governance-risk-compliance

🔥A modern, all-in-one Governance, Risk & Compliance (GRC) solution designed for privacy, security, and compliance teams. As an open-source alternative to Vanta and Drata, this platform empowers teams with full control, flexibility, and transparency—no vendor lock-in, just powerful compliance automation and risk management. ISO27k, GDPR, SOC2, NIST

NIST Cybersecurity Framework (CSF) Profile Assessment Tool - Track controls, assign ownership, document findings, score security states, and export for visualization

See the AI your organisation is actually using: browser, CLI, IDE, desktop, network, cloud and MCP. Self-hosted, with a governance portal and Grafana dashboards.

𝟰𝟱 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝗶𝗼𝗻-𝗴𝗿𝗮𝗱𝗲 𝗚𝗥𝗖 𝗽𝗿𝗼𝗺𝗽𝘁𝘀 𝗮𝗰𝗿𝗼𝘀𝘀 𝟭𝟯 𝗱𝗼𝗺𝗮𝗶𝗻𝘀. ISO 42001, ISO 27001, EU AI Act, NIST AI RMF, GDPR, DORA and more. Career and startup prompts no other GRC library has. Works with Claude, GPT-4o and Gemini. 𝗥𝗮𝘁𝗲𝗱 𝟵.𝟱/𝟭𝟬 𝗢𝗻 𝗨𝘀𝗮𝗯𝗶𝗹𝗶𝘁𝘆 𝗮𝗻𝗱 𝗣𝗿𝗮𝗰𝘁𝗶𝗰𝗮𝗹 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻

NIST AI RMF applied to a real research cluster. We govern our own AI tools, document decisions, and share templates. Practical governance for small teams.

Governance, Risk, and Compliance (GRC) is a structured way to align IT with business goals while managing risks and meeting all industry and government regulations.

Open-source risk analysis editor supporting EBIOS RM, GDPR DPIA (CNIL), ISO 27005 and custom methodologies.

Interviewing Help for Information Security Jobs (With Answers)

AI-powered compliance automation platform — autonomous agents verify SOC 2, ISO 27001 controls 24/7

Simplified Decision Framework (SDF)

PolicyBind is an AI Policy-as-Code platform that enables organizations to govern AI usage through a unified model registry, real-time token-based access control, and automated compliance reporting for frameworks like the EU AI Act and NIST AI RMF.

Canonical proto3 definitions for Chaukas: audit events, traces, decisions, and governance signals.

Learn how GRC (Governance, Risk & Compliance) skills are driving modern careers. Includes salary insights, certifications, and top global learning resources.

Demo Flue GRC engineer agent on Cloudflare Workers with Workers AI, Cloudflare Containers, and configurable auth.

RampControl manages and tracks security compliance per FedRAMP requirements. It allows users to add new system security plans, manage POA&M entries, and export data in OSCAL format.

A centralized enterprise governance platform that helps organizations manage policies, committees, decisions, compliance obligations, governance frameworks, approvals, documentation, and organizational accountability.

Self-hosted AI compliance assistant. Ask GRC questions in plain English, get answers cited to specific controls across 29 openly-licensed frameworks. Rust + local LLM - no data leaves your network.

One line to instrument your agent and capture every event in an immutable, queryable audit trail.

A structured ISO 27001-based risk assessment and treatment plan to identify and mitigate critical business continuity and data security threats.

operational practices for running AI agent systems in production