compliance-automation 开源项目推荐（362 个）

borghei /Claude-Skills

每个团队拥有368项AI技能、76名专家代理和859个标准Python工具：工程、项目管理、市场营销、高管级、合规、业务运营和研究。可安装在Claude Code、Cursor、Codex、Gemini、Copilot及其他6个AI助手上。

fossology /fossology

FOSSology is an open source license compliance software system and toolkit. As a toolkit you can run license, copyright and export control scans from the command line. As a system, a database and web ui are provided to give you a compliance workflow. License, copyright and export scanners are tools used in the workflow.

checkmarble /marble

Marble——面向欺诈与反洗钱的实时决策引擎

Hey-Telo /admyral

Admyral 可为任意自定义控制项实现持续控制监控

theopenlane /core

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

UnicisTech /unicis-platform-ce

🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

mitre /vulcan

A web application to streamline the development of STIGs from SRGs

microsoft /Data-and-Agent-Governance-and-Security-Accelerator

Automate end-to-end AI governance with Microsoft Purview DSPM for AI and Defender for AI. Configure DLP, sensitivity labels, audit logging, and threat detection across M365 Copilot, Microsoft Foundry, Microsoft Fabric, and custom agentic solutions.

ComplianceAsCode /auditree-framework

The Auditree framework tool to run compliance control checks as unit tests.

goldfiglabs /introspector

A schema and set of tools for using SQL to query cloud infrastructure.

aws-samples /aws-security-hub-response-and-remediation

Pre-configured response & remediation playbooks for AWS Security Hub

awslabs /mcp-server-for-oscal

OSCAL tools for AI agents

ethyca /fidesops

Privacy as Code for DSAR Orchestration: Privacy Request automation to fulfill GDPR, CCPA, and LGPD data subject requests.

sufield /stave

Stave finds compound attack paths that single-resource scanners miss. AWS security findings from configuration snapshots without any credentials.

deepfence /CI-CD-Integrations

CI/CD plugins for image scanning, integrations with AWS ECR, Google Container Registry

diegosantdev /LicensePulse

OSS license watchdog. Monitors GitHub repos you depend on and alerts you when a license changes, explaining exactly what you can no longer do.

ropensci-review-tools /pkgcheck

Check whether a package is ready for submission to rOpenSci's peer-review system

theopenlane /openlane-ui

the openlane ui - holds the openlane console

paulveillard /cybersecurity-soc-compliance

A collection of awesome framework, libraries, documents, learning tutorials, resources about SOC 2 tools and processes.

guardon-dev /guardon

Guardon is an open-source browser extension designed to help developers and security teams catch Kubernetes security issues early in the development lifecycle—before configuration files are merged or deployed to production