SecurityChecklists
The SaaS CTO Security Checklist Redux, The DevOps Security Checklist, and The Personal Infosec & Security Checklist (by vikrum)
comply
Compliance automation framework, focused on SOC2 (by strongdm)
| SecurityChecklists | comply | |
|---|---|---|
| 3 | 7 | |
| 17 | 1,236 | |
| - | 3.6% | |
| 0.0 | 0.0 | |
| almost 3 years ago | almost 2 years ago | |
| Go | ||
| GNU General Public License v3.0 or later | Apache License 2.0 |
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
SecurityChecklists
Posts with mentions or reviews of SecurityChecklists.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-08-31.
comply
Posts with mentions or reviews of comply.
We have used some of these posts to build our list of alternatives
and similar projects. The last one was on 2022-08-31.
-
SOC2: Drata, Scrut, Vanta
There are even some free open source policy generator tools like this one: https://github.com/strongdm/comply
-
SOC Compliance for Hardware/Software business
If you just want to understand the scope of work, check out this github repo with some examples; https://github.com/strongdm/comply/tree/master/example
-
Do you have any Information Security Policy or Program resources to share?
StrongDM Comply [repo to generate policies]
- Standard operating procedures creation
-
Ask HN: IT Security Checklist for Startups?
Resources I know of that may be of interest:
https://github.com/strongdm/comply
https://www.security4startups.com/
-
Knows good GitHub repo with policy templates?
Check out https://github.com/strongdm/comply.
-
SOC 2 compliance library policies
https://github.com/strongdm/comply is a good start. from there you can see how some have applied, e.g. https://github.com/gjyoung1974/soc2-policy-templates
What are some alternatives?
When comparing SecurityChecklists and comply you can also consider the following projects:
security-101-for-saas-startups - security tips for startups
base16-universal-manager - A universal manager to set base16 themes for any supported application
helm-charts
awesome-security-GRC - Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
zxcvbn - Low-Budget Password Strength Estimation
settle-down - A simple SaaS invoice tool in the `go on rails` framework feedback