Repositories list

• hdf-libs

  Public
  Heimdall Data Format (HDF) is a standardized JSON schema for representing security assessment baselines and results across diverse tools and platforms.

  hdfmitre-saf

  hdfmitre-saf

  Go

  •

  Other

  •00 forks•33 stars•44 issues•33 pull requests•Updated Jul 26, 2026Jul 26, 2026

• vulcan

  Public
  A web application to streamline the development of STIGs from SRGs

  disacomplianceinspec+ 5

  disacomplianceinspecstigsrgmitre-corporationmitre-inspeccompliance-automation

  Ruby

  •

  Other

  •2828 forks•8888 stars•9393 issues•1010 pull requests•Updated Jul 25, 2026Jul 25, 2026

• tir

  Public
  LM + MITRE SAF project

  Vue

  •

  Other

  •44 forks•88 stars•4141 issues•4040 pull requests•Updated Jul 25, 2026Jul 25, 2026

• saf

  Public
  The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and…

  securityjsoncompliance+ 6

  securityjsoncompliancemitresecurity-automationdevsecopsmitre-corporationmitre-safsecurity-automation-framework

  HTML

  •

  Other

  •4242 forks•183183 stars•123123 issues•1919 pull requests•Updated Jul 25, 2026Jul 25, 2026

• suse-linux-enterprise-server-15-stig-baseline

  Public
  (WIP) SLES 15.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of SLES15..

  Ruby

  •

  Other

  •00 forks•00 stars•00 issues•11 pull request•Updated Jul 24, 2026Jul 24, 2026

• mitre-saf-skills

  Public
  Agent skills for MITRE SAF development.

  Shell

  •

  Other

  •00 forks•00 stars•11 issue•00 pull requests•Updated Jul 24, 2026Jul 24, 2026

• iat

  Public
  Iris Analysis Toolkit

  Shell

  •

  Other

  •11 fork•44 stars•11 issue•11 pull request•Updated Jul 24, 2026Jul 24, 2026

• heimdall2

  Public
  Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.

  mitre-saf

  mitre-saf

  HTML

  •

  Other

  •7878 forks•254254 stars•281281 issues•5050 pull requests•Updated Jul 24, 2026Jul 24, 2026

• saf-training

  Public
  This repository contains several courses to learn about using and developing SAF capabilities

  JavaScript

  •

  Other

  •77 forks•1616 stars•77 issues•66 pull requests•Updated Jul 23, 2026Jul 23, 2026

• tir-nginx

  Public
  LM + MITRE SAF project

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 23, 2026Jul 23, 2026

• CyberChef

  Public
  The Cyber Swiss Army Knife - a web app for encryption, encoding, compression and data analysis

  JavaScript

  •

  Apache License 2.0

  •4.1k4.1k forks•33 stars•00 issues•00 pull requests•Updated Jul 22, 2026Jul 22, 2026

• ts-inspec-objects

  Public
  Typescript objects for InSpec profiles

  TypeScript

  •

  Other

  •22 forks•44 stars•77 issues•33 pull requests•Updated Jul 22, 2026Jul 22, 2026

• saf-lambda-function

  Public template
  (WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC

  aws-lambdaserverlessmitre+ 7

  aws-lambdaserverlessmitreaws-securitysecurity-automationmitre-corporationaws-lamitre-safsecurity-automation-frameworksaf-cli

  JavaScript

  •

  Other

  •44 forks•44 stars•44 issues•00 pull requests•Updated Jul 21, 2026Jul 21, 2026

• canonical-ubuntu-24.04-lts-stig-baseline

  Public
  (WIP) InSpec profile to validate the secure configuration of Ubuntu 22.04, against DISA's Canonical Ubuntu 22.04 LTS Security Technical Implementation Guide (ST…

  Ruby

  •

  Other

  •33 forks•22 stars•66 issues•11 pull request•Updated Jul 21, 2026Jul 21, 2026

• secure-coding-case-studies

  Public
  Case studies of real secure coding issues to provide educators, project leaders, software development teams, and assessment teams insight into these critical is…

  Creative Commons Attribution 4.0 International

  •4545 forks•1111 stars•2929 issues•2424 pull requests•Updated Jul 20, 2026Jul 20, 2026

• redhat-enterprise-linux-8-stig-baseline

  Public
  RHEL 8.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL8.

  Ruby

  •

  Other

  •77 forks•33 stars•1515 issues•77 pull requests•Updated Jul 17, 2026Jul 17, 2026

• homebrew-tap

  Public
  Homebrew tap for MITRE command-line tools — brew install mitre/tap/<formula>

  Ruby

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 16, 2026Jul 16, 2026

• claude-statusline

  Public
  A fast, configurable status line for Claude Code — single static Go binary

  Go

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 16, 2026Jul 16, 2026

• devise-security

  Public
  A security extension for devise, meeting industry-standard security demands for web applications.

  Ruby

  •

  MIT License

  •153153 forks•00 stars•00 issues•66 pull requests•Updated Jul 15, 2026Jul 15, 2026

• inspec

  Public
  InSpec: Auditing and Testing Framework

  Ruby

  •

  Other

  •677677 forks•66 stars•00 issues•33 pull requests•Updated Jul 14, 2026Jul 14, 2026

• redhat-enterprise-linux-10-stig-baseline

  Public
  (WIP) RHEL 10.X STIG Automated Compliance Validation Profile works with Chef InSpec to perform automated compliance checks of RHEL10.

  Ruby

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 13, 2026Jul 13, 2026

• canonical-ubuntu-20.04-lts-stig-baseline

  Public
  InSpec profile to validate the secure configuration of Ubuntu 20.04, against DISA's Canonical Ubuntu 20.04 LTS Security Technical Implementation Guide (STIG) Ve…

  ubuntustigstig-compliant+ 4

  ubuntustigstig-compliantmitre-corporationmitre-inspecubuntu2004mitre-saf

  Ruby

  •

  Other

  •44 forks•88 stars•1818 issues•11 pull request•Updated Jul 13, 2026Jul 13, 2026

• sandcat

  Public
  A CALDERA plugin

  calderacaldera-plugin

  calderacaldera-plugin

  Go

  •

  Apache License 2.0

  •4646 forks•7777 stars•00 issues•33 pull requests•Updated Jul 10, 2026Jul 10, 2026

• mitre-cve-roles

  Public
  Repo to capture Policies and documents for the MITRE TL-Root and MITRE CNA-LR

  HTML

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 9, 2026Jul 9, 2026

• hipcheck

  Public
  Automatically assess and score software repositories for supply chain risk.

  supply-chain-security

  supply-chain-security

  Rust

  •

  Apache License 2.0

  •1313 forks•126126 stars•5656 issues•00 pull requests•Updated Jul 8, 2026Jul 8, 2026

• crunchy-data-postgresql-stig-baseline

  Public
  InSpec profile for Crunchy Data PostgreSQL Security Technical Implementation Guide :: Version 3, Release: 1 Benchmark Date: 24 Jul 2024

  Ruby

  •

  Other

  •55 forks•99 stars•99 issues•22 pull requests•Updated Jul 6, 2026Jul 6, 2026

• sv3-runner

  Public
  Cross-platform launcher for DISA STIG Viewer 3 (SV3) — runs on macOS, Linux, and Windows.

  electronnodejschecklist+ 14

  electronnodejschecklistsecuritycross-platformdisasqlite3compliancesafmitre+ 7

  JavaScript

  •

  Other

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jul 3, 2026Jul 3, 2026

• FMACM

  Public
  An aircraft dynamics and control model for closed-loop RTCA requirements testing.

  c-plus-pluscontrol-systemseurocontrol+ 3

  c-plus-pluscontrol-systemseurocontrolmitre-corporationeurocontrol-badaaircraft-simulation

  C++

  •

  Apache License 2.0

  •77 forks•1515 stars•11 issue•00 pull requests•Updated Jun 30, 2026Jun 30, 2026

• im_sample_algorithm

  Public
  MITRE's Interval Management Sample Algorithm. An implementation of RTCA DO-361A Appendix C.

  algorithmssimulationaircraft

  algorithmssimulationaircraft

  C++

  •

  Apache License 2.0

  •22 forks•22 stars•66 issues•00 pull requests•Updated Jun 30, 2026Jun 30, 2026

• aircraft_simulation_core

  Public
  Core c++ library for MITRE's OSS aircraft simulation.

  C++

  •

  Apache License 2.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Jun 30, 2026Jun 30, 2026