Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
StackAware
AI governance and security advisory firm helping companies reach ISO 42001 readiness and manage AI cyber, privacy and…
Centraleyes
An AI-powered cyber GRC platform, formerly known as CyGov, that automates risk and compliance data collection to help…
Phished
Belgian security awareness training company offering AI-personalized phishing simulations and gamified training to reduce human-error breach risk.
Panacea Infosec
Panacea Infosec is a New Delhi-based information security firm founded in 2012 by CEO Ajay Kaushik, with more…
Riskonnect
A Thoma Bravo-owned integrated risk management (IRM) suite spanning enterprise risk, third-party risk, business continuity, ESG, and claims/insurance…
Fime
Paris testing, consulting and certification group for payments, smart mobility and digital identity; acquirer of Red Alert Labs…
Pulse Security
AI-driven operational management platform that acts as a system of record for the cybersecurity program, built for CISOs.
ValueMentor
Dubai-headquartered security services firm holding PCI QSA, SWIFT and CERT-IN accreditations, offering managed security, VAPT, DFIR and compliance…
ZenGRC
A cloud GRC platform (originally launched by Reciprocity, briefly rebranded RiskOptics, and reverted to the ZenGRC name in…
Astelia
A Tel Aviv exposure-management platform founded by former leaders of Israel's National Red Team, backed by Index Ventures…
Sign In Compliance
Sign In Compliance (formerly ThreatSwitch) is a NISPOM insider-threat and compliance management platform for cleared federal contractors, now…
Ostrich Cyber-Risk
Cyber risk quantification platform using Monte Carlo simulation and the Open FAIR ontology to translate security findings into…
SafeGuard Privacy
Privacy compliance management platform combining assessment workflows, vendor risk tracking, and an AI assistant, used as the backbone…
Evolve Security
A Chicago offensive-security firm pairing continuous pen testing with its Evolve Academy bootcamp.
HelmGuard AI
London-based agentic GRC platform where AI agents monitor controls, manage third-party risk, and govern other AI agents.
Compyl
AI-guided governance, risk, and compliance platform automating control testing and evidence collection across 70+ frameworks including SOC 2,…
PrivacyPal
PrivacyPal (Privacy Pal LLC / PrivacyPal.ai), based in Miami, Florida, builds AI governance and ‘shadow AI’ detection technology…
Perimeter
Minnetonka, Minnesota-based vendor and third-party risk management platform (rebranded from ProcessBolt in 2025) automating security questionnaires, evidence review,…
SPECTRA
MSP certification and cyber-resilience warranty platform linking managed service providers to insurance carriers and brokers.
Carbide
Nova Scotia-based GRC and compliance automation platform (formerly Securicy) mapping evidence across SOC 2, ISO 27001, HIPAA, GDPR,…
Thoropass
Compliance automation platform combined with in-house auditors for SOC 2, ISO 27001, HIPAA and other frameworks.
Chino.io
Italy-based GDPR/HIPAA/AI Act compliance platform and outsourced DPO service for digital health, acquired by Sicuro.it in March 2025.
Apptega
GRC automation platform that maps a single control set across dozens of frameworks (SOC 2, PCI, HIPAA, CMMC,…
Quantivate
Governance, risk, and compliance software for banks and credit unions, now operating as a distinct product brand within…