PingCastle - Get Active Directory Security at 80% in 20% of the time

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Open Security Controls Assessment Language (OSCAL)

Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2

Audited & minimal JS implementation of elliptic curve cryptography.

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

Tool to find CVEs and Exploits.

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com

CISO Assistant is an open-source one-stop-shop for GRC - Risk and Audit Management supporting +30 standards and frameworks: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, CyFun, CJIS, AirCyber and so much more

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

A simple Java command-line utility to mirror the CVE JSON data from NIST.

🔒 Laravel validation rules that follow the password related recommendations found in NIST Special Publication 800-63B section 5.

Industry Working Group on Automated Cryptographic Algorithm Validation

NIST/NCCoE Mobile Threat Catalogue

Periodic table, physical constants, and molecule parsing for quantum chemistry.

An open-source listing of cybersecurity technology mapped to the NIST Cybersecurity Framework (CSF)

NIST Biometric Image Software (Java Implementation)

Improved version of the NIST Statistical Test Suite (STS)

A simple wrapper for the National Vulnerability CVE/CPE API