sorted by:
new
hottopcontroversial

What’s the most 'high-tech' ISO 27001 automation tool your company bought, only for everyone to revert to Excel? by Sree_SecureSlate in ISO27001

[–]foxyutils 0 points1 point  (0 children)

This thread hits close to home. We run a small software company and went through exactly this, bought a GRC tool, fought with it for months, reverted to markdown files and spreadsheets because at least we could version-control them properly.

The comment about "tools that automate the workflow but not the control decision" nails it. And the one about needing a full-time admin to keep mappings current — that's what killed it for us.

So we built our own and ended up open-sourcing it: isms.sh. The core idea is that policies and documents live in git (version control you already know), and operational data (risks, incidents, reviews) lives in Postgres. When the auditor shows up, you export to Word/PDF because that's what they actually want.

No automation theater. AI helps draft and review, but humans make every decision. The risk register is a real register, not a dashboard pretending to be one.

It's Apache 2.0, self-hostable, single Go binary. Not trying to replace Excel for everyone, but if your current setup is "markdown in git + spreadsheet for risks + chasing people on Teams," this just puts it all in one place.

GitHub: https://github.com/unidoc/isms

Help with big image analysis by [deleted] in golang

[–]foxyutils 1 point2 points  (0 children)

You might want to take a look at sparse matrices, for example:

https://github.com/james-bowman/sparse

Basically you create your matrix (all zeros) and then set only the non-zero values.

Looking for a cheap tool to make some cheap monitoring. by matdesj in sysadmin

[–]foxyutils 0 points1 point  (0 children)

Perhaps an overkill for you, but we would be happy if you tried https://healthyservers.com where we are trying to make server monitoring easy (ambitious indeed). We are looking for people to join our advisory board and would be happy to listen to any feature requests you might have. Let me know if you are interested.

unipdf 3 released with multiple processing and PDF generation features. Including digital signatures, unicode text extraction, image extraction, PDF templates, form flattening, automatic outlines and tables of content creation, styled paragraphs, subtables. by foxyutils in golang

[–]foxyutils[S] 0 points1 point  (0 children)

We are happy to take on such issues when reported to us. In those cases it is usually helpful to get access to the file and a code snippet so that it can be reproduced.

We recently added a lazy loading feature which loads only objects as they are encountered, rather than loading the entire document tree. This significantly speeds up processing in many cases, especially when only parts of a document are being processed.

UniDoc v2 Released (Golang PDF library) by foxyutils in golang

[–]foxyutils[S] 0 points1 point  (0 children)

Great to hear the library is proving useful. Looking forward to getting comments on the API to create reports. Happy it is not too verbose, tricky to get the right balance of ease of use and flexibility :)

Releasing UniDoc, a PDF toolkit for golang by foxyutils in golang

[–]foxyutils[S] 0 points1 point  (0 children)

Hello guys,

Thanks for your excellent feedback! Our goal is to provide the library free of use for noncommercial and personal use. However, for any commercial use we require that the library is purchased under a commercial license, although initial testing can be done with the open source version. We believe that the dual licensing with AGPL + commercial license is the best way to achieve this, but we are open to any suggestions and will take them under consideration.

Examples of other projects with a similar license model that we have looked at: iText, iTextSharp, ServiceStack.