SCF Explorer

A read-only, 100% client-side viewer for the Secure Controls Framework (SCF). Upload the official SCF workbook and explore every control, framework mapping, maturity level, risk and threat — parsed in your browser, never uploaded anywhere.

👉 scfcontrolsexplorer.app

Everything about what it does, how it works and how to use it lives on the site. The app itself is at scfcontrolsexplorer.app/app.

Run it yourself

npm ci
npm run dev      # local dev server
npm run build    # static site in dist/ — host it anywhere

Development, testing and architecture notes: CONTRIBUTING.md and CLAUDE.md. Vulnerabilities: report privately via SECURITY.md.

Licence & attribution

• Code: MIT.
• The Secure Controls Framework is created and maintained by the SCF Council under CC BY-ND 4.0. SCF Explorer renders SCF content exactly as published and this repository ships no SCF data — you bring the official workbook; even the test suite fetches the unmodified official release at test time.
• Not affiliated with or endorsed by the SCF Council. An independent effort to help GRC practitioners get the most from the SCF.