[opensourcedex]

best-of ranking · updated nightly

Best Open Source Compliance & Risk Management Tools

Ranked by GitHub stars — actual adoption, not editorial taste. All 10 are free, open source and self-hostable; license and last activity on every entry.

  1. 1
    lighthouse ★ 31K

    Automated auditing, performance metrics, and best practices for the web.

    Apache-2.0 JavaScript pushed 2026-09-17 details →
  2. 2
    teleport ★ 21K

    The easiest, and most secure way to access and protect all of your infrastructure.

    AGPL-3.0 Go pushed 2026-09-17 details →
  3. 3
    lynis ★ 16K

    Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentles

    GPL-3.0 Shell pushed 2026-09-16 details →
  4. 4
    prowler ★ 15K

    Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

    Apache-2.0 Python pushed 2026-09-17 details →
  5. 5
    gs-quant ★ 13K

    Python toolkit for quantitative finance

    Apache-2.0 Python pushed 2026-09-16 details →
  6. 6
    opa ★ 12K

    Open Policy Agent (OPA) is an open source, general-purpose policy engine.

    Apache-2.0 Go pushed 2026-09-17 details →
  7. 7
    Amphion ★ 10K

    Amphion (/æmˈfaɪən/) is a toolkit for Audio, Music, and Speech Generation. Its purpose is to support reproducible research and help junior researchers and engin

    MIT Python pushed 2026-03-25 details →
  8. 8
    checkov ★ 9.0K

    Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by

    Apache-2.0 Python pushed 2026-09-17 details →
  9. 9
    kyverno ★ 8.2K

    Unified Policy as Code

    Apache-2.0 Go pushed 2026-09-17 details →
  10. 10
    aircrack-ng ★ 7.7K

    WiFi security auditing tools suite

    GPL-2.0 C pushed 2026-09-09 details →
method stars desc · snapshot from github api refresh nightly related Human Resources (HR), Legal, Marketing & Customer Engagement, E-commerce Platforms, Document Management & E-Signatures, Forms & Surveys

Related best-of lists

best Human Resources (HR) →best Legal →best Marketing & Customer Engagement →best E-commerce Platforms →best Document Management & E-Signatures →best Forms & Surveys →

last updated nightly · ranking method: github stars, live-tracked

Looking for a replacement for one specific commercial product? Browse alternatives by tool →

Frequently asked questions

What is the best open source Compliance & Risk Management tool in 2026?

lighthouse leads the ranking with 30,785 GitHub stars, ahead of teleport. Rankings use live GitHub star counts, refreshed nightly.

How is this list of Compliance & Risk Management tools ranked?

By GitHub stars — a proxy for adoption and community size. Each entry also shows its licence, primary language and last commit date, so you can judge maintenance activity rather than trusting the ranking alone.

Are the best Compliance & Risk Management tools free?

Every project on this list is open source and free to self-host. Some also offer paid managed hosting, but the software itself carries no licence fee.