Import workspace
Bring in CSV, XLSX, or JSON, map columns to vault shapes, preview real notes, review the result, and generate.
Import frameworks. Shape useful notes. Connect controls and evidence. Understand coverage. Open source.
Crosswalker turns your Obsidian vault into an operational compliance knowledge graph. Bring in frameworks, shape them into notes your team can use, connect controls to evidence and other standards, and query coverage in plain Markdown you own.
Portable import rules, crosswalk mappings, and saved queries keep the work reusable by people and automation. The current product focuses on guided import, connected output, and analysis inside Obsidian. Comprehensive community sharing and long-term framework update workflows remain roadmap direction.
Built for GRC first; works for any structured framework or taxonomy. The one-click imports that ship today are all compliance sources — NIST CSF 2.0, NIST SP 800-53 Rev 5, CIS Controls v8, MITRE ATT&CK techniques, CRI Profile 2.2, SCF 2026, plus OLIR-style crosswalk files. Nothing in the note format itself is compliance-specific, so any other structured source (a taxonomy, a standards catalog, a skills matrix, a product hierarchy) goes through the same guided import — it just doesn’t get the one-click head start. Why the core stays domain-neutral.
Want the whole system in one picture? The system model maps source data → vault notes → answers, with every piece linked to its deeper page.
Import workspace
Bring in CSV, XLSX, or JSON, map columns to vault shapes, preview real notes, review the result, and generate.
Framework crosswalks
Map relationships between frameworks. Link NIST to CIS to MITRE with typed edges and metadata.
Evidence mapping
Link policies, audit findings, and technical docs directly to framework controls with edge metadata.
AI-ready
Plain markdown is the best format for RAG pipelines, embeddings, and AI agents. Your knowledge base is instantly indexable — no export required.
Reusable work
Save source-bound setups for similar files today. Portable import rules, mappings, and comprehensive community sharing are roadmap direction.
People and automation
Start in the guided import workspace. Plain files and reusable rules let scripts and agents participate without replacing the human review step.
Tool-agnostic
Works with Obsidian Bases or plain markdown search. Your data is just files — no lock-in.
Free and open source
MIT licensed. Own your tooling. Contribute features, framework configs, or documentation.
Built for GRC
Compliance, risk, and audit teams spend weeks mapping frameworks and linking evidence manually. Crosswalker automates the structure so you can focus on the analysis.
Roadmap: stay current
Long-term update workflows will help teams compare framework versions, review changes, and preserve evidence connections. Follow the roadmap for that work.
Crosswalker is early and moving fast. Here’s how to participate:
Star on GitHub
Star the repo to follow development and show support.
Contribute
Read the contributing guide — code, docs, framework configs, or bug reports all welcome.
Follow the roadmap
See what’s being built and the architectural decisions behind it.
Read the blog
Follow development updates and changelog.