Hi HN! We're open-sourcing our collection of SOC 2 controls as the first step in building an open source compliance automation platform. Github: https://github.com/getprobo/probo

The current SOC 2 experience:

1. Pay a random $10k+ for compliance software

2. Get hundreds of tasks with no context on what's optional and how much time it will take

3. Realize you need to pay an external auditor

4. End up with checkboxes, not better security

Why we think open source matters:

- Never speak with a sales guy who doesn’t understand your needs.

- You should never pay for templates.

- Ship an integration instead of uploading a screenshot.

- Don’t get locked. Churn if you don’t like the product

Check out the repo, star it, and let us know your thoughts! We’d love feedback from fellow teams tired of compliance-as-a-box-ticking-exercise.