soc2

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

AI Native platform to get companies compliant - Vanta & Drata Alternative

Compliance automation framework, focused on SOC2

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

Open source solutions for SOC2, GDPR, and ISO27001

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 93% (with skills) vs 74% (without skills). Updated Monthly.

Healthcare data infrastructure for next generation care delivery.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Enterprise-ready SIEM, SOAR and Compliance powered by real-time correlation and threat intelligence.

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

Transilience — Shasta is the open-source pre-GA AI and Cloud Security platform. Supports GCP, AWS, and Azure and 14 security & compliance frameworks

Template SOC2 Policy Authority - documentation pipeline

Compliance-ready Kubernetes on AWS EKS with SOC2 and HIPAA support

A curated list of tools, frameworks, and resources for IT compliance, security standards, and regulatory requirements

Proves your PostgreSQL backups actually restore, before you find out the hard way.

Open Source AWS Control Tower