The BSI ships its Grundschutz++ security catalog as a 10k+ line OSCAL JSON file — built for tooling, not for reading. grundschutz-docs/docs turns it into a site worth sitting down with: full-text search, one permalink per control, a side-by-side mapping to the old IT-Grundschutz-Kompendium, and a public register of inconsistencies found along the way.
Unofficial and independent — not affiliated with, endorsed by, or produced by the Bundesamt für Sicherheit in der Informationstechnik (BSI).
MIT-licensed, self-hostable, no closed-off tier. What's here is everything there is.
