Alternatives and similar repositories for OVAL

Users that are interested in OVAL are comparing it to the libraries listed below

• usnistgov / sctools
  Tools for security content automation, baseline tailoring, and overlay development.
  ☆44Updated last year
• Vulnogram / Vulnogram
  Vulnogram is a tool for creating and editing CVE information in CVE JSON format
  ☆201Updated 5 months ago
• CERTCC / SSVC
  Stakeholder-Specific Vulnerability Categorization
  ☆164Updated this week
• RedHatProductSecurity / cvelib
  A Python library and command line interface for CVE Services.
  ☆69Updated last week
• CISecurity / OVALRepo
  ☆280Updated 2 years ago
• CERTCC / VINCE
  VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordin…
  ☆80Updated last week
• mitre / saf
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools…
  ☆164Updated this week
• oasis-tcs / csaf
  OASIS CSAF TC: Supporting version control for Work Product artifacts developed by members of TC, including prose specifications and secon…
  ☆192Updated 2 weeks ago
• OVALProject / Language
  The OVAL Language Schemas
  ☆87Updated last year
• ComplianceAsCode / ComplianceAsCode.github.io
  A ComplianceAsCode blog
  ☆28Updated 3 weeks ago
• ossf / wg-vulnerability-disclosures
  The OpenSSF Vulnerability Disclosures Working Group seeks to help improve the overall security of the open source software ecosystem by h…
  ☆200Updated last week
• mitre / vulcan
  A web application to streamline the development of STIGs from SRGs
  ☆79Updated 3 weeks ago
• CycloneDX / bom-examples
  A repository with examples of CycloneDX BOMs (SBOM, SaaSBOM, OBOM, VEX, etc)
  ☆203Updated 5 months ago
• CloudSecurityAlliance / gsd-tools
  Global Security Database Tools
  ☆44Updated last year
• FIRSTdotorg / epss
  Exploit Prediction Scoring System (EPSS)
  ☆30Updated 3 years ago
• secvisogram / secvisogram
  Secvisogram is a web tool for creating and editing security advisories in the CSAF 2.0 format
  ☆39Updated this week
• mitre / heimdall2
  Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
  ☆237Updated last week
• usnistgov / oscal-deep-diff
  Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool
  ☆38Updated 2 years ago
• usnistgov / vulntology
  Development of the NIST vulnerability data ontology (Vulntology).
  ☆42Updated last week
• ossf / Project-Security-Metrics
  Collect, curate, and communicate relevant security metrics for open source projects.
  ☆63Updated last year
• CERTCC / SBOM
  Examples and proof-of-concept for Software Bill of Materials (SBOM) code & data
  ☆65Updated last year
• opencybersecurityalliance / PACE
  Posture Attribute Collection and Evaluation
  ☆23Updated 2 years ago
• OpenSCAP / scap-workbench
  SCAP Scanner And Tailoring Graphical User Interface
  ☆233Updated last year
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆95Updated last year
• Agh42 / oscal4neo4j
  Scripts to import OSCAL example content into the Neo4J graph database
  ☆29Updated 2 years ago
• usnistgov / oscal-tools
  Tools for the OSCAL project
  ☆36Updated 2 years ago
• opencybersecurityalliance / documentation
  OCA-wide documentation shared by all sub-projects and repositories
  ☆33Updated 11 months ago
• cairis-platform / cairis
  Computer Aided Integration of Requirements and Information Security - Server
  ☆164Updated last year
• OWASP / Software-Component-Verification-Standard
  Software Component Verification Standard (SCVS)
  ☆150Updated 6 months ago
• ossf / wg-metrics-and-metadata
  The purpose of the Metrics & Metadata (formerly Identifying Security Threats) working group is to enable stakeholders to have informed co…
  ☆222Updated last year