#compliance

Wazuh - Puppet module

Offline PII firewall for AI agents and LLM apps: fast local detection and redaction, Claude Code hook, LiteLLM guardrail. Zero network calls, one dependency.

A scalable server implementation of the OSS Review Toolkit.

The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.

OpenIDM is an open-source identity management solution that automates user provisioning, synchronization, and lifecycle management. It supports integration with diverse systems, enabling secure, centralized control over user identities and access.

A semantic substrate for AI-collaborative software.

Accountable Autonomy: open-source evidence layer that gates every AI agent tool call against your policy and writes a hash-chained record an auditor verifies offline, without trusting you. Root-agnostic; binds to TPM 2.0 / SEV-SNP when present. Your environment, no SaaS, no telemetry. AGPL-3.0.

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Open-source AI Bill of Materials (AIBOM) scanner: inventories AI models, datasets, prompts, embeddings, vector DBs & RAG pipelines across code, containers & Kubernetes — with file:line evidence, load-time risk detection (poisoned pickle / Keras Lambda / unsafe torch.load) and NIST AI RMF / OWASP compliance mapping. CycloneDX · SARIF · JSON.

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

JMo Security Suite - Terminal-first security audit toolkit with many tools, multi-target scanning, & compliance

Audit logging, exports, alerts, and dashboards for Filament admin panels.

Open, primary-source-backed U.S. legal content — practice guides, 50-state surveys, reviewer checklists, and standard agreement templates. Built for legal teams and the agents helping them.

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. Both local repositories and container images are supported as the input, and the tool is ideal for integration.

Git diff for SBOMs—compare CycloneDX, SPDX, and Syft documents, detect tampering, and gate CI.

Openlane go-client, useful for automating your SOC 2 evidence collection, updating ISO27001 controls, or really anything you want to do in the Openlane system

Foundational elements of the "Critter Stack"

Fast Rust engine for detecting and redacting PII and secrets — in prompts, code, and databases. OpenAI-compatible gateway, Postgres scanner, CLI, and WASM. 32× Presidio. Apache-2.0.

Lighthouse for MCP — score any MCP server 0–100.

One scan for AI risk. `opena2a review` checks an AI project across credentials, shadow agents, MCP servers, and dependencies, returns a score, and routes each finding to the tool that fixes it. Open source.

Cycles budget and action guard for OpenClaw agents

MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents

Marble - the real time decision engine for fraud and AML

Tool to assist in Code/File reviews

Chronicle - Verifiable Audit Logging and Append-Only Audit Trails for Laravel.

Zero-dependency TypeScript SDK for AI agent governance: policy enforcement, injection detection, tamper-evident audit, and standards mapping (EU AI Act, OWASP, NIST, ISO 42001)

No repository description published.

Heimdall Data Format (HDF) is a standardized JSON schema for representing security assessment baselines and results across diverse tools and platforms.

Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.

Open source compliance-first AI operating system for SEC-registered investment advisers. Apache 2.0 licensed with defensive patent grant.