cisa 开源项目推荐（150 个）

cisagov /ScubaGear

根据CISA的基线自动评估M365租户的状态

cisagov /CHIRP

A DFIR tool written in Python.

Ostorlab /KEV

Ostorlab KEV: One-command to detect most remotely known exploitable vulnerabilities. Sourced from CISA KEV, Google's Tsunami, Ostorlab's Asteroid and Bug Bounty programs.

cisagov /ScubaGoggles

面向 Google Workspace 的 SCuBA 安全配置基线与评估工具

karimhabush /cyberowl

Aggregates security advisories from 10 international CERTs daily and provides an AI skill that cross-references alerts against your project's tech stack.

fatihtokus /scan2html

A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.

AyemunHossain /Isaca-CISA-Dump-Questions-Study-Material

本库包含精选的ISACA CISA（认证信息系统审计员）考试题库和学习资料。该考试旨在帮助考生准备CISA认证考试，提供广泛的练习题和学习资源。

openSUSE /cavil

The legal review and SBOM system used by SUSE and openSUSE

cisagov /ScubaConnect

Native cloud infrastructure for automatically running ScubaGear/ScubaGoggles

hrbrmstr /cisa-known-exploited-vulns

Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list

jgamblin /KEV_EPSS

CISA Known Exploited Vulnerabilities catalog enriched with EPSS scores and NVD CVSS data

badchars /cve-mcp

23-tool MCP server for CVE & vulnerability intelligence. NVD, EPSS, CISA KEV, GitHub Advisory, OSV — unified in one server. Risk scoring, bulk triage, exploit search. 2 dependencies, runs with npx.

r3volved /CVEAggregate

Build a CVE library with aggregated CISA, EPSS and CVSS data

theycallmehassan1 /zero-trust-cloud-modernization-framework

Zero-Trust Cloud Modernization Framework for Federal and Enterprise Environments with IaC, Security Policies, and Monitoring Design

KunalCyber /GRC-Prompts-Library

𝟰𝟱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻-𝗴𝗿𝗮𝗱𝗲 𝗚𝗥𝗖 𝗽𝗿𝗼𝗺𝗽𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟭𝟯 𝗱𝗼𝗺𝗮𝗶𝗻𝘀. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. 𝗥𝗮𝘁𝗲𝗱 𝟵.𝟱/𝟭𝟬 𝗢𝗻 𝗨𝘀𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻

rxerium /CVE-2025-8875-CVE-2025-8876

Detection for CVE-2025-8875 & CVE-2025-8876

jgamblin /CISA_Enrichment

CISA Known Exploited Vulnerabilities Catalog Enrichment

CryptoGenNepal /CVE-KEV-RSS

CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild and CryptoGen Nepal aims to simplify this for the general public in a more understandable way as well as in a format that can be easily integrated into their threat intelligence systems.

ajread4 /nessus_crosswalk

Crosswalk Nessus findings with the CISA Known and Exploited Vulnerabilities (KEV) catalog.

hilda04 /CISA-Material

CISA Study Material