Repositories list

• dotgov-data

  Public
  Official list of .gov domains

  govdotgov

  Shell

  •

  Creative Commons Zero v1.0 Universal

  •82•269•3•0•Updated Jul 31, 2025Jul 31, 2025

• vulnrichment

  Public
  A repo to conduct vulnerability enrichment.

  Creative Commons Zero v1.0 Universal

  •75•660•2•0•Updated Jul 31, 2025Jul 31, 2025

• ScubaGear

  Public template
  Automation to assess the state of your M365 tenant against CISA's baselines

  open-sourcesecuritypowershell+ 10cybersecuritysecurity-automationcontributions-welcomescubacisam365open-policy-agent+ 3

  PowerShell

  •

  Creative Commons Zero v1.0 Universal

  •302•2.2k•190•4•Updated Jul 31, 2025Jul 31, 2025

• manage.get.gov

  Public
  A Django-based domain name registrar that interfaces with an EPP registry

  Python

  •

  Other

  •25•64•326•12•Updated Jul 30, 2025Jul 30, 2025

• eleVADR

  Public
  [WIP] Validated Architecture Design Review assessment automation tool

  2•3•0•0•Updated Jul 30, 2025Jul 30, 2025

• CSAF

  Public
  CISA CSAF Security Advisories

  25•79•0•0•Updated Jul 30, 2025Jul 30, 2025

• Malcolm

  Public
  Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.

  cybersecuritysuricatainfosec+ 10zeekopensearchnetwork-traffic-analysisnetworksecurityarkimeopensearch-dashboardsnetworktrafficanalysis+ 3

  Python

  •

  Other

  •374•2.2k•151•0•Updated Jul 30, 2025Jul 30, 2025

• XFD

  Public
  CyHy Dashboard

  Python

  •

  Creative Commons Zero v1.0 Universal

  •9•20•57•74•Updated Jul 30, 2025Jul 30, 2025

• cset

  Public
  Cybersecurity Evaluation Tool

  security-auditcset

  TSQL

  •

  MIT License

  •289•1.6k•10•7•Updated Jul 30, 2025Jul 30, 2025

• mesa-toolkit

  Public
  HTML

  •7•5•2•0•Updated Jul 30, 2025Jul 30, 2025

• playbook-ng

  Public
  Playbook-NG is a stateless web-based application used to match incident findings with countermeasures for adversary containment and eviction.

  TypeScript

  •

  MIT License

  •2•26•0•2•Updated Jul 30, 2025Jul 30, 2025

• LME

  Public
  Logging Made Easy (LME) is a no cost, open source platform that centralizes log collection, enhances threat detection, and enables real-time alerting, helping small to medium-sized organizations secure their infrastructure. LME Docs can be found at https://cisagov.github.io/lme-docs/docs/

  securityelasticsearchlog+ 8loggingelkcybersecurityelasticnetwork-analysiszeekelk-stack+ 1

  Python

  •

  Other

  •113•1.1k•161•1•Updated Jul 30, 2025Jul 30, 2025

• flat-tribal-leaders

  Public
  Git scraping BIA's Tribal Leaders Directory for .gov registry awareness

  TypeScript

  •4•5•0•0•Updated Jul 30, 2025Jul 30, 2025

• pshtt

  Public
  Scan domains and return data based on HTTPS best practices

  us-federal-governmenthttpscisa-directives+ 1hsts

  Python

  •

  Creative Commons Zero v1.0 Universal

  •82•683•30•6•Updated Jul 29, 2025Jul 29, 2025

• icsnpp-enip

  Public
  Zeek Ethernet/IP and CIP Parser - CISA ICSNPP

  Zeek

  •

  BSD 3-Clause "New" or "Revised" License

  •15•25•4•0•Updated Jul 29, 2025Jul 29, 2025

• trustymail

  Public
  Scan domains and return data based on trustworthy email best practices

  us-federal-governmentspfemail-security+ 3cisa-directivesdmarcstarttls

  Python

  •

  Creative Commons Zero v1.0 Universal

  •40•210•19•1•Updated Jul 29, 2025Jul 29, 2025

• manage-cyhy-ops

  Public
  Manage CyHy Operators in the production CyHy environment.

  Python

  •

  Creative Commons Zero v1.0 Universal

  •3•3•1•0•Updated Jul 29, 2025Jul 29, 2025

• lineage

  Public
  Python

  •

  Creative Commons Zero v1.0 Universal

  •1•1•0•0•Updated Jul 29, 2025Jul 29, 2025

• gophish-tools

  Public
  Helpful tools for interacting with a GoPhish phishing instance

  Python

  •

  Creative Commons Zero v1.0 Universal

  •12•49•5•2•Updated Jul 29, 2025Jul 29, 2025

• cyhy-db

  Public
  An object relational mapper (ORM) for the Cyber Hygiene (CyHy) database

  Python

  •

  Creative Commons Zero v1.0 Universal

  •3•1•3•2•Updated Jul 29, 2025Jul 29, 2025

• cyhy-cvesync

  Public
  Cyber Hygiene Common Vulnerabilities and Exposures (CVE) synchronization Python library

  Python

  •

  Creative Commons Zero v1.0 Universal

  •2•2•0•2•Updated Jul 29, 2025Jul 29, 2025

• clamav-report

  Public
  Generate reports from groups of hosts running ClamAV

  csvanti-virusreporting+ 1clamav

  Python

  •

  Creative Commons Zero v1.0 Universal

  •6•11•2•1•Updated Jul 29, 2025Jul 29, 2025

• cyhy-kevsync

  Public
  Cyber Hygiene known exploited vulnerability (KEV) synchronization Python library

  vulnerabilityvulnerabilitiescyhy+ 2kevexploited

  Python

  •

  Creative Commons Zero v1.0 Universal

  •3•5•1•2•Updated Jul 29, 2025Jul 29, 2025

• pca-gophish-composition

  Public
  Phishing campaign docker composition for Gophish

  Shell

  •

  Creative Commons Zero v1.0 Universal

  •6•42•3•2•Updated Jul 29, 2025Jul 29, 2025

• cyhy-runner

  Public
  Shell

  •

  Creative Commons Zero v1.0 Universal

  •3•2•1•0•Updated Jul 29, 2025Jul 29, 2025

• ICSNPP

  Public
  Industrial Control Systems Network Protocol Parsers

  BSD 3-Clause "New" or "Revised" License

  •30•176•1•0•Updated Jul 29, 2025Jul 29, 2025

• ioc-scanner

  Public
  Search a filesystem for indicators of compromise (IoC).

  iocscannermd5+ 3cybersecuritysha-256sha-1

  Python

  •

  Creative Commons Zero v1.0 Universal

  •14•75•1•2•Updated Jul 29, 2025Jul 29, 2025

• cyhy-logging

  Public
  Shell

  •

  Creative Commons Zero v1.0 Universal

  •2•1•0•0•Updated Jul 29, 2025Jul 29, 2025

• vpn-config-gen

  Public
  Update OpenVPN configurations file routes.

  openvpnroutesvpn+ 1office365

  Shell

  •

  Creative Commons Zero v1.0 Universal

  •3•3•3•1•Updated Jul 29, 2025Jul 29, 2025

• lcgit

  Public
  A pythonic Linear Congruential Generator iterator

  pythonnetworkrandom+ 2lcglinear-congruential-generator

  Shell

  •

  Creative Commons Zero v1.0 Universal

  •3•5•1•0•Updated Jul 29, 2025Jul 29, 2025