trycompai/comp

Health v2 · maintenance only

Adoption not part of the score

1896 stars · 394 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Comp AI is an open-source, AI-native compliance platform that automates evidence collection, policy generation, and continuous monitoring for frameworks like SOC 2, ISO 27001, HIPAA, and GDPR. It is positioned as an open-source alternative to Vanta and Drata, with 580+ integrations, cloud posture tests, security questionnaires, and a public API plus MCP server.

Use cases

• get my company SOC 2 compliant
• automate compliance evidence collection
• open-source alternative to Vanta or Drata
• generate security policies with AI
• answer security questionnaires automatically
• monitor cloud security posture across AWS, Azure, and GCP
• host a public trust center for prospects

When to choose

• you want an auditable, open-source compliance platform with no vendor lock-in
• you need to get audit-ready for SOC 2, ISO 27001, HIPAA, or GDPR quickly
• you want automated evidence collection from many integrations in one place
• you want to drive compliance workflows via API or AI assistants through MCP

When to avoid

• you need a fully managed commercial audit service with guaranteed auditor relationships
• you cannot self-host or operate a Next.js/Prisma-based platform
• your compliance needs are limited to frameworks Comp AI does not support
• you require FedRAMP-grade accreditation out of the box

Facets

application · maturity active

security workflow-automation monitoring api-framework mcp security legal self-hosted developer-tools self-hosted soc2 iso27001 gdpr hipaa compliance-automation trust-center evidence-collection vanta-alternative drata-alternative nextjs t3-stack agpl automation web-server docker nodejs typescript

Member repositories

For agents

markdown · JSON · MCP: product_card(name="trycompai/comp")