11
Key Facts
- verinice is open-source software licensed under the AGPLv3 and developed entirely in Germany. The source code and SBOM are freely available—this gives you independence from the vendor, as the software cannot be discontinued or withdrawn from the market.
- As an integrated management system, verinice covers ISMS, BCMS, and DSMS: BSI Baseline Protection, ISO 27001, BCM according to BSI 200-4/ISO 22301, GDPR, and NIS-2—all in a single tool licensed by the BSI.
- The choice is yours: verinice.cloud (SaaS hosted with BSI-C5 certification) or verinice.onprem (in your own data center). Both work out of the box without any customization and offer a REST API for connecting to external systems. Penetration tests conducted by independent experts regularly confirm the product’s security.
Categories
Compliance / GRC (products and services) Education / training / qualification Open source (software and services) BSI IT baseline protection Business continuity Data protection, data security Risk analysis and management ISMS (ISO-IEC 2700x / BS 7799)
Product information
verinice is the premier GRC software of choice for managing information security, data protection, and business continuity. Available both as a Software-as-a-Service (SaaS) solution (verinice.cloud) and for operation in your own data center (verinice.onprem). Based on modern technologies, the new verinice enables browser-based work with the GRC tool. As the only tool of its kind under an open-source license, verinice has stood for digital sovereignty and open standards since 2007.
verinice supports the following application domains:
- BSI Baseline Protection
- BCM in accordance with ISO 22301 or BSI Standard 200-4
- ISO 27001 data protection in accordance with the GDPR
- NIS 2 Directive
Watch our product video
verinice ISMS - BCM Video