CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +100 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, CyFun, AirCyber, NCSC, ECC, SCF and so much more

• UpdatedDec 16, 2025
• Python

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

• UpdatedDec 17, 2025
• TypeScript

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App:https://github.com/marketplace/lunatrace-by-lunasec/

• UpdatedMay 2, 2024
• TypeScript

Compliance automation framework, focused on SOC2

• UpdatedJul 21, 2022
• Go

AI Native platform to get companies compliant - Vanta & Drata Alternative

• UpdatedDec 16, 2025
• TypeScript

Open source solutions for SOC2, GDPR, and ISO27001

• UpdatedDec 16, 2025
• Go

Metriport is an open-source universal API for healthcare data.

• UpdatedDec 6, 2025
• JavaScript

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

• UpdatedJul 8, 2025
• HTML

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

• UpdatedDec 17, 2025
• TypeScript

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

• UpdatedDec 14, 2025
• Go

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

• UpdatedDec 17, 2025
• Go

Template SOC2 Policy Authority - documentation pipeline

• UpdatedSep 23, 2020
• HTML

• UpdatedDec 11, 2025
• HCL

Open Source AWS Control Tower

• UpdatedJan 3, 2025
• Go

A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

• UpdatedNov 24, 2025
• TypeScript

Secure SDLC process template

• UpdatedOct 6, 2025
• HTML

RD - PHP docker base images

• UpdatedJun 10, 2019
• Roff

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

• UpdatedDec 6, 2025
• Vue

A curated list of tools, frameworks, and resources for IT compliance, security standards, and regulatory requirements

• UpdatedSep 14, 2025

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

• UpdatedApr 17, 2025