Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Tenacy
Lyon-based, France-hosted GRC platform helping organizations manage multi-framework cybersecurity compliance from a single system, positioned around EU digital…
LogicManager
A Boston-based enterprise risk management (ERM) platform, founded and grown without outside venture funding, that helps organizations tie…
Stealth – ISS Group Inc.
An Arlington compliance and consulting firm with SDVOSB and WOSB certifications and over two decades of federal experience.
Responsible Cyber
Singapore-based cyber risk and third-party risk management vendor offering CISO-as-a-service consulting alongside its RiskImmune vendor-risk platform.
Bastion
AI-driven compliance and security automation platform for startups, built by former Palantir engineers to get companies SOC 2,…
Solidrange
A Riyadh-based, Sharaka Capital-backed GRC automation startup whose EasyCompliance platform has landed government and publicly listed customers across…
Cyberday
A Finnish information security management system (ISMS) and compliance platform, formerly Agendium, that helps European small and mid-sized…
Prescient Security
Prescient Security is a Nashville-based audit and penetration-testing firm delivering SOC 2, ISO, FedRAMP, and CREST-accredited compliance services.
IRM (Information Risk Management)
UK-founded cyber GRC and penetration testing consultancy, now the cybersecurity division of Capgemini Group, built around its SYNERGi…
Midship
A Y Combinator-backed San Francisco AI SOX-automation startup being folded into Optro's GRC platform.
Pervade Software
Cardiff, Wales-based vendor whose OpView and OpAudit platforms combine SIEM-style monitoring, vulnerability tracking and compliance evidence management, and…
Compleye
Amsterdam-based compliance automation platform helping small and mid-sized businesses achieve ISO 27001, SOC 2, and GDPR compliance without…
Hicomply
A North East England-based compliance automation platform, backed by growth-capital firm BGF, that helps fast-growing businesses achieve and…
BD Emerson
BD Emerson is a Richmond, Virginia-based cybersecurity, compliance, and privacy consulting firm founded in 2020, offering cybersecurity consulting,…
Hackmetrix
Santiago-based compliance automation platform helping Latin American startups and mid-market companies reach ISO 27001, SOC 2, and PCI…
HyperCube
Board-reporting SaaS from Cyberseconomics that translates technical security posture into business-relevant metrics for CISOs and boards.
Corporater
A Norwegian GRC and business-management software vendor with 12 global offices, offering a configurable low-code platform (branded GPRC…
Isora GRC
A collaborative GRC assessment platform built by public-benefit company SaltyCloud, originally focused on higher-education and public-sector security teams,…
SGS
A Geneva-based certification giant that acquired PCI DSS specialist Panacea Infosec in January 2026.
TovenAI
AI agents that automate manual, data-intensive compliance surveillance and evidence work for institutional trading firms.
Trava Security
Cyber risk management platform for small and midsize businesses that ties vulnerability and compliance posture directly to cyber…
Cable
A continuous control-testing startup for sponsor banks and fintech partners, acquired by Synctera but still operating standalone.
AssurePoint
Sydney IRAP, ISM and Essential Eight assessment firm founded in 2025; acquired by A-LIGN in September 2026 to…
VISO TRUST
A San Francisco AI-powered third-party risk platform acquired by Australian GRC leader Protecht.