oscal

Open Security Controls Assessment Language (OSCAL)

NIST SP 800-53 content and other OSCAL content examples

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

A simple open source command line tool to support common operations over OSCAL content.

A mirror of ISM OSCAL documents. The authoritative source can be found at https://www.cyber.gov.au/ism/oscal.

A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.

OSCAL tools for AI agents

Various deployments of the OSCAL editor

Open source tool for processing OSCAL based FedRAMP SSPs

Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool

An initial OpenAPI definition of an OSCAL REST API.

A Java library to support processing OSCAL content

Create a domain specific (GRC) agent with the Claude Agent SDK

Automate vulnerability triage which prioritizes remediation over discovery

Automatically generated diagrams for OSCAL models

NIST OSCAL SDK and CLI

CCCS security control profiles expressed using OSCAL

A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.

A curated list of tools, frameworks, standards, and resources for EU AI Act compliance and AI governance