Probo - Open Source Compliance

Probo is an open-source compliance platform built for startups that helps you achieve SOC-2 compliance quickly and efficiently. Unlike traditional solutions, Probo is designed to be accessible, transparent, and community-driven.

✨ Features

• ⚡️ Lightning-Fast Automation

  • Get SOC-2 ready in just 20 hours instead of months
  • AI-powered policy generation tailored to your stack
  • Automated evidence collection from your tools

• 🤖 Smart Vendor Management

  • Automatic vendor risk assessment in minutes
  • AI-driven security questionnaire responses
  • Continuous vendor monitoring and alerts

• 🔄 Continuous Compliance

  • Real-time compliance monitoring
  • Automated evidence collection from GitHub, AWS, GCP
  • Instant alerts for compliance drift

• 💡 Intelligent Guidance

  • AI-powered compliance recommendations
  • Context-aware security controls
  • Smart task prioritization based on your risk profile

• 🔓 No Vendor Lock-in

  • Own your compliance data
  • Export everything, anytime
  • Open-source transparency

• 💰 Cost-Effective

  • Free to use
  • Pay only for audits when needed
  • No hidden fees or forced costs

🚀 Getting Started

Prerequisites

• Go 1.21+
• Node.js 22+
• Docker

Quick Start

1. Clone the repository:

   git clone https://github.com/getprobo/probo.git
   cd probo
   

2. Install dependencies:

   # Install Go dependencies
   go mod download
   
   # Install Node.js dependencies
   npm ci
   

3. Start the development environment:

   # Start infrastructure services
   make stack-up
   
   # Build the project
   make build
   
   # In one terminal - start the API server
   bin/probod
   
   # In another terminal - start the frontend
   npm -w @probo/console run dev
   

The application will be available at:

• Frontend: http://localhost:3000
• API: http://localhost:8080
• Grafana: http://localhost:3001

For detailed setup instructions, see our Contributing Guide.

🏗️ Current Status

Probo is in early development, focusing on building a solid foundation for compliance management. Here's our current focus:

Under Development (V0)

• 🎯 Core Compliance Engine

  • SOC 2 control framework implementation
  • Basic policy management
  • Evidence collection system
  • User and organization management

• 📋 Essential Features

  • Control tracking and status
  • Basic task management
  • Simple evidence attachments
  • Team collaboration tools

🛠️ Tech Stack

Backend

• Go - API server
• PostgreSQL - Data storage
• GraphQL - API layer

Frontend

• React with TypeScript
• Relay - Data fetching
• TailwindCSS - Styling

Infrastructure

• Docker - Containerization
• OpenTelemetry - Observability
• GitHub Actions - CI/CD

Observability

• Grafana - Metrics visualization
• Prometheus - Metrics collection
• Loki - Log aggregation
• Tempo - Distributed tracing

🤝 Contributing

We love contributions from our community! There are many ways to contribute:

• 🌟 Star the repository to show your support
• 🐛 Report bugs
• 💡 Request features
• 🔧 Submit pull requests
• 📖 Improve documentation

Please read our Contributing Guide before making a pull request.

🌟 Why Probo?

1. Accessible Compliance: Traditional solutions are often behind expensive paywalls. We believe security measures should be accessible to all.

2. Fresh Approach: Built from scratch, learning from past issues to create a better compliance experience.

3. Community-Driven: As an open-source project, we believe the entire ecosystem should benefit from improvements and innovations.

📚 Documentation

• 📖 [Official Documentation](coming soon)
• 💬 Discord Community
• 📝 Blog

🌐 Community & Support

• Join our Discord community
• Follow us on Twitter
• Connect on LinkedIn
• Visit our website

📄 License

Probo is MIT licensed.