Eidos

A searchable Rolodex of the cybersecurity governance landscape: frameworks, laws, regulations, contract clauses, standards, control catalogs, policies, and GRC concepts. Every record carries its publisher, version, jurisdiction, and applicability, plus a plain-English summary so a practitioner can find the right guidance without knowing the vocabulary first. Twenty Eidos-authored Policy Playbooks turn each policy reference into tailoring decisions, implementation options, and a phased starter checklist. It explains the landscape — it does not score your organization against it.

ReactTypeScriptZodFastify

Visit Live Site Source

About this project

What it does

79 curated reference records across 12 publisher-aligned material types
59 explained relationships, each with visible provenance and authority
20 action-oriented Policy Playbooks for the policy records
Strict Zod validation that fails closed on malformed or dangling data
Static, offline-capable build — no account, telemetry, or external AI service

Screenshots

The Eidos library front door with search, industry and material type filters, and reference cards for frameworks and policies. — The library front door: universal search, industry context and material type facets, and a card for every reference.

A record detail dialog for the NIST Cybersecurity Framework 2.0 showing a plain-English summary and at-a-glance metadata. — Record detail: a plain-English summary, reading depth, and the metadata that tells you which version applies.

The Policy Playbook tab of the Information Security Governance Policy, showing decisions to make, implementation options, and a phased starter checklist. — Policy Playbooks: the decisions to make, implementation options, phased starter checklist, and who owns what.

The Source and trust tab showing publisher, version, status, effective date, jurisdiction, and the official publisher source link. — Source and trust: publisher, version, effective date, jurisdiction, and a direct link to the official source.

The library filtered to the Defense and DoD industry context, with results explaining whether they are directly tagged or broadly useful. — Industry context: results explain whether they are directly tagged for that sector or broadly useful.

A side-by-side comparison of the NIST Privacy Framework and the NIST AI Risk Management Framework with publisher, version, and applicability for each. — Side-by-side comparison of two references, without implying equivalence or compliance.