OpenGRC
7.9#2 in compliance management softwareFrom $4,500 a yearFree planWebAPISelf-hosted
Visit
| Fact | OpenGRC | Unicis |
|---|---|---|
| Company | The maker identifies itself as OpenGRC, LLC and says OpenGRC started as a side project in December 2024. | Unicis.Tech OÜ identifies itself as an Estonian company registered in Tallinn, and its About page says it was founded in 2021. |
| Founded | 2025 | 2021 |
| Integrations | OpenGRC says it has no third-party integrations currently built into the platform, but provides a REST API for integrations. | The integrations page lists GitHub, GitLab, Docker, Slack, Matrix, Datadog, SAML identity providers, n8n, Jira, Confluence and AI assistant connections through MCP. |
| Product | OpenGRC is a cyber Governance, Risk, and Compliance web application intended for small and midsized businesses and teams. | Unicis describes itself as an open-source Governance, Risk and Compliance platform for startups and SMEs. |
| Risk management | Risk tools maintain a register with scoring, treatment tracking and links to related controls and assets. | Risk management includes likelihood and impact scoring, a risk register and treatment plans. |
| Security | Hosted plans state a 99.5% monthly uptime commitment, encryption in transit and at rest, instance-specific data keys, and an annual independent SOC 2 Type II examination. | The security page states that data is encrypted with AES-256 at rest and TLS 1.3 in transit, and lists SAML 2.0 and OIDC SSO. |
OpenGRC is aimed at small and midsized businesses or teams managing cyber risks, audits, controls, and vendors. Community may suit users able to handle its web and database server requirements.
You want what its maker publishes above — check its page for the details.