Open Source · OpenComp
An open-source compliance assessment portal for SOC 2, ISO 27001, and a growing list of other frameworks — evidence collection, policy management, and control implementation. Self-host it, or get it included with a Gideon paid plan.
What it does
Collect and organize the evidence auditors ask for instead of chasing screenshots and spreadsheets manually.
Write, version, and publish the policies your framework requires without a separate document tool.
See which controls are in place, which are in progress, and which still need owners.
Frameworks supported
More added regularly.
Fully open source
OpenComp is fully open source under AGPLv3. Every product feature is available in the public repository, so you can self-host it, audit the complete codebase, and modify it freely.
Get started
Clone the repository and start OpenComp with Docker Compose. Full setup, environment variables, and cloud and authentication configuration are in the self-hosting guide.
git clone https://github.com/gideon-security/opencomp.git
cd opencomp
docker-compose up -d --buildThe hosted version of OpenComp is included with Starter Plus, Business, and Enterprise. It is not included on the free Starter plan for up to 10 users and is not available as a standalone purchase.
See pricingBuilt with
Community
OpenComp is built in the open and shaped by feedback. Report bugs or request features in GitHub Issues, and use the contributing guide to propose code changes.