CyberUpgrade
Vilnius-based AI compliance copilot helping small and mid-sized businesses manage ISO 27001, NIS2, and DORA requirements.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
CyberUpgrade, founded in Vilnius, Lithuania in 2023 by former Paysolut co-founders Aurimas Bakas (CEO) and Andrius Minkevičius, builds a compliance-automation platform aimed squarely at small and mid-sized businesses that lack dedicated compliance staff but face the EU’s expanding regulatory load — ISO 27001, NIS2, DORA, and SOC 2 among them.
The platform combines automated evidence collection, vendor risk management, and security-awareness training delivered through Slack and Teams with an AI chatbot the company positions as a virtual compliance officer. It raised a €650,000 pre-seed round in early 2024 and a further €2.5 million seed round in November 2024, backed by FIRSTPICK, NGL Ventures, Superhero Capital, and Specialist VC.
CyberUpgrade’s differentiator is less technical novelty than audience focus: most GRC automation platforms target large enterprises with dedicated compliance teams, while CyberUpgrade is built for SMBs that would otherwise rely on expensive consultants or manual spreadsheets to meet the same EU regulatory bar.
Innovation Matrix Assessment
Two funding rounds and a live product covering multiple EU compliance frameworks within about a year of founding shows reasonable execution speed for a small team.
By automating evidence collection and vendor risk checks for frameworks like NIS2 and DORA, the platform removes compliance work that SMBs would otherwise outsource at high hourly rates or skip entirely.
Total disclosed funding is roughly €3 million, a small round even for seed stage, with no independently reported customer count or revenue figures available.
GRC automation for SMBs is a real underserved niche, but the AI-copilot approach is increasingly common across the broader compliance-automation market rather than a structurally new model.
Reported workload-reduction claims (up to 95% less manual compliance work) are vendor-stated; there is no independent audit or named-customer case study available in public sources.
The EU's DORA and NIS2 obligations are now in force and will keep driving SMB compliance demand, giving this niche durable, if modest, relevance.
Why CISOs Should Care
Gives resource-constrained SMBs a path to EU compliance frameworks like NIS2 and DORA without hiring dedicated compliance staff or expensive outside consultants.
What Makes It Different
Focuses specifically on small and mid-sized businesses underserved by enterprise-oriented GRC platforms, delivering guidance through everyday tools like Slack and Teams rather than a standalone compliance portal.
The Matrix Verdict
55/100 — INCREMENTAL INNOVATOR
An Incremental Innovator: a practical, well-targeted product for an underserved SMB segment, but funding and independent validation remain modest relative to the broader GRC-automation market.
Editorial Note: Claims vs. Verified Findings
The funding rounds and investor identities are independently reported by regional tech press; the specific workload-reduction and efficiency claims are the company's own marketing figures.
Sources
Alternatives to CyberUpgrade
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Drata
Continuous compliance automation platform, Vanta's closest direct competitor, covering SOC 2, ISO 27001/42001, HIPAA, PCI DSS, DORA, and…