oscal

Open Security Controls Assessment Language (OSCAL)

NIST SP 800-53 content and other OSCAL content examples

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

A mirror of ISM OSCAL documents.

A simple open source command line tool to support common operations over OSCAL content.

A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.

Various deployments of the OSCAL editor

OSCAL tools for AI agents

Open source tool for processing OSCAL based FedRAMP SSPs

A Java library to support processing OSCAL content

Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool

An initial OpenAPI definition of an OSCAL REST API.

Create a domain specific (GRC) agent with the Claude Agent SDK

Automate vulnerability triage which prioritizes remediation over discovery

A curated list of tools, frameworks, standards, and resources for EU AI Act compliance and AI governance

Automatically generated diagrams for OSCAL models

NIST OSCAL SDK and CLI

CCCS security control profiles expressed using OSCAL

A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.