better-isms / grcskills

Open GRC skills for AI agents. By ISMS Copilot.

allinurl / goaccess

GoAccess is a real-time web log analyzer and interactive viewer that runs in a terminal in *nix systems or through your browser.

prowler-cloud / prowler

Prowler is the world’s most widely used open-source cloud security platform that automates security and compliance across any cloud environment.

codenotary / immudb

immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

baserow / baserow

Build databases, automations, apps & agents with AI — no code. Open source platform available on cloud and self-hosted. GDPR, HIPAA, SOC 2 compliant. Best Airtable alternative.

Countly / countly-server

Countly is a privacy-first, AI-powered analytics and engagement platform for understanding and optimizing customer journeys across digital applications, from desktop and mobile to IoT and connected environments.

intuitem / ciso-assistant-community

CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ global frameworks with automatic control mapping, including ISO 27001, NIST CSF, SOC 2, CIS, PCI DSS, NIS2, DORA, GDPR, HIPAA, CMMC, and more.

chattocorp / chatto

A fully-featured team and group chat application that you can easily selfhost.

altcha-org / altcha

GDPR, WCAG 2.2 AA, and EAA compliant, self-hosted CAPTCHA alternative with PoW mechanism.

Bearer / bearer

Code security scanning tool (SAST) to discover, filter and prioritize security and privacy risks.

trycompai / comp

AI Native platform to get companies compliant - Vanta & Drata Alternative

c15t / c15t

Open-source cookie consent manager and GDPR cookie banner for React, Next.js, Vue and JavaScript. Google Consent Mode v2 and IAB TCF.

getprobo / probo

Open source solutions for SOC2, GDPR, and ISO27001

Swetrix / swetrix

📈 Open source, privacy-first web analytics — a cookie-less Google Analytics alternative with built-in error tracking and performance monitoring. Self-host it or use our cloud. Get started for free!

databuddy-analytics / Databuddy

Open-source product analytics for startups: track visitors, events, funnels, and goals without cookies, and ask Databunny, the built-in AI analyst. Uptime, feature flags, and short links in the same dashboard.

Rizzo-AI-Academy / rizzo-pii

Local-first privacy guard: anonymize your documents before sharing with LLMs.

AmauriC / tarteaucitron.js

Open-source JavaScript cookie consent manager for GDPR / RGPD. Customizable banner, service-level controls and Google Consent Mode v2 support.

Sushegaad / Claude-Skills-Governance-Risk-and-Compliance

Claude Skills for Governance, Risk, & Compliance (GRC): Expert-level compliance guidance for ISO 27001, SOC 2, FedRAMP, GDPR, HIPAA, NIST CSF, PCI DSS, EU AI Act, ISO 42001, ISO 27701, DORA, CSRD, India's DPDPA, CMMC 2.0, NIST AI Risk, SWIFT, CCPA/CPRA, and others. Benchmark 89% (with skills) vs 55% (without skills). Updated Monthly.

VibeTensor / attestix

AI agent identity, signed credentials, delegated authority and portable governance evidence. Python core and offline verifier SDKs.

Privado-Inc / privado

Open Source Static Scanning tool to detect data flows in your code, find data security vulnerabilities & generate accurate Play Store Data Safety Report.

RavelloH / InsightFlare

A powerful, privacy-friendly open source web analytics tool that runs entirely on Cloudflare.

sourcentis / mercator

Mapping the information system / Cartographie du système d'information

wazuh / wazuh-dashboard-plugins

Plugins for Wazuh Dashboard

metadist / synaplan

Open-source, self-hosted AI platform (PHP/Symfony): chat with any model, RAG over your docs, embeddable widget, MCP — see the cost of every answer. Apache-2.0.

phishdestroy / taylor-wessing-data-breach-toolkit

Forensic auditing utility to expose and unmask failed visual-only PDF redactions by Taylor Wessing LLP. Designed to extract hidden text layers offline and verify GDPR compliance following the Valve Corporation data leak.

4x3 / nulltrace

Local-first privacy toolkit. Map yourself against 400+ data brokers, send CCPA/GDPR deletion mail, and check password dumps — the vault never leaves your PC.

AI4CharityPL / kancelaria-lex

Fully local AI for Polish legal case files - zero fabricated citations by construction. Free; please support a Wroclaw animal shelter instead.

drumandbytes / eraser

Free, open-source data broker removal tool: send GDPR/CCPA opt-out requests to 700+ data brokers automatically. Maintained continuation of digisamroc/eraser.

digistoremaster / klick-tipp-zapier-alternative-wordpress

Verbinde 54.000+ WordPress-Plugins direkt mit Klick-Tipp – komplett ohne teure Zapier-Gebühren!** Automatisiertes Smart-Tagging für WooCommerce, Elementor & Co. 100% DSGVO-konform, blitzschnell und ohne Code eingerichtet.

Meet-Miyani / admob-compose-multiplatform

Plug-and-play Compose Multiplatform AdMob SDK for Android GMA Next-Gen and iOS Google Mobile Ads.

mountainview8868 / socialmedia-autopilot-german-starter

Social Media Automatisierung auf Auto-Pilot.** DSGVO-konforme & einfache Lösung für zeitgesteuertes Social-Media-Posting auf mehreren Plattformen. / GDPR-compliant multi-platform social media auto-pilot scheduler for solopreneurs & small teams.

snowfall6686 / awesome-gdpr-ai-video-tools

A curated list of GDPR/DSGVO-compliant AI video generators and localized KI studios for creators, marketers, and developers. Featuring Silver Screen Lab — Dein lokales KI-Studio.

raindrop668 / self-hosted-utm-tracker-wordpress

Eine Kuratierte Liste der besten WordPress-Plugins für Affiliate Marketing, Link-Maskierung, UTM-Tracking und DSGVO-Konformität in Deutschland, Österreich und der Schweiz.

zencefilefendi / kadi

⚖️ Kadı — a calibrated judge in front of your frontier LLM. Routine decisions answered locally with a conformal-prediction guarantee (≤ α disagreement with the oracle); everything else escalated and learned from. Zero-dependency Python.