This is your work, valued
I've got 15+ years of experience in cyber risk management, compliance and IT internal audit. Most of my code is supporting my work or learning in these areas.
cyber-incident-mcmc-pymc. Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via PyMC) to determine the frequency of successful attacks.
★ 46cyber-incident-mcmc-cmdstanr. Code that implements Factor Analysis of Information Risk (FAIR) in combination with MITRE ATT&CK using Markov Chain Monte Carlo (via cmdstanr) to determine the frequency of successful attacks.
★ 6r-fair-risk-pert. Simple code written in R to calculate risk using the factor analysis of information risk (FAIR) methodology. Uses PERT distributions for the monte carlo simulations.
★ 5Hyper-Trees. Forecasting with Hyper-Trees
★ 41causalml. Uplift modeling and causal inference with machine learning algorithms
★ 5.9ktidydraws. A tidybayes-inspired data layer for declarative Bayesian visualisation in Python.
★ 19GPflow. Gaussian processes in TensorFlow
★ 1.9knumpyro_forecast. Forecasting Models in NumPyro
★ 33pathmc. Structural causal models with Bayesian estimation and interventional simulation via a concise DSL.
★ 105raspotify. A Spotify Connect client that mostly Just Works™
★ 5.2kbaygent-skills. A set of skills to call your agent Bayes. Thomas Bayes.
★ 160security-decision-labs. FAIR cyber risk quantification toolkits, agent-based control simulation (FAIR-CAM), threat event frequency estimator (PyPI), LLM classification validator (PyPI), Monte Carlo risk engine with IRIS benchmarks.
★ 28core. A privacy-preserving Raspberry Pi home security camera that uses advanced end-to-end encryption.
★ 1.6kECC. The agent harness performance optimization system. Skills, instincts, memory, security, and research-first development for Claude Code, Codex, Opencode, Cursor and beyond.
★ 237kservers. Model Context Protocol Servers
★ 89kClawdmeter. ESP32 desk dashboard that shows Claude Code usage
★ 1.9kunsloth. Unsloth is a local UI for training and running Kimi K3, Gemma 4, Qwen3.6, DeepSeek-V4, GLM and other models.
★ 69kcookbook. A collection of guides and examples for the Gemma open models from Google.
★ 3.9kVCDB. VERIS Community Database
★ 666veris. Vocabulary for Event Recording and Incident Sharing (VERIS)
★ 642LightInk. ESP-IDF project that build LightMyInk Binaries
★ 666ESPHomeDesigner. A visual drag-and-drop editor for ESPHome displays (E-Ink, OLED, LCD, Touch), running as a Home Assistant integration or a standalone web app.
★ 1kGuition-ESP32-S3-4848S040. LVGL ESP32-S3-4848s040 firmware
★ 401AutoNmap. Automated daily scan using Nmap and report on the differences
★ 92attack-stix-data. STIX data representing MITRE ATT&CK
★ 623securecontrolsframework. Config files for my GitHub profile.
★ 533ambient_api. Python module for accessing the Ambient Weather API
★ 40aioambient. 🌤 A clean, async-friendly library for interacting with the Ambient Weather API
★ 35moOde-Player-Waveshare-3.5inch_RPi_LCD. Shell
★ 1squeezelite-esp32. ESP32 Music streaming based on Squeezelite, with support for multi-room sync, AirPlay, Bluetooth, Hardware buttons, display and more
★ 2.1kAgentic_AB_Tesing_with_PyMC_Gemma4_Ollama. An autonomous LLM agent that reads experiment data, designs a Bayesian model in PyMC 5, runs MCMC sampling, evaluates convergence, and iteratively refines its own statistical code - all without human intervention.
★ 2torch-uncertainty. Open-source framework for uncertainty and deep learning models in PyTorch 🌱
★ 524BirdNET-Pi. A realtime acoustic bird classification system for the Raspberry Pi 5, 4B 3B+ 0W2 and more. Built on the TFLite version of BirdNET.
★ 1snapcast. Synchronous multiroom audio player
★ 7.8kclaude-grc-engineering. Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap reports, OSCAL workflows.
★ 357scientific-agent-skills. Turn any AI agent into an AI Scientist. The #1 Agent Skills library for science, used by 170,000+ scientists worldwide. 158 ready-to-use skills plus 100+ scientific databases covering biology, chemistry, medicine, and drug discovery. Compatible with Cursor, Claude Code, Codex, Pi, Antigravity, and the open Agent Skills standard.
★ 32ksuperpowers. An agentic skills framework & software development methodology that works.
★ 265kawesome-claude-skills. A curated list of awesome Claude Skills, resources, and tools for customizing Claude AI workflows — particularly Claude Code
★ 14kyogait. Jupyter Notebook
★ 25lotus-wisdom-mcp. Contemplative reasoning MCP server — Lotus Sutra wisdom framework with interactive ext-apps journey visualization.
★ 31YogaFix. YogaFix is a real-time Yoga Pose detection and feedback system built using Python, OpenCV, and Mediapipe for pose estimation. The system is served via a FastAPI backend that captures webcam frames server-side, processes them to detect poses, and provides real-time feedback over WebSocket connections.
★ 3decision-lab. Run tested, autonomous agent workflows on your data for meaningful decision-making
★ 176podgrab. A self-hosted podcast manager/downloader/archiver tool to download podcast episodes as soon as they become live with an integrated player.
★ 2kpentagi. Fully autonomous AI Agents system capable of performing complex penetration testing tasks
★ 21kdecision-hub. Python
★ 92skills. Public repository for Agent Skills
★ 165kclaude-code-skills. Professional Claude Code skills marketplace featuring production-ready skills for enhanced development workflows.
★ 1.3kclaude-skills. 345 Claude Code skills & agent skills & plugins (30+ Agents, 70+ custom commands, 330+ skills, customizable references, scripts)for Claude Code, Codex, Gemini CLI, Cursor, and 8 more coding agents — engineering, marketing, product, compliance, C-level advisory, research, business operations, commercial & finance, and your daily productivity skills.
★ 24kawesome-claude-skills. 🎯 The definitive collection of 50+ verified Awesome Claude Skills for Claude Code, Claude.ai, and API. Boost productivity with TDD, debugging, git workflows, document processing, and more. Community-driven, actively maintained.
★ 448gstack. Use Garry Tan's exact Claude Code setup: 23 opinionated tools that serve as CEO, Designer, Eng Manager, Release Manager, Doc Engineer, and QA
★ 126kOpenSC2K. OpenSC2K - An Open Source remake of Sim City 2000 by Maxis
★ 5.1kclaude-plugins-official. Official, Anthropic-managed directory of high quality Claude Code Plugins.
★ 33kNetworkOptimizer. Self-hosted optimization, monitoring (NMS), and security audit tool for UniFi Networks. Includes Wi-Fi Optimizer for wireless health scoring and channel optimization, advanced DNS/VLAN/firewall security checks, config optimization suggestions, centralized WAN and LAN speed test server w/ L2 tracing, CM, ONT, SFP, 5G modem stats +more.
★ 915cs-video-courses. List of Computer Science courses with video lectures.
★ 83kcompliance-trestle-skills. Agent-portable Compliance Trestle and OSCAL engineering toolkit: convert legacy SSPs to OSCAL, validate with Trestle and oscal-cli, FedRAMP Rev 5 and 20x KSI workflows. Claude Code plugin plus portable skills for Cursor, Codex, Gemini, and more.
★ 12epss_scores. Historical scores for EPSS
★ 38mythtv. The official MythTV repository
★ 770iptv. Collection of publicly available IPTV channels from all over the world
★ 135kRainbowMiner. GPU/CPU Mining script with intelligent profit-switching between miningpools, algorithms, miners, using all possible combinations of devices (NVIDIA, AMD, CPU). Features: actively maintained, uses the top actual miner programs (Bminer, Ccminer, Claymore, Dstm, EnemyZ, Sgminer, T-rex and more) easy setup wizard, webinterface, auto update.
★ 706PythonBitcoinMiner. Bitcoin Miner in Python! PythonBitcoinMiner is a lightweight for learning blockchain basics. Run it on devices like Android, iOS, or any system with Python. Simulate proof-of-work, adjust difficulty, and explore mining without hardware.
★ 132NerdMiner_v2. Improved version of first ESP32 NerdMiner
★ 2.8kleafminer. A FOSS bitcoin miner for ESP8266 and ESP32
★ 158LaColorduino. I build my own clone of "LaMetric"-smartwatch but with some Colorduino for Twitch, YouTube, Twitter, CSGO, etc.. (Working)
★ 91awesome-mcp-servers. A collection of MCP servers.
★ 92kRAG_Techniques. This repository showcases various advanced techniques for Retrieval-Augmented Generation (RAG) systems. Each technique has a detailed notebook tutorial.
★ 29kawesome-llm-apps. 100+ AI Agents, Agent Skills and RAG Apps - Free and Open Source.
★ 129kPrompt-Engineering-Guide. 🐙 Guides, papers, lessons, notebooks and resources for prompt engineering, context engineering, RAG, and AI Agents.
★ 77kawesome-generative-ai-guide. A one stop repository for generative AI research updates, interview resources, notebooks and much more!
★ 29ksystem-prompts-and-models-of-ai-tools. FULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sourced) System Prompts, Internal Tools & AI Models
★ 142kGenAI_Agents. 50+ tutorials and implementations for Generative AI Agent techniques, from basic conversational bots to complex multi-agent systems.
★ 24kMade-With-ML. Learn how to develop, deploy and iterate on production-grade ML applications.
★ 49kai-agents-for-beginners. 18 Lessons to Get Started Building AI Agents
★ 71kHands-On-Large-Language-Models. Official code repo for the O'Reilly Book - "Hands-On Large Language Models"
★ 28kavengers-bedrock-agents. Tutorial project: Build and deploy AI agents on AWS Bedrock with custom personalities. Includes a Docker environment, CloudFormation templates, and Python scripts.
★ 3BirdNET-Pi. A realtime acoustic bird classification system for the Raspberry Pi 5, 4B 3B+ 0W2 and more. Built on the TFLite version of BirdNET.
★ 1.1kallsky. A Raspberry Pi operated allsky camera
★ 1.6kSarmizOne-CRA. TypeScript
★ 1vaultwarden. Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
★ 65ksimplified-bia. Simplified Business Impact Analysis Template for Small Businesses
★ 8aie-book. [WIP] Resources for AI engineers. Also contains supporting materials for the book AI Engineering (Chip Huyen, 2025)
★ 17kgenerative-ai-for-beginners. 21 Lessons, Get Started Building with Generative AI
★ 114kSimDec-book. Open book + tools for visual global sensitivity analysis using SimDec + applications from different fields
★ 5AI-Agents-in-Practice. AI Agents in Practice, published by Packt
★ 114drape. Detection Reliability And Precision Efficiency (DRAPE) is an index used to assess detection performance
★ 36microcloud. Automated private cloud based on LXD, Ceph and OVN
★ 516fair-monte-carlo-risk-analysis. Interactive CRQ Monte Carlo simulation tool for quantifying cybersecurity risk using FAIR methodology. Built for EU SMBs, vCISOs, and security practitioners.
★ 51agentic_soc_gemini_enterprise. Deploy custom SOC Agents to Gemini Enterprise Agent Platform
★ 16opencti. Open Cyber Threat Intelligence Platform
★ 9.8kPyMISP. Python library using the MISP Rest API
★ 486MISP. MISP (core software) - Open Source Threat Intelligence and Sharing Platform
★ 6.4kOTX-Python-SDK. The Python SDK for AlienVault OTX
★ 401cti. Cyber Threat Intelligence Repository expressed in STIX 2.0
★ 2.1kmitreattack-python. A python module for working with ATT&CK
★ 726pi-inky-weather-epd. A beautiful weather dashboard for any colour E-Paper Display
★ 105n8n. Fair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.
★ 199kgrc_portfolio. This GRC Portfolio Hub is my initiative to empower GRC professionals in showcasing their practical AWS GRC engineering implementation skills.
★ 52GRC-Playground. A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for understanding controls, policy as code, and continuous authorization.
★ 140awesome-threat-intelligence. A curated list of Awesome Threat Intelligence resources
★ 10kawesome-annual-security-reports. A curated list of annual cyber security reports
★ 1.2kpymc-resources. PyMC educational resources
★ 2.1kProbabilistic-Programming-and-Bayesian-Methods-for-Hackers. aka "Bayesian Methods for Hackers": An introduction to Bayesian methods + probabilistic programming with a computation/understanding-first, mathematics-second point of view. All in pure Python ;)
★ 28kDBDA-python. Doing Bayesian Data Analysis, 2nd Edition (Kruschke, 2015): Python/PyMC code
★ 30pymc. Bayesian Modeling and Probabilistic Programming in Python
★ 9.7krmcmc. Robust Markov chain Monte Carlo methods in R
★ 8harness-sdk. Build an agent harness and control it end-to-end. Open-source SDK for production AI agents in Python & TypeScript - any model, any cloud.
★ 6.8kelastic-vm-survivalanalysis. Survival analysis for vulnerability management using Elastic data: Kaplan-Meier and hazard modelling.
★ 6spinritectl. A tool for managing SpinRite running within a VirtualBox Virtual Machine
★ 9nist-csf-2-mcp-server. MCP server implementation for NIST Cybersecurity Framework 2.0
★ 66Causal-Inference-and-Discovery-in-Python. Causal Inference and Discovery in Python by Packt Publishing
★ 1kBDA_course_Aalto. Bayesian Data Analysis course at Aalto
★ 2.3klinkwarden. ⚡️⚡️⚡️ Self-hosted collaborative bookmark manager to collect, read, annotate, and fully preserve what matters, all in one place.
★ 19kISMS-PUBLIC. Hack23 Public Information Security Management System:Security Through Transparency and Open Documentation Demonstrating Security Excellence Through Public ISMS Disclosure
★ 55aide. aide source code
★ 734quantrr. Quantify and report (technology) risk
★ 7ciso-assistant-community. CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 150+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.
★ 4.3kawesome-security-GRC. Curated list of resources for security Governance, Risk Management, Compliance and Audit professionals and enthusiasts (if they exist).
★ 1.1kglance. A self-hosted dashboard that puts all your feeds in one place
★ 36kcalibre-web. :books: Web app for browsing, reading and downloading eBooks stored in a Calibre database
★ 18kKEV_EPSS. KEV EPSS Data
★ 37hasscontrol. Simple garmin widget to control home assistant scenes
★ 249fail2ban. Daemon to ban hosts that cause multiple authentication errors
★ 18khome-assistant-garmin_connect. This Garmin Connect integration allows you to expose and upload data from and to Garmin Connect to Home Assistant.
★ 535eyeonwater. HACS repository for EyeOnWater integration
★ 60PaperPiAI. Raspberry Pi Zero powered AI-generated e-ink picture frame.
★ 337InkMemories. A cloud-powered, eInk, smart photo frame.
★ 58storybook. Python
★ 173uptime-kuma. A fancy self-hosted monitoring tool
★ 90knginx-proxy-manager. Docker container for managing Nginx proxy hosts with a simple, powerful interface
★ 34kAppFlowy. Bring projects, wikis, and teams together with AI. AppFlowy is the AI collaborative workspace where you achieve more without losing control of your data. The leading open source Notion alternative.
★ 75kkarakeep. A self-hostable bookmark-everything app (links, notes and images) with AI-based automatic tagging and full text search
★ 28kpaperless-ngx. A community-supported supercharged document management system: scan, index and archive all your documents
★ 44kCasaOS. CasaOS - A simple, easy-to-use, elegant open-source Personal Cloud system.
★ 37kAFFiNE. There can be more than Notion and Miro. AFFiNE(pronounced [ə‘fain]) is a next-gen knowledge base that brings planning, sorting and creating all together. Privacy first, open-source, customizable and ready to use.
★ 71kxwiki-platform. The XWiki platform
★ 1.3koutline. The fastest knowledge base for growing teams. Beautiful, realtime collaborative, feature packed, and markdown compatible.
★ 40kladybird. Truly independent web browser
★ 65ksuperset. Apache Superset is a Data Visualization and Data Exploration Platform
★ 74kfinancial-freedom. 🔥🔥🔥 An open source alternative to Mint, YNAB, and more. Stay on budget and build wealth without sacrificing your privacy.
★ 2.9kwealthfolio. A beautiful, private, local-first personal finance tracker. Investments, net worth, spending, and simulations.
★ 8.4kghostfolio. Open Source Wealth Management Software. Angular + NestJS + Prisma + Nx + TypeScript 🤍
★ 9kmaybe. The personal finance app for everyone
★ 54kInkyPi. E-Ink Display with a Raspberry Pi and a Web Interface to customize and update the display with various plugins
★ 4.1khomepage. A highly customizable homepage (or startpage / application dashboard) with Docker and service API integrations.
★ 32knextcloud-snap. ☁️📦 Nextcloud packaged as a snap
★ 1.8ktimeshift. System restore tool for Linux. Creates filesystem snapshots using rsync+hardlinks, or BTRFS snapshots. Supports scheduled snapshots, multiple backup levels, and exclude filters. Snapshots can be restored while system is running or from Live CD/USB.
★ 4.2kLightGBM. A fast, distributed, high performance gradient boosting (GBT, GBDT, GBRT, GBM or MART) framework based on decision tree algorithms, used for ranking, classification and many other machine learning tasks.
★ 19ktripwire-open-source. Open Source Tripwire®
★ 935server. Bitwarden infrastructure/backend (API, database, Docker, etc).
★ 20knextcloudpi. 📦 Build code for NextcloudPi: Raspberry Pi, Odroid, Rock64, curl installer...
★ 2.9kHernanHuwylerRiskManagement.
★ 23HernanHuwylerRiskManagement.
★ 2security-grc-tools. Go
★ 14MetaOSINT.github.io. A tool to quickly identify relevant, publicly-available open source intelligence ("OSINT") tools and resources, saving valuable time during investigations, research, and analysis.
★ 839causalAI. The open source repository for the Causal Modeling in Machine Learning Workshop at Altdeep.ai @ www.altdeep.ai/courses/causalAI
★ 805business-case-analysis-w-r. Source code for 'Business Case Analysis with R' by Robert D. Brown III
★ 31RetroFit. Simple, opinionated machine learning workflows for rapid iteration.
★ 27AutoQuant. Automation framework for machine learning, forecasting, model evaluation, and interpretation.
★ 251Quantico. Shiny App for Echarts Viz, ML, Forecasting, Data Wrangling, Feature Engineering, Inference, and Code Generation
★ 64awesome-causal-inference. A curated list of causal inference libraries, resources, and applications.
★ 1.2kvsaq. VSAQ is an interactive questionnaire application to assess the security programs of third parties.
★ 861risk-quant.
★ 7SHELF. Tools to Support the Sheffield Elicitation Framework (SHELF)
★ 22anduryl. A Python module and GUI for expert elicitation
★ 7localtuya. local handling for Tuya devices
★ 3.9kwtf-rstats. https://rstudio-conf-2022.github.io/wtf-rstats/
★ 28get-started-shiny. Workshop materials for Getting Started with Shiny from rstudio::conf 2022
★ 26causal-inference-rstats. HTML
★ 73people-analytics-rstats.
★ 224plotly-resampler. Visualize large time series data with plotly.py
★ 1.2krhino. Build high quality, enterprise-grade Shiny apps at speed
★ 328box. Write reusable, composable and modular R code
★ 970shinyBN. shinyBN: An online application for interactive Bayesian network inference and visualization
★ 46attack-control-framework-mappings. 🚨ATTENTION🚨 The NIST 800-53 mappings have migrated to the Center’s Mappings Explorer project. See README below. This repository is kept here as an archive.
★ 499SecurityBenchmarks. Supplemental information and resources for the Security Benchmark documentation available at https://docs.microsoft.com/azure/security/benchmarks/.
★ 494calibrate-your-judgement. Roff
★ 10oisru. Repository for the Open Information Security Risk Universe
★ 64tidyrisk-workshop. 🎓Materials for the Hands-On Introduction to OpenFAIR Risk Analysis with Tidyrisk
★ 14collector. ⚖Open Source Toolkit for Conducting Quantitative Risk Assessment Interviews
★ 40evaluator. ⚖Open Source Toolkit for Quantitative Risk Assessment
★ 185kartevonmorgen. This is the Alpha version (v0) of Karte von morgen. Please contribute to our new project in TypeScript (v1) https://github.com/kartevonmorgen/kartevonmorgenssr
★ 61openfairdb. Open Fair DB is the CreativCommons Backend of Kartevonmorgen.org
★ 55fair-risk. Webtool for performing risk analysis using FAIR (the Factor Analysis for Information Risk)
★ 2FAIRTool. Factor Analysis of Information Risk (FAIR) tool developed in R
★ 22pyfair. Factor Analysis of Information Risk (FAIR) in Python. Maintained by Derive.
★ 113