What is CISO Assistant used for?

CISO Assistant is a governance, risk and compliance platform supporting 200+ frameworks, with risk management, audit, third-party risk and privacy modules. It is a good fit for managing ISO 27001 and SOC 2 compliance, cybersecurity risk registers, and audit preparation across frameworks.

Is CISO Assistant open source?

Yes. CISO Assistant is open source under a custom licence. Its source code is on GitHub at intuitem/ciso-assistant-community and is written mainly in Python.

Is CISO Assistant free?

Yes. CISO Assistant is open source, so the software itself is free to use under the terms of its own licence. A managed cloud version is also available, with paid plans from €39 per seat per month.

Can I self-host CISO Assistant?

Yes. CISO Assistant can be self-hosted on your own server or infrastructure.

What is CISO Assistant an alternative to?

CISO Assistant is an open-source alternative to Vanta, Drata, Secureframe and OneTrust.

Is CISO Assistant actively maintained?

Yes. The most recent commit to CISO Assistant was on 2 October 2026, and the latest release is v4.0.9, published on 30 September 2026. The project has 4.5k stars on GitHub.

CISO Assistant: open-source alternative to Vanta, Drata

About CISO Assistant

CISO Assistant, from Intuitem, is a platform for governance, risk and compliance work. It brings risk management, application security, compliance and audit, third-party risk management, business impact analysis, privacy and reporting into one tool, so security and compliance teams do not have to juggle spreadsheets.

Coverage spans over 200 compliance frameworks, with controls mapped automatically between them, among them SOC 2, ISO 27001, NIST CSF, PCI DSS, CIS, NIS2, DORA, GDPR, HIPAA and CMMC. The design acts as a central hub that links cybersecurity concepts together, deliberately decouples compliance from technical controls so work can be reused across frameworks, and adapts to different methodologies. Topics also mention EBIOS RM, risk quantification, MCP and LLM features.

The community edition is written in Python and its license is listed as 'Other' on GitHub. You can self-host it or try the vendor's SaaS free trial. It suits CISOs, consultants and compliance teams who need multi-framework coverage.

Key features

200+ compliance frameworks with control mapping
Risk management and quantification
Compliance and audit workflows
Third-party risk management
Privacy and business impact analysis
Reporting across frameworks

Good fit for

→Managing ISO 27001 and SOC 2 compliance
→Cybersecurity risk registers
→Audit preparation across frameworks

Built with: Python
Tags: grc; compliance; risk-management; cybersecurity; iso27001; audit; security; python

CISO Assistant: questions and answers

What is CISO Assistant used for?: CISO Assistant is a governance, risk and compliance platform supporting 200+ frameworks, with risk management, audit, third-party risk and privacy modules. It is a good fit for managing ISO 27001 and SOC 2 compliance, cybersecurity risk registers, and audit preparation across frameworks.
Is CISO Assistant open source?: Yes. CISO Assistant is open source under a custom licence. Its source code is on GitHub at intuitem/ciso-assistant-community and is written mainly in Python.
Is CISO Assistant free?: Yes. CISO Assistant is open source, so the software itself is free to use under the terms of its own licence. A managed cloud version is also available, with paid plans from €39 per seat per month.
Can I self-host CISO Assistant?: Yes. CISO Assistant can be self-hosted on your own server or infrastructure.
What is CISO Assistant an alternative to?: CISO Assistant is an open-source alternative to Vanta, Drata, Secureframe and OneTrust.
Is CISO Assistant actively maintained?: Yes. The most recent commit to CISO Assistant was on 2 October 2026, and the latest release is v4.0.9, published on 30 September 2026. The project has 4.5k stars on GitHub.