Eramba

Internal Controls Software

Free planAPILinuxSelf-hostedWeb

7.2#1 of 56€208.33/mofirst paid tier

Overview

Eramba is ranked #1 of 56 in internal controls software on Specifiction. It runs on API, Linux, Self-hosted, Web. There is a free plan. Paid plans start at €208.33/mo.

Eramba plans and pricing

All plans

Community Free Free Open and free version · Self-hosted deployment eramba.org · 21 Sept 2026

Enterprise On-Premise €2,500/yr From 2500€/year Unlimited users and data · All modules included · Email support included eramba.org · 21 Sept 2026

Enterprise SaaS €5,000/yr From 5000€/year Hosted by Eramba · Unlimited users and data · Updates and backups managed by Eramba · Cloud hosting in Europe or USA eramba.org · 21 Sept 2026

Community On Premise Free Unlimited users and data · manual upgrades and backups · no support included eramba.org · 28 Sept 2026

Enterprise On Premise €2,500/yr €2,500 / year Unlimited users and data · all modules included · email support eramba.org · 28 Sept 2026

Enterprise SaaS €5,000/yr €5,000 / year Unlimited users and data · hosting in Europe or USA · updates and backups handled by Eramba · email support eramba.org · 28 Sept 2026

Compared on internal controls software

Free plan: Yeseramba.org
API access: Yeseramba.org

Facts

Purpose: Eramba is GRC software designed to help organizations manage governance, risk and compliance activities.eramba.org · 28 Sept 2026
Use cases: Its listed use cases include risk management, compliance management, data privacy, incident management, awareness programs, automated account reviews and online assessments.eramba.org · 28 Sept 2026
Frameworks: The maker lists more than 70 ready-to-import compliance packages and says users can upload a custom framework as a CSV.eramba.org · 28 Sept 2026
Features: Common features include custom notifications, granular access controls, dynamic status, custom fields, REST APIs, reporting and automations.eramba.org · 28 Sept 2026
Integrations: Eramba can receive REST API requests and send webhooks to other systems, with examples involving SIEM incident creation and Jira issue creation.eramba.org · 28 Sept 2026
Identity: The product supports external authentication using LDAP, SAML or Google OAuth, and its documentation describes LDAP synchronization.eramba.org · 28 Sept 2026
Self-hosted platforms: Community and Enterprise on-premise installations are documented for Docker and VMware; the Docker guide covers Linux host configuration.eramba.org · 28 Sept 2026
SaaS operations: For SaaS, Eramba says it hosts systems in Europe or the USA and handles daily backups and upgrades when releases become available.eramba.org · 28 Sept 2026
Security controls: The user documentation says locally authenticated accounts have brute-force protection by default, which blocks further login attempts after incorrect credentials.eramba.org · 28 Sept 2026
Support: Enterprise plans include email support, while the comparison lists no support for Community; Eramba also provides free public learning materials and a forum.eramba.org · 28 Sept 2026
Notable limit: The product documentation states that Eramba is not a network scanner and recommends syncing asset information from a CMDB through its REST API.eramba.org · 28 Sept 2026
Intended users: The access management guide describes GRC team members as managing information such as risks, controls and policies, while other departments and suppliers may provide review feedback.eramba.org · 28 Sept 2026
Company history: Eramba’s about page says the team started building and sharing the tool in 2007 and describes its first version as emerging from that effort.eramba.org · 28 Sept 2026