Alternatives and similar repositories for OVAL

Users that are interested in OVAL are comparing it to the libraries listed below

• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆71Updated last week
• Vulnogram / Vulnogram
  Vulnogram is the tool for reserving, managing, and publishing CVEs. Get started at vulnogram.org or deploy Docker edition for full enterp…
  ☆214Updated 2 weeks ago
• usnistgov / sctools
  Tools for security content automation, baseline tailoring, and overlay development.
  ☆45Updated last year
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆89Updated this week
• mitre / vulcan
  A web application to streamline the development of STIGs from SRGs
  ☆83Updated 2 weeks ago
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆171Updated this week
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆170Updated last week
• CISecurity / OVALRepo
  ☆282Updated 2 years ago
• CloudSecurityAlliance / gsd-tools
  Global Security Database Tools
  ☆43Updated 2 years ago
• cairis-platform / cairis
  Computer Aided Integration of Requirements and Information Security - Server
  ☆168Updated last month
• oasis-tcs / csaf
  OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…
  ☆206Updated last week
• ComplianceAsCode / ComplianceAsCode.github.io
  A ComplianceAsCode blog
  ☆30Updated 2 months ago
• mitre / heimdall2
  Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
  ☆246Updated last week
• OpenSCAP / scap-workbench
  SCAP Scanner And Tailoring Graphical User Interface
  ☆233Updated last year
• vfeedio / pyvfeed
  Python API for vFeed Vulnerability & Threat Intelligence Database Enterprise & Pro Editions
  ☆107Updated this week
• d3fend / d3fend
  Public static website for the D3FEND project. For the D3FEND ontology repo see: https://github.com/d3fend/d3fend-ontology
  ☆90Updated last month
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆209Updated 4 months ago
• cisagov / CSAF
  CISA CSAF Security Advisories
  ☆93Updated last week
• OVALProject / Language
  The OVAL Language Schemas
  ☆87Updated last year
• usnistgov / oscal-tools
  Tools for the OSCAL project
  ☆37Updated 2 years ago
• kannkyo / epss-api
  EPSS(Exploit Prediction Scoring System) API client
  ☆20Updated 3 months ago
• opencybersecurityalliance / documentation
  OCA-wide documentation shared by all sub-projects and repositories
  ☆33Updated last year
• usnistgov / vulntology
  Development of the NIST vulnerability data ontology (Vulntology).
  ☆43Updated 2 months ago
• OWASP / OdTM
  OWASP Ontology-driven Threat Modelling framework
  ☆40Updated 2 years ago
• secvisogram / secvisogram
  Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format
  ☆41Updated last month
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆215Updated 3 months ago
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆96Updated last year
• idaholab / STIG
  Structured Threat Intelligence Graph
  ☆99Updated last month
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆153Updated 10 months ago
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆23Updated 2 years ago