AI agent tools for compliance
Short answer: Our top pick for compliance: ciso-assistant-community, with the highest AgentPick Score (74/100) among tools tagged "compliance". Runners-up: agent-governance-toolkit (72) and bernstein (71). Compare what each does, its license and how recently it was updated below.
| # | Tool | What it does | Score | Stars | License | Updated |
|---|---|---|---|---|---|---|
| #1 | ciso-assistant-community | CISO Assistant is a one-stop-shop GRC platform for Risk Management, AppSec, Compliance & Audit, TPRM, BIA, Privacy, and Reporting. It supports 200+ gl… | 74/100 | ★ 4.5k | See repo | 14 Oct 2026 |
| #2 | agent-governance-toolkit | AI Agent Governance Toolkit — Policy enforcement, zero-trust identity, execution sandboxing, and reliability engineering for autonomous AI agents. Cov… | 72/100 | ★ 6.4k | MIT | 14 Oct 2026 |
| #3 | bernstein | The open-source governance layer for AI agents: write the rules declaratively, Bernstein enforces them and produces the verifiable, replayable record.… | 71/100 | ★ 1.2k | Apache-2.0 | 14 Oct 2026 |
| #4 | arc-kit | The Enterprise Architecture Governance Harness — strategy, architecture, delivery, and assurance using AI coding assistants | 68/100 | ★ 2.3k | See repo | 14 Oct 2026 |
| #5 | chainloop | Agentic SDLC infrastructure. Define guardrails. Collect signals. Enforce continuously. Signed records of what your AI coding agents and CI/CD pipeline… | 68/100 | ★ 585 | Apache-2.0 | 14 Oct 2026 |
| #6 | tradememory-protocol | Decision audit trail + persistent memory for AI trading agents. Outcome-weighted recall, tamper-evident SHA-256 chain with RFC 3161 anchoring, 20 MCP … | 65/100 | ★ 1.4k | MIT | 9 Oct 2026 |
| #7 | attestix | AI agent identity, signed credentials, delegated authority and portable governance evidence. Python core and offline verifier SDKs. | 65/100 | ★ 874 | Apache-2.0 | 12 Oct 2026 |
| #8 | Wazuh-MCP-Server | Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI DSS, GDPR, … | 54/100 | ★ 251 | MIT | 9 Oct 2026 |
| #9 | DevOps-Security-Agent-Skills | Agent-ready DevOps, security, infrastructure, and compliance knowledge base with 80+ skills across Kubernetes, Terraform, AWS/Azure/GCP, AI platform o… | 28/100 | ★ 1.2k | MIT | 22 May 2026 |
Source: each project's public GitHub repository (description, stars, license, last push). Listed tools aren't tested or ranked by AgentPick.
How to choose
- Read the license before using it commercially.
- Check how recently it was updated and how active its issues are.
- Run it on a small, low-risk task first.
Get the best new agent tools every week. Free, with a verdict on each. Get the weekly digest
Related
AI agent tools for agent memory →
Agent building
AI agent tools for self-hosted setups →
Agent building
AI agent tools for LangChain →
Agent building
AI agent tools for sandbox →
Agent building
AI agent tools for harness engineering →
Agent building
AI agent tools for penetration testing →
Agent building
AgentPick Weekly
The week's new agent tools with a verdict on each, every week. Free. We'll email you a link to confirm, and you can unsubscribe any time. See our Privacy Policy.