Search Results for "audit tools"
Sort By:
Showing 28 open source projects for "audit tools"
View related business solutions-
$300 Free Credits to Build on Google CloudPut your $300 in credit toward real workloads, then keep building with free monthly usage for 20+ products. No commitment and no charge until you upgrade.
-
Go from Code to Production URL in SecondsSkip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
-
1
Loop Engineering
Practical patterns, starters & CLI tools for loop engineering with AI
...It focuses on replacing repeated manual prompting with systems that prompt, verify, schedule, and hand off work over time. The project is aimed at developers using tools such as Grok, Claude Code, Codex, Cursor, and other coding agents. It explains core building blocks such as scheduling, worktrees, skills, plugins, connectors, sub-agents, and persistent memory or state. The repository includes production loop patterns, quickstarts, starters, checklists, safety notes, and real-world stories. It also provides CLI tools such as loop-audit, loop-init, and loop-cost to scaffold, evaluate, and estimate agent loop workflows. -
2
Commando VM
Complete Mandiant Offensive VM (Commando VM)
Commando VM (by Mandiant) is a Windows-based offensive security / red-team distribution built to turn a fresh Windows installation into a fully featured penetration testing environment. It provides an automated installer (PowerShell script) that uses Chocolatey, Boxstarter, and MyGet package feeds to download, install, and configure dozens (100+ / 170+ depending on version) of offensive, fuzzing, enumeration, and exploitation tools. The idea is to spare testers the repetitive work of... -
3
Awesome production machine learning
Curated list of awesome open source libraries
This repository contains a curated list of awesome open source libraries that will help you deploy, monitor, version, scale, and secure your production machine learning. Open-source frameworks, tutorials, and articles curated by machine learning professionals. Open-source bias audit toolkits for data scientists, machine learning researchers, and policymakers to audit machine learning models for discrimination and bias, and to make informed and equitable decisions around developing and deploying predictive risk-assessment tools. -
4
Kiro Crew
A persistent workspace for development work that self-improves
...Long-running tasks can plan steps, execute them, validate results, retry failures, and resume from saved checkpoints. The system supports subagents, reusable skills, MCP tools, scheduled jobs, reactive webhooks, and installable workflow-specific apps. Users can interact through a desktop app, web dashboard, CLI, or messaging services such as Slack, Discord, Telegram, Teams, and WeChat. Security controls include approvals, sandboxing, sensitive-path protection, credential redaction, deny rules, audit events, and governance policies. -
Ship Agents FasterGemini Enterprise Agent Platform lets you rapidly build, scale, govern and optimize production-ready agents grounded in your organization's data. The platform enables developers to build custom or pre-built agents for virtually any use case. New customers get $300 in free credits.
-
5
Quint Code
Structured reasoning framework for Claude Code, Gemini, and Cursor
...It supports a cycle of abduction, deduction, and induction backed by CLI commands (like /q1-hypothesize, /q2-verify, /q3-validate, etc.) that create a persisting audit trail in a .quint/ directory. -
6
Commanded
Use Commanded to build Elixir CQRS/ES applications
Commanded is an Elixir framework for implementing CQRS (Command Query Responsibility Segregation) and Event Sourcing patterns. It provides domain-driven design tools—aggregates, commands, events, and projections—backed by an event store (e.g. PostgreSQL). -
7
kubeaudit
kubeaudit helps you audit your Kubernetes clusters
kubeaudit helps you audit your Kubernetes clusters against common security controls. -
8
MetricFlow
MetricFlow allows you to define, build, and maintain metrics in code
...When a user or tool requests a metric (e.g., “monthly revenue by region”), MetricFlow generates optimized, warehouse-specific SQL to compute that metric, handling joins, filters, time grains, offsets, and other complexities under the hood. Because metric definitions live centrally, you avoid duplication across teams and tools, reduce risk of inconsistent numbers, and make it easier to audit and evolve the logic over time. The project emphasizes explainability, performance and portability: you define metrics once and then they can be consumed in BI tools, notebooks, or even AI/agent-driven workflows. -
9
Deckhouse
Kubernetes platform from Flant
...It manages clusters comprehensively and “automagically” and provides all necessary modules and add-ons for autoscaling, observability, security, and service mesh implementation. Deckhouse has vanilla Kubernetes under the hood and integrates a balanced set of Open Source tools that have become the industry standard. Out-of-the-box secure configuration of the Kubernetes cluster, least component privileges, pre-configured role model, end-to-end object identity in the audit system, and integration with external directory services. Built-in implementation of Pod Security Standards and a ready-to-use, extensible set of recommended policies. ... -
Fully Managed MySQL, PostgreSQL, and SQL ServerCloud SQL handles your database ops end to end, so you can focus on your app.
-
10
Python Slack SDK
Slack Developer Kit for Python
...It provides modular packages for Slack APIs, allowing developers to use only the capabilities they need while still keeping the pieces compatible with each other. The SDK covers the Web API, incoming webhooks, Socket Mode, OAuth, Audit Logs, SCIM, RTM, Block Kit models, and request signature verification. It is useful for bots, workflow tools, internal automations, admin dashboards, notifications, onboarding assistants, and Slack-native business applications. Developers can use it to send messages, respond to events, verify requests, manage app authorization, and integrate Slack into Python services. ... -
11
ContainerSSH
ContainerSSH: Launch containers on demand
...ContainerSSH solves this by providing dynamic SSH access with APIs, automatic cleanup on logout using ephemeral containers, and persistent volumes for storing data. Perfect for vendor and student labs. Provide production access to your developers, give them their usual tools while logging all changes. Authorize their access and create short-lived credentials for the database using simple webhooks. Clean up the environment on disconnect. Study SSH attack patterns up close. Drop attackers safely into network-isolated containers or even virtual machines, and capture their every move using the audit logging ContainerSSH provides. ... -
12
Tonic
Easy to audit, zero-dependencies and build-tool-free
A low-profile component framework. 1 file. 1 class. ~350 lines of code. No build tools are required. Native web components. Ideal for JAM stacks. Identical on client & server. Composition oriented. Event delegation by default. Lots of examples. Building a component with Tonic starts by creating a function or a class. The class should have at least one method named render which returns a template literal of HTML. onic is a thin wrapper around web components. Web components require a name with... -
13
Sysdig
Linux system exploration and troubleshooting tool
Continuously assess cloud security posture by flagging misconfigurations and suspicious activity. Consolidate container and host scanning in a single workflow. Automate scanning locally in your CI/CD tools without images leaving your environment and block vulnerabilities pre-deployment. Visualize all network communication across apps and services. Apply microsegmentation by automating Kubernetes-native network policies. Unify threat detection and incident response across containers, Kubernetes, and cloud with out-of-the-box Falco rules leveraging syscalls, Kubernetes audit logs and cloud logs. ... -
14
napi
napi - Isolate and deploy APIs separately at build time
napi is a versatile tool built by NanoAPI and designed to automatically refactor large monolithic codebases into smaller, more manageable microservices, while providing insights into the architectural complexity of your software. With both a powerful CLI and an intuitive UI, napi is compatible with all major CI/CD platforms, allowing seamless integration into your development and deployment pipelines. Historically, tools like this have only been built by large consulting firms or... -
15
CVTRPGFREE
Convert fixed-format RPG code to free-form RPGILE code
This IBM i (aka iSeries, AS400) command provides for code modernisation by converting fixed-format RPG and RPGLE source code into fully free-form RPGLE source in a non-destructive manner. Converts: * H-Specs * F-Specs * D-Specs * C-Specs * P-Specs (Subprocedures) * Key Lists * Parameter Lists **PLEASE REPORT ANY ISSUES YOU FIND** NOTE: Requires V7R2M0 or higher. Some Background: This started out as a 'quick and dirty' program for my own needs, but it got a little out of... -
16
SiteOne Crawler (desktop app)
A free, feature-rich web analyzer and exporter/cloner you will love!
A free in-depth website analyzer providing audits of security, performance, SEO, accessibility and other technical aspects. Available as a desktop application for Windows/macOS/Linux and as a CLI tool for advanced users and CI/CD processes. It also includes an offline web page exporter (website clone, mirror). -
17
Monokle
Better create, understand, and deploy YAML manifests
Monokle's integrated open-source tools and cloud platform make it easy to define, manage, and enforce Kubernetes YAML configuration policies in minutes. Deploy, manage and audit policies for your teams across the entire configuration lifecycle from a centralized Dashboard. Define polices using 100+ pre-existing rules for Security, Resource Usage, and Compliance. Create your own Validation Extensions for your organization's compliance and conventions. -
18
mergestat-lite
Query git repositories with SQL. Generate reports and codebases
MergeStat enables open-source, operational analytics for software engineering teams. Treat your code (and configuration files) like a database to operationalize aspects of the SDLC. Ensure your organization is always following best practices in the software development lifecycle. Engineering transparency. Keep tabs on the areas of interest in your engineering organization, across repositories and teams. MergeStat enables SQL queries on the tools and processes involved in building and... -
19
AutoDepend keeps track of all file access during a build process and then generates gnu-make dependancies. (It works only on ELF architecture because it uses LD_PRELOAD)
-
20
Cisco config sanitizer tool
Tool used to sanitize Cisco configuration files.
Cisco sanitizing configuration tool. It removes passwords, keys, certs and other sensitive data from text config files. Use this tool to sanitize extracted configurations files before you send them to audit (Ex: TAC) 'show tech-support' is good, but sometimes you need to remove more sensitive data from the configurations This tool will scan a folder with all its sub-folders and sanitize every file from that tree. But it will never modify the source files, instead it will create... -
21
Webterminal bastion server
ssh rdp vnc telnet sftp bastion/jump web putty xshell terminal
Webterminal implemented by django. This project focus on DevOps and Continuous Delivery. For now it supports almost 90% of remote management protocols such as vnc, ssh, RDP, telnet, sftp... It supports the possibility to monitor and record user actions when users use this project to manage their server! You can also replay the user action such as a video. Hope you enjoy it. Webterminal helper support (use your favorite tools to manage and connect server) VNC, RDP, SFTP Remote file browser... -
22
Windows Cyberpatriot App
An easy-to-use graphical program for CyberPatrot Windows images.
Source code will be uploaded shortly after a release at: https://github.com/seandivincenzo/cyberpatriotwindowsapp !CyberPatriot Windows App currently installs under WindowsFormApp1! CyberPatriot Windows Apparatus is designed with an easy-to-use graphical interface to complete several parts of the windows images, including audit policies, password policies, and user management. -
23
Cluster Orchestrator
orchestrator / cluster deployment tool
The Orchestrator server is responsible for distribution and launch of simple apply/rollback shell scripts in a particular order across multiple servers . If for any reason deployment is failing at a particular stage the process will stop and you can rollback any changes done until then. In case you want to deploy your code or just call your preferred DSC client to apply the configuration locally the Orchestrator can be a handy tool. The operation can be started manually or scheduled,... -
24
ESSPEE - Penetration Testing & Forensics
(Android Forensics & Malware Analysis Included)
ESSPEE - Extreme Security Scanning Penetration testing & Exploitation Environment Ubuntu 12.04 LTS (Precise Pangolin) is purposefully selected as the base Operating System to obtain supports from Ubuntu for a long duration (till Apr 2017). It is packed with featured security tools with very less resource consumption and higher degree of stability. Thanks to Back Track, Blackbuntu, CAINE and DEFT and many others for inspiration. Being a sole developer to this distro, I wish it... -
25
Open Jungo
Open software persistence model
Open Jungo is a flexible entity persistence model that makes it easy to create object-centric components with minimal coding. Unlike most current entity frameworks, Jungo does not require developers to structure their code in any particular way or specify database structures. Open Jungo supports most major proprietary and open source databases as well as well as a built-in highly efficient zero-configuration object-oriented database systems. It requires no external dependencies and...
