Skip to content

Resolver (a Kroll Business)

Cloud-based GRC platform connecting enterprise risk, compliance, audit and third-party risk data into one risk intelligence view.

Visit Website ↗ + Add to Compare
55/100Incremental Innovator

Overview

Resolver provides a cloud-based governance, risk and compliance (GRC) platform spanning enterprise risk management, regulatory compliance, internal audit, and third-party and cyber risk, designed to connect data that traditionally sits in siloed risk registers into what the company calls a single ‘risk intelligence’ view. Since being acquired by risk-advisory and investigations firm Kroll in 2022, Resolver has integrated with Kroll’s investigations, cyber incident response and advisory data, giving its platform access to real-world incident and threat context that standalone GRC software vendors typically lack.

Founded in 2000 and headquartered in Toronto, Resolver reports supporting more than 1,000 global companies representing over $6.5 trillion in market capitalization. A Forrester Total Economic Impact study, commissioned by Resolver but based on interviews with actual customers, found a 327% return on investment from adopting the platform, and Resolver was named a SPARK Matrix Leader in Governance, Risk and Compliance Platforms for Q1 2026.

Its differentiator is the connection to Kroll’s broader risk-advisory ecosystem, though as a two-decade-old platform now operating as a business unit within a larger parent, its evolution is incremental rather than a reinvention of GRC software.

Innovation Matrix Assessment

Innovation Velocity 5/10

An established, mature GRC platform whose recent evolution has come through integration with parent Kroll's data and services rather than fast independent product cycles.

Operational Value 6/10

Connecting siloed risk registers into a single view gives risk and security teams a more coherent picture than managing enterprise risk, compliance, audit and third-party risk in separate tools.

Market Momentum 6/10

Independently corroborated: a Forrester-conducted TEI study (327% ROI, based on customer interviews) and a Q1 2026 SPARK Matrix Leader placement provide real third-party validation.

Category Disruption 4/10

A well-established, 20+ year old GRC platform now operating within a risk-advisory parent company; its integration with Kroll is a meaningful but incremental evolution rather than a redefinition of the category.

Real-World Efficacy 6/10

The Forrester TEI study, while commissioned by Resolver, is based on structured customer interviews and is a more rigorous independent evidence source than typical vendor marketing.

Enduring Relevance 6/10

Enterprise risk and compliance management remains a persistent requirement, and integration with Kroll's investigations and incident-response data keeps the offering grounded in real-world risk events.

Why CISOs Should Care

Connects compliance, audit and third-party/cyber risk data into one platform, and links to Kroll's investigations and incident-response context for more grounded risk assessments.

What Makes It Different

Access to parent company Kroll's investigations, cyber incident response and advisory data, which pure-software GRC vendors do not have.

The Matrix Verdict

55/100 — INCREMENTAL INNOVATOR

An Incremental Innovator: Resolver has genuine, independently corroborated customer value (the Forrester ROI study, SPARK Matrix Leader placement) and a differentiated data connection through Kroll, but as a mature platform within a larger advisory parent it is an evolution rather than a category-redefining product.

Editorial Note: Claims vs. Verified Findings

The Forrester TEI study was commissioned by Resolver, though based on structured interviews with actual customers rather than vendor self-reporting; standalone employee-count figures for the Resolver business unit within Kroll were not disclosed.

Sources