devtools

Streamline Security with SAF

Name: Streamline Security with SAF
Author: mitre

SAF CLI helps founders automate security in DevOps pipelines. For founders needing security automation.

From the repo · “The MITRE Security Automation Framework (SAF) Command Line Interface (CLI) brings together applications, techniques, libraries, and tools developed by MITRE and the security community to streamline security automation for systems and DevOps pipelines”

intermediate⏱ 30 minutes💵 Free (self-hosted)

194 stars+1★ this week45 forksHTMLGuide quality 8/10 · reviewed Jun 6Updated 10/22/2026100% free · open source

What it is

Use the SAF CLI to automate security checks in your DevOps pipelines, making sure your apps are secure without extra manual work.

Real use case example

"A founder, struggling to balance security with development speed, sets up SAF CLI to run automated security scans on their DevOps pipeline. After 10 minutes of setup, they're able to automate their entire security check process. Now, they can focus on writing code instead of manually reviewing security vulnerabilities."

Best insideCursorCodex CLIContinueAny AI Client

When to use it

•When integrating security checks into your CI/CD pipeline
•When automating vulnerability management and remediation
•When streamlining security testing and compliance across systems and applications

Ready-to-paste prompt

saf run -c examples/vulnerability_management/saf.config -o results/

Heads up: Ensure you have Python 3.8 or later installed, as the SAF CLI is not compatible with earlier Python versions

Saves to your device

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/saf && curl -fsSL https://workflowstacks.com/api/skills/saf/claude-skill -o ~/.claude/skills/saf/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

What's inside — free to inspect

No purchase needed

Read the entire source before you build — unlike paid marketplaces that hide it behind a buy button.

top-level files

folders

91.0M

source size

Other

license

Key files

_config.yml

.editorconfig

eslint.config.js

package.json

README.md

tsconfig.json

File tree

.github/

.vscode/

bin/

docs/

src/

test/

_config.yml

.deepsource.toml

.dockerignore

.editorconfig

.env-example

.gitignore

.nvmrc

CNAME

Dockerfile

eslint.config.js

LICENSE.md

oclif-theme.json

pack-hdf-converters.bat

pack-hdf-converters.sh

pack-heimdall-lite.bat

pack-heimdall-lite.sh

pack-inspec-objects.bat

pack-inspec-objects.sh

Use with Claude

New

Skip the builder — one click puts this in Claude, Cursor, Antigravity and more.

✅ Light setup

Installs with a command or two; your AI agent can do it for you.

Try it instantly — no install

Claude Code

mkdir -p ~/.claude/skills/saf && curl -fsSL https://workflowstacks.com/api/skills/saf/claude-skill -o ~/.claude/skills/saf/SKILL.md

Open in another AI app

Opens the app with this repo with the prompt ready to go — no copy-paste needed.

Connect the whole catalog (MCP)

claude mcp add --transport http workflowstacks https://workflowstacks.com/api/mcp

Adds a WorkflowStacks connector to Claude Code: search and load any skill here by chatting.

Quick Actions

Details

Creator

mitre

Language

HTML

Do this with a working workflow

Pages we wrote and tested that put a skill like this to work — importable n8n templates, outcome guides and Claude Desktop configs.

Outcome guide

Automate your meeting summaries

A private form takes any transcript (from Zoom, Meet, Otter, Fireflies) and emails you back a structured summary: a TL;DR, the decisions made, and action items with owners.