OpenGRC

OpenGRC is ranked #5 of 50 in compliance management software on The Geeks Club. It runs on API, Self-hosted, Web. There is a free plan. Paid plans start at $375/mo.

OpenGRC plans and pricing

All plans

Community Free Free Self-hosted · full source code access · community support opengrc.com · 30 Sept 2026

Enterprise Basic $4,500/yr $4,500 /year Unlimited internal users · unlimited frameworks · unlimited vendors and applications · email support with 24-hour response opengrc.com · 30 Sept 2026

Enterprise Enhanced $7,500/yr $7,500 /year Includes Basic features · onboarding training · SMB Risk Assessment · additional real-time chat support · premium hosting and regular updates opengrc.com · 30 Sept 2026

Compared on compliance management software

Free plan: Yes
Frameworks supported: NIST 800-171, ISO 27001, SOC 2, CMMC, PCI DSS
Control mapping: Yes
Evidence collection: Yes
Risk assessments: Yes
Remediation workflows: Yes
Vendor risk management: Yes

Best OpenGRC alternatives

See all 12

7.8 CISO Assistant Free plan 7.7 ComplianceOS Free plan

7.6 Strike Graph Free plan

7.0 Drata Free trial

6.7 Intelex Inspection Management Free trial $3.67/mo

6.6 Unicis

OpenGRC

Product: OpenGRC is a cyber Governance, Risk, and Compliance web application intended for small and midsized businesses and teams.
GRC features: The platform includes risk management, controls and implementations, audits, vendor management, incident response, and project management.
AI tools: Enterprise includes AI risk assessments, automated vendor survey responses, and AI gap assessments.
Audit management: OpenGRC supports audit evidence requests, progress tracking, and report generation.
Vendor assessments: Vendor Management supports a dedicated vendor portal, customizable questionnaires, and weighted scoring.
Integrations: OpenGRC says it has no third-party integrations currently built into the platform, but provides a REST API for integrations.
AI integrations: The Enterprise MCP server supports compatible clients including Claude, ChatGPT, and Cursor, with OAuth 2.1 authentication.
Security: Hosted plans state a 99.5% monthly uptime commitment, encryption in transit and at rest, instance-specific data keys, and an annual independent SOC 2 Type II examination.
AI data use: OpenGRC states that it does not use hosted-plan customer data to train AI models.
Community hosting: The Community edition is web-based and requires the user to run a web server and database server.
Community limitation: The maker says Community installation and maintenance require some technical knowledge.
License: The documentation says OpenGRC is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0, with stated exceptions for earlier code and certain commercial use.
API limits: The REST API is limited to 60 requests per minute per user, or per IP address for unauthenticated requests.
Company: The maker identifies itself as OpenGRC, LLC and says OpenGRC started as a side project in December 2024.
Price from: $375/mo

Visit site Alternatives

Where it ranks on The Geeks Club

Best Compliance Management Software in 2026#5 of 50
Best Governance, Risk and Compliance Software in 2026#4 of 34

Is OpenGRC yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote OpenGRC

Sources

docs.opengrc.com· checked 30 Sept 2026
opengrc.com· checked 30 Sept 2026
opengrc.com/enterprise· checked 30 Sept 2026
docs.opengrc.com/enterprise/mcp-server/· checked 30 Sept 2026
opengrc.com/pricing· checked 30 Sept 2026
docs.opengrc.com/api/· checked 30 Sept 2026
opengrc.com/about-us· checked 30 Sept 2026