Self-Hosted Quickstart

This guide walks you through deploying Probo locally with Docker Compose and setting up your first compliance framework. You should be up and running in about 15 minutes.

For a managed service or a production Kubernetes deployment, compare the deployment options.

Prerequisites

• Docker and Docker Compose installed on your machine
• OpenSSL for generating local secrets

Note

This quickstart creates a local evaluation environment at http://localhost:8080. For a production deployment with HTTPS, email delivery, backups, and monitoring, use the full Docker Compose guide.

Deploy Probo

1. Clone the repository

   git clone https://github.com/getprobo/probo.git
   cd probo

2. Create the local environment

   Generate the required secrets and application settings:

   cat > .env <<EOF
   PROBOD_ENCRYPTION_KEY=$(openssl rand -base64 32)
   PROBOD_AUTH_COOKIE_SECRET=$(openssl rand -base64 32)
   PROBOD_AUTH_PASSWORD_PEPPER=$(openssl rand -base64 32)
   PROBOD_TRUST_AUTH_TOKEN_SECRET=$(openssl rand -base64 32)
   PROBOD_BASE_URL=http://localhost:8080
   PROBOD_API_ADDR=0.0.0.0:8080
   PROBOD_API_CORS_ALLOWED_ORIGINS=http://localhost:8080
   EOF

   Keep .env private. These values protect encrypted data and authentication sessions.

3. Start the services

   docker compose -f compose.prod.yaml up -d

   This starts the Probo server, PostgreSQL, SeaweedFS, and the headless browser used for document generation.

4. Verify the deployment

   curl --fail http://localhost:8080/healthz
   docker compose -f compose.prod.yaml ps

   The health request should succeed and each service should report a running or healthy state. If it does not, inspect the application logs:

   docker compose -f compose.prod.yaml logs probo

5. Access the web interface

   Open http://localhost:8080 in your browser. Create your account and log in.

6. Create your organization

   After logging in, create your first organization. This is the top-level entity that contains all your compliance data.

7. Import a compliance framework

   Navigate to the frameworks section and import the framework relevant to your business — for example, SOC 2 or ISO 27001. This gives you a set of controls to work with.

Next Steps

You now have a running Probo instance with a compliance framework in place. From here, you can start mapping controls to your security practices, collecting evidence, and managing risks.

Set up your first framework Continue with organization, framework, ownership, and evidence setup

Core Concepts Understand the data model: frameworks, controls, measures, risks, and more

Configuration Configure Probo for your environment

Single Sign-On Set up SSO with Google Workspace, Okta, or other SAML providers

Docker Compose (full guide) Complete deployment guide with production configuration, backups, and monitoring