Data

Tools

Indexes

Applications

Experiments

Awesome

An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with soc2

A curated list of projects in awesome lists tagged with soc2 .

https://github.com/intuitem/ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

audit automation bsi cis compliance cybersecurity dora ebios-rm gdpr grc isms iso27001 llm mcp nis2 nist quantification risk-management security soc2

Last synced: 05 Jun 2026

https://github.com/medplum/medplum

Medplum is a healthcare platform that helps you quickly develop high-quality compliant applications.

ehr electronic-health-record fhir fhir-server graphql healthcare hipaa medical react soc2 typescript

Last synced: 01 Apr 2026

https://github.com/trycompai/comp

AI Native platform to get companies compliant - Vanta & Drata Alternative

ai audit authjs compliance drata gdpr iso27001 nextjs open open-source prisma security soc2 t3-stack tailwindcss turborepo vanta zod

Last synced: 09 Jul 2026

https://github.com/lunasec-io/lunasec

LunaSec - Dependency Security Scanner that automatically notifies you about vulnerabilities like Log4Shell or node-ipc in your Pull Requests and Builds. Protect yourself in 30 seconds with the LunaTrace GitHub App: https://github.com/marketplace/lunatrace-by-lunasec/

compliance continuous-delivery cve-scanning cybersecurity dependency-analysis devsecops gdpr log4shell pci-dss sbom sbom-generator scanning scanning-tool security security-tools soc2 software-composition-analysis tokenization web-security zero-trust

Last synced: 15 May 2025

https://github.com/strongdm/comply

Compliance automation framework, focused on SOC2

compliance documentation-toolchain gdpr go golang grc hipaa iso27001 pdf-generation soc2 templates

Last synced: 15 May 2025

https://github.com/getprobo/probo

Open source solutions for SOC2, GDPR, and ISO27001

compliance gdpr grc hipaa iso27001 iso27701 iso42001 soc2

Last synced: 26 May 2026

https://github.com/metriport/metriport

Metriport is an open-source universal API for healthcare data.

api fhir healthcare hipaa open-source self-hostable soc2 typescript

Last synced: 14 May 2025

https://github.com/bmarsh9/gapps

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com

27002 asvs cis18 cmmc compliance csc grc hipaa iso27001 nist nist-csf nist800-53 owasp owasp-top-10 pci pci-dss security soc2

Last synced: 05 Apr 2025

https://github.com/aragossa/pii-shield

Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️

devsecops entropy gdpr golang json kubernetes log-sanitization log-sanitizer logging pii-redaction security sidecar soc2

Last synced: 18 Apr 2026

https://github.com/paulveillard/cybersecurity-soc-compliance

A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.

compliance-as-code compliance-automation compliance-service security-compliance soc2 soc2-classification-nonproduction soc2-classification-production soc2-evidence soc2-platform

Last synced: 07 Jan 2026

https://github.com/loftwah/complisight

Designed for developers and compliance teams, the soc2 CLI tool utilizes the Go programming language and Cobra framework to offer an automated solution for evaluating SOC2 compliance. By assessing key areas such as Security, Availability, Processing Integrity, Confidentiality, and Privacy.

compliance cybersecurity soc2

Last synced: 07 May 2025

https://github.com/wpengine/base-images-public

Simple Docker Images

docker rd soc2

Last synced: 06 Apr 2025

https://github.com/rhosys/soc2.fyi

SOC 2 should be easy to get done and it should be inexpensive. Here's everything you wanted to know.

compliance iso27001 soc2 soc2-platform

Last synced: 28 Dec 2025

https://github.com/austinsonger/security-program

This template repo is used for managing SOC2 compliance using nothing, but github.

compliance grc soc2

Last synced: 28 Aug 2025

https://github.com/unidoc/isms

The Information Security Management System is an open-source management system platform. Documents live in git, collaboration lives in PostgreSQL, AI operates through suggestions and review and everything ships as a single binary.

compliance isms iso27001 nis2 risk-management self-hosted soc2

Last synced: 11 Jun 2026

https://github.com/acunningham-ship-it/leakproof

Local secret firewall for AI coding assistants (Claude Code/Cursor/aider) — scans + redacts secrets before anything leaves the machine. Local-first, zero cloud. MIT.

ai-coding aider claude-code cursor data-loss-prevention devsecops dlp hipaa local-first pre-commit privacy python secret-detection secrets security soc2

Last synced: 12 Jul 2026

https://github.com/chainguard-dev/kolide-google-matcher

Unearth host mismatches between Kolide & Google Workspace

compliance google kolide mdm soc2

Last synced: 09 Apr 2025

https://github.com/asq-sheriff/embediq

Adaptive wizard that generates production-ready configs for Claude Code, Cursor, GitHub Copilot, Gemini CLI, Windsurf, and AGENTS.md from a single Q&A. Deterministic, offline, audit-ready. compliance-aware (HIPAA / PCI-DSS / SOC2 / GDPR / FERPA / COPPA).

agents-md ai-coding-assistant claude-code compliance configuration-generator cursor developer-tools gemini github-copilot hipaa llm-tooling pci-dss soc2 typescript windsurf

Last synced: 31 May 2026

https://github.com/ejirocodes/better-auth-audit-logs

Audit log plugin for Better Auth. Auto-captures auth events with severity inference, PII redaction, custom storage backends, and retention policies.

audit audit-log authentication better-auth gdpr plugin soc2 typescript

Last synced: 07 Mar 2026

https://github.com/polycentric-labs/evidentia

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

compliance gap-analysis grc nist oscal pydantic python risk-management soc2

Last synced: 05 Jun 2026

https://github.com/the-swarm-corporation/custom-swarms-spec-template

Build your dream AI agent swarm with enterprise-grade reliability and scalability. This repository contains our official specification template for custom swarm development using the powerful Swarms Framework.

agents ai data-pipelines enterprise enterprise-grade fintech healthcare insurance ml multi-agent multi-agent-collaboration quant radiology security security-tools soc2 soc3 swarms swarms-agents swarms-of-agents

Last synced: 16 Feb 2026

https://github.com/paulveillard/cybersecurity-pci-dss-compliance

An ongoing & curated collection of awesome software best practices and techniques, libraries and frameworks, E-books and videos, websites, blog posts, links to github Repositories, technical guidelines and important resources about PCI DSS Compliance Standard in Cybersecurity.

cardholder-data compliance-platform cybersecurity-education cybersecurity-training fedramp merchant payment-gateway payment-infrastructure payments pci-compliance pci-devices pci-dss pci-express pci-payment-processor regulation settlement soc2 sox sox-compliant

Last synced: 22 Feb 2026

https://github.com/inflectra/spira-gitlab-datasync

Data synchronization plugin for synchronizing Spira with GitLab

soc2

Last synced: 31 May 2026

https://github.com/tocconsulting/lambda-security-scanner

AWS Lambda security scanner: 19 checks across 5 categories, secret detection in env vars, and compliance mapping for 10 frameworks (CIS, PCI DSS, HIPAA, SOC 2, ISO 27001, NIST). Multi-threaded scans with interactive HTML dashboards.

aws aws-security cis-benchmark cloud-security compliance cspm devsecops hipaa lambda nist pci-dss python security security-scanner serverless soc2

Last synced: 06 Jun 2026

https://github.com/inflectra/spiraapp-package-generator

Used to create a *.spiraapp file bundle from a manifest file for use in Spira

soc2 spira spiraapps

Last synced: 08 Jun 2026

https://github.com/victoralfred/devsec

MLSecOps security pipeline tool - automated scanning, policy enforcement, compliance mapping, and ML validation for CI/CD

cli compliance devsec golang iso27001 mlsecops opa policy-as-code sast sbom secrets-detection security slsa soc2 supply-chain-security vulnerability-scanner

Last synced: 12 Mar 2026

https://github.com/merchantprotocol/protocol

Stupid-simple CI/CD for Docker apps. One-command deploy, encrypted secrets, automatic rollback, SOC 2 Type II ready.

cicd deployment devops docker soc2

Last synced: 05 Apr 2026

https://github.com/nishant6118/Polaxis-SDK-MCP

Python SDK and MCP server for Polaxis - AI agent governance platform. Evaluate every tool call against policies in real time: block dangerous actions, enforce budgets, route to human approvals. Under 5ms.

agent-governance agent-security agentic-ai ai-agents audit-log compliance crewai fastapi human-in-the-loop langchain llm-security llmops mcp openai prompt-injection pydanticai python sdk soc2 zero-trust

Last synced: 28 Jun 2026

https://github.com/uprightsleepy/mcp-cloud-compliance

Conversational cloud security compliance auditing. MCP server enabling natural language queries about AWS security posture via Claude and other AI assistants.

aws cis-benchmark cloud-security compliance mcp model-context-protocol nist security-audit soc2 spring-boot

Last synced: 05 May 2026

https://github.com/ai-infra-curriculum/ai-infra-security-learning

AI Infrastructure Security Engineer Learning Track - ML infrastructure security, model security, and compliance

advanced ai-infrastructure compliance curriculum gdpr hipaa learning machine-learning ml-security privacy security soc2

Last synced: 10 Jun 2026

https://github.com/u2i/webapp-team-app

ISO 27001/SOC 2/GDPR compliant webapp application with GitOps deployment pipeline

belgium cloud-deploy compliance gcp gdpr gitops iso27001 kubernetes soc2

Last synced: 23 Jun 2025

https://github.com/fluohq/compliance-as-code

Generate compliance code from Nix. Evidence as Telemetry.

code-generation compliance gdpr hipaa nix observability opentelemetry security soc2

Last synced: 05 Oct 2025

https://github.com/themayursinha/verity-trust-copilot

Self-hosted compliance automation with AI-powered questionnaire answering, public Trust Center, and continuous AWS/GitHub monitoring. BYOK — supports OpenAI, Anthropic, Gemini, Groq, DeepSeek, Mistral, Ollama, and 10+ LLM providers.

ai-powered aws-integration compliance-automation continuous-monitoring gdpr github-integration iso-27001 ollama security-questionnaire self-hosted sentence-transformers soc2 trust-center vendor-risk-assessment

Last synced: 16 Jun 2026

https://github.com/inflectra/spira_microsoft-tfs-datasync

Source code to the Spira plugin for synchronizing with Microsoft Team Services (aka TFS)

datasync soc2 spirateam tfs

Last synced: 31 May 2026

https://github.com/mizcausevic-dev/agent-codex

Governance-as-code engine for AI platforms. Define policies in YAML, map to compliance standards (SOC 2, EU AI Act, ISO 27001, PCI-DSS, GDPR, HIPAA, NIST), evaluate decisions, run dry-runs to estimate blast radius, produce audit-ready ledgers. Third piece of the AI Platform Engineering trilogy.

ai-governance compliance eu-ai-act governance-engineering iso-27001 platform-engineering policy-as-code soc2 typescript

Last synced: 01 Jun 2026

https://github.com/oreillymedia/katacoda-marked

O'Reilly copy of https://github.com/BenHall/marked, forked from https://github.com/markedjs/marked

soc2

Last synced: 19 Mar 2026

https://github.com/inflectra/spira-fogbugz-datasync

This is the source code for our plugin that integrates Spira with FogBugz

soc2

Last synced: 10 Jul 2025

https://github.com/charlesbulabula/compliance-audit-engine

Automated compliance scanning, evidence collection, and audit reporting

audit aws-config cis-benchmark compliance pci-dss python soc2

Last synced: 03 Jun 2026

https://github.com/b-macker/naab-passage

🔒 Sovereign data gateway & PII protection - Zero leakage to LLMs and APIs with self-synthesizing architecture. HIPAA/GDPR compliant. Part of the NAAb Ecosystem.

anthropic api-gateway audit compliance data-privacy data-protection encryption gateway gdpr hipaa llm-proxy naab naab-ecosystem openai pii-protection polyglot privacy security soc2 zero-trust

Last synced: 06 Mar 2026

https://github.com/cess15/skills

Reusable AI agent skills for code review, security analysis, and compliance validation. SAST, GDPR, HIPAA, SOC2, PCI-DSS compliance across any programming language.

ai-agent ai-security anthropic claude code-review compliance gdpr hipaa owasp pci-dss sast security skills soc2 vulnerability-detection

Last synced: 19 Jun 2026

https://github.com/unidoc/isms-templates

Policy, risk, and compliance templates for isms.sh — covering ISO 27001, NIS2, SOC 2, DORA, HIPAA, ISO 42001, and more.

compliance isms iso27001 nis2 risk-management self-hosted soc2

Last synced: 11 Jun 2026

https://github.com/allenfbyrd/controlbridge

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation

compliance gap-analysis grc nist oscal pydantic python risk-management soc2

Last synced: 21 Apr 2026

https://github.com/allenfbyrd/evidentia

Previously: ControlBridge. Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation

compliance gap-analysis grc nist oscal pydantic python risk-management soc2

Last synced: 15 May 2026

https://github.com/prodcycle/actions

GitHub Action to scan PR changes for compliance violations via ProdCycle API

code-scanner code-scanning compliance compliance-as-a-service compliance-as-code github-actions hipaa hipaa-compliance hipaa-compliant soc2

Last synced: 29 Apr 2026

https://github.com/mikebrown0409/project-fuse

Zero-knowledge proof system for verifiable compliance envelopes. Proves compliance checkers executed correctly without revealing sensitive data. Built with RISC Zero zkVM. Phase 1 complete.

audit compliance cryptography gdpr privacy-preserving regulatory-compliance risc-zero rust soc2 zero-knowledge-proofs zkp zkvm

Last synced: 11 Jan 2026

https://github.com/alchemyplatform/alchemy-claude-plugin

Official Alchemy plugin for Claude Code & Cowork — blockchain data across 100+ chains via the hosted Alchemy MCP server.

alchemy blockchain claude claude-code ethereum mcp plugin soc2 solana web3

Last synced: 29 Jun 2026

https://github.com/prodcycle/cli

Multi-framework policy-as-code compliance scanner for infrastructure and application code. Evaluates Terraform, Kubernetes, Docker, and source code against SOC 2, HIPAA, and NIST CSF.

cli compliance hipaa nist policy-as-code python security soc2 typescript

Last synced: 13 May 2026

https://github.com/wrannaman/redact-pii-python

Zero-dependency, blazing-fast regex-based PII redaction with optional compliance dashboard integration. Python package for redactpii.com

ai ai-redaction anonymization compliance data-protection gdpr gdpr-compliance hippaa langchain llm openai pii pii-anonymization pii-detection pip python redaction security soc2

Last synced: 01 May 2026

https://github.com/jamesgober/dotnet-audit-kit

Audit trail library for .NET 8. Immutable entries with SHA-256 hash chaining for tamper detection. Non-blocking dispatch to multiple sinks.

audit-log compliance csharp dotnet hash-chain jg-dnet nuget soc2

Last synced: 08 Jul 2026

https://github.com/darpanzope/compliancekit-action

Compliance scanning in CI — DigitalOcean, AWS, GCP, Hetzner, Kubernetes, Linux. Maps every finding to SOC 2 / ISO 27001 / CIS / NIST / HIPAA / PCI / ATT&CK. Audit-ready evidence pack output.

actions audit aws cis-controls compliance devsecops digitalocean evidence gcp hetzner-cloud hipaa iso27001 kubernetes mitre-attack nist-800-53 pci-dss sarif security soc2

Last synced: 11 Jul 2026

https://github.com/agenticmail/enterprise

Enterprise AI Agent Platform — Identity, Email, Compliance, Microsoft 365 & Google Workspace integration, SOC 2 reporting, DLP, multi-tenant workforce management

ai-agents ai-platform compliance dlp email enterprise google-meet google-workspace microsoft-365 multi-tenant nodejs oauth saml soc2 task-management telegram-bot typescript voice-ai workforce-management

Last synced: 16 May 2026

https://github.com/emmaspd/mcp-cloud-compliance

MCP Cloud Compliance simplifies AWS cloud compliance auditing by automating the reporting process for key security frameworks. With this tool, you can streamline your compliance efforts and focus on what truly matters. 🛠️🌐

aws cis-benchmark cloud-security compliance mcp model-context-protocol nist soc2 spring-boot

Last synced: 05 Aug 2025

https://github.com/inflectra/spira-redmine-datasync

Data synchronizion plugin between SpiraTeam and Redmine

soc2

Last synced: 08 Jun 2026

https://github.com/zaman-hamza/isenguardai

An advanced AI-powered security and monitoring system designed for real-time threat detection, automated responses, and seamless cloud integration to enhance digital and physical safety.

artificial-intelligence compliance cybersecurity firebase hippa react soc2 tailwindcss

Last synced: 03 Apr 2025

https://github.com/ajy0127/security-hub-compliance-analyzer

AWS SecurityHub Multi-Framework Compliance Analyzer

ai automation aws compliance securityhub soc2

Last synced: 17 May 2026