The MITRE Corporation

All

541 repositories

saf
Public
The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines
security json compliance mitre security-automation devsecops mitre-corporation mitre-saf security-automation-framework
TypeScript
•
Other
•41•168•118•15•Updated Jan 6, 2026Jan 6, 2026
heimdall2
Public
Heimdall Enterprise Server 2 lets you view, store, and compare automated security control scan results.
mitre-saf
TypeScript
•
Other
•70•241•273•64•Updated Jan 6, 2026Jan 6, 2026
saf_action
Public
GitHub Action for SAF CLI
mitre mitre-corporation mitre-inspec mitre-saf
Shell
•
Other
•1•7•5•1•Updated Jan 6, 2026Jan 6, 2026
caldera
Public
Automated Adversary Emulation Platform
hacking cybersecurity mitre hacktoberfest red-team security-automation security-testing mitre-attack adversary-emulation caldera
Python
•
Apache License 2.0
•1.3k•6.6k•59•12•Updated Jan 6, 2026Jan 6, 2026
secure-coding-case-studies
Public
Case studies of real secure coding issues to provide educators, project leaders, software development teams, and assessment teams insight into these critical issues and show how to avoid them.
Creative Commons Attribution 4.0 International
•23•4•24•21•Updated Jan 5, 2026Jan 5, 2026
ts-inspec-objects
Public
Typescript objects for InSpec profiles
TypeScript
•
Other
•2•3•7•1•Updated Jan 5, 2026Jan 5, 2026
sandcat
Public
A CALDERA plugin
caldera caldera-plugin
Go
•
Apache License 2.0
•43•71•3•4•Updated Jan 5, 2026Jan 5, 2026
mcp
Public
An AI-powered plugin for Caldera that orchestrates long-running LLM workflows to automatically create adversary emulation abilities and plan operations. Optionally enriches workflows with Retrieval-Augmented Generation (RAG) using Cyber Threat Intelligence (CTI) from STIX JSON files.
Vue
•
Apache License 2.0
•1•17•1•2•Updated Jan 5, 2026Jan 5, 2026
nuxt-github-pages
Public
Nuxt module to fix trailing slash issues when deploying to GitHub Pages
TypeScript
•
Other
•1•2•2•8•Updated Jan 5, 2026Jan 5, 2026
saf-training
Public
This repository contains several courses to learn about using and developing SAF capabilities
JavaScript
•
Other
•6•15•6•4•Updated Jan 5, 2026Jan 5, 2026
heimdall-helm
Public
A helm chart for MITRE SAF's Heimdall 2.
Smarty
•
Other
•5•4•5•0•Updated Jan 4, 2026Jan 4, 2026
cinc-auditor-alpine
Public
Minimal Alpine-based Docker image with CINC Auditor, train-k8s-container plugin, and kubectl for Kubernetes compliance scanning
Shell
•
Other
•0•0•0•0•Updated Jan 4, 2026Jan 4, 2026
saf-lambda-function
Public template
(WIP) An AWS Lambda Function to run the SAF CLI as a function in your AWS VPC
aws-lambda serverless mitre aws-security security-automation mitre-corporation aws-la mitre-saf security-automation-framework saf-cli
JavaScript
•
Other
•4•4•4•0•Updated Jan 1, 2026Jan 1, 2026
repo-minder
Public
Repository file standardization and compliance tool for MITRE open-source projects
Python
•
Other
•0•0•0•0•Updated Jan 1, 2026Jan 1, 2026
thumbtack
Public
A web front-end providing a REST-ful API to mount and unmount forensic disk images
forensics
Python
•
Apache License 2.0
•7•22•2•3•Updated Jan 1, 2026Jan 1, 2026
debrief
Public
Debrief is a CALDERA plugin for gathering overall campaign information and analytics for a set of operations.
analytics caldera caldera-plugin
Python
•7•8•1•0•Updated Dec 31, 2025Dec 31, 2025
train-k8s-container
Public
Transport for Kubernetes containers for use with Chef InSpec
Ruby
•
Other
•1•1•0•0•Updated Dec 30, 2025Dec 30, 2025
continue
Public
⏩ Ship faster with Continuous AI. Open-source CLI that can be used in TUI mode as a coding agent or Headless mode to run background agents
TypeScript
•
Apache License 2.0
•4k•0•0•0•Updated Dec 26, 2025Dec 26, 2025
cis-bench
Public
CLI tool for fetching, managing, and exporting CIS benchmarks from CIS WorkBench
mitre mitre-corporation mitre-saf
XSLT
•
Other
•1•4•2•0•Updated Dec 24, 2025Dec 24, 2025
inspec
Public
InSpec: Auditing and Testing Framework
Ruby
•
Other
•680•6•0•2•Updated Dec 24, 2025Dec 24, 2025
tir
Public
LM + MITRE SAF project
Vue
•
Other
•1•7•30•11•Updated Dec 23, 2025Dec 23, 2025
homebrew-saf
Public
Ruby
•
Other
•1•1•0•1•Updated Dec 23, 2025Dec 23, 2025
lilac
Public
MITRE LILAC(TM) toolkit for detecting and mitigating problematic chatbot responses
Python
•
Apache License 2.0
•0•1•0•0•Updated Dec 22, 2025Dec 22, 2025
HTTP-Proxy-Servlet
Public
Smiley's HTTP Proxy implemented as a Java servlet
Java
•
Apache License 2.0
•563•1.5k•61•12•Updated Dec 22, 2025Dec 22, 2025
caldera-ot
Public
MITRE Caldera™ for OT Plugins & Capabilities
modbus cybersecurity mitre bacnet ot profinet mitre-attack adversary-emulation caldera mitre-corporation
Apache License 2.0
•32•231•0•0•Updated Dec 22, 2025Dec 22, 2025
dnp3
Public
Caldera for OT Plugin
C++
•
Apache License 2.0
•2•2•0•0•Updated Dec 22, 2025Dec 22, 2025
vulcan
Public
A web application to streamline the development of STIGs from SRGs
disa compliance inspec stig srg mitre-corporation mitre-inspec compliance-automation
Vue
•
Other
•25•82•91•3•Updated Dec 20, 2025Dec 20, 2025
cti
Public
Cyber Threat Intelligence Repository expressed in STIX 2.0
attack stix cti cyber-threat-intelligence
Other
•462•2k•17•0•Updated Dec 19, 2025Dec 19, 2025
training
Public
A CALDERA plugin
caldera caldera-plugin
Python
•17•26•2•8•Updated Dec 19, 2025Dec 19, 2025
tir-docs
Public
Documentation for the TIR project
JavaScript
•
Other
•1•2•13•3•Updated Dec 18, 2025Dec 18, 2025