Skip to content
SPECIFICTION
Get listed

Probo

probo.com

WebWindowsmacOSLinuxAPISelf-hosted
Visit probo.com
Spec score 7.4 #22 of 51 in Compliance Management Software

What it is

Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams. It supports control mapping, evidence collection, risk assessments, remediation workflows, and vendor risk management across frameworks including SOC 3, CCPA, CASA, ISO 27001, FERPA, SOC 2 Type 1 and Type 2, ISO 42001, GDPR, ISO 27701, and HIPAA. Its evidence tools automate collection, updates, and approvals. Access Review gathers accounts from connected systems, identifies risky access, records decisions, and can export completed campaigns as PDF evidence. The Compliance Portal lets prospects request access, sign NDAs, and download watermarked security documents; the Employee Portal supports policy signatures, approvals, laptop enrollment, and provisioning through identity providers. Probo offers cloud and self-hosted deployment, including Docker Compose and Kubernetes. The supplied single-host Docker Compose setup is not high availability and is intended for evaluation, internal deployments, or small installations that can accept a single-host failure. Its listed platforms include API, Linux, macOS, self-hosted, web, and Windows.

Spec sheet

What it does
Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams.Read 11 Oct 2026 · probo.com
Deployment
The official documentation describes Probo Cloud and self-hosted deployment options, including Docker Compose and Kubernetes.Read 11 Oct 2026 · probo.com
Integrations
The Access Review page lists integrations including Google Workspace, Okta, GitHub, AWS, Slack, and Brex, and says CSV import is available for tools without a connector.Read 11 Oct 2026 · probo.com
Access reviews
Access Review aggregates accounts from connected systems, flags risky access, records decisions, and exports closed campaigns as PDF evidence.Read 11 Oct 2026 · probo.com
AI access audit log
The AI Agents page says authorized agent calls are recorded in an immutable, CSV-exportable audit log with timestamps, actions, resources, and the connected user’s identity.Read 11 Oct 2026 · probo.com
AI agents
Probo supports compatible MCP clients such as Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf, Zed, and OpenCode, with scopes limited by the connecting user’s permissions.Read 11 Oct 2026 · probo.com
Audit evidence
The platform automates evidence collection, updates, and approvals to help maintain audit readiness.Read 11 Oct 2026 · probo.com
Compliance Portal
The Compliance Portal lets prospects request access, sign NDAs, and download watermarked security documents.Read 11 Oct 2026 · probo.com
Device Agent
Device Agent performs nine automatic security posture checks on enrolled laptops and servers and provides per-device, timestamped report history.Read 11 Oct 2026 · probo.com
Device Agent limit
Probo says Device Agent is observational and cannot push commands, wipe, or lock a device.Read 11 Oct 2026 · probo.com
Device platforms
The Device Agent download page lists macOS, Linux, Windows, and FreeBSD availability.Read 11 Oct 2026 · probo.com
Employee Portal
The Employee Portal supports policy signatures, document approvals, laptop enrollment, and employee provisioning through identity providers.Read 11 Oct 2026 · probo.com
Managed compliance
Probo’s compliance officers handle program setup, risk and vendor assessments, audit coordination, and ongoing monitoring.Read 11 Oct 2026 · probo.com
Security and frameworks
Probo’s site lists SOC 2, SOC 2 Type 1 and Type 2, SOC 3, ISO 27001, ISO 27701, ISO 42001, GDPR, CCPA, and HIPAA among its frameworks or compliance badges.Read 11 Oct 2026 · probo.com
Self-hosting limit
The supplied single-host Docker Compose deployment is described as not high availability and intended for evaluation, internal deployments, or small installations where a single-host failure is acceptable.Read 11 Oct 2026 · probo.com

Plans and prices

Probo Cloud Priced on request Pricing not published on the pages opened; contact Probo to discuss the managed service Read 11 Oct 2026 · probo.com

Every Probo plan and price →

Strong points and limits

Strong points

  • Open-source and listed as free.
  • Supports control mapping and evidence collection.
  • Includes risk assessments and vendor risk management.
  • Offers cloud and self-hosted deployment options.
  • Supports a range of listed compliance frameworks.

Limits

  • The supplied Docker Compose setup is not high availability.
  • Device Agent cannot push commands, wipe, or lock devices.

Who it suits

It suits engineering, security, and compliance teams coordinating framework work, evidence, risk assessments, or vendor risk. Teams considering the supplied single-host Docker Compose deployment should be able to accept a single-host failure.

Verdict

Probo brings compliance workflows, access reviews, and employee and prospect portals into an open-source platform.

Where Specifiction places it

Alternatives to ProboAll alternatives →