Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

clreq-gap (Chinese layout gap analysis) for typst. 分析 Typst 与中文排版的差距。https://gap.zhtyp.art

Claude Code skill that diagnoses the top 3 gaps in any project — code or not

SAP security maturity model

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validated, runs offline).

Interactive tool for investigating coverage gaps in eDNA metabarcoding reference databases for marine, freshwater, and elasmobranch fish species

Core Business Application Security - SAP

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

Free and open-source CMMC assessment tools for small and medium-sized businesses.

A helper tool for gap analysis in the context of MR-MPS-SW

AI-Powered Documentation Generator for Claude Code

SAP Security Aptitude Assessment and Analysis

BubbleHead is a fully local RAG system that lets users query their document collections with natural language. It combines vector search, BM25 reranking, and iterative gap analysis to deliver accurate, grounded answers

Configuration-as-code toolkit for GLPI with ISO 27001 ISMS integration. YAML-driven ITIL v4 SLA, gap analysis, executive reports (PDF/PPTX).

Codex skill: closed-loop research workflow with multi-agent adversarial gap discovery, Semantic Scholar validation, and 7-phase research cycle

Offline cybersecurity policy gap analysis engine — NIST CSF, ISO 27001, SOC 2, semantic matching, PDF reports

Vision-vs-Implementation audit skill for AI agents (Claude Code, Codex, Cursor, +50). Reads foundation docs, dispatches parallel verification agents, enforces verify-don't-assume, outputs gap-matrix report.

Quartermaster vessel — GLM-5 Turbo agent. Fleet hygiene, gap analysis, documentation infrastructure, and empty repo build-out.

Organization profile and community health files for Yogsoth AI.

A smart static analysis tool that uncovers untested core business logic hidden inside complex Python GUI and hybrid applications.