# OpenGRC

> OpenGRC is a self-hosted GRC platform for small/mid security teams covering risk, controls, audits, vendor risk, incidents, and policies with 152 importable frameworks.

- **Category:** Compliance
- **Licence:** Other
- **Latest version:** v0.1.0-alpha-3
- **Open source:** source_available
- **Languages:** PHP
- **Tags:** Compliance, Audit, Cybersecurity, Incident Response, Hipaa, Php, Laravel, Governance, Self Hosted, Risk Management, Iso27001, Soc2, Soc 2, Iso 27001, Policy management, Vendor Management, Grc, Vendor Risk, Nist Csf

## Description

A GRC web application built for smaller security teams that need a full program without enterprise cost or complexity. It delivers risk registers tied to controls and assets, audit workflows with evidence tracking, vendor questionnaires, incident playbooks, policy authoring with approvals, asset inventories, and executive dashboards. The Community Edition is the complete self-hosted platform with no seat limits, under Elastic License 2.0. It requires PHP 8.4+, Laravel, Filament, and MySQL/MariaDB or PostgreSQL. Deploy via Docker Compose, standalone container, or install script. The hosted Enterprise tier adds AI assessments, an MCP server for AI assistants, and managed infrastructure.

## Links

- [Homepage](https://github.com/leemangold/opengrc)
- [Website](https://opengrc.com)
- [Documentation](https://docs.opengrc.com)
- [GitHub Repository](https://github.com/LeeMangold/OpenGRC)
- [Community Edition](https://opengrc.com/community)
- [Enterprise Edition](https://opengrc.com/enterprise)
- [Pricing](https://opengrc.com/pricing)
- [Security](https://opengrc.com/security)
- [Discussions](https://github.com/LeeMangold/OpenGRC/discussions)

---
Source: https://selfhost.directory/project/opengrc