Polycentric Labs
GitHub

Dimidium Scientiae  ·  “The half of knowledge is to know where to find knowledge.”

Infrastructure for builders.

From compliance to code to craft. We build open-source platforms, developer tools, and AI products that turn hard problems into software organizations can own and operate.

Explore our products ★ Star Evidentia →
96Framework catalogs
14Evidence collectors
13MCP tools
Apache 2.0Open source
Products

What we build

Open-source platforms and developer tools, designed to be composable, transparent, and ownable.

E

Evidentia

Compliance, as code.
v0.11.0 · Live

An open-source GRC platform that turns compliance from a spreadsheet problem into a software problem. Python-first and OSCAL-native — ingest NIST OSCAL catalogs, run gap analysis against your evidence, and emit audit-grade results with cryptographic provenance, from a library, CLI, or REST API.

OSCAL-native end to end — ingest catalogs, emit Assessment Results + POA&M
96 framework catalogs & 16 inter-framework crosswalks
Cryptographic evidence chain — Sigstore, PEP 740, SLSA Provenance v1
13 MCP tools — drive it from Claude Code, Cursor, or Copilot CLI
NIST 800-53 Rev 5 FedRAMP CMMC 2.0 ISO 27001 EU AI Act DORA SOC 2 HIPAA · GDPR
GitHub → Docs → PyPI →
M

Malachite

AI agents, production-ready.
In development

A Next.js starter kit for shipping production AI-agent applications — billing, security, and observability built in. In active early development.

Durable agents with crash recovery
Hardened MCP + OAuth 2.1
Token-metered billing
Join the waitlist →
For developers

Built to live in your stack

Open source, composable, and designed to fit the tools you already run.

</>

Open source

Apache 2.0. Read it, fork it, embed it in commercial products without copyleft.

$_

CLI-first

pip install evidentia. Everything runs from a terminal or CI.

{ }

Library & API

Import as a Python library or call the REST API. Compose it into your own tools.

CI

CI-native

SARIF output and OCSF findings gate every pull request and feed your SIEM.

For enterprise

Trusted in regulated environments

Built for compliance engineers, GRC teams, and CISOs. Deploy on-premise, in the cloud, or fully air-gapped.

96 frameworks

NIST 800-53, FedRAMP, CMMC 2.0, ISO 27001, EU AI Act, DORA, NIS2, plus all 15 US state privacy laws.

Verifiable evidence

Sigstore keyless signing, PEP 740 attestations, SLSA Provenance v1, and CycloneDX 1.7 SBOMs.

Air-gap capable

Offline mode for FedRAMP High, CMMC Level 2, and sovereign-cloud deployments.

Direct support

Architecture guidance, deployment support, and custom framework integration.

Contact sales Read the docs →
96
Catalogs
14
Collectors
13
MCP tools
4,900+
Tests
v0.11.0
Latest release
About

Polycentric Labs

Polycentric Labs is a technology company building open-source platforms, developer tools, and AI products. We believe hard problems deserve composable, transparent software that organizations can own and operate.