The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
☆183Sep 4, 2026Updated this week
Alternatives and similar repositories for saf
Users that are interested in saf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.☆289Updated this week
- eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise…☆51May 6, 2026Updated 3 months ago
- A web application to streamline the development of STIGs from SRGs☆87Updated this week
- The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) App…☆29Mar 31, 2026Updated 5 months ago
- The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE S…☆16Apr 22, 2026Updated 4 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This repository contains several courses to learn about using and developing SAF capabilities☆16Updated this week
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆34Feb 5, 2022Updated 4 years ago
- A web front-end providing a REST-ful API to mount and unmount forensic disk images☆21Feb 14, 2026Updated 6 months ago
- A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results…☆97Jul 29, 2024Updated 2 years ago
- Repository of SCAP content developed fully or in part by the NIWC Atlantic SCAP team☆50Updated this week
- An API and client for managing STIG assessments☆229Updated this week
- InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Tec…☆15Dec 15, 2025Updated 8 months ago
- OSCAL SSP content for technologies shipped by Red Hat☆16Mar 2, 2023Updated 3 years ago
- An ACAS/SCAP/CKL scan parser and report generator☆25Mar 1, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Experimental CPSA -- the Cryptographic Protocol Shapes Analyzer experimental version☆24Jun 20, 2026Updated 2 months ago
- A micro InSpec baseline to check for insecure or public s3 buckets in your VPC☆14Jan 17, 2025Updated last year
- Security hardening content for VMware solutions to US Department of Defense standards☆197Updated this week
- Archived from chef-cookbooks/testing_examples - A repo of example testing files☆13Feb 18, 2026Updated 6 months ago
- STIG-CCI-CONTROLMAPPER☆17Jun 21, 2018Updated 8 years ago
- ***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and con…☆13Nov 23, 2018Updated 7 years ago
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆162May 23, 2026Updated 3 months ago
- Another MISP module for Python☆18Feb 17, 2020Updated 6 years ago
- Automated Adversary Emulation Platform☆7,237Aug 27, 2026Updated last week
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- (WIP) A set of training material and guides for using inspec☆15Jul 19, 2019Updated 7 years ago
- Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list☆40Updated this week
- A Zeek package that detects Zoom logins and meeting joins☆12Apr 15, 2020Updated 6 years ago
- Powerful XML<->JSON JavaScript mapping library.☆16Updated this week
- SystemBanner is an application used to display relevant security attribute/classification information about the Windows system it runs on…☆18Aug 25, 2026Updated last week
- An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.☆274Updated this week
- ☆11Dec 5, 2023Updated 2 years ago
- Generic Signature Format for SIEM Systems☆14Oct 27, 2021Updated 4 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆10Jul 1, 2022Updated 4 years ago
- Official repository for the Open Vulnerability and Assessment Language☆106Updated this week
- ☆34Jun 22, 2021Updated 5 years ago
- STIX data representing MITRE ATT&CK☆650Aug 5, 2026Updated 3 weeks ago
- InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark☆76Dec 14, 2025Updated 8 months ago
- An python script that use apkleaks to scan the android application over web☆11Jun 2, 2022Updated 4 years ago
- A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.☆233Jun 25, 2025Updated last year