Hardening Ubuntu. Systemd edition.

Ansible role to apply a security baseline. Systemd edition.

Identify hardcoded secrets in static structured text

🤖 Admyral enables continuous control monitoring for any custom control

Semantic SBOM diff and TUI analysis tool. Compares CycloneDX/SPDX files to component changes, dependency shifts, license conflicts, and vulnerabilities.

Building Operational Visibility Into (n) Environments

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about DevSecOps in Cybersecurity.

Security Control Knowledge Graph

CIS Ubuntu 24.04 - v1.0.0 - Ansible Role

A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.

Workflow transpilation and execution framework - import LangChain, Airflow, GitHub Actions, Kubernetes, Docker Compose

Scripts to use with the macOS Security Compliance Project

MCP Servers for BlockChain, Cyber Security and AI Automation A cutting-edge Model Context Protocol (MCP) server infrastructure designed to power the next generation of decentralized applications with integrated AI automation and enterprise-grade security.

The one-stop DLP browser extension to stop users from sharing sensitive information with chatGPT.

Nisify is a NIST CSF 2.0 compliance evidence aggregation tool that automatically collects technical evidence from 13 cloud platforms, maps it to the 106 NIST controls alongside your manual governance documents, and provides a transparent, real-time dashboard for measuring compliance maturity and tracking gaps.

An open-source GRC (Governance, Risk, and Compliance) platform designed to help teams manage security risks, compliance workflows, audits, and information assets. Built with Next.js, Tailwind CSS, and MongoDB — with a focus on usability, flexibility, and ISO 27001 alignment. Contributions welcome!

Centralized STIG & NIST 800-53 compliance knowledge, playbooks, and secure code templates for federal systems development.

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about Security Assurance in Cybersecurity

Micro-ID-Gym is a software suite designed to aid security researchers and developers in testing Identity Management protocols implementations

AI-powered compliance automation platform — autonomous agents verify SOC 2, ISO 27001 controls 24/7

This repository contains labs and a project from the Network and Cyber Security course at Innopolis University, showcasing practical solutions in compliance, threat modeling, endpoint security, web security, and DevSecOps.

Github organisation security auditing tool

Building a keylogger using Metasploit framework

SOC 2 Type II Certification Project

An incident response timeline generator with compliance framework support for GDPR, HIPAA, NERC CIP, PCI DSS, and more. Built with v0.

The project showcases the successful implementation of two core DevOps principles: Shift Left Security (using Checkov) to prevent insecure code (e.g., open SSH ports) from being merged, and FinOps (using Infracost) to provide an instant monthly cost estimate directly in the Pull Request.

Enterprise PowerShell tool for automated LogRhythm archive cleanup with secure credentials and production-validated performance.

Tool-Disclosure-List (TDL) focused on Ai tools commonly used in visual effects (VFX) and animation (ANM) to bring transparency and meet compliance obligations.

Security (PCI/RBAC/MFA) • Infra automation (Nutanix/Cisco) • Healthcare SaaS • Full-stack SDLC

identification, exploitation, and remediation of OWASP API Top 10 vulnerabilities