RaptorGRC

0 reviews

Free self-hosted GRC software for risk, compliance, incident and audit management. Runs on-premise or air-gapped with no telemetry. Built in the UK. RaptorGRC Community Edition is the complete platform, free, with every module included: governance (policies, frameworks and controls), a risk register with heat maps, inherent and residual scoring and treatment plans, compliance tracking with evidence and an audit trail, an incident register, an assets and systems inventory, role-based access control, an audit log and board reporting. Frameworks covered include NCSC CAF, NIST CSF 2.0 and CMMC readiness. It ships as a Docker container: bring your own SQL Server or PostgreSQL, or use the built-in SQLite. Licence activation works offline, the licence token never expires, and nothing phones home. Minimum requirements: 2 CPU cores, 4 GB RAM and 10 GB disk.

RaptorGRC CBOM

0 reviews

Free self-hosted CBOM scanner that inventories the certificates, keys, protocols and algorithms across your estate, rates quantum vulnerability and exports a signed CycloneDX 1.7 CBOM. Runs offline. Built in the UK. RaptorGRC CBOM runs as one container on your own infrastructure. It scans TLS and SSH endpoints and web URLs, reads Windows and Linux certificate stores over WinRM or SSH, and checks Windows SCHANNEL and Group Policy settings and Linux crypto-policies, OpenSSL and sshd configuration against a baseline. Group assets into services, record how long each service's data must stay protected, and get a migration priority with the reasons shown. Plan migration steps with owners and dates, and track progress against the NCSC 2028, 2031 and 2035 milestones. Reports include a board quantum-readiness summary, an NCSC 2028 discovery evidence pack, a remediation list, a comparison of two scan runs, a signed CycloneDX CBOM and an OMB M-23-02 inventory. Requires a Linux container host with Docker and SQLite, PostgreSQL or SQL Server. No connection to Biff Labs is needed. Beta: for evaluation, not production use.

RaptorGRC Classifier

0 reviews

Self-hosted data classification for Microsoft Office and LibreOffice: labels, markings and sending rules that allow, warn, require a justification or block, enforced even offline. Built in the UK. RaptorGRC Classifier is a server container plus clients for Microsoft Office (classic Outlook, Word, Excel and PowerPoint on Windows: Microsoft 365 Apps and Office 2016, 2019, 2021 and 2024) and for LibreOffice or OpenOffice on Windows or Ubuntu. The server holds the labels and policy and signs each policy version; clients enforce the cached policy even when the server cannot be reached. Each label sets the email subject prefix, document marking and watermark. Test a draft policy against example recipients before publishing. The dashboard shows labelling coverage and blocked sends; the document inventory keeps each file's ID through renames and moves and exports to CSV or Excel; client events record blocked and warned sends, justifications and label changes. New Outlook, Outlook on the web and Mac are not supported. Early access: free for registered users on request; pre-release builds are for evaluation, not production use.