getapp-logo

App comparison

Add up to 4 apps below to see how they compare. You can also use the "Compare" buttons while browsing.

Software categoriesBlog & researchAbout us

GetApp offers objective, independent research and verified user reviews. We may earn a referral fee when you visit a vendor through our links. 

Top Rated Governance, Risk and Compliance (GRC) Software with Open source - Page 12

Last updated: September 2026

Verified reviewer profile picture
Get free expert advice+1 (888) 216-6745
Call now for a one-to-one consultation in under 15 mins.
1 filter applied

Features

Integrated with

Pricing model

Devices supported

Organization types

User rating

421 software options

Granite Risk Management logo

Rock-solid GRC platform for mid-sized companies

Granite is a rock-solid business risk management platform for mid-sized companies from regulated industries like energy, finance and IT.

Read more about Granite Risk Management

Users also considered
MetaCompliance logo

Make it Personal.

GRC software that allows you to easily automate, deliver and maintain your organisation's policy management life cycle.

Read more about MetaCompliance

Users also considered
SecurityScorecard logo

The global leader in cybersecurity ratings

SecurityScorecard is the global leader in cybersecurity ratings, helping thousands of organizations of all types and sizes gain instant visibility into their own security posture and that of their third parties.

Read more about SecurityScorecard

Users also considered
Conga Contracts logo

Automate and simplify contract management in Salesforce

Conga CLM allows you to drive contract excellence at scale, reduce cycle times, improve negotiating outcomes, and minimize risk.

Read more about Conga Contracts

Users also considered
Alfresco Digital Business Platform logo

CMS platform for storing & sharing documents

Alfresco Digital Business Platform is a content management solution that helps businesses store & share documents with team members in compliance with industry regulations. Professionals can capture data from static documents via artificial intelligence (AI) technology and OCR capabilities.

Read more about Alfresco Digital Business Platform

Users also considered
Compliance Manager GRC logo

Automated governance, risk management and compliance

Compliance Manager GRC is an automated and easy to use solution to reduce the risk, complexity and costs associated with your InfoSec and IT compliance programs. Compliance Manager GRC software helps you manage any government regulation, industry standard or internal IT policy in one automated tool.

Read more about Compliance Manager GRC

Users also considered
RSA Archer Suite logo

IT & Security Risk Management platform

Archer IT & Security Risk Management is a cloud-based platform that helps businesses maintain compliance and manage, investigate, and resolve technological risks. It enables users to record and report on security vulnerabilities, audit findings, regulatory obligations and more.

Read more about RSA Archer Suite

Users also considered
Cookiebot CMP logo

Enable websites to protect the privacy of their users.

Cookiebot CMP by Usercentrics offers effortless cookie compliance to the major data privacy laws like GDPR and CCPA. With our fully automated solution, your website can become compliant in 2 simple steps without any complex implementations.

Read more about Cookiebot CMP

Users also considered
Vanta logo

Cloud-based audit solution for compliance.

Vanta helps 9,000+ teams start and scale their security programs, like Atlassian, Quora to Chili Piper and incident.io. Automate 35+ compliance frameworks, centralize GRC, accelerate security reviews, and build trust.

Read more about Vanta

Users also considered
Relias logo

Healthcare LMS for training and compliance

Governance, risk, and compliance (GRC) software that helps healthcare organizations manage policies, monitor regulations, reduce risk, streamline compliance workflows, and connect healthcare training, reporting, and governance in one centralized platform.

Read more about Relias

Users also considered
WorkFlex logo
(0)

Travel compliance management software

WorkFlex handles labour law, social security, tax, and immigration compliance for every business trip, workation, and assignment across all 8 risk dimensions, giving HR, Legal, and Global Mobility teams audit-ready documentation and No-risk coverage.

Read more about WorkFlex

Users also considered
LAHEBO logo
(0)

Governance, risk and compliance software

LAHEBO is a governance, risk, and compliance (GRC) software that helps businesses maintain a repository for legislation and risk registers. Teams can raise potential risks and request administrators to take action in accordance with risk mitigation strategies.

Read more about LAHEBO

Users also considered
KPMG Sofy Suite logo
(0)

Software for streamlining governance, risk, and compliance

Sofy’s GRC suite automates compliance, risk management, and governance. Save time and reduce costs with scalable tools and real-time insights for any stage of your GRC journey.

Read more about KPMG Sofy Suite

Users also considered
GRASP German GRC logo
(0)

The perfect partner for ISM, DSM and data protection

GRASP digitizes and automates information security, data protection & business continuity processes.

Read more about GRASP German GRC

Users also considered
cubemos logo
(0)

cubemos is the leading sustainability management platform.

Cubemos simplifies sustainability management with one platform offering ESG assessment, stakeholder analysis, risk & opportunity ID, goal tracking, communication tools, centralized data management & reporting ready tools for companies to streamline sustainability management and maintain trust.

Read more about cubemos

Users also considered
Vvault logo
(0)

Vendor questionnaires answered locally. Zero cloud exposure.

Vvault answers vendor security questionnaires using your own policy documents, running entirely on your hardware. No data leaves your network. No sub-processors. No BAA required. Wireshark-verifiable zero outbound connections.

Read more about Vvault

Users also considered
GRCfy Maestro logo
(0)

AI-powered audit & compliance management tool

GRCfy Maestro is an audit and compliance platform designed for enterprises, audit firms, and chartered accountants managing multiple regulatory frameworks. The software supports DPDP Act compliance, ISO 27001, SOC 2, and ESG/BRSR assurance engagements from a single system. It features AI-enabled evidence screening with human-in-the-loop validation, cross-framework control mapping, and multi-client engagement management capabilities.

Read more about GRCfy Maestro

Users also considered
MCS COMPLIANCE PLATFORM logo
(0)

Modular Compliance Platform with 20+ Compliance Systems

The MCS Compliance Platform makes it possible to combine and network various compliance tasks in a central, integrated platform by combining several systems.

Depending on the requirements, the desired systems can be flexibly combined into an individually tailored compliance platform.

Read more about MCS COMPLIANCE PLATFORM

Users also considered
Keel GRC logo
(0)

Get audit-ready, and prove it.

Keel GRC is governance, risk, and compliance software that helps businesses prepare for audits such as SOC 2, ISO 27001, and HIPAA.

Read more about Keel GRC

Users also considered
Vault Platform logo
(0)

Whistleblowing software for legal professionals

Vault Platform is a whistleblowing software designed to help legal, compliance and HR professionals record and manage misconducts across the organization. Whistleblowers can report the incident anonymously, individually, or in groups to relevant case managers.

Read more about Vault Platform

Users also considered
Secreply logo
(0)

AI-driven security questionnaire automation tool

Secreply is a security questionnaire automation platform that uses artificial intelligence to generate responses based on uploaded compliance documentation. The software features a knowledge base for storing policies and certifications, multi-language support, confidence scoring for answers, and the ability to export completed questionnaires into their original file formats. It includes a public Trust Center for sharing compliance badges and subprocessor information.

Read more about Secreply

Users also considered
Secuvy logo
(0)

Data Privacy | Data Security | Data Governance

Secuvy is the industry leading AI-native data privacy compliance and data protection platform.

Read more about Secuvy

Users also considered
FCRM Insurance logo
(0)

Financial crime risk management

We are focused on the financial industry, transforming how banks, credit unions and thrifts serve their tech savvy customers. Choose Fiserv as your partner to gain vital, innovative technology expertise in information management products, services, and practices.

Our Financial Crime Risk Management solutions reside on a common platform featuring an integrated real-time detection engine to deliver advanced integration, modelling, detection and resolution capabilities.

Read more about FCRM Insurance

Users also considered
LENO logo
(0)

Manage third party risk with AI

LENO is an AI-powered, third-party risk management SaaS that complies with all relevant EU regulatory requirements, including the EBA Guidelines on Outsourcing Arrangements, the Digital Operational Resilience Act (DORA), and other German regulations. The platform caters to the needs of Germany-based institutions or businesses with operations in Germany.

Read more about LENO

Users also considered
Ansarada GRC logo
(0)

Cloud-based solution for governance, risk, and compliance.

Designed for small to large businesses, Ansarada GRC is a cloud-based solution that helps manage governance, risk, and compliance (GRC) processes on a centralized interface. The platform offers various features such as audit trails, ESG management, risk mitigation, third-party attestations, document management, and data protection.

Read more about Ansarada GRC

Users also considered