NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validated, runs offline).

A comprehensive Model Context Protocol (MCP) server providing enterprise-grade Static Application Security Testing (SAST) with advanced compliance verification, multi-tenant management, AI-powered analysis, and automated remediation workflows.

AES-XGCM: An eXtended-nonce construction built atop AES-GCM

SOC Standard Operating Procedures — 170+ bilingual (EN/TH) vendor-agnostic SOPs, 50 playbooks, 36 Sigma rules. Build a SOC from zero.

crypto; from kruptein to hide or conceal

Making Ascon cipher easier to play with

JSON API for NVD CVE details data feeds from NIST

A hybrid cryptography engine unifying classical and post-quantum algorithms — RSA, ECDSA, AES-GCM, ML-KEM (FIPS 203), ML-DSA (FIPS 204).

Data protection SDK for Node.js — format-preserving encryption (FF1/FF3), data masking, and hashing.

Making Ascon cipher easier to play with.

A concept intended to calculate the strengthness of a password based on its entropy

Automated compliance auditing for Google Workspace using Claude's MCP. Performs 19 security checks covering access control, authentication, and system protection. Maps findings to CMMC, NIST 800-171, NIST CSF, ISO 27001, HIPAA, and FTC Safeguards frameworks. Built for MSPs and Workspace Admins to streamline security assessments.

[Not Production Ready] This repository automates the extraction vulnerability and flaw data from vulnerability sources and then generate a Plan of Actions and Milestones (POAM), addressing identified security issues effectively.

МГТУ ИУ7 "Имитационное моделирование" лабораторные работы с отчетами

An intelligence focused mapping tool to help network defenders and threat intelligence in the process of mapping adversarial behaviors to make meaningful and informed command decisions.

A list of Applications and Vendors that either break under the use of FIPS Validated Cryptography, or treat it as a premium feature.

Universal Claude Code security skill: audits, hardens, and authorized-attack-tests any project (web/API/mobile/desktop) against OWASP, NIST, CIS, SOC 2 & PCI-DSS — then proves the fixes hold with a red-team agent swarm.

NIST-compliant, secure web password generator with real-time strength evaluation.