Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and audits—all in one place. AI-powered, containerized, enterpri…

Local, privacy-first GRC policy analysis: maps security control statements to NIST CSF 2.0, NIST AI RMF, OWASP LLM Top 10, and CIS 18, and flags coverage gaps.

Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

Navlog Fuel Recalcultion for ForeFlight.

ansible test stuff and root/bin bash scripts for Linux / OSX admins

Tools to manipulate the data behind Collection #1 (and #2–5) - AntiPublic.

Seatbelt is a C# project that performs a number of security oriented host-survey "safety checks" relevant from both offensive and defensive security perspectives.

Source code for Marco Cantu "Mastering Delphi 5" book

Threats Manager Platform Core libraries and SDK

A Python library to enable OSCAL validation, manipulation and conversion

Security automation content in SCAP, Bash, Ansible, and other formats

A list of tools, blog posts, and other resources that further the use and adoption of OSCAL standards.

Security Control Knowledge Graph

Control any computer remotely

Uses FFmpeg to benchmark video encoders to compare VMAF, SSIM and PSNR with different encoder settings.

VECTR is a tool that facilitates tracking of your red and blue team testing activities to measure detection and prevention capabilities across different attack scenarios

A modern re-implementation of the classic DOS game Duke Nukem II

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

Automatically snapshot and sync ZFS datasets when backup disk is attached.

OpenBao is a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys.

PowerShell Automation and Scripting for CyberSecurity, Published by Packt

Multi functional app to find duplicates, empty folders, similar images etc.

99+ CLI tools to build, browse, and blend your media library