Best Open-source Compliance Automation & GRC tools

Comp AI

AI‑powered platform that automates compliance for SOC 2, ISO 27001, HIPAA, GDPR

Prowler

Unified cloud security platform for automated compliance across providers

CISO Assistant

Unified GRC platform decoupling compliance from cybersecurity controls

Probo

Open-source compliance platform for fast SOC 2 readiness

Steampipe

Query any API in real‑time with SQL, no ETL required

Lynis

In-depth security auditing and hardening for UNIX-based systems

Gapps

Security compliance platform tracking progress across multiple frameworks

Comply

Automate SOC2 compliance with markdown policies and ticketing integration