Complete AI governance and LLM Evals platform with support for EU AI Act, ISO 42001, NIST AI RMF and 20+ more AI frameworks and regulations. Join our Discord channel: https://discord.com/invite/d3k3E4uEpR

The Universal Governance, Risk, Compliance (GRC) Operating System with Integrated Security for Agentic AI, Non-Human Identities, and Swarm Governance. AI SAFE² + AI Sovereignty Maturity Model (AISM) [Dual License: MIT + CC-BY-SA]

Open-source AI agent security framework. Score, harden, and govern your AI agents. Built on DoD/DISA zero-trust principles.

NIST AI RMF applied to a real research cluster. We govern our own AI tools, document decisions, and share templates. Practical governance for small teams.

nod is a platform-agnostic, rule-based linter that ensures AI/LLM specifications contain critical security and compliance elements before any agentic or automated development begins.

Operationalizes PM insights through working agents grounded in GRC best practices. Provides prompt libraries and tools to identify governance and compliance risks before scaling programs, analytics initiatives, or AI systems.

The most comprehensive open-source mapping of OWASP GenAI risks to industry frameworks — 37 files, 16 frameworks, 3 source lists: LLM Top 10, Agentic Top 10, DSGAI 2026. OT/ICS, EU AI Act, NIST, ISO 27001, ISO 42001, CIS, SAMM, ENISA, NHI, AIVSS.

Self-hosted AI Model Governance & Inventory for Government & Enterprise. Aligned with NIST AI RMF & EU AI Act.

Non-Human Identity Disclosure Standard for Healthcare Voice Workflows

Hardened Public Release of KAIROS invocation governance framework. Includes invocation terms, ethical compliance clauses, regulatory mapping, and sample outputs. Licensed under CC BY-NC-ND 4.0. License: Do not auto-generate via GitHub. Use hardened License.txt

Translate AI governance requirements into auditable, testable controls

Identified critical AI governance gaps: no adversarial testing, undocumented third-party models, and missing incident response. Delivered roadmap to secure high-risk KYC and transaction monitoring systems against evolving threats.

White-paper & talk covering benefits, risks, and mitigation frameworks for AI and LLMs in cybersecurity (NIST AI RMF, OWASP Top 10 for LLMs, MITRE ATLAS, real-world case studies)

Adversarial testing and red-teaming framework for enterprise LLM deployments. Covers OWASP LLM Top 10 across 11 attack modules, RAG poisoning, tool-call abuse, PII leakage, credential harvesting, hallucination, and more. Built to run in CI/CD pipelines.

Operational AI Governance OS aligning EU AI Act to evidence-gated delivery.

AI Governance Portfolio — NIST RMF, EU AI Act, ISO 42001, Risk Registers & Responsible AI Policies

A browser-based Microsoft Defender for Endpoint audit tracker for MSSP security engineers, mapping ~270 tasks across multiple frameworks including — NIST CSF 2.0, Cyber Essentials, SOC 2, and NIST 800-53. Features per-task status, notes, live progress metrics, framework switching, dark/light mode, and CSV, HTML, and JSON export.

Open governance framework for autonomous AI agents. Classify decisions. Enforce policies. Prove compliance.

Customizable AI Acceptable Use Policy and governance framework for US enterprises. MIT licensed. Covers compliance, HR, infosec, and legal.

Curated AI governance, risk, and compliance resources - frameworks, learning paths, certifications, and tools for GRC professionals