Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total 0 out of 5 stars
ease 0 out of 5 stars
features 0 out of 5 stars
design 0 out of 5 stars
support 0 out of 5 stars

No User Reviews. Be the first to provide a review:

Write a Review

Description

RaptorGRC serves as a self-hosted platform focused on governance, risk, and compliance (GRC) for organizations that handle their own compliance-related data. Its no-cost Community Edition provides a variety of features, including policies and frameworks, control assessments, risk registers with visual heat maps, inherent versus residual scoring, treatment plans, incident management, and comprehensive asset and system inventories, along with audit trails and reporting capabilities. Included frameworks are NIST CSF 2.0, NIST SP 800-53 Rev. 5, NCSC CAF, and CMMC 2.0, while users also have the flexibility to import additional frameworks as needed. The platform is designed to operate within a Docker container using Docker Compose, and it can function offline or in air-gapped environments supported by PostgreSQL, SQL Server, or its own integrated SQLite. For those opting for offline use, activation is facilitated by a non-expiring token, ensuring no telemetry data is transmitted. The system's minimum hardware requirements consist of 2 CPU cores, 4 GB of RAM, and 10 GB of available disk space. Additionally, a build that can be deployed on IIS is available upon request, and there are separate options for support and onboarding services to assist users in maximizing the platform's capabilities. With these features, RaptorGRC aims to enhance an organization’s ability to manage compliance effectively.

Description

RaptorGRC CBOM serves as a self-managed tool designed to discover and inventory cryptographic elements for organizations looking to transition to post-quantum cryptography. Its functionality includes scanning TLS and SSH endpoints, as well as web URLs that can be manually entered or imported from CSV files, alongside examining certificate stores for both Windows and Linux. Additionally, it assesses Windows SCHANNEL and Group Policy settings, along with Linux crypto-policies and configurations for OpenSSL and sshd. The software effectively catalogs certificates, keys, protocols, and algorithms, pinpointing any weak or quantum-vulnerable cryptographic components, ultimately providing a signed CycloneDX 1.7 cryptographic bill of materials. Teams benefit from the ability to categorize assets by service, document data sensitivity and retention requirements, prioritize migration efforts, compare different scan results, and produce reports for board readiness, NCSC 2028 discovery, remediation, and OMB M-23-02 compliance. The system operates as a container hosted on Linux, can function offline, and is compatible with SQLite, PostgreSQL, or SQL Server databases. Currently, the beta version is available for assessment purposes only and is not intended for use in production environments, ensuring that users can test its capabilities without the risks associated with live deployment.

API Access

Has API No 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Keycloak Yes 
Ollama Yes 

Integrations

Keycloak No 
Ollama No 

Pricing Details

$0
The Community Edition includes all software modules at no charge, with no per-seat fee or renewal. It is licensed for internal organizational use on infrastructure you control. Optional support agreements and onboarding services are separately priced.
Free Trial No 
Free Version Yes 

Pricing Details

$0
Free to install and run on infrastructure you control for internal organizational use. The current beta is for evaluation, not production use.
Free Trial No 
Free Version Yes 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows Yes 
Mac No 
Linux Yes 
Chromebook No 

Deployment

Web-Based No 
On-Premises Yes 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux Yes 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Types of Training

Training Docs No 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

Biff Labs

Founded

2026

Country

United Kingdom

Website

raptorgrc.com

Vendor Details

Company Name

Biff Labs Ltd

Founded

2026

Country

United Kingdom

Website

raptorgrc.com/products/cbom

Product Features

GRC

Auditing No 
Disaster Recovery No 
Environmental Compliance No 
IT Risk Management No 
Incident Management No 
Internal Controls Management No 
Operational Risk Management No 
Policy Management No 

Alternatives

RealCISO Reviews

RealCISO

4.8 out of 5 stars

Alternatives

UC ControlSight Reviews

UC ControlSight

Unified Compliance
Rizzqo Reviews

Rizzqo

Rizzqo GmbH
AVX ONE Reviews

AVX ONE

AppViewX