#compliance

Bitemporal entity change history for Go — valid time and transaction time, ORM-agnostic over database/sql. Know what your data was, and what you believed it was.

EgisAI SDK

Alertmanager anonymization webhook proxy

Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz

A gh CLI extension that renders an interactive, offline HTML explorer of a GitHub org's teams, members, repos, and CODEOWNERS attributions.

Fire drills for your backups — restores real backups into disposable sandboxes, verifies the data, measures RTO/RPO, emits signed audit evidence (SOC 2 / ISO 27001)

CLI security scanner for self-hosted multi-tenant AI-agent platforms. 16 fail-closed OPA/Rego rules catch tenant-isolation defects (sandbox scoping, SSRF, cross-tenant cron/auth, secret leakage). SARIF and JSON output for CI.

Keine Repository-Beschreibung veröffentlicht.

Proof-carrying defensive security reviews for AI-assisted software, with deterministic policy, portable evidence, and human review required.

Claude Code Skills, Agents & Plugins — UitKit

AGLedger™ SDK — Accountability and audit infrastructure for agentic systems. Patent Pending.

Open-source DevSecOps gateway for AI traffic. Intercept, audit, and route LLM requests to prevent data leaks and enforce zero-trust security policies.

A deterministic CLI that audits your GitHub enterprise, orgs, and repos against a security baseline you own — rules are data, the bar is per-target.

TypeScript library for SEC EDGAR filing discovery and contract exhibit acquisition with built-in rate limiting and compliance

YAML device spec to CE-MDR Annex II/III technical file skeleton in one command. Pure-Python CLI.

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

Free, local-first data catalog that auto-drafts your EU compliance evidence — a GDPR Art. 30 RoPA and a DORA register. One command, ~5 minutes, no Docker. Reads names and types, never the values: raw data never leaves your machine. AGPL-3.0; the paid portal adds only the signed official record — price on the page.

Agent memory for regulated environments. Bitemporal model, tamper-evident audit chain, GDPR crypto-shred.

Guardrails for AI agents, with a receipt. Blocks destructive tool calls before they run and signs every decision into a hash-chained record anyone can verify with an open-source tool.