nis2

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

Self-hosted control plane for TLS certificates, ready for 47-day certificates: issue, renew, discover, inventory and deploy them, and serve ACME for internal names and IPv4 addresses

Management tool for the information security management system / Outil de gestion du système de management de la sécurité de l'information

Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz

🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

Offline cyber security agent for your apps and AI coding tools. Open R&D: measured in public, improved every release.

A modern, extensible framework for defining and enforcing security policies across your digital infrastructure.

ISO 27001 (+ 42001 + NIS2 + EN 18286) ISMS framework designed to be operated by LLM Agents

Welkom op het BIO-samenwerkingsplatform. Klik op de link hieronder om naar de werkversie BIO2 v2.0 te gaan.

Curated resources for the EU Cyber Resilience Act (Regulation 2024/2847): regulation, harmonised standards, EUCC, SBOM, vulnerability management, conformity assessment

Open GRC skills for AI agents. By ISMS Copilot.

AI skills for German legal practice and EU compliance. 66 plugins, 319 skills: labour, tenancy, WEG and tax procedure at the October 2026 legal state, Fachanwaltschaften, EU frameworks (KI-VO, NIS2, KRITIS, DORA, CSRD, Data Act, MiCAR). Claude, Gemini, GPT. Statutes linked to primary sources; case law marked verified or [unverifiziert].

PowerShell-based Windows Server Security Audit Engine by Cyb3rint3l Labs. Measures alignment with the NIS2 directive and maps findings to MITRE ATT&CK tactics & CIS Controls v8 practices. Generates interactive HTML dashboards & structured JSON datasets.

The open-source management system built to stay alive, not rot after the audit. AI-first; documents in git, collaboration in PostgreSQL, ships as a single binary.

Governance-enforced Requirements Engineering für KRITIS, NIS2 und DORA. Claude-Skill mit EARS, Gherkin, STRIDE, F-Stufen und Phase Gates.

NIS2 Continuous Posture Management and Remediation Platform

ISMS CORE - Compliance Operations, Risk & Evidence

Open-source asset inventory — turn scattered, contradictory tool data into one reliable inventory, then chat with it using the LLM of your choice. Tagging, posture rules, and alerting built in.

Ein Claude Skill für rechtliche Ersteinschätzungen im deutschen IT-Recht und Datenschutzrecht (DSGVO/BDSG).

AI-ready knowledge base of security & compliance regulations for hardware and connected-device manufacturers - structured, indexed, and machine-readable for LLMs and agents.