Repositories list

• secure-coding-case-studies

  Public
  Case studies of real secure coding issues to provide educators, project leaders, software development teams, and assessment teams insight into these critical issues and show how to avoid them.

  Creative Commons Attribution 4.0 International

  •2•4•0•0•Updated Oct 9, 2025Oct 9, 2025

• heimdall2-helm

  Public
  A helm chart for MITRE SAF's Heimdall 2.

  Smarty

  •

  Other

  •5•2•7•0•Updated Oct 9, 2025Oct 9, 2025

• saf-training

  Public
  This repository contains several courses to learn about using and developing SAF capabilities

  JavaScript

  •

  Other

  •6•14•6•4•Updated Oct 9, 2025Oct 9, 2025

• saf

  Public
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

  mitremitre-corporationmitre-saf+ 6security-automation-frameworksecurityjsoncompliancesecurity-automationdevsecops

  TypeScript

  •

  Other

  •41•164•116•9•Updated Oct 9, 2025Oct 9, 2025

• heimdall2

  Public
  Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

  mitre-saf

  TypeScript

  •

  Other

  •70•237•265•52•Updated Oct 9, 2025Oct 9, 2025

• jsonix

  Public
  Powerful XML<->JSON JavaScript mapping library.

  mitremitre-corporationmitre-saf

  JavaScript

  •

  Other

  •82•13•0•0•Updated Oct 8, 2025Oct 8, 2025

• tir-docs

  Public
  Documentation for the TIR project

  JavaScript

  •

  Other

  •1•2•13•1•Updated Oct 8, 2025Oct 8, 2025

• sandcat

  Public
  A CALDERA plugin

  calderacaldera-plugin

  Go

  •

  Apache License 2.0

  •43•69•2•3•Updated Oct 7, 2025Oct 7, 2025

• caldera

  Public
  Automated Adversary Emulation Platform

  hackingcybersecuritymitre+ 8hacktoberfestred-teamsecurity-automationsecurity-testingmitre-attackadversary-emulationcaldera+ 1

  Python

  •

  Apache License 2.0

  •1.2k•6.5k•62•9•Updated Oct 7, 2025Oct 7, 2025

• emu

  Public
  This CALDERA Plugin converts Adversary Emulation Plans from the Center for Threat Informed Defense

  adversary-emulationcalderacaldera-plugin

  Python

  •

  Apache License 2.0

  •14•33•3•1•Updated Oct 7, 2025Oct 7, 2025

• thumbtack

  Public
  A web front-end providing a REST-ful API to mount and unmount forensic disk images

  forensics

  Python

  •

  Apache License 2.0

  •7•23•2•4•Updated Oct 7, 2025Oct 7, 2025

• response

  Public
  A CALDERA plugin for autonomous incident response

  calderacaldera-plugin

  Python

  •9•26•0•1•Updated Oct 6, 2025Oct 6, 2025

• fieldmanual

  Public
  Caldera Documentation Plugin

  calderacaldera-plugin

  Python

  •15•8•0•2•Updated Oct 6, 2025Oct 6, 2025

• access

  Public
  A CALDERA plugin

  calderacaldera-plugin

  HTML

  •13•25•0•1•Updated Oct 6, 2025Oct 6, 2025

• builder

  Public
  Caldera plugin to dynamically compile code segments from abilities

  calderacaldera-plugin

  Python

  •11•4•0•0•Updated Oct 6, 2025Oct 6, 2025

• training

  Public
  A CALDERA plugin

  calderacaldera-plugin

  Python

  •17•26•1•5•Updated Oct 6, 2025Oct 6, 2025

• atomic

  Public
  A MITRE Caldera plugin

  calderacaldera-plugin

  Python

  •

  Apache License 2.0

  •15•46•1•3•Updated Oct 6, 2025Oct 6, 2025

• stockpile

  Public
  A CALDERA plugin

  calderacaldera-plugin

  PowerShell

  •

  Apache License 2.0

  •52•79•0•8•Updated Oct 6, 2025Oct 6, 2025

• magma

  Public
  MITRE Caldera's user interface plugin powered by VueJS

  CSS

  •

  Apache License 2.0

  •22•6•3•4•Updated Oct 6, 2025Oct 6, 2025

• ts-inspec-objects

  Public
  Typescript objects for InSpec profiles

  TypeScript

  •

  Other

  •2•3•7•1•Updated Oct 6, 2025Oct 6, 2025

• nuxt-github-pages

  Public
  Nuxt module to fix trailing slash issues when deploying to GitHub Pages

  TypeScript

  •

  Other

  •1•2•2•6•Updated Oct 6, 2025Oct 6, 2025

• hipcheck

  Public
  Automatically assess and score software repositories for supply chain risk.

  supply-chain-security

  Rust

  •

  Apache License 2.0

  •12•114•55•7•Updated Oct 6, 2025Oct 6, 2025

• train-k8s-container

  Public
  Transport for Kubernetes containers for use with Chef InSpec

  Ruby

  •

  Apache License 2.0

  •1•0•0•0•Updated Oct 5, 2025Oct 5, 2025

• alue

  Public
  ALUE (Aerospace Language Understanding Evaluation) is a comprehensive framework designed to facilitate the evaluation and inference of Language Learning Models (LLMs) on aviation- and aerospace-specific datasets.

  Python

  •

  Apache License 2.0

  •1•7•0•0•Updated Oct 3, 2025Oct 3, 2025

• inspec

  Public
  InSpec: Auditing and Testing Framework

  Ruby

  •

  Other

  •684•6•0•2•Updated Oct 2, 2025Oct 2, 2025

• emb3d

  Public
  HTML

  •9•29•0•0•Updated Oct 2, 2025Oct 2, 2025

• webhdfs

  Public
  Interface with WebHDFS Service in a Cluster-Neutral Way

  rrstatshadoop-cluster+ 2r-packagewebhdfs

  R

  •

  Apache License 2.0

  •1•3•2•0•Updated Oct 2, 2025Oct 2, 2025

• cyber-trackr-live

  Public
  OpenAPI specification and Ruby client for cyber.trackr.live API

  apidisaopenapi+ 5mitreopenapi3disa-stigmitre-safdisa-cci

  Ruby

  •

  Other

  •0•1•0•0•Updated Oct 2, 2025Oct 2, 2025

• saf-lambda-function

  Public template
  (WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC

  aws-lambdaserverlessmitre+ 7aws-securitysecurity-automationmitre-corporationaws-lamitre-safsecurity-automation-frameworksaf-cli

  JavaScript

  •

  Other

  •4•4•4•0•Updated Oct 2, 2025Oct 2, 2025

• saf_action

  Public
  GitHub Action for SAF CLI

  mitremitre-corporationmitre-inspec+ 1mitre-saf

  Shell

  •

  Other

  •1•7•5•2•Updated Oct 1, 2025Oct 1, 2025