Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.

Free, open-source tool to build a NIST CSF 2.0 Current Profile and gap analysis from an organization's documents (AI-assisted, human-validated, runs offline).

clreq-gap (Chinese layout gap analysis) for typst. 分析 Typst 与中文排版的差距。https://gap.zhtyp.art

Claude Code skill that diagnoses the top 3 gaps in any project — code or not

SAP security maturity model

Interactive tool for investigating coverage gaps in eDNA metabarcoding reference databases for marine, freshwater, and elasmobranch fish species

Core Business Application Security - SAP

WardenIQ is an open-source AI test intelligence platform that turns requirements, docs, and code changes into test cases, test plans, coverage insights, and release test cycles for smarter QA.

Open-source Python GRC tool: gap analysis, AI risk statements, OSCAL-first compliance automation. Enterprise-grade evidence integrity (Sigstore + GPG + DSSE), CycloneDX SBOM, PyPI Trusted Publisher OIDC + PEP 740 attestations.

Free and open-source CMMC assessment tools for small and medium-sized businesses.

A helper tool for gap analysis in the context of MR-MPS-SW

AI-Powered Documentation Generator for Claude Code

Codex skill: closed-loop research workflow with multi-agent adversarial gap discovery, Semantic Scholar validation, and 7-phase research cycle

BubbleHead is a fully local RAG system that lets users query their document collections with natural language. It combines vector search, BM25 reranking, and iterative gap analysis to deliver accurate, grounded answers

SAP Security Aptitude Assessment and Analysis

Configuration-as-code toolkit for GLPI with ISO 27001 ISMS integration. YAML-driven ITIL v4 SLA, gap analysis, executive reports (PDF/PPTX).

Offline cybersecurity policy gap analysis engine — NIST CSF, ISO 27001, SOC 2, semantic matching, PDF reports

Vision-vs-Implementation audit skill for AI agents (Claude Code, Codex, Cursor, +50). Reads foundation docs, dispatches parallel verification agents, enforces verify-don't-assume, outputs gap-matrix report.

Organization profile and community health files for Yogsoth AI.

Quartermaster vessel — GLM-5 Turbo agent. Fleet hygiene, gap analysis, documentation infrastructure, and empty repo build-out.