Openlane

Open source · OSI-approvedStatus: unknown

Continuous compliance automation across many frameworks

Openlane automates the evidence collection and control tracking behind SOC 2, ISO 27001, GDPR, and a dozen other frameworks, mapping shared controls once rather than per framework.

Self-hosting matters here more than usual: compliance evidence is by definition the material describing how your systems are secured.

Decisive facts

Automated evidence collection from connected systems
Control mapping shared across overlapping frameworks
Policy management with review and approval history
Audit-ready reporting exports
Self-hostable so evidence stays inside your boundary

Security & Identity go self-hosted compliance soc2 graphql

Alternatives to Openlane

Vanta

Compliance automation for SOC 2, ISO 27001, and friends

Similar source projects

Computed from shared categories, tags, and license. This is similarity, not an alternative claim, and paid weight is always zero.

EnteOpen

End-to-end encrypted photo storage across devices

Stars28.6K

Commit8h ago

LicenseAGPL-3.0

Ente stores photos and videos encrypted on the client, so the server holds ciphertext it cannot read. Sync, albums, and sharing all work on top of that constraint rather than around it.

Alternative togoogle photos

1 shared category; 2 shared tags · organic similarity 800

Hanko

Passkeys, SSO, and MFA without vendor lock-in

Stars9,019

Commit18h ago

LicenseUnknown

Hanko is an authentication service built passkey-first rather than passkey-eventually. Passwords are optional from the start, and the hosted components handle the awkward parts of the WebAuthn ceremony that teams usually get wrong.

Alternative toauth0

1 shared category; 2 shared tags · organic similarity 800

RustDeskOpen

Remote desktop you can point at your own relay server

Stars122.3K

Commit11h ago

LicenseAGPL-3.0

RustDesk is remote desktop software where the relay server is a binary you can run yourself. That is the whole argument: the same convenience as the commercial tools, without your screen sessions transiting a vendor's infrastructure.

Alternative toanydesk

1 shared category; 1 shared tag · organic similarity 700

VaultwardenOpen

Lightweight password vault server for Bitwarden clients

Stars48.1K

Commit4d ago

LicenseAGPL-3.0

Vaultwarden reimplements the Bitwarden server API in Rust so that it runs comfortably on a Raspberry Pi or a small VPS, while the official Bitwarden desktop, mobile, and browser clients connect to it unchanged.

Alternative to1password

1 shared category; 1 shared tag · organic similarity 700

InfisicalOpen

Secret management for applications and infrastructure

Stars21.8K

Commit8h ago

LicenseMIT

Infisical stores application secrets, syncs them into the platforms that need them, and rotates the ones that support rotation. Environments and folders keep development and production credentials properly separated.

Alternative to1password

1 shared category; 1 shared tag · organic similarity 700

DocumensoOpen

Document signing you can host and audit yourself

Stars12.5K

Commit3d ago

LicenseAGPL-3.0

Documenso handles electronic signature collection with the signing certificate, audit trail, and field placement you expect, while keeping the documents on infrastructure you control.

Alternative todocusign

1 shared category; 1 shared tag · organic similarity 700