Alternatives and similar repositories for standards

Users that are interested in standards are comparing it to the libraries listed below

• GovReady / govready-q
  An open source, self-service GRC tool to automate security assessments and compliance.
  ☆203Updated last year
• OktaSecurityLabs / sgt
  Osquery Mangement Server
  ☆115Updated 5 years ago
• risk-redux / control_freak
  NIST SP 800-53, Security and Privacy Controls for Federal Information Systems and Organizations
  ☆40Updated 3 months ago
• oracuk / oisru
  Repository for the Open Information Security Risk Universe
  ☆64Updated 3 years ago
• kindlyops / havengrc
  ☁️Haven GRC - easier governance, risk, and compliance 👨‍⚕️👮‍♀️🦸‍♀️🕵️‍♀️👩‍🔬
  ☆103Updated 4 years ago
• GovReady / nist-sp-800-53-r5-data
  NIST SP 800-53 Rev 5 as Data
  ☆25Updated 5 years ago
• CivicActions / ssp-toolkit
  Automate the creation of a System Security Plan (SSP)
  ☆45Updated last week
• GovReady / 800-53-server
  Prototype of making fisma 800-53 controls interactive
  ☆29Updated 5 years ago
• JupiterOne / security-policy-templates
  A set of policies, standards and control procedures with mapping to HIPAA, NIST CSF, PCI DSS, SOC2, FedRAMP, CIS Controls, and more.
  ☆337Updated last month
• ThreatResponse / margaritashotgun
  Remote Memory Acquisition Tool
  ☆252Updated 5 years ago
• dropbox / vsmc
  Vendor Security Model Contract
  ☆97Updated 3 years ago
• GovReady / compliancelib-python
  Machine readable cybersecurity compliance standards library for Python, starting with FISMA and NIST Risk Management Framework
  ☆63Updated 5 years ago
• GovReady / hyperGRC
  hyperGRC is a lightweight, in-browser tool for managing compliance-as-code repositories in OpenControl format.
  ☆27Updated 4 years ago
• marco-lancini / cartography-queries
  Utilities for programmatic analysis of Cartography data.
  ☆40Updated 3 weeks ago
• opencontrol / compliance-masonry
  Security Documentation Builder
  ☆373Updated 2 years ago
• JupiterOne / security-policy-builder
  CLI for generating policies, standards and control procedures (PSP) documentation in Markdown and publishing to JupiterOne or Confluence
  ☆88Updated this week
• ComplianceAsCode / auditree-framework
  The Auditree framework tool to run compliance control checks as unit tests.
  ☆71Updated last year
• magoo / minimalist-risk-management
  A minimalist risk management program!
  ☆148Updated 3 years ago
• Netflix-Skunkworks / aws-credential-compromise-detection
  Example detection of compromise credentials in AWS
  ☆122Updated 7 years ago
• twilio-labs / socless
  The SOCless automation framework
  ☆140Updated 11 months ago
• Netflix-Skunkworks / swag-client
  Cloud multi-account metadata management tool.
  ☆91Updated 5 years ago
• Netflix-Skunkworks / cloudtrail-anomaly
  ☆83Updated 6 years ago
• ThreatResponse / aws_ir
  Python installable command line utiltity for mitigation of host and key compromises.
  ☆347Updated 4 years ago
• brian-ruf / OSCAL-GUI
  Joint NIST/FedRAMP tool to interact with OSCAL files via a browser-based GUI
  ☆46Updated 5 years ago
• opencontrol / schemas
  YAML schema, examples, and validators for OpenControl format.
  ☆76Updated 6 years ago
• opencontrol / fedramp-templater
  EXPERIMENTAL: a template builder for FedRAMP System Security Plans
  ☆39Updated 6 years ago
• darkarnium / perimeterator
  'Continuous' AWS perimeter monitoring: Periodically scan internet facing AWS resources to detect misconfigured services.
  ☆64Updated 6 years ago
• JupiterOne / secops-automation-examples
  Examples on how to maintain security/compliance as code and to automate SecOps using the JupiterOne platform.
  ☆55Updated last month
• darkbitio / aws-s3-dlp
  Simple DLP monitor for AWS S3 is a tool built on top of CloudWatch events and Lambda functions to alert you when data is transferred to S…
  ☆18Updated 5 years ago
• mitre / aws-foundations-cis-baseline
  InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark
  ☆77Updated last month