Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Black Kite
Third-party cyber risk rating platform (formerly NormShield) providing continuous, automated vendor risk assessment across technical, financial, and compliance…
DeNexus
A Sausalito-based cyber risk quantification vendor specializing in operational technology and industrial environments, backed by insurer AXA XL…
Censinet
Censinet runs a healthcare-specific third-party and enterprise risk management platform used by hospital systems to assess vendor, medical…
Cybervergent
AI-native continuous governance, risk, and compliance platform helping African enterprises replace periodic manual audits with ongoing posture monitoring.
CyberVadis
CyberVadis provides standardized, evidence-based third-party cybersecurity and data-privacy risk ratings, letting enterprises assess suppliers once and share the…
Ethoca
A Toronto-founded, now Mastercard-owned network that lets merchants and card issuers share real-time data to resolve card fraud…
Interos
Arlington, Virginia-based AI supply chain risk management platform mapping cyber, operational, and geopolitical risk across an organization's extended…
Corvus Insurance
A Boston cyber insurer using proprietary risk scanning to underwrite, backed by Travelers since its 2023 acquisition.
Whistic
AI-assisted third-party risk management platform that lets vendors publish standardized security profiles once and reuse them across buyer…
TRM Labs
A San Francisco blockchain-intelligence unicorn that doubled its valuation to $2B through a Series C extension.
Vendict
Israeli GRC startup using generative AI to automate security questionnaire responses and third-party vendor risk assessments for enterprise…
Prevalent AI
Prevalent AI builds a security data fabric that unifies fragmented enterprise data — asset, vulnerability, identity, and exposure…
Immersive
A Bristol cyber-resilience platform with hands-on labs and crisis simulations, expanding into AI-agent readiness.
Vanta
Compliance automation platform that continuously collects evidence for frameworks such as SOC 2 and ISO 27001 and extends…
Secfix
Berlin-based AI-powered compliance automation platform helping European SMBs and mid-market companies manage ISO 27001, SOC 2, NIS2, DORA,…
OutThink
London-based human risk management platform founded by ex-CISOs that scores and reduces employee cyber risk using behavioral data…
Hoxhunt
Hoxhunt is a gamified human risk management platform that runs adaptive phishing simulations and security training, used by…
Vespia
Vespia is an Estonia-based Know Your Business (KYB) technology provider founded in 2021 by Julia Ront — Veriff’s…
Drata
Compliance automation and trust management platform that continuously monitors controls and automates audit evidence collection.
Sprinto
Compliance automation platform for cloud and tech companies, automating framework monitoring and audit readiness with a growing India-US…
Squalify
Munich Re venture translating cyber exposure into financial-loss estimates using Monte Carlo simulation and a reinsurer-scale historical cyber-loss…
Envelop Risk
A Bristol, UK cyber risk-modeling and underwriting firm backed by SoftBank Vision Fund 2, with a reinsurance track…
Telos Corporation
Telos Corporation is a publicly traded cyber risk management company best known for Xacta, a cyber GRC automation…
Tenchi Security
Tenchi Security's Zanshin platform automates continuous, evidence-based third-party cyber risk assessment for insurers, MSSPs, and consultancies managing risk…