Self-hosted GRC platform for small and mid-sized security teams: risk management, controls, audits, vendor risk and incident response for ISO 27001, SOC 2, NIST CSF, HIPAA, and more.
☆144Oct 8, 2026Updated this week
Alternatives and similar repositories for OpenGRC
Users that are interested in OpenGRC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Curated list of AI + GRC resources: AI governance frameworks and AI-powered compliance tools☆23Feb 16, 2026Updated 7 months ago
- An open source Governance Risk Compliance (GRC) solution for corporates and government☆39Jul 10, 2017Updated 9 years ago
- Docker helper files for running eramba software☆81Updated this week
- OWASP Foundation Web Respository☆90Oct 7, 2026Updated last week
- Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and …☆163Updated this week
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Create a domain specific (GRC) agent with the Claude Agent SDK☆25Jun 26, 2026Updated 3 months ago
- Open-source AI-powered GRC platform with multi-framework compliance management, crosswalk intelligence, and BYOK AI analysis. Supports NI…☆27Oct 5, 2026Updated last week
- CMMC 2.0 compliance advisor as a Claude Code skill. All 3 levels, 14 domains, 110 practices; CUI scoping, SSP + POA&M; modern IT mapping …☆22Apr 22, 2026Updated 5 months ago
- An integrated cyber framework and program documents.☆18Sep 3, 2026Updated last month
- an experiment that started around writing a spec for everything in GRC☆22Updated this week
- ☆37Updated this week
- CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It sup…☆4,504Updated this week
- Open-source GRC toolkit from the GRC Engineering Club. Claude Code plugins for evidence collection, SCF crosswalks, multi-framework gap r…☆420Updated this week
- Documentation on the OpenRMF application, including scripts to run the whole stack as well as just infrastructure with documentation on u…☆163May 23, 2026Updated 4 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Interactive web-based cybersecurity and privacy training modules with SCORM support. Deployable as standalone HTML or LMS-integrated cont…☆51Oct 11, 2025Updated last year
- A hands-on, real-world GRC lab series built for beginners and curious pros alike. No PDFs. No gatekeeping. Just practical labs for unders…☆156Nov 6, 2025Updated 11 months ago
- 🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-sour…☆105Updated this week
- A Claude Code plugin that turns Claude into a senior GRC (Governance, Risk, and Compliance) analyst. 72+ reference files covering 15 fram…☆184Oct 6, 2026Updated last week
- Build security program documentation using Git and Markdown☆32Jul 10, 2026Updated 3 months ago
- Simple web app to track OWASP WSTG security testing progress☆30Sep 12, 2025Updated last year
- Scanning alive hosts of the given CIDR range in parallel.☆10May 8, 2025Updated last year
- Compliance Scorecard OSCAL Policy Standards☆27May 6, 2024Updated 2 years ago
- Community-built Terraform follow-up labs for CGE-P graduates, by the GRC Engineering Club☆20Jul 9, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Open Source Risk Assessment Tool for Power Platform☆12Oct 1, 2026Updated last week
- The web UI for the OpenRMF tool, which uses multiple containers for parts of the distributed openRMF tool for managing DoD STIG checklist…☆33May 23, 2026Updated 4 months ago
- This GRC Portfolio Hub is my initiative to empower GRC professionals in showcasing their practical AWS GRC engineering implementation ski…☆57Aug 6, 2025Updated last year
- CISSP Studies☆27Aug 5, 2025Updated last year
- ☆16Jun 28, 2025Updated last year
- OSCAL reusable component definitions library☆17Mar 14, 2025Updated last year
- Website tools for the FR Consolidated Rules for 2026☆39Oct 5, 2026Updated last week
- eMASSer is a command-line interface (CLI) that aims to automate routine business use-cases and provide utility surrounding the Enterprise…☆53May 6, 2026Updated 5 months ago
- Red Teaming with Kali Linux. OS Customization, additional tools, and automated updates☆12Aug 7, 2016Updated 10 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- The GitHub repo for the GRC Engineering For AWS Book. Everything You Need to Become a GRC Engineer in the Cloud GRC engineering bridges t…☆46Jul 25, 2025Updated last year
- Outil d’aide à la méthode EBIOS RM☆45Jan 30, 2026Updated 8 months ago
- Security compliance platform - SOC2, CMMC, ASVS, ISO27001, HIPAA, NIST CSF, NIST 800-53, CSC CIS 18, PCI DSS, SSF tracking☆693May 20, 2026Updated 4 months ago
- Foxhound: Blackbox - A Raspberry Pi NSM☆36Jan 20, 2018Updated 8 years ago
- Assists in mass exportation of Nessus scans☆19Apr 20, 2018Updated 8 years ago
- Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more☆324Updated this week
- AI-driven PowerShell prompts for encryption, decryption, hashing, and key management. Secure your data with practical cryptographic solut…☆12Mar 4, 2025Updated last year