GRC Engineering

Open-source GRC platform for modern security teams. Manage compliance (SOC 2, ISO 27001, HIPAA), risk registers, vendor assessments, and audits—all in one place. AI-powered, containerized, enterprise-ready.

Discover Nth-party vendor relationships (3rd, 4th, and deeper) for a domain from public signals — DNS, certificate transparency, trust-center subprocessors, web traffic, and more. A fast, offline-capable GRC Engineering CLI in Rust.

Homebrew tap for GRC Engineering open-source tools (nthpartyfinder and others)

The GRC Engineering Cheat Sheet — cheatsheet.grc.engineering

GRC Engineering Bootcamp — 100%-original-content, progressive curriculum (curriculum-as-code)

Daily Findings is a desktop GRC learning app with guided sessions, quizzes, progress tracking, and curated GRC news.

The GRC Companion turns vendor reviews, audit walkthroughs, questionnaires, policy work, control discussions, and terminal output into learning loops. It runs where you already use Claude or Codex, so your local work becomes the curriculum. Based on Ayoub Fandi's GRC Engineering corpus.