OpenGRC

Input—per 1M tokens

Output—per 1M tokens

Context—tokens

WeightsClosed

About

OpenGRC is ranked #2 of 50 in compliance management software on Inferse. It runs on API, Self-hosted, Web. There is a free plan. Paid plans start at $375/mo.

Compared on compliance management software

Free plan: Yesopengrc.com
Frameworks supported: NIST 800-171, ISO 27001, SOC 2, CMMC, PCI DSSopengrc.com
Control mapping: Yesopengrc.com
Evidence collection: Yesopengrc.com
Risk assessments: Yesopengrc.com
Remediation workflows: Yesopengrc.com
Vendor risk management: Yesopengrc.com

Facts

Product: OpenGRC is a cyber Governance, Risk, and Compliance web application intended for small and midsized businesses and teams.docs.opengrc.com · 30 Sept 2026
GRC features: The platform includes risk management, controls and implementations, audits, vendor management, incident response, and project management.opengrc.com · 30 Sept 2026
AI tools: Enterprise includes AI risk assessments, automated vendor survey responses, and AI gap assessments.opengrc.com · 30 Sept 2026
Audit management: OpenGRC supports audit evidence requests, progress tracking, and report generation.opengrc.com · 30 Sept 2026
Vendor assessments: Vendor Management supports a dedicated vendor portal, customizable questionnaires, and weighted scoring.opengrc.com · 30 Sept 2026
Integrations: OpenGRC says it has no third-party integrations currently built into the platform, but provides a REST API for integrations.opengrc.com · 30 Sept 2026
AI integrations: The Enterprise MCP server supports compatible clients including Claude, ChatGPT, and Cursor, with OAuth 2.1 authentication.docs.opengrc.com · 30 Sept 2026
Security: Hosted plans state a 99.5% monthly uptime commitment, encryption in transit and at rest, instance-specific data keys, and an annual independent SOC 2 Type II examination.opengrc.com · 30 Sept 2026
AI data use: OpenGRC states that it does not use hosted-plan customer data to train AI models.opengrc.com · 30 Sept 2026
Community hosting: The Community edition is web-based and requires the user to run a web server and database server.docs.opengrc.com · 30 Sept 2026
Community limitation: The maker says Community installation and maintenance require some technical knowledge.docs.opengrc.com · 30 Sept 2026
License: The documentation says OpenGRC is licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0, with stated exceptions for earlier code and certain commercial use.docs.opengrc.com · 30 Sept 2026
API limits: The REST API is limited to 60 requests per minute per user, or per IP address for unauthenticated requests.docs.opengrc.com · 30 Sept 2026
Company: The maker identifies itself as OpenGRC, LLC and says OpenGRC started as a side project in December 2024.opengrc.com · 30 Sept 2026