CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 100+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Compliance automation framework, focused on SOC2

AI Native platform to get companies compliant - Vanta & Drata Alternative

Open source solutions for SOC2, GDPR, and ISO27001

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Useful templates and working document for implementing ISO 27001 - ISMS

Open Source Data Protection/Privacy Regulatory Mapping Project

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

Complete AI governance platform with support for ISO 42001, ISO 27001, NIST AI RMF and EU AI Act. Join our Discord channel: https://discord.com/invite/d3k3E4uEpR

A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

Secure SDLC process template

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

Python toolkit for automating system maintenance and generating patch reports along with Foreman/Katello and Red Hat Satellite 6.x

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

ISO 27001 Toolkit by QZ

PowerShell script to generate daily audit report, like Logwatch for Windows

Un repositorio con plantillas y documentacion importante de ISO 27001.

Open source cyber-serenity platform that help the security teams designing and managing companies' ISMS, and which allow them to create resilient digital systems with efficient responses against to cyber-threats.

Hack23 Public Information Security Management System:Security Through Transparency and Open Documentation Demonstrating Security Excellence Through Public ISMS Disclosure

Oxomium is a cybersecurity gouvernance and conformity (GRC) tool for CISCO and SECOPS. By linking framework requirements, controld scheduling and execution, audit findings and more, Oxomium helps to reduce administrative work and to provide an real time overview of your cybersecurity posture.