Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Compliance policies in Git, audit-ready PDFs on every push — free for noncommercial use.

Read-only, client-side viewer for the Secure Controls Framework (SCF) — browse 1,500+ controls, ~250 framework mappings, maturity levels, risks & threats. No backend; your workbook never leaves the browser.

SmartCompliance — AI-powered Policy to SCF Mapping System Intelligent compliance management tool that uses RAG and semantic similarity to map company policies to the Secure Controls Framework (SCF) with explainable confidence scoring, visual dashboards, and PDF reporting.