|
WeScan — AI Compliance for Startups
Scan your codebase for AI compliance gaps and generate the docs you need to close enterprise deals. GDPR, CCPA, SOC 2 ready in 60 seconds.
|
83 % |
|
Themida — open-source compliance scanner
A personal open-source project: read your codebase, find compliance issues at line level, get a working fix.
|
83 % |
|
AI-Sec — AI Security from Free to Enterprise
Open-source AI security tools, self-service platform, and AI-powered consulting. 98 findings across 3 projects with 108K+ GitHub stars.
|
82 % |
|
Opencomplai: open-source EU AI Act compliance for CI/CD
Open-source CLI that checks the AI system you declare against the EU AI Act, fails CI on missing controls, and writes an evidence artifact for every commit.
|
82 % |
|
Caisson — Compliance-grade infrastructure for regulated SaaS
One audited Postgres base mapped to SOC 2, HIPAA, ISO 27001, and NIST 800-53: fail-closed RLS, S3 Object-Lock WORM, and an append-only audit chain, in five c...
|
82 % |
|
ProfileSpot – Just another WordPress site
|
81 % |
|
CompliOne — GRC Platform for Security, Privacy & Life Sciences
Complete GRC platform for 25+ compliance frameworks: ISO 27001, SOC 2, GDPR, GMP, HIPAA & more. Risk management, controls, audits, CAPA, training & electroni...
|
81 % |
|
vlayer - HIPAA Compliance Scanning for Healthcare Apps
Open source CLI tool that scans your codebase for HIPAA compliance issues. Detect PHI exposure, encryption gaps, and compliance violations automatically.
|
81 % |
|
Codepliant — Compliance Docs from Code
Scan your codebase and generate privacy policies, terms of service, AI disclosures, and 138+ compliance documents. One command. Try free with npx codepliant go.
|
81 % |
|
Audulate — ISO 27001, SOC 2 & GDPR Compliance Platform
Audulate is a compliance and GRC platform for SaaS teams: run ISO 27001 and SOC 2 end to end — Statement of Applicability, risk register, CAPA, internal audi...
|
81 % |
|
AI code review before it ships
Combine LLM reasoning with static analysis to catch security holes, logic bugs, and framework misuse — on a single file, a pull request, or a whole repository.
|
81 % |
|
SASARUN — Software Application Security Assessment
AI-powered whitebox security assessment for your source code.
|
81 % |
|
Spike — Code Oracle Platform
Ask your codebase anything. Spike indexes your repositories and gives you instant, accurate answers powered by deep code understanding.
|
80 % |
|
DevOpsCheck — the audit that opens the pull request
Automated DevOps audit for GitHub and GitLab: secrets, known CVEs, GitHub Actions, Docker, Kubernetes and Terraform. Up to 58 checks, a 0–100 score, and fixe...
|
80 % |
|
Compliance Platform & Penetration Testing | Sythe Labs
Compliance software from $499/month or managed security at $20,000/year including one framework. Compare scope and book a scoping call.
|
80 % |
|
GuardSpine - Artifact Governance at AI Speed
Tamper-evident judgment receipts for every change your AI agents make, across code and spreadsheets. Deploys as a GitHub Action. Works with your existing pip...
|
80 % |
|
heygrc · Find compliance problems in code review, not your audit
heygrc, compliance review for pull requests: it reviews every PR the moment it opens and flags changes that put a control at risk, whether a person or an AI...
|
80 % |
|
OpenVScan - Open Vulnerability Scanner
OpenVScan is a web security platform that combines open-source scanners with AI-assisted analysis for faster, more reliable pre-production testing.
|
80 % |
|
AI-Assisted Code Security Research | Kritt
Find high-impact vulnerabilities with expert-operated AI security research. Self-host open·kritt or commission a managed scan with ranked, verified findings.
|
80 % |
|
RoastMyApp — Free consulting-grade code audit for your GitHub repos
Connect your GitHub repo and get a deep, multi-pass code audit across security, testing, infrastructure, observability, and code quality. Scored report with...
|
80 % |
Detected social media networks