nist

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

PingCastle - Get Active Directory Security at 80% in 20% of the time

Open Security Controls Assessment Language (OSCAL)

The universal GraphQL API and CSPM tool for AWS, Azure, GCP, K8s, and tencent.

Collection of pure Rust elliptic curve implementations: NIST P-224, P-256, P-384, P-521, secp256k1, SM2

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

A curated list of awesome cloud security blogs, podcasts, standards, projects, and examples.

Tool to find CVEs and Exploits.

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

A simple Java command-line utility to mirror the CVE JSON data from NIST.

🔒 Laravel validation rules that follow the password related recommendations found in NIST Special Publication 800-63B section 5.

Industry Working Group on Automated Cryptographic Algorithm Validation

Periodic table, physical constants, and molecule parsing for quantum chemistry.

I developed a rigorous cybersecurity project portfolio on mock clients covering NIST, audits, Linux, SQL, assets, threats, vulnerabilities, detection, incident response, escalation, Wireshark, tcpdump, IDS (Suricata), SIEM (Splunk, Chronicle), and Python automation.

NIST/NCCoE Mobile Threat Catalogue

An open-source listing of cybersecurity technology mapped to the NIST Cybersecurity Framework (CSF)

A repository tracking releases of NIST's ACVP server. See www.github.com/usnistgov/ACVP for the protocol.

AITIR 2.0: evidence-grounded, authorized identity-threat response reference architecture.

NIST Biometric Image Software (Java Implementation)