choice. Then follow through a series of labs that showcase how you can improve security across your software supply chain.

Docker Build for GRC Tool - Eramba is a tool that helps with compliance, risk management, control testing, exception management, etc.

OpenRMF Professional open API automation scripts and code to POST, PUT, and GET information via the External API