🔬 Verifiable AI-Augmented Engineering Framework - Stop AI hallucinations with formal traceability (REQ→ART→TC). Agent Skills for Claude Code, Cursor, VS Code & Copilot. Enterprise-grade: ISO 9001, ISO 27001, GxP-ready. Red Team verification, multi-cycle lifecycle, behavioral anti-patterns.

Security architecture patterns and NIST 800-53 controls from opensecurityarchitecture.org

Overview of existing mappings from and to cyber security controls

𝟰𝟱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻-𝗴𝗿𝗮𝗱𝗲 𝗚𝗥𝗖 𝗽𝗿𝗼𝗺𝗽𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟭𝟯 𝗱𝗼𝗺𝗮𝗶𝗻𝘀. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. 𝗥𝗮𝘁𝗲𝗱 𝟵.𝟱/𝟭𝟬 𝗢𝗻 𝗨𝘀𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻

A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant management, AI-powered analysis, and automated remediation workflows.

Biblioteca curada de referência canônica em cybersegurança (pt-BR): 213 arquivos cobrindo MITRE ATT&CK/ATLAS/D3FEND/CAPEC, OWASP, NIST CSF/SP800-53/SSDF, ISO 27001:2022, CIS Controls v8, PCI DSS v4.0, CVE/CWE/CVSS, STIX/TAXII, threat intel e mais.

Open-source company OS with HR & people, asset management, finance operations, and security compliance engine (ISO 27001, SOC I, SOC II). Risk registers, controls, audits, objectives. API-first.

Open-Source ISMS für Multi-Framework-Compliance: ISO 27001:2022, BSI IT-Grundschutz, NIS-2, DORA, DSGVO/GDPR, TISAX. Multi-Tenant, 93 Annex-A-Controls, Risk-Engine, tamper-evidenter Audit-Trail. Symfony 7.4 / PHP 8.4.

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

Security Roadmap to ISO-27k

Windows Defender contains several functions for tools to secure Windows machine and get compliant with common regulations.

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

IAM Authentication Audit Tracker is a Terraform-based AWS security lab that detects IAM login anomalies using CloudTrail, CloudWatch, SNS, and Athena. It integrates tfsec scans through GitHub Actions and demonstrates alerting, audit log analysis, and compliance mapping to NIST 800-53 (AU-6, AC-7) and ISO 27001 A.12.4 using secure IaC

Build 45 production-grade GRC prompts for risk, compliance, audit, and governance work across 13 domains

Terminaler Prüfungstrainer für die BSI IT-Grundschutz Praktiker Zertifizierung — scrapes official BSI course, Textual TUI, score tracking

A structured ISO 27001-based risk assessment and treatment plan to identify and mitigate critical business continuity and data security threats.

Build an enterprise-level AI agent operating system enabling cross-departmental and cross-system intelligent collaboration.

Web-based diagnostic and self-assessment tool for evaluating ISO/IEC 27001 compliance and ISMS readiness.

Self-paced ISO/IEC 27001 Lead Auditor (Information Security Management Systems) training course by the Center for Professional Development at the International Cybersecurity and Digital Forensics Academy.

Interactive GRC Risk Register — ISO 31000, DORA, NIST RMF, GDPR. Built for EU Financial Services compliance.