OpenComp
AGPLv3A fully open-source compliance assessment portal — evidence collection, policy management, and control tracking for SOC 2, ISO 27001, and a growing list of other frameworks. Self-host it, or use Gideon's hosted version.
Open Source
Security tools we build in the open
Gideon builds fully open-source security tools under AGPLv3. You can self-host, audit, and modify the complete software; Gideon's paid plans offer a managed hosted option.
Projects
Open security infrastructure
Why we open source
Security benefits from scrutiny
We open-source security tooling that benefits from outside scrutiny — code that handles compliance evidence and access policy should not be a black box. OpenComp is fully open under AGPLv3, while Gideon's managed hosted version funds continued development and gives teams an operationally simpler option.