
Probo
Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams.
What Probo is
Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams. It supports control mapping, evidence collection, risk assessments, remediation workflows, and vendor risk management across frameworks including SOC 2, SOC 3, ISO 27001, GDPR, HIPAA, and others listed by the platform. Managed compliance officers can handle program setup, assessments, audit coordination, and monitoring. The platform automates evidence collection, updates, and approvals. Its portals support security-document requests and employee policy signatures, approvals, laptop enrollment, and identity-provider provisioning. Access Review aggregates accounts from connected systems, flags risky access, and exports completed campaigns as PDF evidence. Probo supports compatible MCP clients, with agent permissions limited to the connecting user's access and calls recorded in an immutable, CSV-exportable audit log. Deployment options include Probo Cloud and self-hosting with Docker Compose or Kubernetes. The supplied single-host Docker Compose setup is not high availability and is intended for evaluation, internal use, or small installations able to accept a single-host failure. Cloud pricing is not published on the described pages.
Good
- Supports multiple compliance frameworks and control mapping.
- Automates evidence collection, updates, and approvals.
- Access Review exports completed campaigns as PDF evidence.
- Offers cloud and self-hosted deployment options.
- AI agent calls are recorded in an exportable audit log.
Watch out
- The supplied single-host Docker Compose setup is not high availability.
- Cloud pricing is not published on the described pages.
- Device Agent cannot push commands, wipe, or lock devices.
Who it suits
Probo suits engineering, security, and compliance teams managing evidence, risk, vendor assessments, or access reviews. Its self-hosted option may fit small or internal deployments that can accept a single-host failure.
Verdict
Probo combines compliance workflows, access reviews, and deployment choices for teams managing security and governance work. Consider the single-host limitation before choosing the supplied Docker Compose setup, and contact Probo about cloud pricing.
Plans and prices
From Probo's own pricing page, checked 11 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Probo Cloud | Priced on request | Pricing not published on the pages opened; contact Probo to discuss the managed service |
The facts
Each one read from Probo's own pages, with the date it was checked.
What it does
- Access reviews
- Access Review aggregates accounts from connected systems, flags risky access, records decisions, and exports closed campaigns as PDF evidence.checked 11 Oct 2026
- AI access audit log
- The AI Agents page says authorized agent calls are recorded in an immutable, CSV-exportable audit log with timestamps, actions, resources, and the connected user’s identity.checked 11 Oct 2026
- AI agents
- Probo supports compatible MCP clients such as Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf, Zed, and OpenCode, with scopes limited by the connecting user’s permissions.checked 11 Oct 2026
- Audit evidence
- The platform automates evidence collection, updates, and approvals to help maintain audit readiness.checked 11 Oct 2026
- Compliance Portal
- The Compliance Portal lets prospects request access, sign NDAs, and download watermarked security documents.checked 11 Oct 2026
- Deployment
- The official documentation describes Probo Cloud and self-hosted deployment options, including Docker Compose and Kubernetes.checked 11 Oct 2026
- Employee Portal
- The Employee Portal supports policy signatures, document approvals, laptop enrollment, and employee provisioning through identity providers.checked 11 Oct 2026
- Integrations
- The Access Review page lists integrations including Google Workspace, Okta, GitHub, AWS, Slack, and Brex, and says CSV import is available for tools without a connector.checked 11 Oct 2026
- Managed compliance
- Probo’s compliance officers handle program setup, risk and vendor assessments, audit coordination, and ongoing monitoring.checked 11 Oct 2026
- Security and frameworks
- Probo’s site lists SOC 2, SOC 2 Type 1 and Type 2, SOC 3, ISO 27001, ISO 27701, ISO 42001, GDPR, CCPA, and HIPAA among its frameworks or compliance badges.checked 11 Oct 2026
- Self-hosting limit
- The supplied single-host Docker Compose deployment is described as not high availability and intended for evaluation, internal deployments, or small installations where a single-host failure is acceptable.checked 11 Oct 2026
- What it does
- Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams.checked 11 Oct 2026
Where it runs
- Device Agent
- Device Agent performs nine automatic security posture checks on enrolled laptops and servers and provides per-device, timestamped report history.checked 11 Oct 2026
- Device Agent limit
- Probo says Device Agent is observational and cannot push commands, wipe, or lock a device.checked 11 Oct 2026
- Device platforms
- The Device Agent download page lists macOS, Linux, Windows, and FreeBSD availability.checked 11 Oct 2026
Alternatives to Probo
- 1

CISO Assistant
Free planOpen sourceWebAPILinuxmacOS8.3From €39 a month - 2
OpenGRC
Free planOpen sourceWebAPISelf-hosted7.9From $4,500 a year - 3
VComply
AndroidiOSWebAPI7.8From $120 a month - 4
ComplianceOS
Free planOpen sourceWebAPISelf-hosted7.7Free plan - 5
Drata
AndroidiOSWebAPI7.2 - 6
Intelex Inspection Management
AndroidiOSWebAPI7.0From $44 a year
