Allgress

Allgress builds an integrated governance, risk, and compliance (GRC) platform focused on giving organizations a business-context view of IT risk rather than a purely technical, control-by-control checklist. The platform centralizes risk assessments, control mapping across multiple regulatory and framework requirements (NIST, ISO, PCI, HIPAA, and similar), policy management, and vendor/third-party risk tracking, aimed at compliance and risk teams that need to reconcile overlapping framework requirements without maintaining separate spreadsheets or point tools for each one.

Founded by Jeff Bennett and Gordon Shevlin, with sources placing incorporation between 2006 and 2008, Allgress is headquartered in Dublin, California, in the San Francisco Bay Area. Bennett previously founded SiegeWorks and SiegeWorks International, which were acquired by FishNet Security in 2006. Allgress has operated as a privately held, self-funded company for most of its history, with no material outside venture funding disclosed, and remains a small vendor by headcount relative to larger, well-funded GRC platforms.

GRC is a mature, crowded category dominated by larger platforms (ServiceNow GRC, Archer, MetricStream, and others) with far greater scale and integration ecosystems. Allgress’s niche has historically been mid-market organizations that need practical, business-context IT risk management without the implementation overhead of enterprise-scale GRC suites, but its small size and lack of disclosed recent funding or major public product news limit how much independent evidence exists of current market traction.