FedRAMP Automation

Open Security Controls Assessment Language (OSCAL)

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

Automate vulnerability triage which prioritizes remediation over discovery

NIST SP 800-53 content and other OSCAL content examples

Open Security Controls Assessment Language (OSCAL) Website Content

Tools for working with YAML and other structured content.

The source code for for oscal.io

Open source tool for processing OSCAL based FedRAMP SSPs

A mirror of ISM OSCAL documents. The authoritative source can be found at https://www.cyber.gov.au/ism/oscal.

OSCAL Policy Administration Library (OPAL) provides a simple web application for managing System Security Plans. The data modle is based on the OSCAL standard.

Compliance trestle plugin to support FedRAMP specific functionality.

An initial OpenAPI definition of an OSCAL REST API.

OSCAL Component Definition Library

Various deployments of the OSCAL editor

NIST OSCAL SDK and CLI

A simple open source command line tool to support common operations over OSCAL content.

A Java library to support processing OSCAL content

Demo workflows for continuous compliance with OSCAL content and compliance-trestle

Open source XSLT for OSCAL display and processing