nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqncxka2nmkqkndk4wkuf3tz3l39z9m8xax3aen3h8tvudwgjmf5mq4uv2v2 (nprofile…v2v2)
A couple of years ago we looked at jupiterone but didn't get it. It might do what you want but their platform isn't open source if that's important.
https://github.com/JupiterOne/security-policy-builder
https://github.com/JupiterOne/security-policy-templates
Since so much with compliance documentation is repeated I wanted something with 'subdocuments' that could be managed individually and 'compiled' into a document, with cross references to standards to make it easy for auditors. This might do it, didn't pursue it far enough to find out.
Fritz Adalis
npub1dt…zesvr
2026-07-02 12:32:15 UTC
in reply to nevent1q…vd53
Author Public Key
npub1dtq2wasl2f0g8s9pvvz9ak9dfrd0jamuxn8qng0nleqcz3v6vyxskzesvrSeen on
wss://relay.ditto.pubPublished at
2026-07-02 12:32:15 UTCEvent JSON
{
"id": "7937f0c6e71a59925e0e4984f67c2e6005e296469b8d2dc73c17624f2d39bf08",
"pubkey": "6ac0a7761f525e83c0a163045ed8ad48daf9777c34ce09a1f3fe4181459a610d",
"created_at": 1782995535,
"kind": 1,
"tags": [
[
"p",
"9e0d6eaa7bb02d36daaeb713158a3f89445d9cdd347b99c6e75b38d7225b4d36",
"wss://relay.ditto.pub"
],
[
"p",
"ed98dd172c8fec81e65ac4d2b0687fe3ac855a12e939c028820df32002c896e7",
"wss://relay.ditto.pub"
],
[
"e",
"44065abc51dc6e35bfadb07067e411092e3ebf0eac87c0818af3534af4e4d09e",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://infosec.exchange/users/FritzAdalis/statuses/116850395427000584",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqncxka2nmkqkndk4wkuf3tz3l39z9m8xax3aen3h8tvudwgjmf5mq4uv2v2 \nA couple of years ago we looked at jupiterone but didn't get it. It might do what you want but their platform isn't open source if that's important.\n\nhttps://github.com/JupiterOne/security-policy-builder\nhttps://github.com/JupiterOne/security-policy-templates\n\nSince so much with compliance documentation is repeated I wanted something with 'subdocuments' that could be managed individually and 'compiled' into a document, with cross references to standards to make it easy for auditors. This might do it, didn't pursue it far enough to find out.",
"sig": "b33470f96eea646e98822572b9c142ac3f4bbc0a5a9f0b1bc3bbcfd0116ea3930b1e1afee2b1b6c35a96cb607ba9b49ee9d4a80a45a86bb907d1dd4d6cf46a46"
}