OWASP/www-project-it-grc

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

Self-hosted GRC platform for small and mid-sized security teams: risk management, controls, audits, vendor risk and incident response for ISO 27001, SOC 2, NIST CSF, HIPAA, and more.

Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and audits—all in one place. AI-powered, containerized, enterprise-ready.

Open source solutions for SOC2, GDPR, and ISO27001

Management tool for the information security management system / Outil de gestion du système de management de la sécurité de l'information

Open source compliance automation for SOC 2, GDPR, ISO27001, NIST 800-53, and more

XORCISM is a cybersecurity project for an open unified platform for cyber exposure management, and tools

Self-hosted Information Security Management System — ISO 27001, NIS2, GDPR/DSGVO, BSI IT-Grundschutz