getprobo/probo

Health v2 · maintenance only

Adoption not part of the score

1315 stars · 195 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Probo is an open-source, self-hostable governance, risk, and compliance (GRC) platform for engineering and security teams, covering risk management, controls, vendor risk, privacy, access reviews, and audit programs. It exposes every entity through a web console, a prb CLI, a GraphQL API, and 270+ MCP tools so compliance work can be automated from code, scripts, or LLM agents.

Use cases

• get soc2 compliant without expensive saas tools
• self-host a grc platform for iso 27001 certification
• manage a risk register and vendor risk assessments
• automate compliance evidence collection with ai agents
• run access reviews and track dpias for gdpr
• prepare for a soc 2 or hipaa audit
• manage policies and documents with approval workflows

When to choose

• you need an open-source, self-hosted alternative to Vanta or Drata
• your team wants to automate GRC workflows via CLI, GraphQL, MCP, or n8n
• you need broad framework coverage including SOC 2, ISO 27001, GDPR, and HIPAA
• you want audit-ready features like immutable audit logs and evidence chains

When to avoid

• you want a fully managed compliance service with auditors handling everything
• you cannot operate your own infrastructure, backups, and updates
• you need only a lightweight policy document store rather than a full GRC platform

Facets

application · maturity active

security workflow-automation api-framework graphql mcp cli self-hosted developer-tools security legal self-hosted developer-tools self-hosted cli go grc soc2 iso27001 gdpr hipaa risk-management vendor-risk audit compliance-automation access-reviews data-privacy automation linux docker web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="getprobo/probo")