pnancarrow

LibreChat

Enhanced ChatGPT Clone: Features OpenAI, Assistants API, Azure, Groq, GPT-4 Vision, Mistral, Bing, Anthropic, OpenRouter, Vertex AI, Gemini, AI model switching, message search, langchain, DALL-E-3, ChatGPT Plugins, OpenAI Functions, Secure Multi-User System, Presets, completely open-source for self-hosting. More features in development

compliance-trestle-fedramp

Compliance trestle plugin to support FedRAMP specific functionality.

compliance-trestle-agile-authoring

Agile authoring tutorial and repo set-up tooling

compliance-trestle-demos

Demo setup for compliance-trestle

oscal-editor-deployment

Various deployments of the OSCAL editor

dnsReaper

dnsReaper - subdomain takeover tool for attackers, bug bounty hunters and the blue team!

logchimp

Track your customers feedback to build better products with LogChimp. ⭐️ Star to support our work!

roadmap

Roadmap voting app for sharing product plan and get customer feedback.

astuto

A free, open source, self-hosted customer feedback tool 🦊

aws-discovery-export

homebridge

HomeKit support for the impatient.

chain-bench

An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

falco

Cloud Native Runtime Security

comply

Compliance automation framework, focused on SOC2

compliance-trestle

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

poker-planning

PokerPlanning.org is an open-source tool for easy online estimation in story points.

compliance-masonry

Security Documentation Builder

awesome-nodejs-security

Awesome Node.js Security resources

security-slacker

Pokes users about outstanding security risks found by Crowdstrike Spotlight or vmware Workspace ONE so they secure their own endpoint.

landy-react-template

Landy is an open-source React landing page template designed for developers and startups, who want to create a quick and professional landing page for their business or project.

mark

Sync your markdown files with Confluence pages.

regula

Regula checks infrastructure as code templates (Terraform, CloudFormation, k8s manifests) for AWS, Azure, Google Cloud, and Kubernetes security and compliance using Open Policy Agent/Rego

checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.

terrascan

Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

tflint

A Pluggable Terraform Linter

tfsec

Tfsec is now part of Trivy

kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

gcp-iam-collector

Python script for collecting and visualising Google Cloud Platform IAM permissions

trivy

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

evilginx2

Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication