The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
☆196Nov 4, 2026Updated this week
Alternatives and similar repositories for saf
Users that are interested in saf are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.☆294Updated this week
- eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise…☆53Oct 14, 2026Updated 3 weeks ago
- A web application to streamline the development of STIGs from SRGs☆88Updated this week
- This repository contains several courses to learn about using and developing SAF capabilities☆16Oct 30, 2026Updated last week
- The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE S…☆17Apr 22, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) App…☆31Mar 31, 2026Updated 7 months ago
- DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications☆35Feb 5, 2022Updated 4 years ago
- Landing Page Content/Builder for MITRE Security Automation Framework☆29Sep 16, 2026Updated last month
- An API and client for managing STIG assessments☆237Updated this week
- A micro InSpec baseline to check for insecure or public s3 buckets in your VPC☆14Jan 17, 2025Updated last year
- An ACAS/SCAP/CKL scan parser and report generator☆26Mar 1, 2021Updated 5 years ago
- Benchmark Generator to create skeleton Ansible content from baseline XCCDF files.☆11Sep 10, 2020Updated 6 years ago
- A web front-end providing a REST-ful API to mount and unmount forensic disk images☆21Feb 14, 2026Updated 8 months ago
- CLI tool for fetching, managing, and exporting CIS benchmarks from CIS WorkBench☆31Updated this week
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Microsoft Windows Server 2019 STIG InSpec Profile☆14Dec 15, 2025Updated 10 months ago
- Repository of SCAP content developed fully or in part by the NIWC Atlantic SCAP team☆54Sep 1, 2026Updated 2 months ago
- InSpec profile to validate the secure configuration of Red Hat Enterprise Linux 7, against DISA's Red Hat Enterprise Linux 7 Security Tec…☆15Dec 15, 2025Updated 10 months ago
- Crane POAM Automation Tool (C-PAT™)☆23Oct 30, 2026Updated last week
- A utility that watches a path for test result files on behalf of a STIG Manager Collection☆19Updated this week
- OSCAL SSP content for technologies shipped by Red Hat☆16Mar 2, 2023Updated 3 years ago
- A pair of scripts to import session and local group information that has been collected from alternate data sources into BloodHound's Neo…☆21Aug 29, 2022Updated 4 years ago
- Comprehensive adversary emulation tool for security testing on Google Cloud Platform (GCP) environments.☆14Jun 14, 2024Updated 2 years ago
- Applies DISA STIGS GPO Policy's offline☆22Jul 30, 2019Updated 7 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- An open source, self-service GRC tool to automate security assessments and compliance.☆223Dec 10, 2024Updated last year
- InSpec Profile to validate the secure configuration of aws-rds-infrastructure-cis-baseline, against CIS's Amazon Web Services Three-tier …☆14Dec 14, 2025Updated 10 months ago
- Automated Adversary Emulation Platform☆7,496Oct 12, 2026Updated 3 weeks ago
- InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark☆75Dec 14, 2025Updated 10 months ago
- Automatically assess and score software repositories for supply chain risk.☆135Updated this week
- Archived from chef-cookbooks/testing_examples - A repo of example testing files☆13Feb 18, 2026Updated 8 months ago
- STIG Automation☆625Sep 18, 2026Updated last month
- A python module for working with ATT&CK☆761Updated this week
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆163May 23, 2026Updated 5 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Official repository for the Open Vulnerability and Assessment Language☆109Sep 3, 2026Updated 2 months ago
- MITRE Engage™ is a framework for conducting Denial, Deception, and Adversary Engagements.☆67Apr 1, 2024Updated 2 years ago
- Open Security Controls Assessment Language (OSCAL)☆965Updated this week
- STIG-CCI-CONTROLMAPPER☆17Jun 21, 2018Updated 8 years ago
- Another MISP module for Python☆18Feb 17, 2020Updated 6 years ago
- Security hardening content for VMware solutions to US Department of Defense standards☆200Oct 27, 2026Updated last week
- InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Tech…☆13Jun 3, 2022Updated 4 years ago