Open-source compliance automation server for tracking policies, controls, evidence, and vendors across SOC 2, ISO 27001, NIST 800-53 and more.
checkmarble/marble
Open-source real-time decision engine for fraud detection and AML compliance, covering transaction monitoring, screening and case investigation.
Open-source alternative to:ComplyAdvantage
Actimize
- Stars
- 617
- Forks
- 91
- Open issues
- 1
- Last commit
- 2 days ago
What is it?
Marble is a decision engine for fraud and anti-money-laundering (AML) teams. It lets compliance and risk staff build transaction monitoring rules on a custom data model, screen customers and companies against sanctions, PEP and adverse media lists, and work alerts in a unified case manager.
The open-source core can be self-hosted with Docker Compose, so customer data stays inside the operator's infrastructure, or used as a SaaS offering. Marble connects to internal systems such as transaction databases and third-party data providers, and it includes AI assistance for rule building and investigation workflows. The project does not provide KYC services itself.
Access controls include role-based permissions, SSO via OpenID Connect and IP whitelisting. Audit logs for detection rules, workflows and case actions are searchable and unalterable, and direct database access is available for BI tools.
Key features
- 01Real-time or post-trade transaction monitoring with a custom data model.
- 02Customer and company screening against sanctions, PEP and adverse media lists.
- 03Continuous monitoring of customers against chosen lists.
- 04Unified case manager for investigating and annotating alerts.
- 05Searchable, unalterable audit logs for rules, workflows and case actions.
- 06Role-based access control, OIDC single sign-on and IP whitelisting.
Use cases
- Building transaction monitoring rules for a fintech or bank's payment flows.
- Screening customers and payments against global sanctions and PEP lists.
- Running a self-hosted fraud and AML platform where data must remain on-premise.
- Investigating alerts collaboratively in a single case management interface.
Quick start
- 1
Clone the repository
git clone <repository-url> - 2
Copy the example environment file
cp .env.dev.example .env.dev - 3
Start Marble with Docker Compose
docker compose -f docker-compose-dev.yaml --env-file .env.dev.example up
Things to know
- Requires Docker, Docker Compose, at least 4GB RAM and 10GB of disk space.
- The license is not clearly identified (listed as NOASSERTION), so check its terms before use.
- Marble does not provide KYC services, so you must integrate a separate provider.
- Enterprise features are only available under a licensed option.
In collections
Topics
FAQ
- What is marble?
- Open-source real-time decision engine for fraud detection and AML compliance, covering transaction monitoring, screening and case investigation. Marble is a decision engine for fraud and anti-money-laundering (AML) teams. It lets compliance and risk staff build transaction monitoring rules on a custom data model, screen customers and companies against sanctions, PEP and adverse media lists, and work alerts in a unified case manager.
- Is marble free to use? What license does it have?
- marble is open source under the Other license. Check the license terms before using it in commercial products.
- Is marble still maintained?
- Actively maintained. The last commit to marble was on Oct 22, 2026.
- What can I use marble for?
- Building transaction monitoring rules for a fintech or bank's payment flows. Screening customers and payments against global sanctions and PEP lists. Running a self-hosted fraud and AML platform where data must remain on-premise. Investigating alerts collaboratively in a single case management interface.
- How do I install marble?
- Clone the repository: git clone <repository-url> Copy the example environment file: cp .env.dev.example .env.dev Start Marble with Docker Compose: docker compose -f docker-compose-dev.yaml --env-file .env.dev.example up
- Where can I get marble?
- The source code and installation instructions are on GitHub: https://github.com/checkmarble/marble
Summary generated by AI from the project's README. GitHub stats refresh daily.
Related projects
A generic, vendor-neutral signature format for describing log-based detections, plus a large shared library of ready-to-use Sigma rules.
A Python library for anomaly detection across tabular, time series, graph, text, image and audio data, with 60+ detectors and a classic fit/predict API.
A Java rule and component orchestration engine that defines business flows in a DSL, with hot rule refresh and AI Agent nodes.
Self-hosted platform for monitoring, patching and securing Linux server fleets, with outbound-only agents and approval-based patch runs.
Self-hosted platform that archives, indexes and searches emails from Gmail, Microsoft 365, PST files and IMAP inboxes.