Open Security Controls Assessment Language (OSCAL)

NIST SP 800-53 content and other OSCAL content examples

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

A library of React components and an example user interface application that provides a direct UI into NIST's Open Security Controls Assessment Language (OSCAL) data in JSON format.

A simple open source command line tool to support common operations over OSCAL content.

A mirror of ISM OSCAL documents. The authoritative source can be found at https://www.cyber.gov.au/ism/oscal.

Various deployments of the OSCAL editor

Open source tool for processing OSCAL based FedRAMP SSPs

An initial OpenAPI definition of an OSCAL REST API.

A Java library to support processing OSCAL content

Open Security Controls Assessment Language (OSCAL) Deep Differencing Tool

OSCAL tools for AI agents

Automatically generated diagrams for OSCAL models

Official open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

A case study for ACSAC 2022 utilizing OSCAL with a custom GitHub action to automate assessments.

NIST OSCAL SDK and CLI

CCCS security control profiles expressed using OSCAL

Create a domain specific (GRC) agent with the Claude Agent SDK

Automate vulnerability triage which prioritizes remediation over discovery

Implementation of the OSCAL REST API