Automating SP 800-53 work: OSCAL documents, open-source scanners and compliance-as-code content, and self-hosted tools that produce control evidence.
Using OSCAL to manage SP 800-53 as data: NIST's catalog and baseline profiles in OSCAL, what the format covers, compliance-trestle for authoring in Git, and FedRAMP's machine-readable rules.
Self-hosted open-source tools that implement and evidence SP 800-53 controls: OpenSCAP and ComplianceAsCode for configuration, Wazuh for logging and integrity, Greenbone for scanning, Keycloak for MFA and OpenBao for secrets and keys.
Enforcing and evidencing SP 800-53 configuration controls automatically: CM-6 and its enhancements, SCAP content from ComplianceAsCode, OpenSCAP reports, Wazuh configuration assessment and Kubernetes policy engines.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.