FedRAMP Automation

An API and client for managing STIG assessments

compliance assessment and POA&M management for CMMC/NIST 800-171A

An ACAS/SCAP/CKL scan parser and report generator

[Not Production Ready] This repository automates the extraction vulnerability and flaw data from vulnerability sources and then generate a Plan of Actions and Milestones (POAM), addressing identified security issues effectively.

Focuses on automating the management of Plans of Action and Milestones (POAM) using GitHub Actions and various external integrations.

RampControl manages and tracks security compliance per FedRAMP requirements. It allows users to add new system security plans, manage POA&M entries, and export data in OSCAL format.

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.