Repolode
Submit
intuitem

intuitem/ciso-assistant-community

Open-source GRC platform for cybersecurity teams covering risk management, compliance, audit, third-party risk and privacy, with 200+ frameworks.

Open-source alternative to:OneTrustVanta

View on GitHubWebsite
Stars
4,588
Forks
891
Open issues
95
Last commit
13 hours ago

What is it?

CISO Assistant is an open-source GRC (Governance, Risk and Compliance) platform for cybersecurity management. It brings risk assessments, compliance and audit campaigns, third-party risk, business impact analysis, privacy processing and reporting into one application, so security teams do not have to keep these in separate spreadsheets and tools.

The platform separates compliance requirements from the security controls that satisfy them. A single control can be reused across several frameworks, and a past assessment can be applied to other scopes. The built-in library includes more than 200 frameworks such as ISO 27001, NIST CSF, SOC 2, CIS Controls, PCI DSS, NIS2, DORA, GDPR and HIPAA, and custom frameworks can be loaded from Excel or YAML.

The product is API-first, with a REST API, a CLI, Kafka import/export and MCP support. It runs self-hosted via Docker Compose or Helm on Kubernetes, and a hosted cloud trial is also offered.

Key features

  • 01Risk assessments, registers, and EBIOS RM module
  • 02Automatic control mapping across 200+ compliance frameworks
  • 03Third-party risk management and DORA register of information
  • 04Findings, action plans, and remediation tracking
  • 05REST API, CLI, and Kafka integration for automation
  • 06SSO via SAML or OIDC with MFA and RBAC

Use cases

  • Preparing for ISO 27001, SOC 2, or NIS2 audits while reusing one set of controls
  • Tracking third-party vendor risk and contracts for a security team
  • Running risk assessments and remediation plans in one place
  • Automating GRC data import and reporting through the API

Quick start

  1. 1

    Install Docker and Docker Compose on your workstation or server

  2. 2

    Clone the repository

    git clone --single-branch -b main https://github.com/intuitem/ciso-assistant-community.git
  3. 3

    Run the starter script (Linux/macOS; use ./docker-compose.ps1 on Windows)

    ./docker-compose.sh

Things to know

  • The license is not clearly specified in the metadata, so check the repository terms before use.
  • The main branch can have breaking changes, so use tagged releases or prebuilt images for production.
  • Self-hosting requires Docker, and Windows users need Docker Desktop with WSL2.

In collections

Security scanners, audits & threat intel tools

Topics

#grc#compliance#risk-management#cybersecurity#audit#security#nist#iso27001#automation#bsi

FAQ

What is ciso-assistant-community?
Open-source GRC platform for cybersecurity teams covering risk management, compliance, audit, third-party risk and privacy, with 200+ frameworks. CISO Assistant is an open-source GRC (Governance, Risk and Compliance) platform for cybersecurity management. It brings risk assessments, compliance and audit campaigns, third-party risk, business impact analysis, privacy processing and reporting into one application, so security teams do not have to keep these in separate spreadsheets and tools.
Is ciso-assistant-community free to use? What license does it have?
ciso-assistant-community is open source under the Other license. Check the license terms before using it in commercial products.
Is ciso-assistant-community still maintained?
Actively maintained. The last commit to ciso-assistant-community was on Nov 6, 2026.
What can I use ciso-assistant-community for?
Preparing for ISO 27001, SOC 2, or NIS2 audits while reusing one set of controls Tracking third-party vendor risk and contracts for a security team Running risk assessments and remediation plans in one place Automating GRC data import and reporting through the API
How do I install ciso-assistant-community?
Install Docker and Docker Compose on your workstation or server Clone the repository: git clone --single-branch -b main https://github.com/intuitem/ciso-assistant-community.git Run the starter script (Linux/macOS; use ./docker-compose.ps1 on Windows): ./docker-compose.sh
Where can I get ciso-assistant-community?
The source code and installation instructions are on GitHub: https://github.com/intuitem/ciso-assistant-community

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects

trycompai / comp

Open-source compliance platform that automates evidence collection, policies and controls for SOC 2, ISO 27001, HIPAA and GDPR.

Security#compliance#soc2#iso27001
2.1K+14 this week446TypeScriptAGPL-3.0Well maintainedUpdated 3 days ago