HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
Titan Core - Snowflake infrastructure-as-code. Provision environments, automate deploys, CI/CD. Manage RBAC, users, roles, and data access. Declarative Python Resource API. Change Management tool for the Snowflake data warehouse.
🤖 Admyral enables continuous control monitoring for any custom control
Manage AWS Config Rules at scale in AWS multi-account and/or multi-region environment; with fully configurable deployment (RuleSets) and analytics.
Template SOC2 Policy Authority - documentation pipeline
A collection of awesome framework, libraries, learning tutorials, videos, webcasts, technical resources and cool stuff about Security Orchestration, Automation and Response (SOAR).
This repository describes how to use AWS Control Tower controls, HashiCorp Terraform, and infrastructure as code (IaC) to implement and administer preventive, detective, and proactive security controls. A control (also known as a guardrail) is a high-level rule that provides ongoing governance for your overall AWS Control Tower environment.
A schema and set of tools for using SQL to query cloud infrastructure.
Pre-configured response & remediation playbooks for AWS Security Hub
The Auditree framework tool to run compliance control checks as unit tests.
Deepfence Runtime API & code samples
Privacy as Code for DSAR Orchestration: Privacy Request automation to fulfill GDPR, CCPA, and LGPD data subject requests.
Implements OPA-based preventive security controls for AWS Infrastructure using Terraform Infrastructure as Code (IaC), that can establish a security baseline and safeguard resources before deployment into the AWS Accounts and reduce security risks.
A collection of useful queries that can be used to verify compliance/security across your AWS assets
A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.
A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.
Hardened Windows Server image
The Auditree common fetchers, checks and harvest reports library.
🍪 Minimal & vanilla JS only cookie consent banner with no dependencies with Google consent mode support
The Auditree data gathering and reporting tool.
Add a description, image, and links to the compliance-as-code topic page so that developers can more easily learn about it.
To associate your repository with the compliance-as-code topic, visit your repo's landing page and select "manage topics."