Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
RaptorGRC serves as a self-hosted platform focused on governance, risk, and compliance (GRC) for organizations that handle their own compliance-related data. Its no-cost Community Edition provides a variety of features, including policies and frameworks, control assessments, risk registers with visual heat maps, inherent versus residual scoring, treatment plans, incident management, and comprehensive asset and system inventories, along with audit trails and reporting capabilities. Included frameworks are NIST CSF 2.0, NIST SP 800-53 Rev. 5, NCSC CAF, and CMMC 2.0, while users also have the flexibility to import additional frameworks as needed. The platform is designed to operate within a Docker container using Docker Compose, and it can function offline or in air-gapped environments supported by PostgreSQL, SQL Server, or its own integrated SQLite. For those opting for offline use, activation is facilitated by a non-expiring token, ensuring no telemetry data is transmitted. The system's minimum hardware requirements consist of 2 CPU cores, 4 GB of RAM, and 10 GB of available disk space. Additionally, a build that can be deployed on IIS is available upon request, and there are separate options for support and onboarding services to assist users in maximizing the platform's capabilities. With these features, RaptorGRC aims to enhance an organization’s ability to manage compliance effectively.
Description
Most compliance tools start with a framework and end with a checklist. Rizzqo starts with your organization. You describe the critical services, data and processes you protect, the applications, infrastructure and suppliers they run on, and the person accountable for each. Rizzqo then breaks ISO 27001, NIS2, DORA, GDPR, EU AI Act, TISAX and NIST CSF 2.0 down into requirements for each kind of asset and places them on the assets automatically. The accountable person answers, uploads evidence and signs off, so the compliance figure you report comes from what people confirmed, not from a policy document. Anything unanswered shows up as a gap, and a gap can be turned into a scored risk with a euro value and a formal decision on how to treat it. Fixes become tasks that sync with Jira. Leadership sees which business services are at risk and why. Suppliers, personal data and AI systems are covered in the same model. Made in Germany, hosted in the customer's country. Free 30-day trial.
API Access
Has API
No
API Access
Has API
Yes
Integrations
Google
No
Jira
No
Keycloak
Yes
Microsoft Entra
No
Okta
No
Ollama
Yes
Integrations
Google
Yes
Jira
Yes
Keycloak
No
Microsoft Entra
Yes
Okta
Yes
Ollama
No
Pricing Details
$0
The Community Edition includes all software modules at no charge, with no per-seat fee or renewal. It is licensed for internal organizational use on infrastructure you control. Optional support agreements and onboarding services are separately priced.
Free Trial
No
Free Version
Yes
Pricing Details
Contact us
Free Trial
Yes
Free Version
No
Deployment
Web-Based
No
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
Yes
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Vendor Details
Company Name
Biff Labs
Founded
2026
Country
United Kingdom
Website
raptorgrc.com
Vendor Details
Company Name
Rizzqo GmbH
Founded
2026
Country
Germany
Website
rizzqo.com
Product Features
GRC
Auditing
No
Disaster Recovery
No
Environmental Compliance
No
IT Risk Management
No
Incident Management
No
Internal Controls Management
No
Operational Risk Management
No
Policy Management
No
Product Features
GRC
Auditing
No
Disaster Recovery
No
Environmental Compliance
No
IT Risk Management
Yes
Incident Management
No
Internal Controls Management
Yes
Operational Risk Management
Yes
Policy Management
No