CISO Assistant is a one-stop-shop for GRC, covering Risk, AppSec, Compliance/Audit Management, Privacy and supporting +100 frameworks worldwide with auto-mapping: NIST CSF, ISO 27001, SOC2, CIS, PCI DSS, NIS2, CMMC, PSPF, GDPR, HIPAA, Essential Eight, NYDFS-500, DORA, NIST AI RMF, 800-53, CyFun, AirCyber, NCSC, ECC, SCF and so much more

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Compliance automation framework, focused on SOC2

AI Native platform to get companies compliant - Vanta & Drata Alternative

Open source solutions for SOC2, GDPR, and ISO27001

Metriport is an open-source universal API for healthcare data.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

Template SOC2 Policy Authority - documentation pipeline

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

Open Source AWS Control Tower

A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

Secure SDLC process template

RD - PHP docker base images

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

This repository is dedicated to providing resources, information, and tools related to the NIS2 Directive, a European Union regulation aimed at improving the security of network and information systems across the EU.

A curated list of tools, frameworks, and resources for IT compliance, security standards, and regulatory requirements