Ross ROSS = Recommend OSS · open-source software intelligence for agents

trycompai/comp

Some data may be outdated — see provenance labels.

AI Native platform to get companies compliant - Vanta & Drata Alternative observed · 2026-10-02

github.com/trycompai/comp · homepage · TypeScript · AGPL-3.0 (copyleft) observed · 2026-10-02

Health v2 · maintenance only

80/100

  • Activity 97
  • Release rhythm 77
  • Longevity 45
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-10-21. Adoption (stars, forks) is never an input.

  • gap_med: 0
  • age_days: 643
  • days_rel: 76
  • days_push: 19
  • n_releases_24m: 424

Full methodology

Adoption not part of the score

2013 stars · 427 forks observed · 2026-10-02

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Comp AI is an open-source, AI-native compliance platform that automates evidence collection, policy generation, and continuous monitoring for frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It is positioned as an open-source alternative to Vanta and Drata, with 580+ integrations, cloud posture tests, security questionnaires, and a public API plus MCP server.

Use cases

  • get my company SOC 2 compliant
  • automate compliance evidence collection
  • open-source alternative to Vanta or Drata
  • generate security policies with AI
  • answer security questionnaires automatically
  • monitor cloud security posture across AWS, Azure, and GCP
  • host a public trust center for prospects

When to choose

  • you want an auditable, open-source compliance platform with no vendor lock-in
  • you need to get audit-ready for SOC 2, ISO 27001, HIPAA, or GDPR quickly
  • you want automated evidence collection from many integrations in one place
  • you want to drive compliance workflows via API or AI assistants through MCP

When to avoid

  • you need a fully managed commercial audit service with guaranteed auditor relationships
  • you cannot self-host or operate a Next.js/Prisma-based platform
  • your compliance needs are limited to frameworks Comp AI does not support
  • you require FedRAMP-grade accreditation out of the box

Facets

application · maturity active

security workflow-automation monitoring api-framework mcp security legal self-hosted developer-tools self-hosted soc2 iso27001 gdpr hipaa compliance-automation trust-center evidence-collection vanta-alternative drata-alternative nextjs t3-stack agpl automation web-server docker nodejs typescript

7 sources

Member repositories

RepositoryRoleHealth v2
trycompai/compmain80

For agents

markdown · JSON · MCP: product_card(name="trycompai/comp")

Data as of 2026-10-19T08:05:51.212177+00:00 · Report a problem