Solutions

Self-hosted open source GRC

SecBoard is installed on your server. The records — risks, evidence, vendor files, incidents — stay in the database you operate.

Open source GRC on a host you run

Community Edition is the open source GRC edition provided upon request: the full Python source under AGPL v3, with a free community key for up to 100 users. Enterprise is a commercial build for the same kind of Linux host. SecBoard does not certify the organisation.

What the host needs

The system-requirements article recommends Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, or Debian 12 on x86_64, with Nginx in front and Gunicorn for the application. MySQL 8 is the default database; PostgreSQL 14–16 is supported on request. Redis and Celery are listed when the deployment uses cache and background jobs. Minimum hardware in that article is 2 CPU cores, 4 GB RAM, and 20 GB of disk.

Community and Enterprise on the same idea

Both editions are installed on a Linux host. Community (Free) is provided upon request as AGPL source with a free community key up to 100 users. Enterprise is delivered as a build under a commercial key. After the service is up, the manual continues with the first administrator account, mail, and the domain proxy.

Questions

You operate the host and the database. SecBoard does not require the records to live in a SecBoard-hosted account.

Ubuntu 22.04 LTS, Ubuntu 20.04 LTS, and Debian 12, x86_64, in the system-requirements article.

The product path described in the manual is a server you install. The public demo is for evaluation, not a substitute for that host.

The installation guide in the manual, then the first-login article for the administrator account.

Related