GRCEngClub/claude-grc-engineering

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Plugin marketplace listing 66 plugins: grc-engineer, grc-auditor, grc-internal, grc-tprm, grc-reporter.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Deploy a serverless trust center to publish your company's compliance posture. Supports AWS deployment with S3, CloudFront, Lambda, DynamoDB, Cognito, and WAF.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Guide a research project through the full academic lifecycle — idea development, literature review, methodology, writing, feedback, publishing, and authorship — with verified sources and a durable project tracker.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for AWS: evaluates IAM, S3, CloudTrail, EBS, and RDS for compliance misconfigurations. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for AWS Secrets Manager: evaluates rotation, customer-managed KMS key, resource policy (public access), and access patterns. Hybrid shape — emits v1 finding-contract documents in inspector mode and supports opt-in secret retrieval to stdout or 0600 files in retrieve mode.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Microsoft Azure: evaluates Entra ID, Storage, Key Vault, Monitor, and Defender for Cloud. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for CrowdStrike Falcon: evaluates sensor coverage, detection/prevention policy visibility, and host-group scoping. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Datadog: evaluates log retention, audit log coverage, monitor coverage, SSO visibility, and RBAC roles. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Drata: wraps drata-cli curated workflows and normalizes compliance posture into schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Google Cloud: evaluates IAM, Cloud Storage, audit logs, KMS rotation, and Compute for compliance misconfigurations. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for GitHub: evaluates repo protections, branch policies, Actions, secret scanning, Dependabot, and deploy keys. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Okta: evaluates authentication policies, MFA enrollment, password policy, session management, and admin/privileged accounts. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

FedRAMP POA&M lifecycle management and VDR generation. Converts Nessus, Tenable, Qualys, and Wiz scanner exports into a FedRAMP-compliant POA&M, manages the full finding lifecycle, generates FedRAMP 20x VDR reports with live CISA KEV and EPSS enrichment, and produces per-release Product Vulnerability Disclosure…

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Slack: evaluates workspace 2FA, SSO/session posture, retention, app approvals, and DLP visibility. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Snowflake ACCOUNTUSAGE: evaluates MFA, network policies, masking/row access policies, session timeout, and data retention. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Splunk: evaluates index retention, RBAC roles, audit-source coverage, saved-search ACLs, and user authentication signals. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Tenable.io/Tenable.sc: evaluates scan coverage, credentialed scan signals, vulnerability age, and scan access visibility. Emits findings conforming to schemas/finding.schema.json v1.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector wrapping testssl.sh. Scans HTTPS endpoints for protocol/cipher posture, certificate issues, and known TLS CVEs (Heartbleed, ROBOT, POODLE, FREAK, LOGJAM, SWEET32, ...). Emits findings conforming to schemas/finding.schema.json v1, anchored on SCF CRY-01/CRY-03/CRY-05/CRY-08/NET-09/VPM-01/VPM-06/WEB-03 and.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

GRC connector for Wiz CNAPP: normalizes configuration findings, issues, vulnerabilities, and cloud resource inventory into v1 Findings.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Localhost compliance posture dashboard for monitor-continuous JSON output. Reference implementation of the Dashboards category from RFC #38.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Convert FedRAMP Rev 5 Moderate SSP DOCX templates to validated OSCAL 1.2.0 JSON. Wraps ethanolivertroy/frdocx-to-froscal-ssp — ready for oscal-cli, Compliance Trestle, eMASS, and FedRAMP 20X workflows.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

APRA CPS 234 - Reference plugin with scope determination, evidence checklist, and SCF-backed gap assessment for information security.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

Swiss Federal Act on Data Protection (nFADP) plugin - data protection compliance with voluntary DSO, risk-based breach notification, and Swiss transfer mechanisms.

GRCEngClub/claude-grc-engineering

Plugin Claude Code

CIS Controls v8 Plugin - Center for Internet Security baseline with IG1/IG2/IG3 implementation groups and 153 safeguards.