Open Source Compliance Risk Management Tools

lighthouse ★ 31K

Automated auditing, performance metrics, and best practices for the web.

teleport ★ 21K

The easiest, and most secure way to access and protect all of your infrastructure.

lynis ★ 17K

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentles

prowler ★ 15K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

gs-quant ★ 14K

Python toolkit for quantitative finance

opa ★ 12K

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Amphion ★ 10K

Amphion (/æmˈfaɪən/) is a toolkit for Audio, Music, and Speech Generation. Its purpose is to support reproducible research and help junior researchers and engin

checkov ★ 9.1K

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by

kyverno ★ 8.3K

Unified Policy as Code

aircrack-ng ★ 7.8K

WiFi security auditing tools suite

tfsec ★ 7.1K

Tfsec is now part of Trivy

agent-governance-toolkit ★ 6.5K

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10

rundeck ★ 6.4K

Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts

laravel-activitylog ★ 5.9K

Log activity inside your Laravel app

next-terminal ★ 5.7K

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and complianc

FinanceToolkit ★ 5.5K

Transparent and Efficient Financial Analysis

ThreatMapper ★ 5.3K

Open Source Cloud Native Application Protection Platform (CNAPP)

ossec-hids ★ 5.1K

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-ti

Harden-Windows-Security ★ 4.8K

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows

black-hat-rust ★ 4.5K

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

laravel-auditing ★ 3.5K

Record the change log from models in Laravel

polaris ★ 3.4K

Validation of best practices in your Kubernetes clusters

FinancePy ★ 3.2K

A Python Finance Library that focuses on the pricing and risk-management of Financial Derivatives, including fixed-income, equity, FX and credit derivatives.

openalgo ★ 2.9K

Open Source Algo Trading Platform for Everyone

SnapOtter ★ 2.9K

Open-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API &

pwndoc ★ 2.9K

Pentest Report Generator

windows_hardening ★ 2.7K

HardeningKitty and Windows Hardening Settings

Audit.NET ★ 2.7K

An extensible framework to audit executing operations in .NET

skfolio ★ 2.6K

Python library for portfolio optimization, factor model construction, and risk management built on scikit-learn

greenlight ★ 2.5K

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against th

ort ★ 2.1K

A suite of tools to automate software compliance checks.

Comp AI ★ 2.1K

Get audit-ready for SOC 2, ISO 27001, HIPAA, and GDPR

c15t ★ 2.0K

Build privacy-compliant cookie banners with full control

HardeningKitty ★ 1.9K

HardeningKitty - Checks and hardens your Windows configuration

TeamPass ★ 1.9K

Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser e

openscap ★ 1.8K

NIST Certified SCAP 1.2 toolkit

appshark ★ 1.8K

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

copacetic ★ 1.7K

🧵 CLI tool for directly patching container images!

webterminal ★ 1.7K

ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/s

flashlight ★ 1.6K

📱⚡️ Lighthouse for Mobile - audits your app and gives a performance score to your Android apps (native, React Native, Flutter..). Measure performance on CLI, E

databunker ★ 1.5K

Secure Vault for Customer PII/PHI/PCI/KYC Records

tradememory-protocol ★ 1.4K

Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.

bernstein ★ 1.3K

The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable r

dep-scan ★ 1.3K

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. B

fossology ★ 1.0K

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the comma

licensee ★ 920

Ruby gem & CLI to detect a project's open source license (SPDX) from LICENSE files, package manifests, and READMEs

attestix ★ 841

Attestix - Attestation Infrastructure for AI Agents. DID-based agent identity, W3C Verifiable Credentials, EU AI Act compliance layer, delegation chains, and re

threagile ★ 785

Agile Threat Modeling Toolkit

rudder ★ 722

Rudder is a configuration and security automation platform. Manage your Cloud, hybrid or on-premises infrastructure in a simple, scalable and dynamic way.

privado ★ 665

Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.

wallace-cli ★ 645

Pretty CSS analytics on the CLI

EntityAuditBundle ★ 643

Audit for Doctrine Entities

chainloop ★ 610

SDLC evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more

UTMStack ★ 592

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

wazuh-dashboard-plugins ★ 530

Plugins for Wazuh Dashboard

OpenPolicy ★ 165

Generate legal policies directly from TypeScript code