The MITRE Corporation

All

528 repositories

heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•70•238•268•54•Updated Oct 25, 2025Oct 25, 2025
saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
security json compliance mitre security-automation devsecops mitre-corporation mitre-saf security-automation-framework
TypeScript
•
Other
•41•166•116•17•Updated Oct 25, 2025Oct 25, 2025
saf_action
Public
GitHub Action for SAF CLI
mitre mitre-corporation mitre-inspec mitre-saf
Shell
•
Other
•1•7•5•3•Updated Oct 25, 2025Oct 25, 2025
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•2•3•7•1•Updated Oct 24, 2025Oct 24, 2025
secure-coding-case-studies
Public
Case studies of real secure coding issues to provide educators, project leaders, software development teams, and assessment teams insight into these critical issues and show how to avoid them.
Creative Commons Attribution 4.0 International
•2•4•4•0•Updated Oct 24, 2025Oct 24, 2025
RHEL9-STIG
Public
Automated STIG Benchmark Compliance Remediation for RHEL 9 with Ansible
Jinja
•
MIT License
•20•0•0•0•Updated Oct 24, 2025Oct 24, 2025
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•1•2•13•0•Updated Oct 23, 2025Oct 23, 2025
dnp3
Public
Caldera for OT Plugin
C++
•
Apache License 2.0
•2•2•0•0•Updated Oct 23, 2025Oct 23, 2025
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•6•15•6•3•Updated Oct 23, 2025Oct 23, 2025
act
Public
MITRE Adaptive Capabilities Testing (ACT)
mitre mitre-saf mitre-act adaptive-capabilities-testing
Vue
•
Other
•1•1•9•0•Updated Oct 22, 2025Oct 22, 2025
debrief
Public
Debrief is a CALDERA plugin for gathering overall campaign information and analytics for a set of operations.
analytics caldera caldera-plugin
Python
•6•8•0•0•Updated Oct 22, 2025Oct 22, 2025
nuxt-smartscript
Public
Smart typography transformations for Nuxt - automatic superscript, subscript, and symbol formatting
mitre mitre-corporation mitre-saf
TypeScript
•
Other
•0•0•0•0•Updated Oct 21, 2025Oct 21, 2025
jsonix
Public
Powerful XML<->JSON JavaScript mapping library.
mitre mitre-corporation mitre-saf
JavaScript
•
Other
•82•14•0•0•Updated Oct 21, 2025Oct 21, 2025
emass_client
Public
The eMASS client repository maintains the Enterprise Mission Assurance Support Service (eMASS) Representational State Transfer (REST) Application Programming Interface (API) specification and executables.
ruby typescript security-automation emass mitre-saf emasser
Python
•
Other
•6•24•2•1•Updated Oct 21, 2025Oct 21, 2025
vulcan
Public
A web application to streamline the development of STIGs from SRGs
disa compliance inspec stig srg mitre-corporation mitre-inspec compliance-automation
Vue
•
Other
•24•80•89•3•Updated Oct 21, 2025Oct 21, 2025
mitre-saf
Public
Landing Page Content/Builder for MITRE Security Automation Framework
Vue
•
Other
•410•29•24•3•Updated Oct 21, 2025Oct 21, 2025
nuxt-github-pages
Public
Nuxt module to fix trailing slash issues when deploying to GitHub Pages
TypeScript
•
Other
•1•2•2•6•Updated Oct 20, 2025Oct 20, 2025
hipcheck
Public
Automatically assess and score software repositories for supply chain risk.
supply-chain-security
Rust
•
Apache License 2.0
•12•114•55•10•Updated Oct 20, 2025Oct 20, 2025
caldera
Public
Automated Adversary Emulation Platform
hacking cybersecurity mitre hacktoberfest red-team security-automation security-testing mitre-attack adversary-emulation caldera
Python
•
Apache License 2.0
•1.2k•6.5k•62•9•Updated Oct 17, 2025Oct 17, 2025
stockpile
Public
A CALDERA plugin
caldera caldera-plugin
PowerShell
•
Apache License 2.0
•52•79•0•7•Updated Oct 16, 2025Oct 16, 2025
apache-tomcat-9.x-stig-baseline
Public
InSpec profile for Apache Tomcat 9.x STIG
inspec security-automation mitre-corporation mitre-saf
Ruby
•
Other
•4•2•0•1•Updated Oct 15, 2025Oct 15, 2025
GraphEx-ESXi-Utilities
Public
A plugin for the GraphEx application to create nodes for the pip package esxi-utils. This enables direct control over ESXi environments and remote connection features such as SSH and WinRM.
HTML
•
Apache License 2.0
•0•0•0•0•Updated Oct 15, 2025Oct 15, 2025
GraphEx-Web-Automation-Plugin
Public
A plugin for the GraphEx application to create nodes for controlling Playwright
HTML
•
Apache License 2.0
•0•0•0•0•Updated Oct 15, 2025Oct 15, 2025
GraphEx
Public
Visual programming language tool designed for managing configurations and deployments
Python
•
Apache License 2.0
•0•1•8•0•Updated Oct 15, 2025Oct 15, 2025
microsoft-windows-11-stig-baseline
Public
Inspec validation profile for Microsoft Windows 11 Security Technical Implementation Guide :: Version 2, Release 2 :: Benchmark Date: 15 Nov 2024
Ruby
•
Other
•0•2•2•0•Updated Oct 14, 2025Oct 14, 2025
apache-tomcat-8-cis-baseline
Public
(WIP) (Alpha) InSpec profile for CIS Apache Tomcat v8 Benchmark
security cis apache tomcat inspec inspec-profile mitre-corporation mitre-inspec mitre-saf
Ruby
•
Other
•5•6•7•0•Updated Oct 14, 2025Oct 14, 2025
apache-tomcat-7-cis-baseline
Public
(WIP) (ALPHA) InSpec Profile for the CIS Apache Tomcat v7 Benchmark
security cis tomcat inspec inspec-profile tomcat7 mitre-corporation mitre-inspec mitre-saf
Ruby
•
Other
•2•3•8•0•Updated Oct 14, 2025Oct 14, 2025
apache-site-2.4x-stig-baseline
Public
InSpec testing for baseline compliance with the Apache Server 2-4 UNIX Site STIG
inspec stig security-automation mitre-corporation mitre-saf
Ruby
•
Other
•3•1•0•0•Updated Oct 14, 2025Oct 14, 2025
apache-site-2.2-stig-baseline
Public
Baseline InSpec profile testing configuration of a web site hosted through Apache HTTPD Server per Apache site 2.2 STIG.
transfer inspec stig mitre-saf
Ruby
•
Other
•2•2•0•0•Updated Oct 14, 2025Oct 14, 2025
apache-server-2.4x-stig-baseline
Public
InSpec testing for baseline compliance with the Apache HTTPD Server 2.4 UNIX Server STIG
inspec stig security-automation mitre-corporation mitre-saf
Ruby
•
Other
•4•1•0•0•Updated Oct 14, 2025Oct 14, 2025