Compliance en governance

Open Source Algo Trading Platform for Everyone

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

NIST Certified SCAP 1.2 toolkit

Transparent and Efficient Financial Analysis

Python toolkit for quantitative finance

AI Native platform to get companies compliant - Vanta & Drata Alternative

Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz

Independent Auditing of AI Agents. Run by human or the agent itself, to answer the most crucial question in the AI Agent Economy. Is the agent doing what is supposed to do? With iFixAi you can have this answer in less than 120 seconds.

YAO = Yielding AI Outcomes. A rigorous engineering, evaluation, governance, and portability system for reusable agent skills.

Confidential Consortium Framework

8 Lessons, Kick-start Your Cybersecurity Learning.

AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Covers 10/10 OWASP Agentic Top 10.

Harden Windows Safely, Securely using Official Supported Microsoft methods and proper explanation | Always up-to-date and works with the latest build of Windows | Provides tools and Guides for Personal, Enterprise, Government and Military security levels | SLSA Level 3 Compliant for Secure Development and Build Process | Apps Available on MS Store✨

A Python Finance Library that focuses on the pricing and risk-management of Financial Derivatives, including fixed-income, equity, FX and credit derivatives.

Istio governance material.

Pre-submission compliance scanner for the Apple App Store and Google Play. Scans code, privacy manifests, Android manifests, and IPA/APK/AAB binaries against the review guidelines. Offline, no account.

Binary Analysis Next Generation (BANG)

HardeningKitty and Windows Hardening Settings

Build tested agent skills and govern their lifecycle through a user-defined marketplace: evidence, discovery, updates, rollback, quarantine, and 17-platform distribution.

A suite of tools to automate software compliance checks.

The open‑source AI Agents Governance & Orchestration framework: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record. Free, Apache-2.0. https://bernstein.run

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

Plumber detects CI/CD security issues in your GitHub workflows and gives you a score

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP tools.

Open source solutions for SOC2, GDPR, and ISO27001

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 57% (without skills). Updated Monthly.

S.U.P.E.R.M.A.N. optimizes the macOS software update experience.

聂·基层运行逻辑 · Agent Skill：基于聂辉华《基层中国的运行逻辑》的方法论工具箱（不含原书全文）

Your toolkit for autonomous, evolving agent ecosystems. Create, execute, govern, and evolve agents that learn from experience, collaborate, build new capabilities, and operate safely within defined guardrails.

☁️♮🏛 This repo contains several documents related to the operation of the CNCF. File non-technical issues related to CNCF here.

[WIP]国内隐私合规技术交流

StakePool Operator Scripts. Learn how to create and manage your StakePool / manage your DRep stuff / do Governance Actions with these simple scripts. Hardware-Ledger/Trezor Support, Token/Asset Sending, Offline-Mode and much more...

Portfolio Construction and Risk Management book's Python code.

Encrypt data at rest in Ruby and Rails, with keys held outside your source code.

MARVIS-Agent: all-purpose credit risk agent for model development, validation, data processing, feature engineering, and strategy workflows.

Policy Module for Microsoft Active Directory Certificate Services

Planning and proposals for MDN Web Docs content

A governance harness for AI coding.

A plugin to enforce OPA policies with Envoy

Appshark is a static taint analysis platform to scan vulnerabilities in an Android app.

282+ structured privacy & data protection skills for AI agents. GDPR, CCPA, EU AI Act, HIPAA, LGPD, PIPL, DPDP Act.

(S)AGE - (Sovereign) Agent Governed Experience

Automate copyright headers and license files at scale

A bytecode-enhanced microservice governance framework that supports multi-active application traffic management. 基于字节码增强的微服务治理框架，支持应用多活流量治理

Open library of legal AI skills (SKILL.md) for MCP-compatible agents — 39 jurisdictions, 200+ plugins, Apache-2.0.

macOS Security Compliance Project

Enterprise App Store and Google Play rejection compliance playbook: rejection maps, mistake taxonomy, 2026 enforcement and legal layer, a tested pre-submission guard, and an agent audit skill.

DataSphereStudio is a one stop data application development& management portal, covering scenarios including data exchange, desensitization/cleansing, analysis/mining, quality measurement, visualization, and task scheduling.

天网决策引擎系统

Internet standards compliance test suite

Governance-first Go admin backend with RBAC, API registry, configuration, i18n, operations, and AI-assisted OSS maintenance.

A fixed income library for pricing bonds and bond futures, and derivatives such as interest rate swaps (IRS), cross-currency swaps (XCS) and FX swaps. Contains tools for full curveset construction with market standard optimisers and automatic differentiation (AD) and risk sensitivity calculations including delta and cross-gamma.

Python and TypeScript SDKs for verifiable evidence of AI agent actions. Signed receipts, policy enforcement, audit trails. Works with LangChain, CrewAI, MCP.

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

Pre-crisis Risk Management for Personal Finance

Network orchestration made easy

Official TODO Website that contains TODO Guides, OSPO use cases and more resources to advance in the OSPO journey

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking

Complete AI governance and LLM Evals platform with support for EU AI Act, ISO 42001, NIST AI RMF and 20+ more AI frameworks and regulations. Join our Discord channel: https://discord.com/invite/d3k3E4uEpR

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

A free, open-source book that explains how crypto actually works. 15 chapters covering Bitcoin, Ethereum, Solana, DeFi, MEV, market structure, custody, stablecoins, governance, quantum resistance, and prediction markets.

Universal cloud-native microservice governance specification (微服务治理标准)

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).

Financial Derivatives Calculator with 171+ Models (Options Calculator)

Plugin for sudo that requires another human to approve and monitor privileged sudo sessions

Compliance automation framework, focused on SOC2

Tern is a software composition analysis tool and Python library that generates a Software Bill of Materials for container images and Dockerfiles. The SBOM that Tern generates will give you a layer-by-layer view of what's inside your container in a variety of formats including human-readable, JSON, HTML, SPDX and more.

Security & License Compliance For Your App's Dependencies 🪱

An open source library for portfolio optimisation

compliance assessment and POA&M management for CMMC/NIST 800-171A

Privacy Engineering Collaboration Space

Easy auditing & sandboxing for your JavaScript dependencies 🪱

List of DNS violations by implementations, software and/or systems

Pioneering the world of self-healing, self-aware, self-sustaining, self-resilient, self-secure and intelligent remediation, MatosSphere brings a complete cloud security and governance solution for your cloud infrastructure.

Analyze your AWS serverless app in one command! 30+ best practices to improve costs💰 security🛡 stability🧘‍♀️ speed🚀 and sustainability🌱

The GDPR Checklist

Notes and examples about Portfolio Construction and Analysis with Python (Jupyter notebooks)

A collection of awesome projects, blog posts, books, and talks on quantifying risk

A common framework enabling companies to work together to protect consumers' privacy and data rights.

Jupyter notebooks and data files of the new EDHEC specialization on quantitative finance (completed Aug 2022)

Decentralized governance for Git communities