CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, Privacy, and Reporting. It supports 100+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Compliance automation framework, focused on SOC2

AI Native platform to get companies compliant - Vanta & Drata Alternative

Open source solutions for SOC2, GDPR, and ISO27001

Metriport is an open-source universal API for healthcare data.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

Template SOC2 Policy Authority - documentation pipeline

Open Source AWS Control Tower

A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

Secure SDLC process template

RD - PHP docker base images

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

A curated list of tools, frameworks, and resources for IT compliance, security standards, and regulatory requirements

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.