Topic: compliance Goto Github

Some thing interesting about compliance

👇 Here are 658 public repositories matching this topic...

0x6d69636b / windows_hardening

compliance,HardeningKitty and Windows Hardening settings and configurations

User: 0x6d69636b

windows hardening security windows-10 blueteam defense audit powershell windows-hardening registry

aquasecurity / tfsec

compliance,Security scanner for your Terraform code

Organization: aquasecurity

Home Page: https://aquasecurity.github.io/tfsec

terraform security scanner static-analysis ci aws azure google-cloud-platform compliance infrastructure-as-code

armijnhemel / binaryanalysis-ng

compliance,Binary Analysis Next Generation (BANG)

User: armijnhemel

compliance licensecompliance reverseengineering security

arudjreis / awesome-security-grc

compliance,Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).

User: arudjreis

risk-management grc security compliance governance audit

aws-cloudformation / cloudformation-guard

compliance,Guard offers a policy-as-code domain-specific language (DSL) to write rules and validate JSON- and YAML-formatted data such as CloudFormation Templates, K8s configurations, and Terraform JSON plans/configurations against those rules. Take this survey to provide feedback about cfn-guard: https://amazonmr.au1.qualtrics.com/jfe/form/SV_bpyzpfoYGGuuUl0

Organization: aws-cloudformation

policy-as-code cloudformation terraform k8s policy-rule-evaluation governance security compliance cfn-guard

ballerine-io / ballerine

compliance,Open-source infrastructure and data orchestration platform for risk decisioning

Organization: ballerine-io

Home Page: https://www.ballerine.com

back-office case-management compliance dashboard flow fraud id-card-camera identity-verification idv know-your-customer

bearer / bearer

compliance,Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

Organization: bearer

Home Page: https://docs.bearer.com

appsec compliance devsecops devsecops-tools security security-tools dataflow gdpr privacy sast

bridgecrewio / checkov

compliance,Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

Organization: bridgecrewio

Home Page: https://www.checkov.io/

terraform static-analysis aws gcp azure aws-security cloudformation scans compliance kubernetes

bytedance / appshark

compliance,Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

Organization: bytedance

android compliance static-analysis vulnerability

cisofy / lynis

compliance,Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.

Organization: cisofy

Home Page: https://cisofy.com/lynis/

shell linux pci-dss compliance security-audit security-hardening security-scanner security-vulnerability hipaa unix

cloud-custodian / cloud-custodian

compliance,Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources

Organization: cloud-custodian

Home Page: https://cloudcustodian.io

aws compliance cloud rules-engine cloud-computing management serverless lambda gcp azure

codenotary / immudb

compliance,immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

Organization: codenotary

Home Page: https://immudb.io

key-value immutable merkle-tree go database tamperproof verification immutable-database compliance pci-dss

complianceascode / content

compliance,Security automation content in SCAP, Bash, Ansible, and other formats

Organization: complianceascode

Home Page: https://complianceascode.readthedocs.io/en/latest/

security compliance scap xccdf oval cpe cce usgcb pci-dss ospp

deepfence / threatmapper

compliance,Open source cloud native security observability platform. Linux, K8s, AWS Fargate and more.

Organization: deepfence

Home Page: https://deepfence.io

cloud-native vulnerability-management threat-analysis devsecops secops registry-scanning security-tools cwpp observability cloudsecurity

fossology / fossology

compliance,FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

Organization: fossology

Home Page: https://fossology.github.io/

fossology spdx license-management license compliance oss license-checking license-scan compliance-check compliance-automation

hummerrisk / hummerrisk

compliance,HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Organization: hummerrisk

Home Page: https://hummerrisk.com

cloud-custodian cloud-native prowler security sbom cloud-native-security cspm k8s-security kubernetes-security trivy

inspec / inspec

compliance,InSpec: Auditing and Testing Framework

Organization: inspec

Home Page: http://inspec.io

audit inspec security compliance devsec devops tdd-utilities tdd spec testing

jonrau1 / electriceye

compliance,ElectricEye is a multi-cloud, multi-SaaS Python CLI tool for Asset Management, Security Posture Management & Attack Surface Monitoring supporting 100s of services and evaluations to harden your CSP & SaaS environments with controls mapped to over 20 industry, regulatory, and best practice controls frameworks

User: jonrau1

security-tools security-audit cloud-security security-monitoring aws-security security-hub cloud-compliance-reporting cloud-auditing security-engineering devsecops

lunasec-io / lunasec

compliance,LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Organization: lunasec-io

Home Page: https://www.lunasec.io/

tokenization web-security compliance security soc2 pci-dss gdpr zero-trust devsecops log4shell

macjutsu / super

compliance,S.U.P.E.R.M.A.N. optimizes the macOS software update experience.

User: macjutsu

apple mac macos mdm operating-system update updates compliance macadmin macadmins

marcinguy / betterscan-ce

compliance,Code Scanning/SAST/Static Analysis/Linting using many tools/Scanners + OpenAI GPT with One Report (Code, IaC) - Betterscan Community Edition (CE)

User: marcinguy

Home Page: https://betterscan.io

sast code-quality code-quality-analyzer static-analysis static-code-analysis static-analyzers devsecops sonarqube compliance devops

mikeroyal / open-source-security-guide

compliance,Open Source Security Guide. Learn all about Security Standards (FIPS, CIS, FedRAMP, FISMA, etc.), Frameworks, Threat Models, Encryption, and Benchmarks.

User: mikeroyal

vulnerabilities vulnerability-detection privacy-protection pentesters network-analysis intrusion-detection infosec incident-management mitre-attack detection-engineering

normation / rudder

compliance,Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

Organization: normation

Home Page: https://www.rudder.io

configuration-management automation compliance continuous-configuration devops continous-auditing auditing

nsacyber / windows-secure-host-baseline

compliance,Configuration guidance for implementing the Windows 10 and Windows Server 2016 DoD Secure Host Baseline settings. #nsacyber

Organization: nsacyber

windows windows-10 group-policy nessus windows-server windows-server-2016 chrome-browser adobe-reader applocker certificates

open-policy-agent / opa

compliance,Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Organization: open-policy-agent

Home Page: https://www.openpolicyagent.org

authorization cloud-native compliance declarative doge json lolcat opa open-policy-agent policy

opengdpr / opendsr

compliance,A common framework enabling companies to work together to protect consumers' privacy and data rights.

Organization: opengdpr

Home Page: https://www.opengdpr.org

gdpr data-processor data-driven right-to-be-forgotten data-portability portability data-subject-request privacy open-source compliance

openscap / openscap

compliance,NIST Certified SCAP 1.2 toolkit

Organization: openscap

Home Page: https://www.open-scap.org/tools/openscap-base

scap xccdf oval cpe compliance openscap scanning data-stream

oss-review-toolkit / ort

compliance,A suite of tools to automate software compliance checks.

Organization: oss-review-toolkit

Home Page: https://oss-review-toolkit.org

license-scan package-scan package-manager dependencies dependency-graph license copyright spdx copyright-scan compliance

ossec / ossec-hids

compliance,OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

Organization: ossec

Home Page: http://www.ossec.net

hids security pci-dss nist800-53 ossec compliance intrusion-detection fim loganalyzer policy-monitoring

owasp-dep-scan / dep-scan

compliance,OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Organization: owasp-dep-scan

Home Page: https://discord.gg/pF4BYWEJcS

vulnerability-scanners cve dependency-analysis risk-audit containers sbom sca dependency-audit compliance cyclonedx

privacyradius / gdpr-checklist

compliance,The GDPR Checklist

Organization: privacyradius

Home Page: https://gdprchecklist.io/

checklist gatsby gdpr-checklist gdpr compliance privacy

privado-inc / privado

compliance,Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.

Organization: privado-inc

Home Page: https://docs.privado.ai

gdpr privacy-by-design privacy-engineering gdpr-compliant devprivops android-privacy-tools privacy-labels play-store-data-safety privacy-policy appsec

project-copacetic / copacetic

compliance,🧵 CLI tool for directly patching container images using reports from vulnerability scanners

Organization: project-copacetic

Home Page: https://project-copacetic.github.io/copacetic/

compliance devsecops docker security trivy vulnerability containers container-image container-security patching

prowler-cloud / prowler

compliance,Prowler is an Open Source Security tool for AWS, Azure, GCP and Kubernetes to do security assessments, audits, incident response, compliance, continuous monitoring, hardening and forensics readiness. Includes CIS, NIST 800, NIST CSF, CISA, FedRAMP, PCI-DSS, GDPR, HIPAA, FFIEC, SOC2, GXP, Well-Architected Security, ENS and more

Organization: prowler-cloud

Home Page: https://prowler.com

security security-tools security-audit security-hardening hardening aws cis-benchmark compliance gdpr forensics

reidmorrison / symmetric-encryption

compliance,Symmetric Encryption for Ruby Projects using OpenSSL

User: reidmorrison

Home Page: https://logger.rocketjob.github.io/

encryption ruby openssl symmetric-keys compliance pci

sandworm-hq / sandworm-audit

compliance,Security & License Compliance For Your App's Dependencies 🪱

Organization: sandworm-hq

Home Page: https://sandworm.dev

d3-visualization dependencies dependencies-graph dependencies-tree security security-tools supply-chain vulnerabilities vulnerability vulnerability-scanners

securitybunker / databunker

compliance,Secure SDK/vault for personal records/PII built to comply with GDPR

Organization: securitybunker

Home Page: https://databunker.org/

gdpr pii piidata security privacy privacy-by-design user-consent ccpa compliance legaltech

skyscanner / cfripper

compliance,Library and CLI tool for analysing CloudFormation templates and check them for security compliance.

Organization: skyscanner

Home Page: https://cfripper.readthedocs.io/

cfripper cloudformation-template cloudformation cloud-governance cloudformation-linter aws-security static-analysis compliance aws

square / sudo_pair

compliance,Plugin for sudo that requires another human to approve and monitor privileged sudo sessions

Organization: square

pam sudo authentication security pairing compliance linux rust

stelligent / cfn_nag

compliance,Linting tool for CloudFormation templates

Organization: stelligent

continuous-testing unit-testing cloudformation aws devops iam-rules cloudformation-templates cfn-nag open-source static-analysis

strongdm / comply

compliance,Compliance automation framework, focused on SOC2

Organization: strongdm

Home Page: https://comply.strongdm.com

soc2 grc compliance templates documentation-toolchain go golang pdf-generation gdpr hipaa

tern-tools / tern

compliance,Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

Organization: tern-tools

python containers oss-compliance sbom docker compliance spdx tool dependencies software-composition-analysis