Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines

InSpec profile to validate your VPC to the standards of the CIS Amazon Web Services Foundations Benchmark

eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise Mission Assurance Support Service (eMASS) by leveraging its representational state transfer (REST) application programming interface (API).

(WIP) An ansible playbook to harden a docker host to the CIS CE Benchmark requirements

STIG Ready Content: InSpec Profile for NGINX Open Source based off the Web SRG V2R3

Microsoft Windows Server 2019 STIG InSpec Profile

The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) Application Programming Interface (API) specification and executables.

InSpec Profile to validate the secure configuration of aws-rds-infrastructure-cis-baseline, against CIS's Amazon Web Services Three-tier Web Architecture Benchmark V1.0.0

A micro InSpec baseline to check for insecure or public s3 buckets in your VPC

InSpec profile to validate the secure configuration of Canonical Ubuntu 16.04 LTS against DISA's Canonical Ubuntu 16.04 LTS Security Technical Implementation Guide (STIG) Version 1 Release 1.

Powerful XML<->JSON JavaScript mapping library.

Standalone tool for converting DISA Checklists to eMASS POA&M Excel spreadsheets.

The SAF Training Lab is a GitHub Codespaces environment that makes it quick and easy for you to use, learn and participate in the MITRE Security Automation Framework Training Classes.

This profile implements the CIS Amazon Elastic Kubernetes Service (EKS) Benchmark version 1.0.1 (Cluster requirements).

Proof of Concept - Alpha - An exploration in a mega container to link up all the SAF security tools

Ansible role for Red Hat 7 STIG Baseline

InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Version 1, Release 6.

(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark