Open Security Controls Assessment Language (OSCAL)

NIST SP 800-53 content and other OSCAL content examples

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

A simple open source command line tool to support common operations over OSCAL content.

A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.

A mirror of ISM OSCAL documents. The authoritative source can be found at https://www.cyber.gov.au/ism/oscal.

Various deployments of the OSCAL editor

Open source tool for processing OSCAL based FedRAMP SSPs

An initial OpenAPI definition of an OSCAL REST API.

OSCAL tools for AI agents

A Java library to support processing OSCAL content

Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool

NIST OSCAL SDK and CLI

Automatically generated diagrams for OSCAL models

Create a domain specific (GRC) agent with the Claude Agent SDK

A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.

Automate vulnerability triage which prioritizes remediation over discovery

CCCS security control profiles expressed using OSCAL

Implementation of the OSCAL REST API