Local-first, self-hostable security-questionnaire automation: grounded, cited answers from your own knowledge base. Bring your own model — your data never leaves the host.

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

Programmatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.

LangGraph agent that auto-answers vendor security questionnaires (CAIQ, SIG, Excel) from a knowledge base with citations + confidence scores. Reviewers see only the yellow-highlighted rows that need human attention.

Free MIT-licensed scaffold for cloud controls evidence — markdown templates for SOC 2 and customer security reviews

Vertical AI agent workflow for vendor due diligence and security questionnaires. Answers what is supported, creates follow-up tasks for missing evidence, blocks unsafe requests, and produces a full audit trail.

Five-agent team that answers vendor security questionnaires (CAIQ, SIG, custom Excel) from your actual documentation — cited, audited for overclaims, never fabricated.

Free, ungated SIG Lite answer-library template (CSV) — SIG-style risk domains, evidence-citation columns, worked examples. Build a reusable security-questionnaire answer library.

Azure AI Foundry + Azure AI Search RAG workflow for answering security questionnaire from synthetic evidence documents, with a second agent validating evidence support.

Evidence-governed RFP and security questionnaire drafting with benchmarked hybrid RAG

[ARCHIVED 2026-05-31 — superseded by https://github.com/mizcausevic-dev/kinetic-gain-embedded/blob/main/docs/sales/PROCUREMENT-PACKET.md]

Executive answer-studio surface for security questionnaires, trust evidence, response ownership, and cycle-time reduction.

Security questionnaire copilot that seals every answer to approved evidence.

Parse SIG/CAIQ/VSA/VSAQ security questionnaires into structured JSON — ingest + framework detection only. No answers, no auto-fill.

A curated list of resources for the answerer's side of security questionnaires — frameworks, response tools, trust centers, templates, and guides for teams that receive a SIG/CAIQ and must answer it.

20 questions every workspace/messaging/storage vendor should answer — a free, forkable security questionnaire (CC-BY). Canonical: https://koaich.com/vendor-questions

Self-hosted compliance automation with AI-powered questionnaire answering, public Trust Center, and continuous AWS/GitHub monitoring. BYOK — supports OpenAI, Anthropic, Gemini, Groq, DeepSeek, Mistral, Ollama, and 10+ LLM providers.

Automate vendor security questionnaire responses using your private knowledge base with this local-first, self-hosted tool.