GRCEngClub

GRCEngClub/claude-grc-engineering

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

344 stars 77 forks 344 watchers JavaScript Other

agentic-ai auditing claude-code claude-code-plugin cmmc compliance fedramp gap-analysis grc hitrust infrastructure-as-code iso27001 nist-800-53 oscal pci-dss policy-as-code scf secure-controls-framework security soc2

View on GitHub Website

33 Open Issues Need Help Last updated: Jul 19, 2026

Open Issues Need Help

View All on GitHub

Add evidence-checklist command to iso27001 plugin about 17 hours ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

Add v1 finding fixtures for gcp-inspector about 1 month ago

good first issue connector difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

Add STARTTLS protocol support to testssl-inspector about 1 month ago

good first issue connector difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

Add evidence-checklist command to pci-dss plugin about 1 month ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

Add evidence-checklist command to nist-800-53 plugin about 2 months ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

Add v1 finding fixtures for okta-inspector 2 months ago

good first issue connector difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: NIST CSF 2.0 plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: HIPAA Security Rule plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: Swiss FADP plugin (Stub depth) 3 months ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: Singapore PDPA plugin (Stub depth) 3 months ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: FINRA plugin (Stub depth) 3 months ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: Indian DPDP plugin (Stub depth) 3 months ago

good first issue framework difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

infra: pre-commit hook config (detect-secrets + ajv + markdownlint) 3 months ago

enhancement good first issue infra difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

docs: 'Which plugin do I need?' decision tree in QUICKSTART 3 months ago

documentation good first issue docs difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: snowflake-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: tenable-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: crowdstrike-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: splunk-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: datadog-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: slack-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

connector: azure-inspector (Tier-2) 3 months ago

enhancement good first issue connector difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: Japan APPI plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: NIS2 plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: K-ISMS plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: MAS TRM plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: APRA CPS 234 plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: FFIEC CAT plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: NERC CIP plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: CCPA / CPRA plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

framework: SOX plugin (Reference depth) 3 months ago

good first issue framework difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

docs: FRAMEWORK-PLUGIN-GUIDE.md — three depth tiers, level-up checklist 3 months ago

documentation good first issue docs difficulty: easy

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

tooling: /grc-engineer:frameworks discovery command 3 months ago

enhancement good first issue infra difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2

tooling: /grc-engineer:scaffold-framework command 3 months ago

enhancement good first issue infra difficulty: medium

GRCEngClub/claude-grc-engineering

344

Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

JavaScript

#agentic-ai#auditing#claude-code#claude-code-plugin#cmmc#compliance#fedramp#gap-analysis#grc#hitrust#infrastructure-as-code#iso27001#nist-800-53#oscal#pci-dss#policy-as-code#scf#secure-controls-framework#security#soc2