compliance-automation

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

368 AI skills, 76 expert agents, and 859 stdlib Python tools for every team: engineering, PM, marketing, C-level, compliance, business ops, and research. Installs on Claude Code, Cursor, Codex, Gemini, Copilot, and 6 other AI assistants.

Marble - the real time decision engine for fraud and AML

🤖 Admyral enables continuous control monitoring for any custom control

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

A web application to streamline the development of STIGs from SRGs

The Auditree framework tool to run compliance control checks as unit tests.

Automate end-to-end AI governance with Microsoft Purview DSPM for AI and Defender for AI. Configure DLP, sensitivity labels, audit logging, and threat detection across M365 Copilot, Microsoft Foundry, Microsoft Fabric, and custom agentic solutions.

A schema and set of tools for using SQL to query cloud infrastructure.

Pre-configured response & remediation playbooks for AWS Security Hub

OSCAL tools for AI agents

Privacy as Code for DSAR Orchestration: Privacy Request automation to fulfill GDPR, CCPA, and LGPD data subject requests.

Stave finds compound attack paths that single-resource scanners miss. AWS security findings from configuration snapshots — no credentials required.

CI/CD plugins for image scanning, integrations with AWS ECR, Google Container Registry

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer do.

A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.

Guardon is an open-source browser extension designed to help developers and security teams catch Kubernetes security issues early in the development lifecycle—before configuration files are merged or deployed to production

Check whether a package is ready for submission to rOpenSci's peer-review system

the openlane ui - holds the openlane console and storybook