Security & Compliance
Governance, Risk & Compliance
Tools for GRC workflows including evidence collection, control mapping, compliance auditing, risk management, and gap analysis.
Best Governance, Risk & Compliance tools by public signals
These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.
Use Case Rankings
Ordered by ToolVitals score, health, shipping, confidence, and then adoption as a tie-breaker.
| # | Tool | Health | Shipping | Openness | Stars | Score | Status |
|---|---|---|---|---|---|---|---|
| 01 | CISO Assistant Community Open-source GRC platform for risk management, compliance, audit, TPRM, privacy, and reporting. | 98 | 100 | License unknown | 4.3k | 99 | Active |
| 02 | Comp AI AI Native platform to get companies compliant - Vanta & Drata Alternative | 92 | 98 | OSI-approved OSS | 1.7k | 96 | Active |
| 03 | The Open Lane Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more | 90 | 98 | OSI-approved OSS | 279 | 95 | Active |
| 04 | Probo Open source solutions for SOC 2, GDPR, and ISO27001. | 87 | 95 | OSI-approved OSS | 1.2k | 93 | Active |
| 05 | VerifyWise AI governance and evaluation platform for policy and compliance frameworks. | 87 | 93 | License unknown | 322 | 92 | Active |
| 06 | Origin CLI CLI for AI code attribution and governance. | 79 | 73 | OSI-approved OSS | 10 | 80 | Active |
| 07 | Claude GRC Engineering Open-source GRC toolkit with Claude Code plugins for evidence collection and gap reports. | 74 | 65 | OSI-approved OSS | 353 | 75 | Warning |
| 08 | OpenArchiver An open-source platform for legally compliant email archiving. | 72 | 40 | OSI-approved OSS | 2.1k | 68 | Warning |
| 09 | Ballerine Open-source infrastructure and data orchestration platform for risk decisioning. | 62 | 0 | OSI-approved OSS | 2.4k | 51 | Warning |
| 10 | Torqa Workflow validation and trust/risk enforcement tool. | 41 | 23 | OSI-approved OSS | 0 | 47 | Critical |
| 11 | EUActAudit Open-source AI governance and auditing platform for identifying compliance gaps in AI systems. | 46 | 11 | OSI-approved OSS | 0 | 45 | Critical |
| 12 | RAI Ops Open source platform for responsible AI operations with red teaming, control monitoring, and policy management. | 30 | 0 | License unknown | 0 | 33 | Critical |
| 13 | Selefra Policy-as-code tool for analytics and auditing across cloud and SaaS environments. | 28 | 0 | OSI-approved OSS | 545 | 31 | Critical |