MITRE SAFSecurity Automation Framework

Open source security testing and compliance automation toolkit

Get Started

View on GitHub

🎯

Plan

Identify and prioritize security requirements for your systems

🔒

Harden

Apply security baselines and hardening guidance automatically

✅

Validate

Test and verify security compliance with InSpec profiles

📊

Normalize

Convert security results into standardized formats

📈

Visualize

View and analyze security posture with Heimdall

🤝

Collaborate

Share security content and collaborate with teams

What is MITRE SAF?

The Security Automation Framework (SAF) is a comprehensive suite of open source tools and techniques for security automation, compliance validation, and continuous monitoring.

Quick Start

bash

# Install SAF CLI
npm install -g @mitre/saf

# Validate your system
saf validate threshold -i results.json

Community

Join our community to learn more and contribute:

GitHub Discussions
Issue Tracker
Email: saf@mitre.org