Take it with you
Export the whole archive and restore it anywhere.
Audit evidence,
ready to share.
Write your controls, keep proof on schedule, see every gap, and share a folder that expires.
100% free, open source alternative to Vanta, Drata and Secureframe
Free and open source, MIT licensed.
Add a control
Review who can access customer dataAccess · quarterly
Add proof
access-review-q4.pngSHA-256 fingerprint
covered9f2c…41abShare a folder
Customer security reviewExpires 1 Dec
Open
FREE
100% free. Yours to keep.
MIT licensed. Run it yourself; every file and receipt stays with you.
MIT LicensePermission is hereby granted, free of charge
HONEST GAPS
See every gap, honestly.
Pick any date. Each control shows covered, due soon, overdue or missing. No green score to hide behind.
Review who can access customer datacovered
Back up the production databasedue soon
Security awareness trainingoverdue
Vendor risk reviewmissing
RECEIPTS
Proof that never changes.
Every file gets a SHA-256 fingerprint. Replacing proof keeps the old file and its receipt.
access-review-q4.pngSHA-256 fingerprint
current9f2c…41abaccess-review-q3.pngSHA-256 fingerprint
superseded3a7d…9c2fOriginal facts and bytes are retained.
REVIEW FOLDERS
One link for the reviewer.
Choose controls, dates and an expiry. They open it without an account. Close it any time.
Customer security reviewExternal review folder
Period (UTC)2026-10-01 → 2026-12-31
Review who can access customer datacovered
Also included
Access log
Every view and download of a folder is recorded.
Agent preparation
An agent drafts the folder. You approve it.
Move in from Drata
Bring your evidence ZIP and review the mapping first.
Plain-words controls
Access, Data, Change, People and Vendors.
Any cadence
Daily, weekly, monthly or quarterly proof.
Ready when they ask.
Review who can access customer datacovered
access-review-q4.pngcurrent
Customer security reviewOpen
Free and open source, MIT licensed.