An ACAS/SCAP/CKL scan parser and report generator

Focuses on automating the management of Plans of Action and Milestones (POAM) using GitHub Actions and various external integrations.

RampControl manages and tracks security compliance per FedRAMP requirements. It allows users to add new system security plans, manage POA&M entries, and export data in OSCAL format.

This repository automates the collection and management of evidence from various tools and sources, committing the data for transparency and traceability. It's designed to gather evidence that tools like Vanta and others aren't built to collect.

Pulls Scan Results using Tenable API and combines the different Tenable Scan Results into a organized output. And POAM Ready.