LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Compliance automation framework, focused on SOC2

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +35 frameworks worldwide: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber and so much more

Metriport is an open-source universal API for healthcare data.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com

Open Source Multi-Cloud AWS Control Tower

Template SOC2 Policy Authority - documentation pipeline

RD - PHP docker base images

Secure SDLC process template

Measurement based care infrastructure for absolutely everyone

A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.

Simple Docker Images

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

Policy Pipeline : place an SDLC around your compliance documentation with a pipeline that renders policy-as-code to human friendly formats

Designed for developers and compliance teams, the soc2 CLI tool utilizes the Go programming language and Cobra framework to offer an automated solution for evaluating SOC2 compliance. By assessing key areas such as Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

Demo full-stack implementation of the Metriport API.

Unearth host mismatches between Kolide & Google Workspace