17.9
OpenGRC is a web application for cyber governance, risk, and compliance, designed for small and midsized businesses and teams.
Free planOpen sourceWebAPISelf-hosted
Alternatives to CISO Assistant
CISO Assistant combines cybersecurity risk, compliance, audits, and supplier oversight in one GRC platform. It covers more than 150 frameworks and regulations, supports custom frameworks, and includes ISO 27005 and EBIOS RM risk methods, business impact analysis, evidence management, findings, and remediation. Jira and ServiceNow connections, a REST API, CLI, and MCP support offer ways to connect work. Community is free and self-hosted; Pro starts at €39/mo (annual), with…
27.8
VComply is a connected governance, risk, and compliance platform for managing obligations, policies, risks, and cases alongside owners, actions, and evidence.
AndroidiOSWeb
37.7
ComplianceOS is an open-core GRC platform for organizing compliance infrastructure across frameworks such as SOC 2, ISO 27001, HIPAA, GDPR and NIST.
Free planOpen sourceWebAPISelf-hosted
- 4
Drata
Drata is a compliance and risk platform for companies working to earn and maintain trust.
AndroidiOSWebAPI7.2 - 5
Intelex Inspection Management
AndroidiOSWebAPI7.0From $44 a year - 6
Strike Graph
Strike Graph is a governance, risk, and compliance platform for designing, running, and measuring security programs.
Free planWebAPI6.9From $21,500 a year - 7
AssurX QMS
AssurX QMS is a quality management system for organizing document control, audits, corrective actions, nonconformance tracking, and compliance records.
AndroidiOSWebAPI6.8 - 8
IsoMetrix
IsoMetrix is an integrated system for managing risk, environmental, health, safety, compliance, and sustainability processes.
AndroidiOSWebAPI6.6 - 96.4From £11,995 a year
- 10
EHS Hero
AndroidiOSWeb6.3 - 11
Resolver Investigations
Resolver Investigations is cloud software for managing investigations from intake and evidence through findings and resolution in a structured case file.
AndroidiOSWebAPI6.3 - 12
Riskonnect
AndroidiOSWebAPI6.3 - 13
Unicis
WebAPISelf-hosted6.3From €19 a month - 14
Openlane
WebAPISelf-hosted6.2From $10 a month - 15
Qooling
Qooling is a platform for managing quality, safety, and security processes on the web, Android, and iOS.
AndroidiOSWeb6.2 - 16
Secureframe
WebAPI6.2From $7,500 a year - 17
ComplianceBridge Policy Management
ComplianceBridge Policy Management helps organizations manage policies from creation and review through approval, publication, distribution, acknowledgment, and revision.
AndroidiOSWebLinux6.1 - 18
PowerDMS Policy
AndroidiOSWeb6.1 - 19
ComplyGlobal
Free planWeb6.0Free plan - 20
Diligent One
AndroidiOSWebAPI6.0 - 21
TeamLease RegTech
TeamLease RegTech provides RegTrack, a cloud-based system for managing statutory and internal compliance obligations.
AndroidiOSWeb6.0 - 22
SAI360 Ethics and Compliance
SAI360 Ethics and Compliance is a cloud-based web platform for governance, risk, compliance, and ethics programs.
Web5.9 - 23
Akitra
Akitra Andromeda is a web-based platform for security, compliance, risk management, and penetration testing.
Web5.8 - 24
AuditBoard (now Optro)
AuditBoard, now Optro, is an AI-powered governance, risk, and compliance platform connecting audit, risk, information security, and compliance work.
WebAPI5.8 - 25
Onspring
Onspring is business process automation software for Governance, Risk and Compliance; Audit and Assurance; Vendor Management; and Legal.
WebAPI5.8 - 26
Vanta
WebAPI5.8 - 27
NAVEX One
NAVEX One is an AI-powered governance, risk, and compliance platform for organizations connecting risk management with compliance programs.
WebAPI5.7 - 28
Probo
Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams.
WebAPILinuxmacOS5.7 - 29
Virtual Auditor
Virtual Auditor is a managed security and compliance program that combines a platform with expert guidance.
LinuxmacOSSelf-hostedWindows5.7 - 30
Anecdotes
Anecdotes is an enterprise agentic GRC platform available through the web and an API.
WebAPI5.6