OWASP / OWASP/OpenCRE

MyOpenCRE: allow for mapping CREs to a standard automatically

Open
#585 11 comments 0 reactions 1 assignee View on GitHub

@Neth766 is already working on this.

Since Apr 5, 2026.

enhancement GSOC
Dominant language
Python
Stars
180
Forks
137
Avg merge
3d 23h
Merged PRs (30d)
21

Description

MyOpenCRE is a nifty addition to the project that allows users to add their own mappings.
Using MyOpenCRE, users can download a CSV of all existing CREs, then map their own standard sections/subsections and finally re-upload for processing.

Mapping standards to CREs is a time consuming process. Instead we could use a bit of generative AI to do the mapping ourselves.
This feature would use a combination of AI techniques to derive highly accurate mappings between a CRE and the described information of the control of a Standard.

Stretch goal: If a mapping is not possible automatically or if a CRE does not exist for that mapping, the application should identify the controls for which a mapping could not be produced

Example Outcome: MyOpenCRE can map automatically the following standards:

  • PCI-DSS
  • DORA
  • SOC2

Stretch goal example outcome: MyOpenCRE can partially map the OWASP AI Exchange and the top 10 for LLMs while identifying the controls that require human intervention or the release of new CREs.

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.