Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Osano
Data privacy management platform combining consent/cookie compliance, data subject request automation, and vendor privacy risk assessment in one…
Paramify
Compliance automation platform that generates and maintains FedRAMP and other security authorization documentation.
Fusion Risk Management
A Chicago-based operational resilience platform covering business continuity management, disaster recovery planning, third-party risk, and crisis management, backed…
Workiva
A publicly traded (NYSE: WK) connected-reporting and compliance platform, founded in 2008 in Ames, Iowa as WebFilings and…
LeapXpert
A New York communications-governance leader for WhatsApp, iMessage, and Signal, a two-time Gartner Visionary.
Upfort
Upfort combines a small-business cyber risk mitigation platform with streamlined access to cyber insurance underwritten by partner carriers.
Exiger
An AI-driven supply chain and third-party risk platform used to map risk down to the 'nth tier' of…
MedSec
MedSec provides cybersecurity research, penetration testing, and risk-assessment services focused specifically on medical devices and hospital environments.
Spektrum
Spektrum Labs builds a cyber resilience platform that generates cryptographic proof — Cyber Resilience Tokens — that an…
MedStack
A healthcare compliance automation platform that gives digital health developers infrastructure-as-code tooling and pre-built policies to meet HIPAA…
X-Analytics
Arlington, Virginia cyber risk quantification platform from Secure Systems Innovation Corporation that translates technical security posture into financial…
Breach Secure Now
A bootstrapped, MSP-channel security-awareness and compliance training vendor.
Axiom GRC
A London Inflexion-backed GRC and assurance platform (1,300+ specialists, 40,000+ clients) built from a GBP 500M carve-out.
IntelliGRC
IntelliGRC is a compliance automation platform built specifically for MSPs, MSSPs, and small defense contractors navigating CMMC and…
GAN Integrity
GAN Integrity is a two-decade-old GRC platform, recognized by Gartner as a Challenger in third-party risk management, used…
Strike Graph
AI-native compliance automation platform helping companies achieve and maintain SOC 2, ISO 27001, HIPAA, and other framework certifications…
Scrut Automation
Compliance automation platform that maps shared controls across 60+ frameworks to cut duplicate audit and evidence work.
CyberSheath Services International
CyberSheath is a Registered Practitioner Organization providing CMMC 2.0, DFARS, and NIST 800-171 compliance implementation and managed security…
Anitian
Compliance automation platform that helps SaaS companies achieve FedRAMP authorization inside their own AWS or Azure environment, with…
Cypago
Cyber GRC Automation platform that connects directly to cloud and on-prem systems to automate compliance evidence collection and…
Xamin
Xamin is a Chicago-based managed services provider with more than 25 years of experience serving banks, credit unions,…
StandardFusion
StandardFusion, based in Vancouver, Canada, provides governance, risk, and compliance (GRC) software that helps organizations manage risk assessments,…
heyData
A Berlin compliance and security SaaS platform (2,000+ customers) that raised a $16.5M Series A.
Milou
Milou is an AI-first platform that orchestrates penetration-testing workflows end to end — centralizing raw scanner and tester…