getprobo/probo

What is it?

Key features

• 01Risk register with inherent and residual scoring and treatment strategies
• 02Control library, custom framework import/export, and Statement of Applicability
• 03Vendor inventory, website risk assessment, and DPA/BAA tracking
• 04DPIA, transfer impact assessments, and data subject rights requests
• 05Access review campaigns integrated with SaaS, cloud, and source code sources
• 06Document versioning, approval quorums, and electronic signatures

Use cases

• Preparing for a SOC2 or ISO 27001 audit with controls and evidence tracked in one place
• Automating compliance tasks from CI/CD pipelines with the prb CLI
• Letting an LLM agent draft policies or run risk assessments through MCP
• Running vendor risk reviews and data privacy assessments for GDPR

Quick start

1. 1

   Clone the repository with submodules

   git clone --recurse-submodules https://github.com/getprobo/probo.git
2. 2

   Install Go and npm dependencies

   go mod download
3. 3

   Start infrastructure services such as PostgreSQL

   make stack-up
4. 4

   Build and run the server, then open http://localhost:8080

   make build

Things to know

• !Requires Go 1.27+, Node.js 24.15+, Docker and mkcert for the local setup.
• !Production deployment is documented as a self-hosting guide rather than a single install command.

In collections

Topics

FAQ

What is probo?

Self-hostable GRC platform for engineering and security teams covering SOC2, GDPR, ISO 27001 compliance work. Probo is a self-hostable governance, risk, and compliance (GRC) platform for engineering and security teams. It covers risk identification and scoring, control tracking, vendor risk assessments, data privacy work such as DPIAs and rights requests, access reviews, audit programs, and document approval workflows with electronic signatures.

Is probo free to use? What license does it have?

probo is open source under the MIT license. Check the license terms before using it in commercial products.

Is probo still maintained?

Actively maintained. The last commit to probo was on Nov 6, 2026.

What can I use probo for?

Preparing for a SOC2 or ISO 27001 audit with controls and evidence tracked in one place Automating compliance tasks from CI/CD pipelines with the prb CLI Letting an LLM agent draft policies or run risk assessments through MCP Running vendor risk reviews and data privacy assessments for GDPR

How do I install probo?

Clone the repository with submodules: git clone --recurse-submodules https://github.com/getprobo/probo.git Install Go and npm dependencies: go mod download Start infrastructure services such as PostgreSQL: make stack-up Build and run the server, then open http://localhost:8080: make build

Where can I get probo?

The source code and installation instructions are on GitHub: https://github.com/getprobo/probo