CISO Assistant
French open-source GRC platform with 220+ frameworks, available self-hosted for free or as a paid SaaS
Quick Overview
| Company | intuitem SARL |
|---|---|
| Category | Compliance Automation Software |
| Headquarters | Vélizy-Villacoublay, France |
| Founded | Not stated |
| EU Presence | Yes - France (EU) |
| Data Location | Self-hosted community edition; Pro SaaS hosting region not verified |
| Open Source | AGPLv3 (community edition) |
| GDPR Compliant | Yes |
| Self-Hosting | Yes - community and Pro on-premises |
| Main Features | Audit management, risk assessment, 220+ frameworks, evidence centralisation, reuse of previous audits, cloud or on-premises deployment, 27 languages |
| Pricing | Community free; Pro SaaS EUR 39 per contributor per month billed annually; Pro on-premises EUR 2,400 per instance per year (1-5 seats) |
| Best For | Security teams that want an open-source GRC they can self-host |
| Replaces | Vanta, Drata, OneTrust |
Detailed Review
intuitem is a French SARL with a share capital of EUR 100,000, registered in Versailles, and develops CISO Assistant. The site cites 128 contributors, 4.5k GitHub stars, 202 frameworks and 27 languages.
The pricing page shows the community edition at EUR 0 under AGPLv3, with Pro SaaS and Pro on-premises plans.
Open source first
The community edition is hosted and managed by you, with unlimited users and community support. Pro adds priority support and premium features.
Audit and risk
Audit management across multiple frameworks with centralised evidence, risk assessment designed to be methodology-agnostic, and reuse of work from previous audits mapped to controls.
Pricing options
Pro SaaS is EUR 39 per contributor per month billed annually. Pro on-premises is EUR 2,400 per instance per year for 1 to 5 contributors. Custom quotes cover specific deployment needs.
Limitations to Consider
CISO Assistant focuses on GRC process rather than automated evidence collection from cloud accounts, unlike Secfix. Self-hosting means you run and secure the system yourself. The SaaS hosting region was not stated on the pages reviewed.
Who Should Use CISO Assistant
Security and compliance teams with technical skills that want a French, open-source GRC they can run in their own infrastructure.
Pros and Cons
Pros
- Open-source community edition
- 220+ frameworks
- Self-host or SaaS
- French entity
- Transparent pricing
Cons
- Per-contributor pricing on Pro SaaS
- Limited automated evidence collection
- Self-hosting needs admin skills
- SaaS hosting region not verified
Alternatives to CISO Assistant
Other European compliance automation software worth comparing before you decide:
Secfix
Germany · German ISO 27001 and NIS2 platform with expert support
Kertos
Germany · ISMS and privacy automation with certified experts on call
ISMS.online
United Kingdom · Established ISMS platform with a guided path to certification
Cyberday
Finland · Employee-based pricing and a very wide framework library
See all European compliance automation software or compare them directly against Vanta on our alternatives page.
Frequently Asked Questions
The community edition is free under AGPLv3 and self-hosted. Pro plans are paid.
Yes, the community edition and the Pro on-premises edition are self-hosted.
The site cites 220+ frameworks.