Probo

Probo is an open-source, self-hosted governance, risk, and compliance (GRC) platform. It is designed for engineering and security teams to manage the full compliance lifecycle, including risk identification, control tracking, and audit coordination.

The software is deployed as a server using Docker and is accessible through a web console. It also provides a command-line interface (CLI), a GraphQL API, and a Model Context Protocol (MCP) API to allow for automation via scripts or LLM agents. This multi-interface approach allows teams to integrate compliance tasks directly into their existing CI/CD pipelines or developer workflows.

Key features

• Risk management with inherent and residual scoring and treatment strategies
• Control library with maturity levels and custom framework import and export
• Vendor risk management including automated website assessments and subprocessor discovery
• Data privacy tools for DPIA, Transfer Impact Assessments, and rights requests
• Access review campaign management with integrations for SaaS and cloud infrastructure
• Document management with versioning, approval quorums, and electronic signatures
• Public compliance portal with NDA management and custom domain support
• Evidence collection via files and URLs linked to specific measures
• Immutable audit logs and policy-based RBAC

Built with a backend in Go and PostgreSQL and a React frontend, Probo integrates with n8n via a community node for no-code automation. The inclusion of over 270 MCP tools allows MCP-compatible LLM agents to read and write GRC data, draft policies, and generate evidence packs. The platform supports a wide array of frameworks including GDPR, ISO 27001, SOC2, HIPAA, ISO 42001, and ISO 27701. It is intended for organizations that require a self-managed environment to maintain total control over their compliance data and audit trails.

Probo is an AI-native GRC platform specifically tailored for technical teams who prefer automation and code-based workflows over manual compliance tracking.