pci-dss 开源项目推荐（535 个）

wazuh /wazuh

Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.

CISOfy /lynis

Lynis —— 适用于 Linux、macOS 和基于 UNIX 系统的安全审计工具。可协助进行合规性测试（HIPAA/ISO27001/PCI DSS）和系统加固。无代理，安装可选。

trimstray /the-practical-linux-hardening-guide

本指南详细介绍如何创建安全的 Linux 生产系统。OpenSCAP（C2S/CIS、STIG）。

codenotary /immudb

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

ossec /ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.

ComplianceAsCode /content

Security automation content in SCAP, Bash, Ansible, and other formats

lunasec-io /lunasec

LunaSec -依赖安全扫描器，可自动通知您Pull请求和构建中的Log 4Shell或node-ipc等漏洞。使用LunaTrace GitHub应用程序在30秒内保护自己：https://github.com/marketplace/lunatrace-by-lunasec/

wazuh /wazuh-docker

Wazuh - Docker containers

ovh /debian-cis

PCI-DSS compliant Debian 12/13 hardening

Sushegaad /Claude-Skills-Governance-Risk-and-Compliance

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 90% (with skills) vs 49% (without skills). Updated Monthly.

bmarsh9 /gapps

安全合规平台——SOC2、CMMC、ASVS、ISO27001、HIPAA、NIST CSF、NIST 800-53、CSC CIS 18、PCI DSS、SSF 跟踪

kac89 /vulnrepo

VULNRΞPO - 免费漏洞报告生成器和仓库，端到端加密！问题模板，CWE、CVE、MITRE ATT&CK、PCI DSS，导入Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy，Jira导出，TXT/JSON/MARKDOWN/HTML/DOCX，附件，自动更新日志，统计数据，漏洞管理，bugbounty，本地AI/LLM，超高速渗透测试报告！

wazuh /wazuh-dashboard-plugins

Plugins for Wazuh Dashboard

wazuh /wazuh-ruleset

Wazuh - Ruleset

xeol-io /xeol

A scanner for end-of-life (EOL) software and dependencies in container images, filesystems, and SBOMs

GRCEngClub /claude-grc-engineering

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

wazuh /wazuh-ansible

Wazuh - Ansible playbook

turbot /steampipe-mod-aws-compliance

Run individual controls or full compliance benchmarks for CIS, PCI, NIST, HIPAA and more across all of your AWS accounts using Powerpipe and Steampipe.

guardian-nexus /AuditKit-Community-Edition

AuditKit - Multi-Cloud Compliance Scanner & Evidence Collection

wazuh /wazuh-documentation

Wazuh - 项目文档