An open-source compliance tool, with an MRR of only $12,000, how can it collect $5,670,000 in a year?
Headline cites the Historical Research Snapshot. KPI strip is the Latest Revenue Snapshot.
Product at a glance
- what is it
- Compliance automation platform: helps companies obtain SOC 2, ISO 27001, HIPAA, GDPR, AI continuously collects evidence, writes policies, monitors devices and cloud, and cooperates with rule experts in exclusive Slack to answer questions.
- who is it for
- To be sold to large enterprises, B2B companies that are stuck in procurement and security audits, from startups to medium-sized teams.
- how does it charge
- No public pricing, quoted separately based on compliance framework, company size, time requirements, and audit and security needs; whether audit, penetration testing, and trust center are included depends on the scope.
- business model
- Open-source core (AGPLv3) + quoted compliance SaaS and expert services.
- receipts for nearly 12 months
- $6.09M
- payment for the past 30 days
- $889K
- MRR
- $16.7K
- September revenue
- $717K
accumulating $6.18M · publicly verified
up 27% from the previous 30 days
up 40% in 30 days · 52 subscriptions
Open evidenceFact · as of 2026-11-03
Evidence type: Fact
Source: Latest Revenue Snapshot · provider payment sync
as of: 2026-11-03
Provider-verified revenue signal ≠ audited company financials.
historically the highest · only $155K in November 2025
Open evidenceFact · as of 2026-11-03
Evidence type: Fact
Source: Latest Revenue Snapshot · provider payment sync
as of: 2026-11-03
Provider-verified revenue signal ≠ audited company financials.
MRR = current monthly recurring run rate · 30-Day revenue = what the provider recorded in the trailing 30 days. Timing, not extra revenue, is why a ratio can exceed 100%.
Summary
What kind of business is this
Visit site www.trycomp.aiMany B2B companies lose orders not because their products are not good, but because they cannot provide compliance certificates. Comp AI does this quickly with automation and experts. It attracts teams with compliance needs through open-source code, comparison pages, cost guides, and customer cases, and then quotes and signs contracts based on the framework and company size.
- form
- SaaS platform · open-source core
- customers
- B2B company
- charging
- Quoted on demand
- established
- 2025-01
- entity
- Miami · A round $34,000,000
Core growth findings
Findings may cite earlier snapshots; header KPIs carry Fact and a revenue as-of date. Revenue as of 2026-11-03.
- 01
Started with open source: the phrase 'open-source version Vanta' is the entire positioning
January 2025 on Hacker News, April 2025 on Product Hunt, released with the same phrase, code on GitHub. The founder says the first batch of customers came from X connections and the open-source community.
- 02
Money does not come from subscriptions, but from phone calls
MRR is only $11,728, but in the past 30 days, $750,950 was collected. Prices are not publicly available, and a 20-minute phone call is required; the founder self-reports a demo conversion rate of 35%.
- 03
Competitors do not quote prices, so it quotes prices for competitors
The price pages of Vanta, Drata, and Secureframe were all written by it, 'vanta pricing' ranks 6th, and 'vanta alternatives' ranks 4th.
- Number tags
- FactStraight from the source
- DerivedCalculated from facts
- ClaimedSelf-reported, unverified
- EstimateOur reading
Read this one free
This device has 2 of 2 free full reports left. After this one, the rest of the library needs a membership.
- ?How does an open-source compliance tool with $12k MRR take in $5.67M a year?
- ?How does an open-source product make money?
- ?Where does its traffic come from?
- 01The business
- 02Where customers come from
- 03Growth plays
- 04Social & community
- 05Timeline
- 06What to copy
This report is free to read
2 free reports left on this device
Next steps
Copy an agent prompt above, then keep researching related products via MCP.