wtf is opencomply?

OpenComply is an open-source platform for automating SOC 2 and related compliance work, positioned as a free alternative to paid services like Vanta, Drata, and Secureframe, which the README says commonly cost eight to twelve thousand dollars a year and more once a company needs multiple frameworks. It aims to cover SOC 2, ISO 27001, and PCI DSS compliance for companies that need to prove their security practices to customers or auditors. The system is built around five separate AI agents that each handle a piece of the compliance process. One agent collects evidence automatically from cloud providers and tools like AWS, GCP, GitHub, Docker, and Kubernetes. Another maps that evidence to the specific requirements of a compliance framework. A third analyzes the results to find gaps and score how risky each one is. A fourth simulates what an auditor would check, so problems can be caught before a real audit happens. A fifth generates PDF reports, including executive summaries and full audit packages. Other stated features include a dashboard showing your compliance status, role based access control for admins, assessors, and viewers, and a REST API for connecting the platform to other tools you already use. It is meant to be self-hosted, so a company keeps full control over its own compliance data rather than sending it to a third party. Getting started requires Docker and Docker Compose. You clone the repository, copy the example environment file, and run a single command to start the frontend, backend API, and interactive API documentation. Development without Docker is also documented for both the Python backend and the React and TypeScript frontend. Behind the scenes it uses PostgreSQL for data storage, Redis and Celery for background task queues, and S3 compatible storage for files. The project is released under the MIT license and is described as built by an autonomous group of AI agents called AgentsFactory, which also offers paid enterprise support and custom framework mappings on top of the free core.