nist-800-53

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org

Zero-Trust Cloud Modernization Framework for Federal and Enterprise Environments with IaC, Security Policies, and Monitoring Design

Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OSCAL, validate with Trestle and oscal-cli, FedRAMP Rev 5 and 20x KSI workflows. Claude Code plugin plus portable skills for Cursor, Codex, Gemini, and more.

Unified NIST + OWASP security framework MCP server — 36 tools, 3439+ records, live NVD/KEV, PDF reading, STRIDE threat modeling, compliance mapping

Turn any DISA STIG into a plain-English, risk-ranked hardening plan — and check a machine against it under a human approval gate. Free, MIT, no API key.

An open, threat-informed cybersecurity reference library — 140 in-depth references, 16 how-to guides, and 47 discipline paths, anchored to MITRE ATT&CK and mapped to real controls, detections, and tooling. Free & MIT-licensed.

Terraform provider for Technitium DNS Server with STIG-hardened defaults and CNSSI 1253 compliance support

☁️ Multi-cloud security configuration review for AWS, Azure, GCP, and OCI. Read-only audits mapped to CIS, SOC 2, PCI DSS, NIST 800-53, and HIPAA, with remediation tracking to verify fixes over time. ✅

Centralized STIG & NIST 800-53 compliance knowledge, playbooks, and secure code templates for federal systems development.

Enterprise-Grade macOS Security Hardening, Audit & Baseline Drift Engine (54 CIS/NIST/MITRE controls, OASIS SARIF v2.1.0, Zero Dependencies)

PolicyProbe — a Flipper Zero physical-security compliance scanner: audits RFID/NFC, sub-GHz, IR and iButton access control and maps every finding to ISO/IEC 27001 and NIST SP 800-53 controls

Audit-ready ISO/IEC 27001:2022 control assessment & evidence package for a fictional cloud SaaS — workbook, SSP, evidence tracker, readiness report, charts. NIST 800-53 crosswalk.

Free, agentless SQL Server compliance audit - 500+ checks mapped to NIST, CIS, STIG, ISO 27001 & SOC 2. The open alternative to SQL Vulnerability Assessment.

PowerShell toolkit for hardening Windows 11 on standalone devices, with NIST SP 800-53 and 800-171 control mappings

Open-source agent skills, agents, and reference connectors for compliance engineers. SOC 2, ISO 27001, NIST 800-53.

SSH 暴力破解深度防御：从攻击链到六层防御体系。一本关于 SSH 纵深加固与堡垒机架构的电子书。by LeisureLinux

Read-only, evidence-grade automation for FedRAMP 20x & Rev5: a TypeScript collector that captures AWS/GCP/Kubernetes config evidence for all 63 KSIs (223 requirements), benchmarks against NIST 800-53 at Low/Moderate/High, and signs it (Ed25519 + OSCAL) — plus a local multi-user tracker over the FRMR catalog.

NIST SP 800-171 controls matrix with all 110 requirements mapped to NIST 800-53, CMMC 2.0, CIS Controls, and ISO 27001.

GitHub-native DevSecOps pipeline that builds the full RMF/cATO Body of Evidence (NIST 800-53, Navy RAISE 2.0) with an AO dashboard and an eMASS-ready submission package — all via GitHub Actions/Pages/Releases.