Open Source Compliance Risk Management Tools

lighthouse ★ 31K

Automated auditing, performance metrics, and best practices for the web.

teleport ★ 21K

The easiest, and most secure way to access and protect all of your infrastructure.

lynis ★ 16K

Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentles

prowler ★ 15K

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

gs-quant ★ 13K

Python toolkit for quantitative finance

opa ★ 12K

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

Amphion ★ 10K

Amphion (/æmˈfaɪən/) is a toolkit for Audio, Music, and Speech Generation. Its purpose is to support reproducible research and help junior researchers and engin

checkov ★ 9.0K

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by

kyverno ★ 8.2K

Unified Policy as Code

aircrack-ng ★ 7.7K

WiFi security auditing tools suite

tfsec ★ 7.0K

Tfsec is now part of Trivy

rundeck ★ 6.3K

Enable Self-Service Operations: Give specific users access to your existing tools, services, and scripts

agent-governance-toolkit ★ 6.3K

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10

laravel-activitylog ★ 5.9K

Log activity inside your Laravel app

next-terminal ★ 5.6K

A simple, secure, easy-to-use bastion and session auditing system. Supports RDP, SSH, VNC, Telnet, HTTP, records and replays sessions for auditing and complianc

FinanceToolkit ★ 5.4K

Transparent and Efficient Financial Analysis

ThreatMapper ★ 5.3K

Open Source Cloud Native Application Protection Platform (CNAPP)

ossec-hids ★ 5.1K

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-ti

Harden-Windows-Security ★ 4.7K

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows

black-hat-rust ★ 4.4K

Applied offensive security with Rust - https://kerkour.com/black-hat-rust

laravel-auditing ★ 3.5K

Record the change log from models in Laravel

polaris ★ 3.4K

Validation of best practices in your Kubernetes clusters

FinancePy ★ 3.2K

A Python Finance Library that focuses on the pricing and risk-management of Financial Derivatives, including fixed-income, equity, FX and credit derivatives.

pwndoc ★ 2.9K

Pentest Report Generator

SnapOtter ★ 2.7K

Open-source, self-hosted file-processing tool. Convert, compress, OCR, transcribe & run local AI across image, video, audio, PDF & documents, via UI, REST API &

openalgo ★ 2.7K

Open Source Algo Trading Platform for Everyone

windows_hardening ★ 2.7K

HardeningKitty and Windows Hardening Settings

Audit.NET ★ 2.7K

An extensible framework to audit executing operations in .NET

greenlight ★ 2.4K

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against th

ort ★ 2.1K

A suite of tools to automate software compliance checks.

Comp AI ★ 2.0K

Get audit-ready for SOC 2, ISO 27001, HIPAA, and GDPR

c15t ★ 1.9K

Build privacy-compliant cookie banners with full control

HardeningKitty ★ 1.8K

HardeningKitty - Checks and hardens your Windows configuration

openscap ★ 1.8K

NIST Certified SCAP 1.2 toolkit

appshark ★ 1.8K

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

webterminal ★ 1.7K

ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal jumpserver audit realtime monitor rz/sz 堡垒机 云桌面 linux devops sftp websocket file management rz/s

copacetic ★ 1.7K

🧵 CLI tool for directly patching container images!

flashlight ★ 1.6K

📱⚡️ Lighthouse for Mobile - audits your app and gives a performance score to your Android apps (native, React Native, Flutter..). Measure performance on CLI, E

databunker ★ 1.5K

Secure Vault for Customer PII/PHI/PCI/KYC Records

tradememory-protocol ★ 1.4K

Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.

dep-scan ★ 1.3K

OWASP dep-scan is a next-generation security and risk audit tool based on known vulnerabilities, advisories, and license limitations for project dependencies. B

threagile ★ 780

Agile Threat Modeling Toolkit

wallace-cli ★ 643

Pretty CSS analytics on the CLI

EntityAuditBundle ★ 643

Audit for Doctrine Entities

OpenPolicy ★ 163

Generate legal policies directly from TypeScript code