#compliance (30 Repositories)
Ranked open-source repositories tagged with #compliance, scored by pull request acceptance likelihood and maintainer engagement velocity.
77.5%
37.3h
30 repositories tagged #compliance
StackGuardian/tirith
Plugin IaC Governance for any pipeline, running anywhere. Evaluate plans with Tirith, protect sensitive values, enforce centralised governance, and surface actionable results before infrastructure changes are applied.
mondoohq/cnspec
An open source, cloud-native security to protect everything from build to runtime
wazuh/wazuh-ansible
Wazuh - Ansible playbook
microsoft/agent-governance-toolkit
AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.
open-policy-agent/opa-envoy-plugin
A plugin to enforce OPA policies with Envoy
tractorjuice/arc-kit
The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants
risuorg/risu
Automation Troubleshooting Framework to validate and report configuration, software installed, etc with bash, python, and your language of choice.
utmstack/UTMStack
Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.
getplumber/plumber
Plumber detects CI/CD security issues in your GitHub workflows and gives you a score
wazuh/wazuh-docker
Wazuh - Docker containers
getprobo/probo
Open source solutions for SOC2, GDPR, and ISO27001
Normation/rudder
Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.
oss-review-toolkit/ort
A suite of tools to automate software compliance checks.
prowler-cloud/prowler
Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.
verifywise-ai/verifywise
Complete AI governance and LLM Evals platform with support for EU AI Act, ISO 42001, NIST AI RMF and 20+ more AI frameworks and regulations. Join our Discord channel: https://discord.com/invite/d3k3E4uEpR
chainloop-dev/chainloop
SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more
wazuh/wazuh
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
open-policy-agent/opa
Open Policy Agent (OPA) is an open source, general-purpose policy engine.
ComplianceAsCode/content
Security automation content in SCAP, Bash, Ansible, and other formats
resilient-tech/india-compliance
Simple, yet powerful compliance solutions for Indian businesses
intuitem/ciso-assistant-community
CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
kyverno/kyverno
Unified Policy as Code
Galvnyz/M365-Assess
290+ Automated checks across 14 compliance frameworks, interactive HTML report, no data leaves your machine.
Cogeto/cogeto
Verified institutional memory for your documents: reads document sets, verifies every fact against its source, reports contradictions between documents, and produces a signed findings report. EU hosted, self hosted, or fully offline. AGPLv3.
todogroup/todogroup.org
Official TODO Website that contains TODO Guides, OSPO use cases and more resources to advance in the OSPO journey
OpenIdentityPlatform/OpenIDM
OpenIDM is an open-source identity management solution that automates user provisioning, synchronization, and lifecycle management. It supports integration with diverse systems, enabling secure, centralized control over user identities and access.
WhitzardAgent/AgentGuard
AgentGuard: Zero-Trust Security Foundation for AI Agents
zeweihan/aiworkdeck
Open-source workspace for professional document AI: reviewable agent edits, source-linked work, three-way document merges, and an extensible plugin runtime. Starting with legal work.
hashicorp/copywrite
Automate copyright headers and license files at scale
cloud-custodian/cloud-custodian
Rules engine for cloud security, cost optimization, and governance, DSL in yaml for policies to query, filter, and take actions on resources