Elevated Standards

proof-of-concept-cloud-evidence-collection

Point of Concept: To help to automate the collection of evidence for SOC 2 Audits and etc.

AutoPilot-POAMatrix

Focuses on automating the management of Plans of Action and Milestones (POAM) using GitHub Actions and various external integrations.

POAM-Pilot

The POAM Pilot is a application designed to streamline the tracking, management, and reporting of security vulnerabilities and compliance requirements.

POAMBuddy

[Not Production Ready] This repository automates the extraction vulnerability and flaw data from vulnerability sources and then generate a Plan of Actions and Milestones (POAM), addressing identified security issues effectively.

AutoPilot-Audit

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.

InspectorBuddy

[NOT PRODUCTION READY] This GitHub Action allows you to scan EC2 instances for software vulnerabilities using Amazon Inspector from your GitHub Actions workflows. Both agent-based and agentless scans are supported. Additionally, this action can create Jira tickets for each new individual vulnerability detected.

RampControl

RampControl manages and tracks security compliance per FedRAMP requirements. It allows users to add new system security plans, manage POA&M entries, and export data in OSCAL format.

.github

DataDemise

DataDemise is an application for certifying and verifying the destruction of data stored across various cloud providers. It ensures secure and verifiable destruction of data, providing certificates as proof of destruction.

Informational

terraform-aws-inspector

Terraform module to provision AWS Inspector

Cloudits

Cloudit automates compliance with evidence collection. Cloudit streamlines vulnerability tracking, audit workflows, and compliance reporting by gathering artifacts, comparing findings, and generating actionable plans—keeping your organization audit-ready at all times.

Common_Controls

github-action-atmos-component-updater

GitHub Action that can be used as workflow for automatic update via Pull Requests infrastructure repository according to versions to components sources

InfoSecRoadMap

InspectorGadget

Pulls scan results using the AWS Inspector API, combines various AWS Inspector scan results, and formats them scan results into an organized output that is POAM-ready.

RampScout

Creates a Inventory Excel Spreadsheet Using FedRAMP Template for AWS, Azure, GCP

repo-python-template

TenableTrawler

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

TheToolkit

Toolkit is a organized project of all of other projects into one if a organization needs to use them all.