● Open Source
OSCALFlow
Automated OSCAL compliance documentation for GitHub repositories.
A TypeScript tool that automatically generates OSCAL-compliant compliance documentation from your GitHub repositories. Connect your repo and OSCALFlow produces machine-readable security documentation — ready for FedRAMP and NIST workflows.
🔄 GitHub Integration
Connect to any GitHub repository. OSCALFlow analyzes your codebase and infrastructure to generate compliance documentation automatically.
📄 OSCAL Output
Produces OSCAL JSON and YAML — the machine-readable format required by OMB mandates and FedRAMP automation workflows.
⚙️ CI/CD Ready
Run in your GitHub Actions pipeline. Documentation stays up to date as your code evolves — no manual updates required.
🗺️ Control Mapping
Automatically maps repository contents to NIST SP 800-53 controls. Understand your compliance posture as code changes.
📦 TypeScript / Node.js
Written in TypeScript. Drop into any Node.js-capable environment. Open source and extensible.
🔓 Open Source
Free, open source, and MIT licensed. Contribute, fork, extend, or deploy as part of your compliance automation pipeline.
See It in Action
Who Is This For?
🏗️ DevSecOps Teams
Automate the documentation side of DevSecOps. OSCAL output flows directly into compliance workflows without manual effort.
🏛️ Federal System Owners
OMB requires OSCAL. OSCALFlow generates it automatically from what you already have — your code.
💼 ATO Package Preppers
Dramatically reduce the documentation effort for an Authorization to Operate. Baseline OSCAL artifacts ready in minutes.