Governance, Risk & Compliance
Cybersecurity governance, risk assessment, compliance monitoring, and regulatory reporting.
Destination Certification
A bootstrapped Victoria training provider specializing in CISSP, CCSP, and CISM, co-founded by a CISSP Study Guide co-author.
Summit
Summit Security Group is a Pacific Northwest-based cybersecurity consultancy founded in 2011, delivering services across the security spectrum:…
Nova Leah
Nova Leah automates FDA cybersecurity risk documentation for medical device manufacturers, replacing manual spreadsheet-based compliance processes.
Tevora
Tevora is a cybersecurity and compliance consultancy providing penetration testing, GRC program development, and PCI/HIPAA compliance advisory services…
Beazley
A major Lloyd's specialty insurer with an in-house incident-response cyber offering, being acquired by Zurich for GBP 8.1B.
Munich Re
A global reinsurer whose HSB subsidiary acquired cyber insurer At-Bay for $575M.
Kovr.ai
A FedRAMP-authorized agentic compliance platform (Agent Artemis) acquired by Gryphon-backed Fortreum in April 2026.
SmarterD
SmarterD is an AI-powered data convergence platform that unifies IT, security, and compliance data scattered across an organization's…
Aravo Solutions
A San Francisco-based third-party risk management (TPRM) platform used by large global brands to onboard, assess, and continuously…
Trustero
A Palo Alto-based AI-driven compliance platform that automates gap analysis, remediation guidance, questionnaire responses, and evidence collection for…
SecurityStudio
Minnetonka, Minnesota SaaS platform built around the S2Score, a 300-850 credit-score-style measure of organizational information security risk, paired…
DSShield
A Riyadh-based, PE-backed national cybersecurity integrator serving Saudi government and critical-infrastructure clients under Vision 2030 mandates.
MetricStream
One of the oldest enterprise GRC vendors, offering a low-code/no-code cloud platform spanning risk, compliance, audit, and third-party…
AssurancePoint
AssurancePoint is an Atlanta-based CPA firm specializing in independent security and compliance assessments, issuing attest and compliance reports…
Flagright
A San Francisco explainable-AI financial-crime compliance platform with a Series A and multi-country customers.
Quantivate
Governance, risk, and compliance software for banks and credit unions, now operating as a distinct product brand within…
Elm AI
A New York startup (formerly Esger) that deploys AI agents to automate supplier compliance, due diligence, and third-party…
CyberGuard360
White-label compliance-as-a-service and vCISO platform built for managed service providers to manage cybersecurity risk assessments and compliance across…
ThriveDX
A well-funded Miami cybersecurity training provider spanning corporate, higher-education, and consumer programs.
ControlCase
A PE-backed compliance-certification firm that added CMMC assessment capability by acquiring CyberNINES in April 2026.
Pervade Software
Cardiff, Wales-based vendor whose OpView and OpAudit platforms combine SIEM-style monitoring, vulnerability tracking and compliance evidence management, and…
Compleye
Amsterdam-based compliance automation platform helping small and mid-sized businesses achieve ISO 27001, SOC 2, and GDPR compliance without…
Hicomply
A North East England-based compliance automation platform, backed by growth-capital firm BGF, that helps fast-growing businesses achieve and…
BD Emerson
BD Emerson is a Richmond, Virginia-based cybersecurity, compliance, and privacy consulting firm founded in 2020, offering cybersecurity consulting,…