The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
☆192Oct 10, 2026Updated this week
Alternatives and similar repositories for saf
Users that are interested in saf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.☆291Updated this week
- eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise…☆53May 6, 2026Updated 5 months ago
- A web application to streamline the development of STIGs from SRGs☆87Sep 25, 2026Updated 2 weeks ago
- The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) App…☆31Mar 31, 2026Updated 6 months ago
- The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE S…☆16Apr 22, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- This repository contains several courses to learn about using and developing SAF capabilities☆16Oct 5, 2026Updated last week
- Landing Page Content/Builder for MITRE Security Automation Framework☆29Sep 16, 2026Updated 3 weeks ago
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆34Feb 5, 2022Updated 4 years ago
- A web front-end providing a REST-ful API to mount and unmount forensic disk images☆21Feb 14, 2026Updated 8 months ago
- Benchmark Generator to create skeleton Ansible content from baseline XCCDF files.☆11Sep 10, 2020Updated 6 years ago
- A command-line and ruby API of utilities, converters and tools for creating, converting and processing security baseline formats, results…☆97Jul 29, 2024Updated 2 years ago
- An API and client for managing STIG assessments☆235Updated this week
- InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Tec…☆15Dec 15, 2025Updated 10 months ago
- OSCAL SSP content for technologies shipped by Red Hat☆16Mar 2, 2023Updated 3 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- An ACAS/SCAP/CKL scan parser and report generator☆26Mar 1, 2021Updated 5 years ago
- Experimental CPSA -- the Cryptographic Protocol Shapes Analyzer experimental version☆24Jun 20, 2026Updated 3 months ago
- A micro InSpec baseline to check for insecure or public s3 buckets in your VPC☆14Jan 17, 2025Updated last year
- STIG-CCI-CONTROLMAPPER☆17Jun 21, 2018Updated 8 years ago
- ***MERGED: SEE README:*** The XCCDF to InSpec parser scans and extracts the controls defined in the DISA XCCDF STIG XML documents and con…☆13Nov 23, 2018Updated 7 years ago
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆163May 23, 2026Updated 4 months ago
- Another MISP module for Python☆18Feb 17, 2020Updated 6 years ago
- Automated Adversary Emulation Platform☆7,423Updated this week
- (WIP) A set of training material and guides for using inspec☆15Jul 19, 2019Updated 7 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Automated PowerSTIG Repository for Active Directory environments☆43Nov 28, 2022Updated 3 years ago
- Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list☆40Updated this week
- A Zeek package that detects Zoom logins and meeting joins☆12Apr 15, 2020Updated 6 years ago
- ☆16Jul 12, 2026Updated 3 months ago
- An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.☆284Oct 5, 2026Updated last week
- ☆11Dec 5, 2023Updated 2 years ago
- Generic Signature Format for SIEM Systems☆14Oct 27, 2021Updated 4 years ago
- Docker build of GovReady☆14Nov 14, 2023Updated 2 years ago
- ☆10Jul 1, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- A tool that automates the trevorc2 powershell agent obfuscation process with the pyfuscation tool☆14Jun 28, 2023Updated 3 years ago
- ☆34Jun 22, 2021Updated 5 years ago
- Applies DISA STIGS GPO Policy's offline☆22Jul 30, 2019Updated 7 years ago
- STIX data representing MITRE ATT&CK☆699Updated this week
- InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark☆76Dec 14, 2025Updated 10 months ago
- A python module for working with ATT&CK☆750Sep 30, 2026Updated 2 weeks ago
- A pair of scripts to import session and local group information that has been collected from alternate data sources into BloodHound's Neo…☆21Aug 29, 2022Updated 4 years ago