Freedom251 › Compliance Management Software
Probo

What Probo is
Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams. It supports evidence collection, risk assessments, vendor risk management, control mapping, and remediation workflows across frameworks including SOC 2, SOC 3, ISO 27001, GDPR, HIPAA, and others listed by the platform. Its compliance officers can handle program setup, risk and vendor assessments, audit coordination, and ongoing monitoring. Automated evidence collection, updates, and approvals help teams maintain audit readiness. Access Review gathers accounts from connected systems, flags risky access, records decisions, and exports completed campaigns as PDF evidence. Probo also provides employee and compliance portals for tasks such as policy signatures, document approvals, laptop enrollment, and sharing security documents. Deployment options include Probo Cloud and self-hosting with Docker Compose or Kubernetes. The supplied single-host Docker Compose setup is not highly available and is intended for evaluation, internal use, or small installations that can accept a single-host failure. Probo is available on the web, Linux, macOS, Windows, through its API, and as a self-hosted deployment.
Who it suits
Probo suits engineering, security, and compliance teams managing evidence, risks, vendors, or access reviews. Its self-hosted option may suit smaller or internal installations that can accept the documented single-host limitation.
What it does well
- Open-source platform with cloud and self-hosted options.
- Automates evidence collection, updates, and approvals.
- Access Review exports closed campaigns as PDF evidence.
- Supports multiple compliance frameworks.
- Device Agent provides timestamped report history.
What to know first
- Single-host Docker Compose deployment is not high availability.
- Device Agent cannot push commands, wipe, or lock devices.
- Cloud pricing is not published.
Limits
Probo Cloud pricing is not published on the pages described, and Probo directs buyers to contact it about the managed service. The supplied single-host Docker Compose deployment is not high availability and is intended for evaluation, internal deployments, or small installations where a single-host failure is acceptable.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Probo Cloud | Pricing not published on the pages opened; contact Probo to discuss the managed service | On request |
As probo.com lists them, read 11 Oct 2026. The maker's own page has the final word.
Getting started
- Visit https://www.probo.com/.
- Choose Probo Cloud or a self-hosted deployment.
- For self-hosting, use the documented Docker Compose or Kubernetes option.
- For cloud service pricing, contact Probo.
Verdict
Probo covers a broad set of compliance and security workflows, with cloud and self-hosted deployment options. Consider the single-host limitation if evaluating its supplied Docker Compose setup.
Questions
Is Probo free?
Probo is listed as free and open source. Pricing for Probo Cloud is not published; buyers are directed to contact Probo about the managed service.
Can Probo be self-hosted?
Yes. Its documentation describes self-hosted deployment with Docker Compose and Kubernetes, as well as Probo Cloud.
Which compliance frameworks are listed?
The listed frameworks include SOC 3, CCPA, CASA, ISO 27001, FERPA, SOC 2 Type 1 and Type 2, ISO 42001, GDPR, ISO 27701, and HIPAA.
Which systems connect to Access Review?
Listed integrations include Google Workspace, Okta, GitHub, AWS, Slack, and Brex. CSV import is available for tools without a connector.
Which platforms does Device Agent support?
The download page lists macOS, Linux, Windows, and FreeBSD.
Can Device Agent control enrolled devices?
No. Probo describes Device Agent as observational; it cannot push commands, wipe, or lock a device.
Facts from Probo's own pages
- Access reviews
- Access Review aggregates accounts from connected systems, flags risky access, records decisions, and exports closed campaigns as PDF evidence. · probo.com, 11 Oct 2026
- AI access audit log
- The AI Agents page says authorized agent calls are recorded in an immutable, CSV-exportable audit log with timestamps, actions, resources, and the connected user’s identity. · probo.com, 11 Oct 2026
- AI agents
- Probo supports compatible MCP clients such as Claude, ChatGPT, Codex, Cursor, VS Code, Windsurf, Zed, and OpenCode, with scopes limited by the connecting user’s permissions. · probo.com, 11 Oct 2026
- Audit evidence
- The platform automates evidence collection, updates, and approvals to help maintain audit readiness. · probo.com, 11 Oct 2026
- Compliance Portal
- The Compliance Portal lets prospects request access, sign NDAs, and download watermarked security documents. · probo.com, 11 Oct 2026
- Deployment
- The official documentation describes Probo Cloud and self-hosted deployment options, including Docker Compose and Kubernetes. · probo.com, 11 Oct 2026
- Device Agent
- Device Agent performs nine automatic security posture checks on enrolled laptops and servers and provides per-device, timestamped report history. · probo.com, 11 Oct 2026
- Device Agent limit
- Probo says Device Agent is observational and cannot push commands, wipe, or lock a device. · probo.com, 11 Oct 2026
- Device platforms
- The Device Agent download page lists macOS, Linux, Windows, and FreeBSD availability. · probo.com, 11 Oct 2026
- Employee Portal
- The Employee Portal supports policy signatures, document approvals, laptop enrollment, and employee provisioning through identity providers. · probo.com, 11 Oct 2026
- Integrations
- The Access Review page lists integrations including Google Workspace, Okta, GitHub, AWS, Slack, and Brex, and says CSV import is available for tools without a connector. · probo.com, 11 Oct 2026
- Managed compliance
- Probo’s compliance officers handle program setup, risk and vendor assessments, audit coordination, and ongoing monitoring. · probo.com, 11 Oct 2026
- Security and frameworks
- Probo’s site lists SOC 2, SOC 2 Type 1 and Type 2, SOC 3, ISO 27001, ISO 27701, ISO 42001, GDPR, CCPA, and HIPAA among its frameworks or compliance badges. · probo.com, 11 Oct 2026
- Self-hosting limit
- The supplied single-host Docker Compose deployment is described as not high availability and intended for evaluation, internal deployments, or small installations where a single-host failure is acceptable. · probo.com, 11 Oct 2026
- What it does
- Probo is an open-source governance, risk, and compliance platform for engineering, security, and compliance teams. · probo.com, 11 Oct 2026
Where Probo stands on Freedom251
- Compliance Management Software#22 of 51
