Community · Free · Self-hosted
San Sebastian Community
Organized security. Structured controls. NIST CSF 2.0 in practice.
A platform designed to help companies and security teams organize cybersecurity controls, tasks, evidence and routines in a single environment.
Centralized view
Transform framework into execution.
O San Sebastian Community is a free, self-hosted platform designed to help companies and security teams organize cybersecurity controls, tasks, evidence and routines in a single environment, using the NIST Cybersecurity Framework 2.0 as a basis.
The proposal is to simplify the application of the framework on a daily basis. Instead of controls distributed across spreadsheets, documents, emails and different tools, San Sebastian offers a centralized structure to track what needs to be done, record evidence and maintain an organized view of the evolution of security controls.
NIST CSF 2.0 applied to operation
Follow the operation.
Visible projects, tasks and indicators.
01 · Controls
From requirement to followable activity.
San Sebastian uses the structure of NIST CSF 2.0 to transform requirements and controls into activities that can be followed by the team.
The six functions of the framework become part of the organization's operational routine.
01 / 03
Organized execution
Controls, tasks and evidence in one place.
For each security initiative, the team can organize activities, track their execution, and maintain evidence related to controls.
What needs to be implemented?
Who is responsible?
What has already been completed?
What evidence proves the execution?
What still needs to evolve?
The result is a clearer view of the execution of the security program and the points that require attention.
Self-hosted
Your data remains in your environment.
O San Sebastian Community is self-hosted.
The application can be run locally using Docker, with Supabase and PostgreSQL, keeping information, evidence and security data under the control of the organization itself.
The architecture is designed to simplify installation and operation: the application, API and required components are distributed via official Docker images and run seamlessly.
DockerSupabasePostgreSQLIntegrated APILocal data
Simple to get started
An installation compatible with your operation.
The Community version was created to allow organizations to adopt the platform without relying on complex infrastructure.
Windows
An installer simplifies operation and allows you to start, open, stop, update, perform backups, check status and monitor application logs.
Linux
The entire environment can be prepared and executed using Docker and the commands provided by the project.
Updates preserve local data, allowing you to keep the platform up to date without rebuilding the environment with each new version.
Who is it for
Teams that want to transform framework into execution.
San Sebastian Community can be used by Information Security teams, GRC, Blue Team, technology managers and professionals responsible for cybersecurity programs that need to structure and monitor initiatives based on NIST CSF 2.0.
More than consulting a framework, the proposal is to make your application visible, organized and followable on a daily basis.
San Sebastian Community
NIST CSF 2.0 is no longer just a reference and becomes part of the security operation.
Discover the San Sebastian Community.
Discover the project on GitHub