Plugin

smb-cybersecurity-policy-kit

Generate NIST CSF 2.0-aligned cybersecurity policies for small and mid-size businesses. Five production-ready generators (Acceptable Use, Incident Response, Password & MFA, Data Classification, Remote Work Security) plus a policy-auditor agent that grades existing policies against NIST CSF 2.0. Built for SMBs, MSPs, and IT leaders who need defensible, audit-ready documentation without hiring a vCISO. Each policy is parameterized via XML variables (industry, size, risk profile, geography) so generated documents are tailored, not generic.

• Published source
• Repository

Analysed

11 October 2026

Last observed

12 October 2026

What the code does

Static analysis found none of the capabilities we track, such as shell commands, network requests or file writes, in the latest version.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.