# Self-hosted alternatives to Commercial ISMS platforms (SaaS)

> 1 self-hostable, open-source alternative to Commercial ISMS platforms (SaaS), ranked by score.

- [isms-builder](https://selfhost.directory/project/isms-builder)

## Also in Compliance

Not listed as Commercial ISMS platforms (SaaS) alternatives, but from the same category:

- [probo](https://selfhost.directory/project/probo): Probo is a self-hosted GRC platform for engineering teams to manage SOC 2, GDPR, ISO 27001, and HIPAA compliance with a web console, CLI, GraphQL API, and MCP tools.
- [comp](https://selfhost.directory/project/comp): Open-source, self-hosted compliance platform that automates evidence, policies and controls for SOC 2, ISO 27001, HIPAA or GDPR, pitched as a Vanta alternative.
- [OpenGRC](https://selfhost.directory/project/opengrc): OpenGRC is a self-hosted GRC platform for small/mid security teams covering risk, controls, audits, vendor risk, incidents, and policies with 152 importable frameworks.
- [aulite](https://selfhost.directory/project/aulite): Self-hosted HTTP proxy that checks AI interactions for EU AI Act compliance, records them in a tamper-proof audit log, and produces legal-grade PDF reports.
- [ballerine](https://selfhost.directory/project/ballerine): Open-source infrastructure and data orchestration platform for risk decisioning
- [PIA](https://selfhost.directory/project/pia): PIA is a free, open-source tool from the French CNIL for GDPR Data Protection Impact Assessments. Available as a portable desktop app or self-hosted web application.

All 29 Compliance projects: https://selfhost.directory/compliance

---
Source: https://selfhost.directory/alternative-to/commercial-isms-platforms-saas