A version of the NIST Secure Software Development Framework (SSDF), in Markdown

Public defensive security fieldbook for InterAI Summer 2026 class repos

Security gates for AI-generated code changes. Open Agent Security scans PR diffs, detects security-sensitive changes, requires verification evidence, and blocks risky merges before they ship.

A stack-agnostic, self-improving AI development framework as a Claude Code plugin. Four layers + retrospective loop. Aligned with NIST SSDF, ISO 25010, ADR.

Claude Code plugin: privacy-by-design + secure-by-design controls for products targeting NIST SSDF 1.1, ISO 27001:2022, and India DPDP Act 2023. Profiles your project, asks which regimes apply, then deploys dev-loop guardrails and product-code scaffolds.

Forensic-grade AppSec testing framework with CFQI scoring algorithm (Code Forensic Quality Index v1.0). Docker stack: PostgreSQL + FastAPI + Grafana. Unifies SAST · SCA · DAST · Secrets · IaC, emits two forensic PDFs (executive + dictamen pericial). Sibling of INGRID (AFQI). By Elyer Maldonado — AI Quality & Risk Architect.