docker modsecurity reverse proxy WAF based on nginx

Puppet module that hardens Windows Server to DoD STIG compliance

A docker container for openvas

Official OSSEC docker container

This tool allows you to prioritize MITRE ATT&CK techniques for your adversaries and collect corresponding NIST SP 800-53 security controls.

The SIMP Product Documentation

NIST Information Security Continuous Monitoring (ISCM) and configuration baseline data collector

Sonarqube cloudformation plugin, IaC security supports cfn-nag/checkov

Built a mini HoneyNet in Azure and ingest log sources from various resources into a Log Analytics workspace

Portfolio for Cyber Security projects and works

Vigilante Vixen has learned that there were many security vulnerabilities from their technical, behavioral, law, and human resources aspects. Despite us not being directly involved in offshore financial services or the legal profession, technology roles have a considerable amount of opportunity to review this case and implement security regulations

Overview of existing mappings from and to cyber security controls

Automated security control prioritization using sector-based threat profiles

An open-source listing of cybersecurity technology mapped to the NIST Cybersecurity Framework (CSF)

crypto; from kruptein to hide or conceal

Leverage Ollion's AWS Landing Zone to deploy a secure, compliant foundation with ease. The repository contains an implementation of a secure and compliant landing zone pattern that will help expedite cloud migration for an enterprise in a heavily regulated industry.

🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.

Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking. https://gapps.darkbanner.com