Bastion

Bastion is a compliance and security automation platform aimed at startups that need to pass SOC 2, ISO 27001, GDPR, or HIPAA audits quickly without a dedicated security team. The platform combines automated evidence collection across 30-plus frameworks with embedded security tooling (endpoint, cloud, code, and identity misconfiguration checks), continuous dark-web credential monitoring, and access to virtual CISO and penetration-testing services, positioning itself as an all-in-one alternative to stitching together a compliance-automation tool with separate security point products.

Founded in 2022 in the Paris area (Nanterre), France, by a team of engineers who spent several years as forward-deployed engineers at Palantir working with government and Fortune 500 clients, Bastion raised approximately $2.8 million in seed funding in 2023 from investors including Kima Ventures, Frst, and Global Founders Capital. The company is small, with named customers including Lemlist, Ankar AI, and Twin cited for SOC 2 and ISO 27001 certifications achieved on the platform.

Bastion’s pitch leans on its founders’ Palantir pedigree building sensitive-data systems for demanding institutional clients, differentiating it from lower-cost, self-serve compliance-only tools like Vanta or Drata by bundling actual security remediation tooling and expert services alongside the audit-evidence workflow. As an early-stage company, its evidence base is still mostly a handful of named customer logos rather than large-scale independent validation.