poam

An API and client for managing STIG assessments

• Updated
• JavaScript

compliance assessment and POA&M management for CMMC/NIST 800-171A

• Updated
• HTML

An ACAS/SCAP/CKL scan parser and report generator

• Updated
• Python

Comprehensive NIST SP 800-171 Rev 3 compliance toolkit: 110 control checklists, System Security Plan (SSP) templates, POA&M tracking, and CMMC Level 2 mapping. By Petronella Technology Group.

• Updated

[Not Production Ready] This repository automates the extraction vulnerability and flaw data from vulnerability sources and then generate a Plan of Actions and Milestones (POAM), addressing identified security issues effectively.

• Updated
• JavaScript

Focuses on automating the management of Plans of Action and Milestones (POAM) using GitHub Actions and various external integrations.

• Updated
• Python

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

• Updated
• Python

RampControl manages and tracks security compliance per FedRAMP requirements. It allows users to add new system security plans, manage POA&M entries, and export data in OSCAL format.

• Updated
• Python

The POAM Pilot is a application designed to streamline the tracking, management, and reporting of security vulnerabilities and compliance requirements.

• Updated
• Python

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.

• Updated
• Python

Simulated vulnerability management lab demonstrating POA&M creation, NIST 800-53 control mapping, and compliance-aligned remediation tracking for real-world vulnerabilities and cloud misconfigurations.

• Updated
• Python