Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Milou
Milou is an AI-first platform that orchestrates penetration-testing workflows end to end — centralizing raw scanner and tester…
Kertos
A Munich-based no-code platform that automates GDPR, ISO 27001, SOC 2, TISAX, and NIS2 compliance evidence-gathering for European…
Zania
A Palo Alto company whose AI 'teammates' automate GRC busywork—controls testing, evidence collection, and security questionnaires—for compliance teams.
Balance Theory
A Columbia, MD platform tying cybersecurity investment planning to market intelligence and procurement.
Stoik
A Paris cyber-insurtech pairing coverage with active prevention (10,000+ clients, ~EUR 50M premiums).
Wolters Kluwer
A listed information-services company that acquired GRC platform StandardFusion for about EUR 32M to unify audit and GRC.
iDNA
iDNA (Groupe IDNA, encompassing IDNA and AURA iT) is a Paris-based cybersecurity consulting and engineering specialist with roughly…
CyberPilot
CyberPilot is a Danish security awareness training and phishing simulation company, employing around 50 people and working with…
Trustpair
Paris-based platform that validates vendor payment details and flags anomalies to prevent wire fraud, increasingly positioned against AI-generated…
Quod Orbis
A London continuous controls monitoring specialist, acquired by Deda Group.
Riskassure
RiskAware platform scans networks to locate and value sensitive data, helping businesses right-size cyber insurance coverage and quantify…
Ostendio
Ostendio is an Arlington, Virginia GRC company whose MyVCM platform helps organizations, especially in healthcare, manage compliance across…
Providence Consulting Group
Australian protective-security and risk advisory firm serving Defence and government clients, now part of Tetra Tech's global advisory…
Red Education
A Sydney vendor-authorized cybersecurity training partner with over 100,000 seats delivered.
Complyance
A New York agentic GRC platform that automates evidence review and vendor risk assessment, backed by a $20M…
Onlayer
Onlayer (formerly PCI Checklist) is a London-based merchant risk platform combining PCI DSS compliance automation with fraud, AML,…
Regulativ.ai
Regulativ.ai is a London-based RegTech platform that uses AI agents to automate regulatory compliance work such as control…
SecurityMetrics
Longstanding Utah-based provider of PCI compliance, vulnerability scanning, and forensic services purpose-built for small and mid-sized merchants.
Logiq Consulting
NCSC-assured Bristol cyber consultancy and managed-services provider for UK defence, government and critical infrastructure; acquired by IBM in…
PECB
PECB is a global certification body providing ISO 27001, cybersecurity, and compliance training and professional certification used by…
SPHERE Technologies Solutions
An Edison Partners-backed identity-hygiene specialist automating access cleanup across large identity estates.
Data Rudder
A 2018-founded Brazilian fraud and AML detection startup being acquired by Nuclea, pending Central Bank approval.
StackAware
AI governance and security advisory firm helping companies reach ISO 42001 readiness and manage AI cyber, privacy and…
ZINAD
AI-driven cybersecurity awareness training combining adaptive learning, VR simulations, and psychology-informed phishing protection to reduce human-factor risk.