Oneleet

Oneleet sells compliance automation with an explicit thesis that most SOC 2 and ISO 27001 tooling in the market produces paperwork without meaningfully improving security — what the company calls “compliance theater.” Rather than just tracking evidence and generating audit-ready reports, Oneleet bundles the underlying security controls themselves — penetration testing, code scanning, cloud security posture checks, attack surface monitoring, mobile device management, and security-awareness training — into one platform, so customers are meant to end up both certified and more genuinely secure, rather than certified because they filled out a questionnaire.

Founded in 2022 by Bryan Onel, Ora Onel, and Erik Vogelzang out of Y Combinator’s Summer 2022 batch, Oneleet is headquartered in Amsterdam, Netherlands. The company grew to eight-figure annual revenue profitably on its seed capital alone before raising a $33 million Series A in October 2025 led by Dawn Capital, with participation from Y Combinator and notable individual investors including former Snowflake/ServiceNow CEO Frank Slootman and Dropbox co-founder Arash Ferdowsi.

Oneleet competes directly against established compliance-automation platforms like Vanta and Drata, which primarily orchestrate evidence collection and integrations, by folding actual security services (pentesting, ASM, training) into the same subscription. That bundled, all-in-one model is the company’s core differentiation, and its organic, capital-efficient growth prior to raising outside funding is a genuine, independently reported signal of product-market fit rather than a vendor claim.