Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Onspring
A no-code governance, risk, and compliance platform out of Overland Park, Kansas that lets teams configure risk registers,…
Theta Lake
Theta Lake provides AI-driven compliance, security, and archiving for modern communication and collaboration platforms like Zoom, Microsoft Teams,…
RegScale
AI-driven continuous controls monitoring platform that automates GRC evidence collection, audits, and compliance for regulated industries.
Rencore
Rencore is a governance, security, and compliance platform for Microsoft 365, Power Platform, and enterprise AI (Copilot and…
Cowbell
A Pleasanton, CA cyber-insurance MGA offering continuously underwritten, telemetry-informed coverage for SMEs, backed by Zurich Insurance.
BreachRx
Incident-response orchestration platform that automates breach-notification workflows and legal-compliance obligations, backed by a $15M Series A with Kevin…
Coalfire
A Colorado-based cybersecurity and compliance advisory firm and accredited assessor (PCI QSA, FedRAMP 3PAO) serving cloud, healthcare, finance,…
Secureframe
Automated compliance platform for SOC 2, ISO 27001, and similar frameworks, competing with Vanta and Drata but at…
Riskified
A publicly traded ecommerce fraud and risk decisioning platform that guarantees approved transactions against chargebacks, used by many…
MITRE
The nonprofit federally funded research center behind ATT&CK, CVE, CWE, and STIX.
CyberSaint Security
Boston-based cyber risk management platform that automates control assessments and translates cyber risk into financial terms for executives…
Defense Unicorns
A founder-led defense software-supply-chain company that reached unicorn status on a $136M Series B.
Risk Ledger
Risk Ledger is a London-based third-party risk management platform that replaces one-off vendor security questionnaires with a shared…
Lema AI
Lema AI runs an autonomous, agentic system that continuously investigates how third-party vendors actually access and move enterprise…
Oneleet
Compliance automation platform bundling penetration testing, code scanning, cloud security, attack surface monitoring, and security training to make…
ServiceNow (Governance, Risk & Compliance)
ServiceNow's GRC and Integrated Risk Management module extends its enterprise workflow platform to unify risk, policy, and vendor…
DigitalXForce
Irving, Texas-based AI-powered platform unifying governance, risk, compliance, and security posture management into one real-time system.
6clicks
AI-assisted governance, risk, and compliance platform offering all-inclusive pricing and sovereign/air-gapped deployment options for global organizations.
A-LIGN
Large-scale compliance and cybersecurity audit firm delivering SOC 2, ISO 27001, and related assessments, now majority-owned by private…
Mitratech Prevalent
Third-party and vendor risk management platform, formerly independent as Prevalent, now operated as a product line inside Mitratech's…
Arco Cyber
Arco Cyber is a UK-based cybersecurity assurance company, founded in 2022 and led since inception by CEO Matt…
Black Kite
Third-party cyber risk rating platform (formerly NormShield) providing continuous, automated vendor risk assessment across technical, financial, and compliance…
Kovrr
Cyber risk quantification platform that uses Monte Carlo simulation to translate technical risk into financial-loss estimates for boards…
Onyxia
Onyxia gives CISOs a unified operational view across 40+ security tools to identify coverage gaps, benchmark performance, and…