The POAM Pilot is a application designed to streamline the tracking, management, and reporting of security vulnerabilities and compliance requirements.

Focuses on automating the management of Plans of Action and Milestones (POAM) using GitHub Actions and various external integrations.

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.

TenableTrawler (Cloud OR FedCloud) is a Python project that pulls scan results via the Tenable API, laying them into organized, POAM-ready outputs. It supports various scans and exports in formats like CSV, JSON, and YAML.

POAM Automation Proof-of-Concept with Google App Script

Creates a Inventory Excel Spreadsheet Using FedRAMP Template for AWS, Azure, GCP