Open Source
SimpleRisk Core: full GRC, free and open source
Governance, risk management, and compliance in one platform. Free, unlimited users, and yours to run. Download it and get started today.
What you get
A complete GRC core, at no cost
SimpleRisk Core is the free, open-source foundation of the platform. It is not a trial or a stripped-down teaser. It is a working GRC program you can put into production with unlimited users.
- Governance. Define the frameworks and controls your program is built on.
- Risk Management. Submit risks, maintain a living registry, and plan mitigations.
- Compliance. Define unlimited tests across your frameworks and controls.
- Asset Management. Automated discovery plus manual addition.
- Self-Assessments. Pre-configured for CIS Controls, HIPAA, NIST 800-171, and PCI DSS.
- Reporting. Graphical dashboards and dynamic, custom reporting.
- Configurable and role-based. Customizable dropdowns, user roles, and permissions.
Register for free
Two more features, still free
Registering your instance (also free) unlocks two things worth having from day one:
- One-click upgrade. Stay current without the manual steps.
- Secure Controls Framework. Access to 250+ frameworks, mapped for you.
Support and setup
Run it your way
Install via scripted setup, a virtual machine, Docker, or a manual install, on Unix, Linux, or Windows. It is written in PHP with a MySQL back-end.
Open-source support is email only, with no SLA. When your program grows and you want guaranteed response times, paid Extras, and more, that is where On-Premise and SaaS come in.
Open Source vs On-Premise vs SaaS
Three ways to run SimpleRisk. Pick the one that fits how your team works.
| Open Source | On-Premise | SaaS | |
|---|---|---|---|
| What it is | The free, open-source edition (SimpleRisk Core) | SimpleRisk on your own infrastructure | SimpleRisk, fully managed in our cloud |
| Cost | Free, unlimited users | Free or paid | Paid |
| Runs on | Your infrastructure | Your infrastructure | Our AWS cloud |
| You manage | Install, backups, upgrades | Install, backups, upgrades | Nothing, we run it |
| Upgrades | Manual (one-click if registered) | You schedule (one-click if registered) | Automatic |
| Backups | Yours | Yours | Daily snapshots |
| Paid Extras | Not available | Available | Available |
| Support | Email only, no SLA | Included with paid | Included |
| Best for | Evaluating, or DIY and budget-conscious teams | Data sovereignty and reliance on your own security controls | Teams that want the platform without the operational overhead |
| Get started | Download | Schedule a discovery call | Start a free trial |
Start free, in your own environment
Download SimpleRisk Core and stand up a real GRC program today. Grow into paid features only when you are ready.
Download SimpleRisk Core