Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.
Coalition
A San Francisco 'active insurance' pioneer pairing cyber insurance with continuous attack-surface monitoring, having raised ~$860M total.
Elliptic
A London blockchain-analytics and AML compliance vendor with a 13-year track record, backed by Nasdaq Ventures and Deutsche…
Drata
Continuous compliance automation platform, Vanta's closest direct competitor, covering SOC 2, ISO 27001/42001, HIPAA, PCI DSS, DORA, and…
BitSight
Security ratings pioneer that scores organizations' cyber risk on a 300-820 scale using continuously collected external telemetry.
OneTrust
Privacy-management pioneer that expanded into a broad trust and risk platform spanning AI governance, data governance, and third-party…
Ontic
An Austin protective-intelligence platform unifying insider-risk, workplace-violence, and executive-protection signals for corporate security and HR teams, backed by…
Hawk AI
A Munich AML vendor layering machine learning onto traditional rules engines to cut false positives for banks, with…
Fortress Information Security
Orlando-based supply chain and third-party cyber risk management provider that secures a reported 40% of the U.S. power…
Cynomi
AI-powered vCISO platform that lets MSPs and MSSPs deliver virtual CISO services and risk assessments to SMEs at…
CyberCube
The de facto standard cyber-risk-analytics provider for the insurance industry, powering underwriting and catastrophe modeling across brokers, MGAs,…
Resilience Cyber Insurance Solutions
A San Francisco cyber insurer running an in-house risk-operations center that ties underwriting and pricing directly to policyholders'…
ThetaRay
An Israeli AI-driven AML platform (SONAR) using unsupervised anomaly detection, built on applied mathematics, to catch money-laundering patterns…
Behavox
A New York RegTech vendor using proprietary language models to surveil employee communications for insider risk and market…
Fravity
Fravity is an Austin-based agentic AI startup that automates fraud, risk, and anti-money-laundering compliance investigations, offering more than…
At-Bay
At-Bay is a San Francisco-based cyber InsurTech that has grown into a top-10 U.S. cyber insurer, combining cyber…
Optro
Optro is AuditBoard's 2026 rebrand: an AI-powered GRC platform used by over half the Fortune 500 and named…
Panorays
Third-party cyber risk management platform combining continuous external attack-surface scanning with context-based, AI-assisted vendor questionnaires.
Norm AI
New York startup whose AI agents convert regulations into executable compliance logic, now valued at $1.2 billion.
Onspring
A no-code governance, risk, and compliance platform out of Overland Park, Kansas that lets teams configure risk registers,…