Explore Projects
Discover 60 open source projects
Showing 41-60 of 60 projects
terraform-compliance/cli
A security-focused BDD testing framework for Terraform infrastructure-as-code projects.
trycompai/comp
An open-source platform for AI-powered compliance automation, featuring a Vanta and Drata alternative.
securitybunker/databunker
A secure vault for storing customer PII/PHI/PCI/KYC records with data anonymization, encryption, and compliance features.
aws-cloudformation/cloudformation-guard
A policy-as-code DSL to validate CloudFormation, Kubernetes, and Terraform configurations against custom rules.
NationalSecurityAgency/SIMP
A system automation and configuration management stack for operational flexibility and policy compliance.
tmobile/pacbot
PacBot is a cloud security and compliance automation tool that helps organizations audit and enforce cloud policies.
stelligent/cfn_nag
A linting tool for CloudFormation templates to improve security and compliance.
forseti-security/forseti-security
Forseti Security is a tool for managing security and compliance on the Google Cloud Platform.
square/sudo_pair
A Rust plugin for sudo that requires another human to approve and monitor privileged sudo sessions for compliance.
silverhack/monkey365
A PowerShell module for conducting security audits on Microsoft 365, Azure, and Azure AD resources.
owasp-dep-scan/dep-scan
A security audit tool for project dependencies, supporting local repos and containers, with a focus on compliance and supply chain security.
Janusec/janusec
JANUSEC Application Gateway provides secure access, including reverse proxy, K8S Ingress Controller, and more.
fit2cloud/riskscanner
Open-source multi-cloud security and compliance scanning platform for cloud resources
XmirrorSecurity/OpenSCA-cli
An open-source software supply chain security solution for detecting dependencies, vulnerabilities, and license compliance.
PyCQA/pydocstyle
A Python package that checks Python docstrings for style guide compliance.
TongchengOpenSource/AppScan
An open-source enterprise-level automated app privacy compliance detection tool.
mikeroyal/Open-Source-Security-Guide
An open-source security guide covering security standards, frameworks, threat models, encryption, and benchmarks.
wazuh/wazuh-docker
Wazuh - a powerful open-source security platform for threat detection, incident response, and compliance.
jonrau1/ElectricEye
A Python CLI tool for multi-cloud and multi-SaaS asset management, security posture monitoring, and attack surface reduction.
tern-tools/tern
Tern is a software composition analysis tool that generates a Software Bill of Materials for container images and Dockerfiles.
Stay in the loop
Get weekly updates on trending AI coding tools and projects.