cmmc 开源项目推荐（145 个）

bmarsh9 /gapps

安全合规平台——SOC2、CMMC、ASVS、ISO27001、HIPAA、NIST CSF、NIST 800-53、CSC CIS 18、PCI DSS、SSF 跟踪

konstruktoid /ansible-role-hardening

Ansible role to apply a security baseline. Systemd edition.

utmstack /UTMStack

由实时相关性和威胁情报提供支持的业务准备就绪SIEM、SOAR和合规性。

GRCEngClub /claude-grc-engineering

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

guardian-nexus /AuditKit-Community-Edition

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

SecurityBagel /CMMC-Bagel

compliance assessment and POA&M management for CMMC/NIST 800-171A

nealfennimore /cmmc

This application simplifies achieving CMMC NIST SP 800-171 Revision 2 and 3 compliance by providing a user-friendly interface to manage security controls, store data locally, and generate compliance summaries.

LV-262 /cmmc-advisor

CMMC 2.0 compliance advisor as a Claude Code skill. All 3 levels, 14 domains, 110 practices; CUI scoping, SSP + POA&M; modern IT mapping for cloud, productivity, AI services, endpoints; contractor profiles and anti-patterns. Built from public DoD and NIST sources.

TroutSoftware /Open-CMMC

Open-source reference implementations and tooling for CMMC Level 2 compliance on on-premise IT/OT environments. Covers CUI handling, USB controls, and audit logging.

capetron /cmmc-compliance-toolkit

Comprehensive CMMC 2.0 compliance toolkit: NIST 800-171 mapping, SSP templates, POA&M tracking, and readiness checklists for defense contractors. By Petronella Technology Group.

adris-misra /multi-agentic-framework

UNS-native, cybersecurity-aware multi-agent reference architecture for U.S. small-to-mid manufacturers. Industrial agentic intelligence aligned with ISA-95, NIST AI RMF, and CMMC L2.

jonathancaruso /awesome-cmmc

A curated list of CMMC and NIST 800-171 compliance resources, tools, templates, and guides

austinsonger /the-grabber

Collects current-state snapshots and time-windowed audit records from 200+ from AWS, Okta, Jira, Tenable, Jamf, and GitHub and writes them as CSV and JSON. Supports evidence artifacts for FedRAMP, SOC 2, HIPAA audits & etc, inventory and POA&M artifacts using FedRAMP-aligned templates.

bluvibytes /cmmc-for-smbs

Free and open-source CMMC assessment tools for small and medium-sized businesses.

Galvnyz /CheckID

Universal check identifier system for cross-framework security control mapping

sean-m-sweeney /GoogleWorkspaceAudit

Automated compliance auditing for Google Workspace using Claude's MCP. Performs 19 security checks covering access control, authentication, and system protection. Maps findings to CMMC, NIST 800-171, NIST CSF, ISO 27001, HIPAA, and FTC Safeguards frameworks. Built for MSPs and Workspace Admins to streamline security assessments.

briangeis /windows-hardening

PowerShell toolkit for hardening Windows 11 on standalone devices, with NIST SP 800-53 and 800-171 control mappings

PericuloLimited /raigo

The open standard for AI agent governance. Write your policies once in a .raigo file. Compile to Claude, ChatGPT, n8n, OpenClaw, Copilot, and more.

WaypointCA /compliance-scripts

Compliance automation scripts for CMMC, FedRAMP, and NIST 800-171

LeviMSmith /CMMC-Map

Web app to handle CMMC policies and book of evidence