Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Trava Security
Cyber risk management platform for small and midsize businesses that ties vulnerability and compliance posture directly to cyber…
Cable
A continuous control-testing startup for sponsor banks and fintech partners, acquired by Synctera but still operating standalone.
AssurePoint
Sydney IRAP, ISM and Essential Eight assessment firm founded in 2025; acquired by A-LIGN in September 2026 to…
VISO TRUST
A San Francisco AI-powered third-party risk platform acquired by Australian GRC leader Protecht.
TrackLight
A government anti-fraud vendor led by the founders of Pondera Solutions, adding identity validation by acquiring Plum Identity…
DynaRisk
London-based cyber risk scoring and dark web monitoring platform built for insurers underwriting and monitoring cyber policies.
Waterleaf International
A self-funded Florida managed-security and CMMC/SOC 2 compliance provider serving municipal and DoD-contractor clients.
Aptible
A San Francisco compliance-automation vendor combining audit-prep workflow (SOC 2, HIPAA, ISO 27001) with managed compliant cloud hosting,…
Protecht
An Australian GRC vendor that added AI-driven third-party risk assessment by acquiring San Francisco-based VISO TRUST in April…
GoComply
Early-stage GRC platform that continuously validates whether written security policies are actually enforced in practice, not just documented.
Altamira
Altamira Technologies Corporation, based in McLean, Virginia, is a Northern Virginia government technology and data/AI solutions provider serving…
Ethico
A Charlotte-based ethics and compliance company, originally founded as ComplianceLine in 1997 and rebranded as Ethico in 2022,…
Casco
A Y Combinator-backed San Francisco AI red-teaming platform that maps findings to SOC 2, NIST AI RMF, and…
Secure&IT
Independent Spanish cybersecurity consultancy combining regulatory compliance advisory (ENS, GDPR, NIS2, DORA) with a managed SOC-CERT and industrial…
Fortreum
A Gryphon-backed cybersecurity advisory firm that added AI-driven FedRAMP and CMMC automation by acquiring Kovr.AI.
Enveedo
Enveedo is a Miami-based cyber risk management platform that helps mid-market companies plan, build, and operationalize a security…
RiskQ
Cyber risk quantification platform that translates security posture into financial and insurance-aligned risk terms for board and executive…
DQS
A 40-year-old global certification body (200+ standards, 20,000+ clients) now backed by private equity firm Montagu.
CyNation
A London-based third-party and integrated risk management platform (CyDesk) that combines cyber posture, regulatory compliance, and AML/KYC/ESG risk…
FALKIN
FALKIN is a London startup building AI tools embedded in banking apps to flag scam manipulation before a…
Mobile Mentor
A Microsoft-first managed services provider that added healthcare and legal compliance depth by acquiring 5th Gear in April…
SBS CyberSecurity
A cybersecurity audit, consulting, and vCISO firm built around the regulatory compliance needs of U.S. community banks and…
Cytrusst
An India-based platform combining GRC, data-privacy compliance, third-party risk, and attack surface management in one workspace.
CISO Global
Scottsdale-based public cybersecurity company (Nasdaq: CISO, formerly Cerberus Sentinel) combining managed SOC services, compliance/pen-test consulting, and a small…