Topic: compliance Goto Github

👇 Here are 696 public repositories matching this topic...

0x6d69636b / windows_hardening
compliance,HardeningKitty and Windows Hardening Settings
User: 0x6d69636b
windows hardening security windows-10 blueteam defense audit powershell windows-hardening registry

antonbabenko / terraform-aws-devops
compliance,Info about many of my Terraform, AWS, and DevOps projects.
User: antonbabenko
Home Page: https://github.com/sponsors/antonbabenko
terraform infrastructure-as-code aws aws-community antonbabenko compliance serverless terraform-aws-modules

aquasecurity / tfsec
compliance,Tfsec is now part of Trivy
Organization: aquasecurity
Home Page: https://aquasecurity.github.io/trivy/
terraform security scanner static-analysis ci aws azure google-cloud-platform compliance infrastructure-as-code

armijnhemel / binaryanalysis-ng
compliance,Binary Analysis Next Generation (BANG)
User: armijnhemel
compliance licensecompliance reverseengineering security

arudjreis / awesome-security-grc
compliance,Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
User: arudjreis
risk-management grc security compliance governance audit

aws-cloudformation / cloudformation-guard
compliance,Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0
Organization: aws-cloudformation
policy-as-code cloudformation terraform k8s policy-rule-evaluation governance security compliance cfn-guard

ballerine-io / ballerine
compliance,Open-source infrastructure and data orchestration platform for risk decisioning
Organization: ballerine-io
Home Page: https://www.ballerine.com
back-office case-management compliance dashboard flow fraud id-card-camera identity-verification idv know-your-customer

bearer / bearer
compliance,Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.
Organization: bearer
Home Page: https://docs.bearer.com
appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast static-code-analysis vulnerability security-audit security-scanner vulnerabilities code-quality static-analysis security-automation owasp

bridgecrewio / checkov
compliance,Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Organization: bridgecrewio
Home Page: https://www.checkov.io/
terraform static-analysis aws gcp azure aws-security cloudformation scans compliance kubernetes

bytedance / appshark
compliance,Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.
Organization: bytedance
android compliance static-analysis vulnerability

cisofy / lynis
compliance,Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Organization: cisofy
Home Page: https://cisofy.com/lynis/
shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix

cloud-custodian / cloud-custodian
compliance,Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources
Organization: cloud-custodian
Home Page: https://cloudcustodian.io
aws azure cloud cloud-computing compliance gcp lambda management rules-engine serverless

codenotary / immudb
compliance,immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
Organization: codenotary
Home Page: https://immudb.io
key-value immutable merkle-tree go database tamperproof verification immutable-database compliance pci-dss

complianceascode / content
compliance,Security automation content in SCAP, Bash, Ansible, and other formats
Organization: complianceascode
Home Page: https://complianceascode.readthedocs.io/en/latest/
ansible application-security cce compliance cpe cybersecurity hardening information-security ospp oval pci-dss scap security security-automation security-hardening security-profile security-tools stig usgcb xccdf

deepfence / threatmapper
compliance,Open Source Cloud Native Application Protection Platform (CNAPP)
Organization: deepfence
Home Page: https://deepfence.io
cloud-native vulnerability-management threat-analysis devsecops secops registry-scanning security-tools cwpp observability cloudsecurity

fossology / fossology
compliance,FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.
Organization: fossology
Home Page: https://fossology.github.io/
compliance compliance-automation compliance-check fossology license license-checking license-management license-scan oss spdx spdx-licenses

hummerrisk / hummerrisk
compliance,HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
Organization: hummerrisk
Home Page: https://hummerrisk.com
cloud-custodian cloud-native prowler security sbom cloud-native-security cspm k8s-security kubernetes-security trivy

inspec / inspec
compliance,InSpec: Auditing and Testing Framework
Organization: inspec
Home Page: http://inspec.io
audit inspec security compliance devsec devops tdd-utilities tdd spec testing

intuitem / ciso-assistant-community
compliance,CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec and Audit Management and supporting +54 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, 800-171, CyFun, CJIS, AirCyber, NCSC, ECC, SCF and so much more
Organization: intuitem
Home Page: https://intuitem.com
cmmc compliance grc soc2 gdpr audit anssi iso27001 cis dora

jonrau1 / electriceye
compliance,ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks
User: jonrau1
security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops

lunasec-io / lunasec
compliance,LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/
Organization: lunasec-io
Home Page: https://www.lunasec.io/
tokenization web-security compliance security soc2 pci-dss gdpr zero-trust devsecops log4shell

macjutsu / super
compliance,S.U.P.E.R.M.A.N. optimizes the macOS software update experience.
User: macjutsu
apple mac macos mdm operating-system update updates compliance macadmin macadmins

mikeroyal / open-source-security-guide
compliance,Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.
User: mikeroyal
vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering

normation / rudder
compliance,Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
Organization: normation
Home Page: https://www.rudder.io
configuration-management automation compliance continuous-configuration devops continous-auditing auditing

nsacyber / windows-secure-host-baseline
compliance,Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber
Organization: nsacyber
windows windows-10 group-policy nessus windows-server windows-server-2016 chrome-browser adobe-reader applocker certificates

open-policy-agent / opa
compliance,Open Policy Agent (OPA) is an open source, general-purpose policy engine.
Organization: open-policy-agent
Home Page: https://www.openpolicyagent.org
opa policy declarative json compliance cloud-native authorization doge lolcat open-policy-agent

openscap / openscap
compliance,NIST Certified SCAP 1.2 toolkit
Organization: openscap
Home Page: https://www.open-scap.org/tools/openscap-base
compliance cpe data-stream openscap oval scanning scap xccdf

oss-review-toolkit / ort
compliance,A suite of tools to automate software compliance checks.
Organization: oss-review-toolkit
Home Page: https://oss-review-toolkit.org
license-scan package-scan package-manager dependencies dependency-graph license copyright spdx copyright-scan compliance

ossec / ossec-hids
compliance,OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
Organization: ossec
Home Page: http://www.ossec.net
hids security pci-dss nist800-53 ossec compliance intrusion-detection fim loganalyzer policy-monitoring

owasp-dep-scan / dep-scan
compliance,OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.
Organization: owasp-dep-scan
Home Page: https://owasp.org/www-project-dep-scan/
vulnerability-scanners cve dependency-analysis risk-audit containers sbom sca dependency-audit compliance cyclonedx

privacyradius / gdpr-checklist
compliance,The GDPR Checklist
Organization: privacyradius
Home Page: https://gdprchecklist.io/
checklist gatsby gdpr-checklist gdpr compliance privacy

privado-inc / privado
compliance,Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.
Organization: privado-inc
Home Page: https://docs.privado.ai
gdpr privacy-by-design privacy-engineering gdpr-compliant devprivops android-privacy-tools privacy-labels play-store-data-safety privacy-policy appsec

project-copacetic / copacetic
compliance,🧵 CLI tool for directly patching container images!
Organization: project-copacetic
Home Page: https://project-copacetic.github.io/copacetic/
compliance devsecops docker security trivy vulnerability containers container-image container-security patching cncf hacktoberfest

prowler-cloud / prowler
compliance,Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more
Organization: prowler-cloud
Home Page: https://prowler.com
security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics cloud well-architected devsecops azure iam python gcp multi-cloud

reidmorrison / symmetric-encryption
compliance,Symmetric Encryption for Ruby Projects using OpenSSL
User: reidmorrison
Home Page: https://logger.rocketjob.github.io/
compliance encryption openssl pci ruby symmetric-keys

sandworm-hq / sandworm-audit
compliance,Security & License Compliance For Your App's Dependencies 🪱
Organization: sandworm-hq
Home Page: https://sandworm.dev
d3-visualization dependencies dependencies-graph dependencies-tree security security-tools supply-chain vulnerabilities vulnerability vulnerability-scanners

securitybunker / databunker
compliance,Secure Vault for Customer PII/PHI/PCI/KYC Records
Organization: securitybunker
Home Page: https://databunker.org/
gdpr pii piidata security privacy privacy-by-design user-consent ccpa compliance legaltech

square / sudo_pair
compliance,Plugin for sudo that requires another human to approve and monitor privileged sudo sessions
Organization: square
pam sudo authentication security pairing compliance linux rust

stelligent / cfn_nag
compliance,Linting tool for CloudFormation templates
Organization: stelligent
continuous-testing unit-testing cloudformation aws devops iam-rules cloudformation-templates cfn-nag open-source static-analysis

strongdm / comply
compliance,Compliance automation framework, focused on SOC2
Organization: strongdm
Home Page: https://comply.strongdm.com
soc2 grc compliance templates documentation-toolchain go golang pdf-generation gdpr hipaa iso27001

tcosolutions / betterscan
compliance,Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners with One Report (Code, IaC) - Betterscan
Organization: tcosolutions
Home Page: https://betterscan.io
sast code-quality code-quality-analyzer static-analysis static-code-analysis static-analyzers devsecops sonarqube compliance devops

tern-tools / tern
compliance,Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.
Organization: tern-tools
python containers oss-compliance sbom docker compliance spdx tool dependencies software-composition-analysis

terraform-compliance / cli
compliance,a lightweight, security focused, BDD test framework against terraform.
Organization: terraform-compliance
Home Page: https://terraform-compliance.com
terraform hashicorp bdd-style compliance bdd infrastructure testing testing-framework

usnistgov / macos_security
compliance,macOS Security Compliance Project
Organization: usnistgov
apple macos compliance zsh bash python3 mdm

usnistgov / oscal
compliance,Open Security Controls Assessment Language (OSCAL)
Organization: usnistgov
Home Page: https://pages.nist.gov/OSCAL/
assessment xml json schema nist automation authorization security compliance yaml oscal

wazuh / wazuh
compliance,Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
Organization: wazuh
Home Page: https://wazuh.com/
security compliance log-analysis vulnerability-detection cybersecurity file-integrity-monitoring infosec malware-detection cloud-security container-security

wazuh / wazuh-dashboard-plugins
compliance,Plugins for Wazuh Dashboard
Organization: wazuh
Home Page: https://wazuh.com/
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring openscap security-hardening

wazuh / wazuh-docker
compliance,Wazuh - Docker containers
Organization: wazuh
Home Page: https://wazuh.com
wazuh docker ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch

wazuh / wazuh-ruleset
compliance,Wazuh - Ruleset
Organization: wazuh
Home Page: https://wazuh.com
wazuh ossec security loganalyzer compliance monitoring intrusion-detection policy-monitoring elasticsearch openscap

yannh / kubeconform
compliance,A FAST Kubernetes manifests validator, with support for Custom Resources!
User: yannh
kubernetes validation compliance