gap-analysis

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validated, runs offline).

clreq-gap (Chinese layout gap analysis) for typst. 分析 Typst 与中文排版的差距。https://gap.zhtyp.art

Claude Code skill that diagnoses the top 3 gaps in any project — code or not

SAP security maturity model

Interactive tool for investigating coverage gaps in eDNA metabarcoding reference databases for marine, freshwater, and elasmobranch fish species

WardenIQ is an open-source AI test intelligence platform that turns requirements, docs, and code changes into test cases, test plans, coverage insights, and release test cycles for smarter QA.

Agent-first DeepSeek Harness plugin intelligence: verify existing plugins, identify missing capabilities, and generate build-ready briefs.

Core Business Application Security - SAP

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

Free and open-source CMMC assessment tools for small and medium-sized businesses.

AI-Powered Documentation Generator for Claude Code

MCP server for the CrawlGraph backlink-intelligence API (Common Crawl webgraph). Backlink lookups + competitor gap analysis for Claude, Cursor, Cline, and any MCP client.

A helper tool for gap analysis in the context of MR-MPS-SW

Codex skill: closed-loop research workflow with multi-agent adversarial gap discovery, Semantic Scholar validation, and 7-phase research cycle

SAP Security Aptitude Assessment and Analysis

BubbleHead is a fully local RAG system that lets users query their document collections with natural language. It combines vector search, BM25 reranking, and iterative gap analysis to deliver accurate, grounded answers

Audit-ready ISO/IEC 27001:2022 control assessment & evidence package for a fictional cloud SaaS — workbook, SSP, evidence tracker, readiness report, charts. NIST 800-53 crosswalk.

Configuration-as-code toolkit for GLPI with ISO 27001 ISMS integration. YAML-driven ITIL v4 SLA, gap analysis, executive reports (PDF/PPTX).

Offline cybersecurity policy gap analysis engine — NIST CSF, ISO 27001, SOC 2, semantic matching, PDF reports