isms-builder
Compliance
v1.81.2
This web application helps organizations build and maintain an Information Security Management System entirely on their own hardware.2d agoAGPL-3.0DockerModerate
Self-hosted alternatives to Commercial ISMS platforms (SaaS)
~/index>
--sort
1 project· by score
Projects
Also in Compliance
Not listed as Commercial ISMS platforms (SaaS) alternatives, but they cover the same ground and are worth a look.
proboProbo is a self-hosted GRC platform for engineering teams to manage SOC 2, GDPR, ISO 27001, and HIPAA compliance with a web console, CLI, GraphQL API, and MCP tools.
compOpen-source, self-hosted compliance platform that automates evidence, policies and controls for SOC 2, ISO 27001, HIPAA or GDPR, pitched as a Vanta alternative.
OpenGRCOpenGRC is a self-hosted GRC platform for small/mid security teams covering risk, controls, audits, vendor risk, incidents, and policies with 152 importable frameworks.
auliteSelf-hosted HTTP proxy that checks AI interactions for EU AI Act compliance, records them in a tamper-proof audit log, and produces legal-grade PDF reports.
ballerineOpen-source infrastructure and data orchestration platform for risk decisioning
PIAPIA is a free, open-source tool from the French CNIL for GDPR Data Protection Impact Assessments. Available as a portable desktop app or self-hosted web application.
About these Commercial ISMS platforms (SaaS) alternatives
1 open-source, self-hosted alternatives to Commercial ISMS platforms (SaaS) are listed here, ranked by popularity, maintenance and documentation.
- Highest rated
- isms-builder (257 GitHub stars, AGPL-3.0 license, written in JavaScript)
- Docker
- 1 of the top 1 ship an official Docker image
- Recently updated
- isms-builder v1.81.2 on 2026-10-28
Commercial ISMS platforms (SaaS) alternatives compared
| Project | License | Language | Stars | Docker | Setup | Latest release | Score |
|---|---|---|---|---|---|---|---|
| isms-builder | AGPL-3.0 | JavaScript | 257 | Yes | Moderate | v1.81.2 | 45 |