Repository files navigation

Lula is a tool designed to bridge the gap between expected configuration required for compliance andactual configuration.

• Assess compliance of a system against user-defined controls
• Evaluate an evolving system for complianceover time
• Generate machine-readible OSCAL artifacts
• Accelerate the compliance and accreditation process

• Lula is not meant to compete with policy engines - rather augment the auditing and alerting process
• Often admission control processes have a difficult time establishingbig picture global context control satisfaction, Lula fills this gap
• Lula is meant to allow modularity and inheritance of controls based upon the components of the system you build

Cloud-Native Infrastructure, Platforms, and Applications can establishOSCAL documents that are maintained alongside source-of-truth code bases. These documents provide an inheritance model to prove when a control that the technology can satisfyIS satisfied in a live-environment.

These controls can be well established and regulated standards such as NIST 800-53. They can also be best practices, Enterprise Standards, or simply team development standards that need to be continuously monitored and validated.

Lula operates on a framework of proof by adding custom overlays mapped to the these controls,Lula Validations, to measure system compliance. TheseValidations are constructed by establishing the collection of measurements about a system, given by the specifiedDomain, and the evaluation of adherence, performed by theProvider.

Domain is the identifier for where and which data to collect as "evidence". Below are the active and planned domains:

Provider is the "engine" performing the validation using policy and the data collected. Below are the active providers:

Install Lula and check out theSimple Demo to get familiar with Lula'svalidate andevaluate workflow to assess system compliance and establish thresholds. See the other tutorials for more advanced Lula use cases and information on how to develop your ownLula Validations!

For more information on how to get involved in the community, mailing lists andmeetings, please refer to ourcommunity page

For security issues or code of conduct concerns, an e-mail should be sent tolula@defenseunicorns.com.