Skip to content

@grcengineering GRC Engineering

All

    Repositories list

    22 repositories

    • nthpartyfinder

      Public
      Discover Nth-party vendor relationships (3rd, 4th, and deeper) for a domain from public signals — DNS, certificate transparency, trust-center subprocessors, web…
      dnsrustcli
      dnsrustcligrcsecurity-toolsvendor-managementsupply-chain-securitythird-party-riskgrc-engineering
      Rust
      •
      MIT License
      •1•2•1•1•Updated Aug 26, 2026Aug 26, 2026

    • homebrew-grcengineering

      Public
      Homebrew tap for GRC Engineering open-source tools (nthpartyfinder and others)
      Ruby
      •
      MIT License
      •0•0•0•1•Updated Aug 24, 2026Aug 24, 2026

    • gigachad-grc

      Public
      Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and audits—all in one place…
      engineeringrisktrust
      engineeringrisktrustcompliancegrcthird-partygovernancerisk-management
      TypeScript
      •
      Other
      •43•156•0•9•Updated Aug 24, 2026Aug 24, 2026

    • alcove

      Public
      ALCOVE — Assurance Levels for Control Operating Viability & Effectiveness. A proposed assurance framework for security compliance.
      CSS
      •0•0•0•0•Updated Aug 24, 2026Aug 24, 2026

    • how-to-harden

      Public
      Shell
      •
      MIT License
      •5•29•1•1•Updated Aug 22, 2026Aug 22, 2026

    • OCEAN

      Public
      Rust
      •1•14•9•2•Updated Aug 19, 2026Aug 19, 2026

    • grcengineering.github.io

      Public
      HTML
      •10•74•13•2•Updated Aug 10, 2026Aug 10, 2026

    • threat-informed-control-modeling

      Public
      Threat-Informed Control Modeling (TICM) — a GRC-Engineering method for modeling and rightsizing security controls against the threats and objectives that actual…
      cybersecuritythreat-modelingrisk-management
      cybersecuritythreat-modelingrisk-managementsecurity-controlsgrc-engineeringfair-camcontrol-modelingticm
      The Unlicense
      •0•0•0•0•Updated Aug 10, 2026Aug 10, 2026

    • cheatsheet

      Public
      The GRC Engineering Cheat Sheet — cheatsheet.grc.engineering
      HTML
      •1•9•0•2•Updated Jul 17, 2026Jul 17, 2026

    • bootcamp

      Public
      GRC Engineering Bootcamp — 100%-original-content, progressive curriculum (curriculum-as-code)
      TypeScript
      •0•2•0•0•Updated Jun 27, 2026Jun 27, 2026

    • daily-findings

      Public
      Daily Findings is a desktop GRC learning app with guided sessions, quizzes, progress tracking, and curated GRC news.
      desktop-apptrainingsecurity
      desktop-apptrainingsecuritynextjscompliancegrcgovernancerisk-managementtauri
      TypeScript
      •1•12•0•4•Updated Jun 19, 2026Jun 19, 2026

    • companion

      Public
      The GRC Companion turns vendor reviews, audit walkthroughs, questionnaires, policy work, control discussions, and terminal output into learning loops. It runs w…
      compliancegrcgrc-engineering
      compliancegrcgrc-engineering
      Python
      •
      MIT License
      •6•31•0•1•Updated May 12, 2026May 12, 2026

    • awesome-grcengineering

      Public
      Awesome list of GRC Engineering tools, teachings, and resources — the content source for cheatsheet.grc.engineering
      4•4•0•3•Updated May 4, 2026May 4, 2026

    • cvm

      Public
      Credential Vending Machine — an STS broker that vends short-lived, scoped API credentials for platforms lacking native OIDC federation
      Rust
      •0•0•0•5•Updated Apr 4, 2026Apr 4, 2026

    • security-grc-tools

      Public
      Go
      •1•4•0•1•Updated Apr 2, 2026Apr 2, 2026

    • risk-register-templates

      Public
      Scripts for creating opinionated Risk Register structures in commonly used work management tools (Jira, Asana, etc.)
      0•3•0•1•Updated Apr 2, 2026Apr 2, 2026

    • open-security-training

      Public
      Interactive web-based cybersecurity and privacy training modules with SCORM support. Deployable as standalone HTML or LMS-integrated content.
      HTML
      •27•6•0•1•Updated Apr 2, 2026Apr 2, 2026

    • open-security-policies-and-standards

      Public template
      Open source security policies and standards templates and GitOps workflows
      The Unlicense
      •0•5•0•1•Updated Apr 2, 2026Apr 2, 2026

    • gnophish

      Public
      GnoPhish (NOH-phish) is a tool meant to raise awareness among people at an organization about phishing features and techniques so they can better spot, avoid, a…
      The Unlicense
      •1•2•0•1•Updated Apr 2, 2026Apr 2, 2026

    • conduit

      Public
      Framework-agnostic evidence exchange protocol for third-party risk management. Inspired by STIX/TAXII and leveraging ASSURE controls for the Proof of Concept.
      Python
      •0•6•0•2•Updated Apr 2, 2026Apr 2, 2026

    • community-security-controls

      Public
      An open source repository of community-maintained information security controls. Contains controls mapped to other frameworks as well as community best practice…
      The Unlicense
      •0•9•6•1•Updated Apr 2, 2026Apr 2, 2026

    • assets

      Public
      Used for tracking assets in use for GRC Engineering's internet presence and other things
      0•0•0•1•Updated Apr 2, 2026Apr 2, 2026
    ProTip! When viewing an organization's repositories, you can use the props. filter to filter by custom property.