FAIR cyber risk quantification toolkits, agent-based control simulation (FAIR-CAM), threat event frequency estimator (PyPI), LLM classification validator (PyPI), Monte Carlo risk engine with IRIS benchmarks.
☆30Jul 3, 2026Updated last month
Alternatives and similar repositories for security-decision-labs
Users that are interested in security-decision-labs are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and sec…☆53Aug 19, 2026Updated last week
- Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via PyMC…☆47Dec 10, 2025Updated 8 months ago
- A Secure Controls Framework (SCF) Power BI App☆26Nov 3, 2024Updated last year
- MITRE ATT&CK Based App in Power BI☆19Feb 23, 2024Updated 2 years ago
- Historical scores for EPSS☆40Updated this week
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- security trust center project☆17Mar 28, 2026Updated 5 months ago
- ☆24Jan 27, 2026Updated 7 months ago
- ☆14Jan 2, 2024Updated 2 years ago
- A Risk-Based Prioritization Taxonomy for prioritizing CVEs (Common Vulnerabilities and Exposures).☆82May 3, 2024Updated 2 years ago
- A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for unders…☆146Nov 6, 2025Updated 9 months ago
- Factor Analysis of Information Risk (FAIR) in Python. Maintained by Derive.☆113May 22, 2026Updated 3 months ago
- Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance☆36Nov 17, 2025Updated 9 months ago
- Enriching the NVD CVSS scores to include Temporal & Threat Metrics☆227Updated this week
- Factor Analysis of Information Risk (FAIR) tool developed in R☆22Mar 23, 2018Updated 8 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ⚖Open Source Toolkit for Quantitative Risk Assessment☆185Dec 21, 2022Updated 3 years ago
- ☆26Feb 19, 2026Updated 6 months ago
- Interactive web-based cybersecurity and privacy training modules with SCORM support. Deployable as standalone HTML or LMS-integrated cont…☆48Oct 11, 2025Updated 10 months ago
- Create a domain specific (GRC) agent with the Claude Agent SDK☆25Jun 26, 2026Updated 2 months ago
- Repository for the Open Information Security Risk Universe☆64Jul 10, 2022Updated 4 years ago
- Automating the baseline logging settings found here: https://nullsec.us/windows-baseline-logging/☆20Jan 28, 2025Updated last year
- AIBOM Workshop RSA 2024☆15May 20, 2024Updated 2 years ago
- Cyber Threat Defense World Modeling☆26May 13, 2026Updated 3 months ago
- NIST OSCAL SDK and CLI☆23Feb 1, 2026Updated 6 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and …☆156Updated this week
- A compliance analysis tool which enables organizations to more quickly articulate their compliance posture and also generate supporting e…☆60Mar 6, 2026Updated 5 months ago
- Oxomium is a cybersecurity gouvernance and conformity (GRC) tool for CISCO and SECOPS. By linking framework requirements, controld schedu…☆19Jul 27, 2026Updated last month
- ⚖Open Source Toolkit for Conducting Quantitative Risk Assessment Interviews☆40Mar 10, 2024Updated 2 years ago
- SecureMCP is a security auditing tool designed to detect vulnerabilities and misconfigurations in applications using the [Model Context P…☆140Jun 7, 2025Updated last year
- an experiment that started around writing a spec for everything in GRC☆21Jul 21, 2026Updated last month
- Detection Engineering research, open-source tools, conference presentations, and technical publications shared with the security communit…☆28Dec 17, 2025Updated 8 months ago
- Controls Assessment Specification☆73Apr 3, 2025Updated last year
- ☆38Mar 2, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- MCP server implementation for NIST Cybersecurity Framework 2.0☆66Apr 19, 2026Updated 4 months ago
- A PowerShell-based script to analyze network logs from CSV files and detect potential beaconing behavior. Supports VirusTotal integration…☆17May 11, 2025Updated last year
- A tool to monitor for potential spear phishing domains and send to Slack.☆23Feb 8, 2024Updated 2 years ago
- ☆16Apr 30, 2023Updated 3 years ago
- Develop Enhancements, Future Implementations and New Education☆17Nov 27, 2023Updated 2 years ago
- ZERG (Zero-Effort Rapid Growth): Secure and parallel Claude Code execution system. Overwhelm features with coordinated zergling swarms.☆34Apr 19, 2026Updated 4 months ago
- GhostCVEs☆22Updated this week