Security & Compliance
Governance, Risk & Compliance
Tools for GRC workflows including evidence collection, control mapping, compliance auditing, risk management, and gap analysis.
Best Governance, Risk & Compliance tools by public signals
These picks are computed from scored public evidence. Use the openness column in the ranking to separate OSI-approved, source-available, open-core, proprietary, and unverified-license tools.
Use Case Rankings
Ordered by ToolVitals score, then health, shipping, confidence, GitHub stars, and name.
| # | Tool | Health | Shipping | Openness | Stars | Score | Status |
|---|---|---|---|---|---|---|---|
| 01 | Probo Open source solutions for SOC 2, GDPR, and ISO27001. | 97 | 98 | OSI-approved OSS | 1.5k | 97 | Active |
| 02 | The Open Lane Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more | 95 | 95 | OSI-approved OSS | 334 | 95 | Active |
| 03 | Comp AI AI Native platform to get companies compliant - Vanta & Drata Alternative | 91 | 87 | OSI-approved OSS | 2.1k | 89 | Active |
| 04 | Origin CLI CLI for AI code attribution and governance. | 83 | 73 | OSI-approved OSS | 12 | 79 | Active |
| 05 | OpenArchiver An open-source platform for legally compliant email archiving. | 73 | 66 | OSI-approved OSS | 2.4k | 70 | Warning |
| 06 | Claude GRC Engineering Open-source GRC toolkit with Claude Code plugins for evidence collection and gap reports. | 64 | 36 | OSI-approved OSS | 425 | 53 | Warning |
| 07 | Torqa Workflow validation and trust/risk enforcement tool. | 46 | 34 | OSI-approved OSS | 0 | 41 | Critical |
| 08 | Ballerine Open-source infrastructure and data orchestration platform for risk decisioning. | 31 | 0 | OSI-approved OSS | 2.5k | 19 | Critical |
| 09 | EUActAudit Open-source AI governance and auditing platform for identifying compliance gaps in AI systems. | 13 | 0 | OSI-approved OSS | 0 | 8 | Critical |
Not Scored
Tracked for context, but excluded from rankings because comparable open/source-visible evidence is unavailable.
CISO Assistant Community
Open-source GRC platform for risk management, compliance, audit, TPRM, privacy, and reporting.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.RAI Ops
Open source platform for responsible AI operations with red teaming, control monitoring, and policy management.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.VerifyWise
AI governance and evaluation platform for policy and compliance frameworks.
ToolVitals does not score proprietary or unknown-license tools because their public source evidence is not comparable to open/source-visible projects.