Operating today as 11:11 Systems after its rebrand from Sungard Availability Services, this Pennsylvania firm (founded 1978) has long supplied production and disaster-recovery infrastructure to large global enterprises, spanning cloud security, compliance, and incident response.
Founded in 2021, 1Fort is a US startup that automates the paperwork and control verification businesses need to meet cyber-insurance security requirements.
1Fort
360 Advanced is a US compliance and cybersecurity firm, founded in 2004, that combines regulatory compliance work with data-security services for its clients.
360 Advanced
AI-powered platform for automating third-party vendor risk assessments.
3rdcomply
Platform for managing third-party & supply chain risks across multiple domains
3rdRisk Platform
AI-powered GRC platform for risk, compliance, audit, and vendor management
6clicks GRC
AI-powered audit management platform for compliance audits and certifications
A-LIGN A-SCEND
Active Navigation, founded in 2008, builds file-analysis software that helps enterprises discover, classify, and maintain ongoing control over unstructured data.
Activereach, a UK provider founded in 2008 and now part of Babble, delivers internet, networking, voice, and security offerings through cloud, managed-service, software, and appliance formats.
Cyber GRC SaaS platform for risk mgmt, compliance automation & control monitoring
Acuity Risk Management STREAM®
Adaptive, founded in 2021, builds a platform combining infrastructure access management with data security.
Compliance training platform with AI content creation and GRC integrations
Adaptive Security Risk
Adlumin, founded in 2016, builds detection technology aimed at identity-based attacks.
Adlumin Inc.
AirMDR, founded in 2023, runs an AI-driven virtual security analyst that investigates threats, triages incidents, and carries out response actions.
AirMDR
Agentic AI SOC platform for autonomous incident investigation & response.
Airrived Third-Party Risk Assessment
Aiuken Cybersecurity, founded in Spain in 2012, is an international IT security company focused on security and cloud-services solutions.
Aiuken
Alation Platform
Alert Logic, founded in 2002 and now part of HelpSystems (Fortra), has spent more than a decade building cloud-security solutions designed to work alongside hosting and cloud-service providers.
Aladdin R.D., founded in Russia in 1995, develops and supplies authentication devices and information-security products for protecting confidential data.
Enterprise compliance management platform for multi-framework assessments
Allgress Compliance ModuleAllgress GRC SolutionsAllgress Risk RegisterAllgress Vendor Management Solution
Autonomous AI system for continuous penetration testing and exploit validation
Ampcus ComplyX
Human risk management platform using AI nudges to drive employee self-remediation.
Amplifier Security Platform
GRC platform built on a data engine with agentic AI: normalizes GRC data, automates governance/risk/compliance, and supports compliance-as-code.
Anecdotes Agentic GRCAnecdotes ComplianceAnecdotes Cross-MappingAnecdotes Custom FrameworksAnecdotes Data EngineAnecdotes GovernanceAnecdotes GRCAnecdotes RiskAnecdotes Unified GRC Program
AI-powered FedRAMP compliance automation platform for SaaS companies.
Anitian FedFlexAnitian FedFlex Starter
Human cyber risk assessment platform for identifying vulnerable individuals
ANOZR WAY AY PeopleSight
ANRC, founded in 2007 and since merged into Focal Point, focused on cybersecurity training for security professionals and system administrators.
ANRC (Merged into Focal-Point)
APMG International, founded in 1993, is an examination institute that accredits training and consulting organizations and administers professional certification schemes.
APMG International
AI-powered cyber compliance platform for security automation and compliance
Apollo Secure AI-Powered Cyber Compliance
Risk management platform for risk registers, asset & control mgmt.
Apomatix
Applied Risk, founded in the Netherlands in 2012, specializes in industrial control system security, working with both enterprise and SMB clients on industrial automation and process-control risk.
Applied Risk
Multi-framework cybersecurity compliance & risk management platform.
Apptega PlatformApptega Risk ManagerApptega Third-Party Risk Manager
AI governance platform for managing AI risks and regulatory compliance
Archer Evolv™Archer Regulatory & Corporate Compliance ManagementArcher Third-Party Risk Management
PAM solution for managing and securing privileged access to systems
ARCON Security Compliance Management
Armor, founded in 2009, offers secure cloud hosting built around a closed-loop security approach intended to reduce the operational complexity of managing cyber threats.
ASPM platform unifying findings from code, cloud, and infrastructure scanners
ArmorCode Compliance
Asenion Platform
Web-based audit lifecycle management platform compliant with IIA standards
ASPIA Audit ManagementASPIA KRI ModuleASPIA Third-Party Risk Management Solution
Assured Enterprises, founded in 2013, provides cybersecurity assessments, consulting, and related products.
AI-powered CTI platform converting unstructured threat data into role-based intelligence.
asvin Risk by Context™
At-Bay, founded in 2016, sells cyber insurance combined with its own risk-analysis and risk-management programs, distributed through broker partnerships.
At-Bay Inc.
AI-driven TPRM platform automating vendor onboarding, risk assessment, and compliance.
Atlas Systems ComplyScore®
Audit, risk, and compliance management.
AuditBoard Platform
Unified GRC platform for risk, audit, and compliance management
AuditCue Risk Software
Aura, founded in 2019, is a mid-sized (1,000+ employee) US company offering an integrated suite of consumer-facing digital-safety services.
Unified GRC platform with AI-powered analytics for risk, audit, and compliance
Aurex™
GRC platform for compliance management, risk quantification, and controls
Avertro CyberHQ®Avertro Threat Defense Augmented GRC
Human risk assessment and security awareness training platform
AwareGO Human Risk Assessment
Survey tool measuring organizational security culture using behavioral science.
Awareways Culture Scan
Unified platform for cybersecurity assessments across enterprise frameworks
Axio Axio360 PlatformAxio Quantification Wizard
Axon Technologies, founded in the UAE in 2018, offers cybersecurity consulting, security-as-a-service, incident response, and training.
Axon Technologies
Axway, founded in 2001, is a mid-sized US company whose AMPLIFY platform handles cloud-based data integration alongside identity, data-security, and risk-management capabilities.
Baobab, a German cyber-insurance company founded in 2021, combines insurance with its own technology and risk knowledge to protect organizations against cyber threats.
Baobab
Multi-framework compliance & security platform for scale-up companies.
Bastion
Cloud-based platform mapping security controls to CMMC, HIPAA, NIST & more.
Beachhead ComplianceEZ 2.0
Continuous monitoring platform for third-party cybersecurity risk assessment
Bitsight Continuous MonitoringBitsight Governance & AnalyticsBitsight Third-Party Risk Management
AI-native platform for third-party cyber risk mgmt & vendor assessment
Black Kite Global Adaptive AI Assessment Framework (BK-GA³™)
Bloombase, founded in 2004, develops enterprise data-security products focused on least-invasive protection for data in transit and in storage.
A security solution that identifies and remediates cybersecurity vulnerabilities across third-party ecosystems through continuous monitoring and risk assessment.
BlueVoyant Supply Chain Defense
AI-era DLP with entity-aware content analysis across SaaS, email, and AI tools
Bonfy ACS
Brighterion, founded in 2000, builds its products on a cognitive-computing platform combining AI and machine learning for real-time predictive decisions.
BSI, a large UK standards organization founded in 1901, helps a broad global client base adopt and apply standards of best practice.
BSI
BullGuard, founded in the UK in 2002, offers a consumer security portfolio spanning antivirus, round-the-clock protection, and identity and social-media monitoring across devices.
Bundesdruckerei, based in Berlin, is one of the oldest companies in this dataset — tracing back to 1763 — and today provides secure identification systems spanning both physical and digital identity.
Controls maturity assessment platform for compliance & risk management
C2 Controls Maturity AssessmentC2 Project Risk ManagementC2 RiskStore®C2 Vendor Risk Management
DORA compliance platform for financial institutions' cyber resilience
C2Sec DORA Cyber ResilienceC2SEC XSPM
Automates MS SQL Server hardening for secure config & compliance.
CSS for IIS
Cambridge Intelligence, founded in the UK in 2011, builds KeyLines, a visualization technology for exploring complex connected data.
Cambridge Intelligence
Automates compliance evidence collection, mapping, and validation for audits.
Carbide Automated Evidence CollectionCarbide PlatformCarbide Risk Management
Caretower, founded in the UK in 1998 and later acquired by Integrity360, is an independent IT security specialist known as a value-added reseller with network security expertise.
AI-powered compliance automation platform for continuous cyber assurance
Caveonix Compliance OS
CBI, founded in 1991, manages IT risk for clients through tailored assessments and custom solutions aimed at keeping data secure, compliant, and available.
CBI
Automated digital asset discovery and monitoring for external attack surface
Ceeyu Digital Questionnaires for TPRM
Healthcare cybersecurity benchmarking study and peer comparison platform
Censinet One™
CensorNet, founded in the UK in 2005, delivers a multi-layered cloud security platform combining integrated security controls with cloud application management.
Center for Identity is a US research organization focused on identity management, privacy, and security research, education, and outreach.
Center For Identity
Premium GRC platform for compliance automation, attestation, and certification
Centraleyes AI Risk RegisterCentraleyes Centraleyes+Centraleyes GRC as a Service
Centrify, founded in 2004, focuses on securing enterprise identities across hybrid IT environments spanning cloud, mobile, and on-premises systems.
Compliance management platform for regulatory adherence and policy control
Cerebra BeShield
AI-powered TPRM platform managing third-party risk across full lifecycle.
Certa TPRM
CertiK, founded in 2017 by Yale and Columbia academics, uses AI-assisted analysis to audit and monitor blockchain protocols and smart contracts.
CertiK
File integrity monitoring & system hardening solution with auto-remediation.
CimTrak CCR
Managed TPRM services for vendor assessment and risk response
CISOSHARE Third-Party Risk Management (TPRM) Services
Unified platform for CISOs to manage risk, compliance, and governance.
CISOteria Suite
Citadel AI Platform
AI-augmented platform for cyber risk quantification using FAIR & simulations.
Citalid Cyber Risk Quantification Platform
Web-based risk management platform for ICS/SCADA environments using a PDCA lifecycle.
Citicus ONE
GRC platform for governance, risk, and compliance management
CL Digital GRC Platform
AI-powered platform for security, privacy, and compliance assessments
Clearly AI
Clearswift, founded in the UK in 1982 and later acquired by RUAG, builds information-protection technology spanning application, cloud, data, and endpoint security to let organizations collaborate securely.
Healthcare cyber risk mgmt & HIPAA compliance software platform
Clearwater IRM|Pro®
Cloud Security Alliance, founded in 2008, is a nonprofit organization dedicated to defining and promoting best practices for secure cloud computing.
Cloud Security Alliance
CloudCheckr, founded in 2011, is a web-based platform for visibility and understanding into Amazon Web Services deployments.
Cloudcheckr
Cloudera, founded in 2008, is a mid-to-large data platform company (2,000+ employees) whose offerings include risk and security-operations capabilities alongside its core data analytics products.
Cloudera
CMMC Level 1 compliance platform with templates and policy generation
CMMCMade Simple
CNS Group (Six Degrees), originally Convergent Network Solutions and founded in London in 1999, provides information-security and networking consultancy and built the Mosaic platform for managed security and compliance.
Coalition, founded in 2017, pairs cyber insurance with its own proprietary security tools to help businesses manage and reduce cyber risk.
Coalition
DevSecOps platform for NIST SP 800-218 SSDF compliance & secure dev.
CodeLock
Security controls assurance software for critical infrastructure and govt.
COGNETIQ
EASM platform for continuous external attack surface discovery and risk mgmt.
Coinnect M&A Cyber Risk ManagementCoinnect TPRM Platform
Collibra Platform
Compass Security, a Swiss firm founded in 1999 with around 45 employees across Switzerland and Germany, has become a recognized IT-security consulting practice in Europe.
Platform for streamlining ISO 27001 vendor compliance verification.
Compleye
Compliance mgmt platform for MSPs offering policy mgmt & risk assessments
Compliance Scorecard Compliance Uncomplicated
All-in-one GRC SaaS platform for cybersecurity compliance & data privacy.
COMPLYAN
AI-powered enterprise GRC platform for compliance, risk, and policy mgmt.
Complyance
ComplyDo, a German startup founded in 2025, builds AI-agent-based compliance software aimed at making GRC teams more efficient, with customers including large EU enterprises.
ComplyDo
GRC platform for compliance, risk, vendor mgmt with automated evidence collection
Compyl GRC Platform
GRC platform automating compliance, risk assessment & audit across 100+ frameworks.
Continuum GRC
ControlCase, founded in 2004, is a compliance-as-a-service provider and PCI DSS specialist offering governance and risk-management solutions.
ControlMap, founded in 2019 and later acquired by ScalePad, offers a SaaS platform for managing IT compliance programs such as SOC 2, GDPR, FedRAMP, and ISO.
Convercent, founded in 2012, builds compliance software aimed at one of the business world's more persistently unsolved software problems: corporate ethics and compliance management.
Convercent
AI platform that auto-generates accurate responses to security questionnaires.
Conveyor Security Questionnaire Automation
EU NIS2 compliance platform automating risk mgmt, evidence & reporting.
Copla NIS2 Compliance Software
Corax Cyber Security, a UK company, offers a SaaS business-intelligence tool for quantifying cyber risk and assigning remediation responsibility.
Corax Cyber Security
Third-party risk management platform for healthcare organizations
CORL Technologies
AI-powered audit automation platform for IT compliance and regulatory audits
Cortea Audit Suite
CounterFlow, founded in 2017 and later acquired by LiveAction, was an AI startup building a network-forensics platform for threat hunting.
CounterFlow
Cowbell Cyber, founded in 2019, uses deep learning and actuarial methods to estimate the probability and financial impact of cyber threat exposure for insurers and policyholders.
Cowbell Cyber Inc
CI/CD-integrated platform for EU Cyber Resilience Act compliance automation.
CRACI
Cradlepoint, founded in 2004, provides software-defined wireless and wired WAN solutions for distributed and mobile enterprises.
Credal Platform
CREST, a UK nonprofit, sets standards for the technical information-security marketplace and its regulated professional-services industry.
CREST
Cult (Cybercoach), a Finnish company founded in 2019, focuses on security culture, risk management, cyber resilience, and agile security practices.
Cult / Cybercoach
GRC platform for risk, compliance, audit, and policy management
Cura Software Solutions
Curricula, founded in 2015 and later acquired by Huntress, built short, story-based security-awareness training that simulates a cyberattack scenario for employees.
CY4GATE, founded in Italy in 2014 and listed on Euronext Growth Milan since 2020, designs technologies and services for cyber intelligence and cybersecurity.
CY4GATE
Cyanre, founded in South Africa in 2002, provides cyber forensic services aimed at cost-effective, innovative investigations.
AI-driven platform to discover, assess, and respond to third-party supply chain risks.
Cyb3rOperations Third-Party Risk Platform
CYBER RANGES, founded in Cyprus in 2006, provides a cloud-based cyber range platform for security training, recruitment, and national cyber-capability building, available online, on-premises, or as a portable solution.
CYBER RANGES
CCSS compliance management platform for cryptocurrency companies.
CyberCatch CCM
Cybercube, founded in 2015, builds data-driven cyber-risk analytics purpose-built for the insurance industry.
Cybercube
CyberDirekt, a German company founded in 2017, helps small and mid-sized businesses protect against digital risks.
CyberDirekt
CyberGRX, founded in 2015 and later acquired by ProcessUnity, built a third-party cyber-risk management platform for assessing and monitoring risk exposure across an enterprise's partner ecosystem.
CyberGRX
All-in-one cybersecurity & compliance platform for MSPs serving SMBs.
CyberGuard360 Platform
CyberGym, founded in Israel in 2012, builds cybersecurity training facilities that replicate real working environments, with particular focus on SCADA settings.
CyberGym Control Ltd.
Continuously maps digital footprint, identifies exposures & validates exploitability
Cyberint Supply Chain Intelligence
CyberMDX, founded in 2017 and later acquired by Forescout, built multi-layered security technology aimed specifically at medical devices and clinical networks.
Cybernance, based in Austin, Texas, is an early-stage company focused on measuring and quantifying cyber risk.
Cybernance
Cybersecurity services firm offering GRC, managed security, DNS, and training.
Cybernovr
CyberPoint International, founded in 2009, builds cybersecurity products and services aimed at surfacing the threats and vulnerabilities that expose data and infrastructure to compromise.
CyberPoint International
AI-powered cyber risk management platform for compliance, risk quantification
CyberSaint CyberStrong
CyberUpgrade, a Lithuanian startup founded in 2023, offers cybersecurity as a service — assessments, staff training, documentation, and security-tool integration advice — for enterprises and technology organizations.
CyberUpgrade
Vendor cybersecurity assessment platform based on NIST, ISO, GDPR, NIS2 frameworks.
CyberVadisCyberVadis Cyber Risk Assessment
AI-native GRC platform unifying compliance, risk, and governance posture mgmt.
Cybervergent
CyberVista, later acquired by N2K Networks, focused on cybersecurity training, education, and workforce development aimed at closing skills gaps.
CyberVista
Cyberwatch, founded in France in 2015, built one of the first services for automatically finding and patching IT vulnerabilities as soon as they're disclosed.
Cyberwatch
Cyberwrite, founded in Israel in 2016, builds technology for the cyber-insurance ecosystem, covering digital engagement, underwriting, and risk management.
Cyberwrite
Cybint, founded in Israel in 2015 and later acquired by ThriveDX, built an on-demand intelligence platform based on a proprietary information-processing method.
Cybint
AI-powered threat intelligence: the Vision intelligence platform, a threat-intel platform (TIP), agentic AI hunting, internet-scale ASM, and dark-web monitoring.
Cyble Third-Party Risk Management (TPRM)
CYBR International, founded in 2016, provides a broader cybersecurity program — people, policy, and process — for enterprise networks, plus scanning, threat-intel, and security-scorecard tools.
CYBR International
AI-powered human risk mgmt platform for behavioral security & awareness training
CybSafe AI-POWERED HUMAN RISK MANAGEMENT
Cyence, founded in 2014 and now part of Guidewire, combines data science, cybersecurity, and economics into an analytics platform for quantifying the financial impact of cyber risk.
Cyence – Guidewire
Cymbel Corporation, founded in 2000, is an IT solutions provider focused entirely on security and compliance.
Unified human risk platform covering identity, behavior, data, and AI usage.
Cymphony Human Risk Platform
Automated vuln assessment tool for web apps, networks & cloud infra.
CyNation CyDesk
Cynomi, founded in the UK in 2020, provides an AI-powered automated vCISO platform that lets MSSPs and consulting firms deliver virtual CISO services at scale.
Cynomi
AI-powered GRC platform automating compliance, audit prep, and control monitoring
Cypago Agentic-AI Cyber GRC
Cyrebro (CyberHat), founded in Israel in 2013, delivers security services designed and operated by a team with backgrounds in offensive and defensive security and state-level investigation.
Cyrebro – CyberHat
AI-driven unified platform for GRC, attack surface mgmt, and cloud security
Cytrusst AI-Driven Unified Cybersecurity PlatformCytrusst Governance, Risk and Compliance (GRC)
AI-assisted GRC platform for internal audit, compliance, and risk teams.
Daitasoft daitaGRC
Unified GRC platform for security, privacy, and compliance management.
Security & Compliance Platform
Dataguise, founded in 2007 and later acquired by PKWARE, detects and protects sensitive data in real time across repositories to support safe big-data use.
AI platform for real-time event, threat & risk intelligence detection
ThreatConnect Risk Quantifier
Datashield, founded in 2009 and later acquired by Lumifi, has provided cybersecurity services to organizations since its founding.
Datashield
Dataships, founded in Ireland in 2019, built a SaaS product that automates data-privacy compliance (GDPR, CPRA, and others) for SMEs and scaling startups.
Dataships
DatChat, founded in 2014, provides a secure messaging platform with message-expiration controls, screenshot prevention, and patented encrypted-photo technology.
Dattak, a French company founded in 2021, offers cyber insurance built on its own cybersecurity assessment technology, aiming to gauge a company's security posture without lengthy questionnaires.
Dattak
Dcoya, founded in Israel in 2015 and later acquired by NINJIO, provided security-awareness training with phishing, malware, and drive-by-attack simulations to change employee security behavior.
Deduce, founded in 2019 and later acquired by CHEQ, used collective intelligence data to combat account-takeover fraud.
iMessage capture & archiving solution for financial regulatory compliance.
DeepView ChatGuard iMessageDeepView ChatGuard TelegramDeepView ChatGuard WhatsAppDeepView Platform
Fraud detection & prevention platform for banking and credit unions.
DefenseStorm GRID Active Governance Program
SaaS vCISO platform for compliance, risk mgmt across ISO 27001, NIS2, GDPR & SOC 2.
Defensiq - CISO as a Service
AI-powered GDPR compliance platform with automated evidence collection
Delve GDPRDelve PCI-DSS ComplianceDelve SOC 2
OT cyber risk quantification platform translating exposures into financial metrics
DeNexus DeRISK CRQ
DGC, a German company founded in 2015, provides all-in-one cybersecurity solutions positioned around long-term, trusted client relationships.
DGC
Didomi, founded in France in 2017, runs a consent and preference-management platform that helps businesses collect and act on user privacy choices.
Didomi
Digital Defense, founded in 1999 and later acquired by HelpSystems, provided managed security risk-assessment services protecting assets for organizations ranging from small businesses to Fortune-level companies across more than 65 countries.
Digital Hands, founded in 2010, is a certified woman-owned US managed services provider (WBENC/EDWOSB) that delivers its services entirely onshore.
Enterprise Security Risk Posture Mgmt platform for automated GRC & SPM
DigitalXForce Enterprise Security Risk Posture Management
AI-powered GRC platform for governance, risk, compliance, and audit management
Diligent AI
DocAuthority, founded in Israel in 2016, applies machine learning alongside business-process expertise to classify unstructured data by its true business context and confidentiality level.
Compliance automation.
Third-Party Risk ManagementCompliance AutomationDrata AIDrata AI Questionnaire AssistanceDrata Compliance as CodeDrata Compliance AutomationDrata Continuous TrustDrata Enterprise GRCDrata Risk ManagementDrata Third-Party Risk ManagementDrata Trust CenterEnterprise GRCTrust Center
DryvIQ, founded in 2013, provides a scalable data-management platform for classifying, migrating, and governing unstructured data across cloud and on-premises repositories.
User risk scoring & reduction platform with attack simulations & training
Dune Security Dune Studio
DynaRisk, founded in the UK in 2016, offers personal cyber-risk management for individuals and insurance partners, including breach monitoring and remediation guidance.
DynaRisk
Dynatrace (NYSE: DT), founded in 2005, is a large observability company (5,000+ employees) whose platform includes continuous runtime application security alongside its broader monitoring and AIOps capabilities.
EBRAND, a Luxembourg company founded in 2001, focuses on digital identity protection, including brand protection, domain management, and cybersecurity monitoring.
EBRAND AG
ECSC Group, founded in the UK in 1998 and later acquired by Daisy Corporate Services, positioned itself as a full-lifecycle cyber security specialist covering risk identification through incident remediation.
ECSC
CMMC compliance scoring and cybersecurity education services firm.
eFortresses CMMCSCORECARD
Platform for cyber risk mgmt, compliance tracking, and financial quantification
Egerie Platform
eIQnetworks, founded in 2002, built a unified security-intelligence and analytics platform for network and infrastructure visibility, security, and compliance.
eIQnetworks
elba, a French startup founded in 2022, combines security-awareness training with SaaS data-security posture management in one human-risk-management platform.
elba
Elpha Secure, founded in 2021, pairs cyber insurance with proactive security tools aimed at small and mid-sized businesses.
Elpha Secure
Enablon, founded in France in 2000 and later acquired by Wolters Kluwer, provides EHS, sustainability, and risk-management software for compliance and operational-risk programs.
Enablon
Enterprise Srl, an Italian company founded in 2005, focuses on log management and compliance technology for regulatory data-retention and monitoring requirements.
Enterprise Srl – Business Log Management
Platform for building security programs and simplifying cyber insurance procurement.
Enveedo Cyber Insurance / Risk Mgmt PlatformEnveedo Platform
Envelop Risk, founded in the UK in 2016, applies AI and machine learning to price cyber-insurance risk for the reinsurance market.
Envelop Risk Analytics
EQTY Lab Platform
ESNC, a German company founded in 2010, specializes in SAP security, including vulnerability scanning and code-security analysis for SAP systems.
Ethoca, founded in Canada in 2005, runs a global collaboration network that helps merchants and card issuers resolve fraud and disputes in real time.
Ethoca
Ethopass, founded in 2016, provides background-screening and trust-verification technology for vetting employees, contractors, and partners.
Ethopass
Eureka Security, founded in Israel in 2021 and later acquired by Tenable, built a cloud data security posture management platform aimed at the fast-moving sprawl of cloud data.
EverC, founded in Israel in 2010 and later acquired by G2 Risk Solutions, provides AI-driven risk intelligence for identifying fraud, counterfeits, and compliance risk on e-commerce platforms.
EverC
Evervault, founded in Ireland in 2019, builds encryption infrastructure aimed at removing complexity for developers.
Evervault
Third-party verification network for due diligence and compliance mgmt.
Evident The Evident NetworkEvident Third-Party Risk Mgmt PlatformEvident Vendor & Supplier Onboarding
SIEM and user/entity behavior analytics.
Exabeam Compliance
AI platform for supply chain visibility, TPRM, and compliance mgmt.
Exiger
Exonar, founded in the UK in 2013 and later acquired by NowVertical Group, built data-discovery and classification software for locating sensitive information across enterprise systems.
Centralized IAM platform automating provisioning for internal & external users.
Exostar CMMC Ready SuiteExostar Supplier Management
EYE Security, founded in the Netherlands in 2021, combines cyber insurance with managed detection and response for small and mid-sized European businesses.
EYE Security
Eyeonid Group, a Swedish company founded in 2013, provides identity-theft protection and monitoring to help consumers detect and respond to personal data breaches.
Eyeonid Group AB
Human risk management platform for behavior change and security awareness
Fable Security Platform
ML-based platform for insider threat monitoring & communication analysis.
FACT360 - Protective Compliance Platform
Cloud workload protection platform securing apps, data, and infrastructure
Faddom Compliance and IT Audit
FastPath, founded in 2004, builds governance, risk, and compliance software focused on ERP access controls and segregation of duties.
FastPath
AI-assisted GRC platform for compliance, risk, and vendor management.
Feha GRC Platform
Security platform for healthtech startups covering vuln mgmt, SIEM & compliance.
Fencer
FICO, founded in 1956, is best known for credit scoring but also offers fraud-detection and cybersecurity risk-analytics products.
FICO
Automated governance & compliance platform for financial institutions
Finosec
AWS-native compliance platform with automated auditing & remediation for enterprises/MSPs.
FirstWave AWS Compliance Solution
Foretellix, founded in Israel in 2017, provides verification and validation technology for autonomous-vehicle software, extending into safety and security assurance.
Foretellix
Forter, founded in 2013, runs an AI-driven fraud-prevention platform that helps e-commerce businesses separate legitimate customers from fraudulent transactions in real time.
Forter
ASM platform for discovering, monitoring, and prioritizing external/internal assets
FortifyData Cyber GRCFortifyData Security RatingsFortifyData Third-Party Risk Management
End-to-end supply chain risk management platform with collaborative intel.
Fortress Platform
Fox-IT, founded in the Netherlands in 1999 and later acquired by NCC Group, builds technology aimed at improving detection of criminal activity and hardening critical IT networks and systems.
Measures & reduces employee security risk via real-time behavioral risk scores.
Frame Security Human Risk Reduction
Fraud.net, founded in 2013, combines collective intelligence with machine learning in an AI-powered platform for real-time fraud detection and prevention.
Fraud.net
Fraugster, a German company founded in 2014, provides AI-driven payment-fraud prevention for e-commerce merchants and financial institutions.
Fraugster
Friss, founded in the Netherlands in 2009, builds AI-driven fraud detection, underwriting, and risk-assessment technology purpose-built for insurers.
Friss
Platform for NIST 800-171 and CMMC compliance management and documentation
FutureFeed NIST 800-171 Compliance
Encryption platform protecting data in transit and at rest with key management
Galaxkey Secure Sign
Supply Chain Analyzer: third-party cyber risk management and NIS2 supplier governance
Supply Chain Analyzer
Automated Register of Information (RoI) generator for DORA compliance
Galink DORA RoI Register
Galvanize, formerly known as ACL and founded in Canada in 1987, provides governance, risk, and compliance software for audit and compliance workflows.
Galvanize – ACL
AI-driven platform that operationalizes threat intel into risk-prioritized actions
Gambit KnightGuard for Board Assurance
GamerSafer, founded in 2021, provides identity verification and trust-and-safety tools built specifically for online gaming platforms.
Enterprise platform for BPM, enterprise architecture, automation, and GRC mgmt.
GBTEC BIC Platform
GLESEC, founded in 2003, provides managed security services — SOC, GRC, and vulnerability management — for organizations across Latin America and the US.
GLESEC GROUP
Payment page security solution with tokenization for PCI DSS compliance
GM Sectec Firstoken Monitor
Good Harbor, founded in 2001, advises government and commercial clients on cybersecurity risk management and broader strategic security matters.
Good Harbor
GREYSCOUT, founded in the UK in 2019, provides brand-protection and online-fraud-detection technology to spot unauthorized trademark use and counterfeit goods.
GREYSCOUT
Guardian Analytics, founded in 2005, built behavioral-analytics technology for detecting fraud in online and mobile banking, now part of NICE Actimize's fraud-prevention suite.
Guardian Analytics
AI-powered GRC & security ops platform for CISOs automating compliance workflows.
Hackmetrix OS
Slack-native microlearning platform for continuous employee security training
Haekka Workflows
ML-based anomaly detection solution for security, fraud, and device failures
Happiest Minds ComplianceVigil
All-in-one cybersecurity platform with 12 bundled tools for SMBs.
Havoc Shield
Government agencies and enterprises use Haystax Technology's threat and risk analytics, built in 2008, to catch insider threats and physical-security risks before they escalate.
Haystax Technology
Heliocor, founded in the UK in 2017, provides financial-crime compliance and risk-management technology for banks and fintechs to catch fraud and regulatory violations.
Heliocor
Continuous vendor risk mgmt platform with auto discovery and 24/7 monitoring.
Hero Security
HEROIC.com, founded in 2015, provides consumer cyber-safety and identity-protection tools including dark-web monitoring and antivirus.
HEROIC.com
AI-powered compliance automation for evidence collection & risk mapping.
Hicomply AIHicomply Platform
HighGround.io, founded in the UK in 2018, provides a security-assessment and compliance platform that lets managed service providers track and demonstrate client security posture.
HighGround.io
CTI services combining human expertise and AI for threat analysis
Hitachi Cyber StandardFusion
Holistic AI Platform
Security awareness and human risk management.
Hoxhunt Human Risk Management Platform
xASM and cyber risk quantification platform with continuous monitoring.
Salience Cyber Risk Quantification
Enterprise SIEM for threat detection, compliance & incident mgmt.
Huntsman Security Essential 8 Auditor
Hush, founded in 2021, provides digital-privacy and personal-data-removal services aimed at reducing individuals' online exposure.
Hush
Security questionnaire automation and compliance documentation management platform
HyperComply HyperCompliance
GRC platform for continuous compliance: control operations, risk management, audit, third-party risk, and policy management, with human-in-the-loop AI.
Hyperproof AuditHyperproof ComplianceHyperproof GRCHyperproof Policy ManagementHyperproof Risk ManagementHyperproof Third-Party Risk Management
QRadar SIEM and broader security suite.
IBM OpenPages
ID Experts, founded in 2003, helps organizations manage data-breach response and consumer notification alongside identity-theft protection services.
ID Experts
AI-powered GRC platform for risk, quality, compliance, audit, and workforce mgmt.
Ideagen Mazlan
Hands-on cloud security training labs for AWS, Azure, and Sentinel teams.
Immersive Labs Resilience Score
InCountry, founded in 2019, offers data residency as a service so companies can meet local data-protection regulations without building their own in-country infrastructure.
InfoSec Global, later acquired by Keyfactor, provided custom cryptography, key-exchange, and secure-communication technology.
Infotex, founded in 2000, specializes in managed security services and IT audit consulting for community banks.
Accredited forensic cell site geolocation analysis for criminal investigations.
IntaForensics Cyber Essentials Cert.
GRC platform for compliance management, gap analysis, and security posture.
IntelliGRC Platform
AI-powered SaaS platform for supply chain risk mapping and monitoring.
interos.ai Resilience Platform
Intersec Worldwide, founded in 2005, specializes in PCI compliance, forensic investigation, and cybersecurity consulting.
Intersec Worldwide, Inc.
Intertek Inform, formerly known as SAI Global and founded in 1993, is a large compliance, risk-management, and assurance software and services provider.
Intertek Inform
Intertrust Technologies, founded in 1990, provides trusted-computing products and services to corporations spanning mobile, consumer electronics, IoT, and enterprise software.
Integrated risk mgmt platform for healthcare cybersecurity executives
Intraprise Health BluePrint Protect™Intraprise Health HIPAA One™
IOActive, founded in 1998, advises Global 500 companies on security, combining risk-management frameworks with threat-modeling expertise across industries.
IOActive
IRM (Information Risk Management), founded in the UK in 1998, provides cybersecurity consulting and penetration testing.
IRM
AI-powered unified platform for identity, endpoint security, and compliance
Iru Compliance AutomationIru Trust Center
CMMC readiness assessment tool for DoD contractors
IS Partners CMMC Readiness Assessment
ISACA, founded in 1969, is a large (1,000+ employee) professional organization serving roughly 140,000 members across 180 countries with guidance and benchmarks for information-systems governance.
ISACA
Compliance management platform supporting 100+ frameworks including ISO 27001
ISMS.online IO
Quality, safety, HR & environment management software for QHSE managers
ISO2HANDLE Quality Management
K2Share, founded in 2004, provides cybersecurity compliance and risk-management consulting for government and enterprise clients.
K2Share – Security Beyond Compliance
Kandji, founded in 2018, is a large (250+ employee) platform for centrally securing and managing Mac, iPhone, iPad, and Apple TV devices.
Kenna Security, founded in 2010 and later acquired by Cisco, helped security and IT teams prioritize the vulnerabilities that pose the greatest actual risk.
Kenna Security
Compliance automation platform for GDPR, ISO 27001, TISAX, SOC2, and AI governance
Kertos
Kipling Secure Platform
Unified platform for secure data exchange across email, file sharing, MFT, and AI
Kiteworks CMMC Compliance
Knogin, an early-stage company founded in 2018, provides asset discovery and vulnerability management for cloud and OT environments.
Knogin
Security awareness training and phishing simulation.
KnowBe4 AIDAKnowBe4 HRM+ PlatformKnowBe4 Human Risk ManagementKnowBe4 SecurityCoach
AI-native platform automating cyber compliance for FedRAMP & CMMC.
Kovr AI Cyber Compliance Automation PlatformKovr.ai Second Front
GRC platform with cyber risk quantification for risk management and compliance
Kovrr AI Risk Governance SuiteKovrr Cyber Risk QuantificationKovrr Cyber Risk RegisterKovrr Cybersecurity Maturity Assessments Enhanced by CRQ
AI-powered pentest & VMDR platform for vulnerability scanning & management
Kratikal Governance, Risk and Compliance (GRC)
Simulates phishing, smishing, vishing, QRshing, ransomware & deepfake attacks.
Kymatio Digital WellbeingKymatio HRM
Cyber risk mgmt platform for external scanning, monitoring & exposure mgmt.
KYND Supply Chain Cyber Risk Mgmt
Lazarus Alliance, founded in 2006, provides cybersecurity compliance, risk-management, and assessment services, including FedRAMP work.
Lazarus Alliance, Inc.
Security program assessment service based on documentary evidence review
LEET Security AssessmentLEET Security LEET Stamp
AI-powered forensic assessment platform for third-party vendor risk analysis
Lema Forensic AI Assessment
Software supply chain management and SBOM.
Lineaje Third Party Risk Manager
AI-driven Human Risk Management platform for security awareness and training
Living Security Human Risk Management
Risk Cloud GRC platform: centralized risk quantification, automated evidence monitoring, AI workflow automation, and configurable GRC applications.
LogicGate Risk CloudLogicGate Automated Evidence MonitoringLogicGate Config NewtonLogicGate Risk Cloud PlatformLogicGate Risk Cloud QuantifyLogicGate Risk Management SuiteLogicGate Spark AI
BIA & BCP software for business continuity and disaster recovery planning
LogicManager Enterprise Risk Management SoftwareLogicManager ERM SoftwareLogicManager Internal Audit Planning & ScopingLogicManager Risk Ripple AnalyticsLogicManager Third Party Risk Management
Lumen (CenturyLink), a large company founded in 1985 with more than 40,000 employees, offers data-analysis and secure-collaboration solutions spanning application, endpoint, and infrastructure security.
MAD Security, founded in 2005, runs managed security and SOC services alongside compliance consulting for government and enterprise clients.
Cloud-based email archiving solution with unlimited storage and retention
Mailprotector SecureStore
Mako Networks, a New Zealand company founded in 2003, provides managed network security and PCI compliance for retail and distributed enterprises.
Marsh, a large (10,000+ employee) firm founded in 1817, is a leading global insurance broker and risk advisor with roughly 40,000 employees across more than 130 countries.
Marsh
Cyber risk quantification platform that scores & prices org risk in dollars.
Maxxsure
Meditology Services, founded in 2010, specializes its cybersecurity, privacy, and compliance consulting specifically for healthcare organizations.
Meditology Services
Cloud compliance platform for digital health with inheritable HIPAA controls.
MedStack Control
MegaplanIT, founded in 2001, combines PCI compliance work with penetration testing and cybersecurity assessments.
MegaplanIT Holdings, LLC
GamaSec (Menaya), an Israeli company founded in 2006, provides web-application vulnerability scanning and PCI compliance technology.
Meridian, formerly known as SEDC and founded in 1993, provides customer-engagement and cybersecurity technology for utilities.
Meridian
Email archiving and e-discovery, plus the compliance software to go with them, have been MessageSolution's focus since 2003.
Metabase Q, founded in 2019, provides managed security, testing, and consulting services aimed at reducing security risk through agile technology approaches.
Metabase Q
Platform to identify, measure, and reduce human cyber risk through training and
MetaCompliance Human Risk Management Platform
AI-driven GRC platform for risk, compliance, audit, cyber, and resilience mgmt.
MetricStream AI-first Connected GRC
Micro Focus, a large (2,000+ employee) UK company founded in 1976 and merged with HPE Software, provides application security, data security, and broader enterprise IT solutions.
AI-driven compliance assessment platform for OT/IoT environments
Microsec CyberAssessor
Mimecast Aware Governance & Compliance Suite
Mine, founded in Israel in 2019, automates data subject access requests (DSAR) as part of its data-privacy operations software.
Mitigata, an early-stage Indian company founded in 2021, provides cyber insurance and risk-assessment technology for enterprises.
Mitigata
AI-powered TPRM platform for vendor risk assessment, monitoring & remediation
Mitratech Prevalent
Mnemonic, a Norwegian company founded in 2013, helps businesses manage security risk, protect data, and defend against cyber threats.
Mnemonic
Quantifies cyber risk in monetary terms using the Open FAIR framework.
Muscope CRQMuscope|Risk - Compliance QuestionnaireMuscope|Risk - TPRM
Email compliance and archiving solution with DLP and threat protection
MX Layer Email Compliance
AI-powered platform automating security compliance for companies.
MycroftMycroft Audit & ComplianceMycroft Third-Party Risk Management
AI-powered healthcare compliance automation platform.
NaqNaq Automated ComplianceNaq Compliance Platform
Naq Cyber, an early-stage UK company founded in 2021, provides automated compliance and cybersecurity management for small businesses.
Naq Cyber
Integrated GRC platform for risk, compliance, ethics, and whistleblowing mgmt.
NAVEX NAVEX One
NCC Group, a large (2,000+ employee) FTSE 250 company founded in the UK in 1999, works with businesses globally on cybersecurity and risk mitigation.
AI-powered GRC automation platform for audit, risk, and compliance management
NCS eTHIC GRCNCS Soft eTHIC GRC
netconsent, a Swiss company founded in 2000, provides IT policy-management and security-awareness communication software.
Patent-protected GRC platform with six-pillar cyber risk governance framework.
Netswitch CyberRisk Governance (CRG)Netswitch CyberRisk Governance SystemNetswitch SecurIANetswitch Unity Risk Indicator
Framework for assessing, designing, and implementing cybersecurity programs
Network Intelligence Advise Framework
Unified platform for identity and data security across hybrid environments
Netwrix 1Secure
Email add-in for one-click phishing reporting and threat analysis
NINJIO SENSE
NIST, a large (2,000+ employee) US federal agency dating to 1901, advances cryptography, identity and access management, security testing, and related standards work.
NIST
NNT (New Net Technologies), founded in 2006 and now part of Netwrix, provides file-integrity-monitoring and change-detection technology.
Automated info security assessment & compliance tool for NIS2 and DORA
Assessment ScanNIC GAP-analysNIC GAP Analysis
NordLayer, founded in 2019, provides adaptive network access security spanning secure remote access, cloud app security, and network access control.
Nova Leah, an early-stage Irish company founded in 2015, provides cybersecurity risk-management software for medical-device manufacturers.
Nova Leah
NRI SecureTechnologies, founded in Japan in 2000, provides cybersecurity consulting, managed security services, and risk assessment across Japan and Asia.
NTT Security, part of the large NTT group dating to 1988, provides information-security consulting drawing on experienced in-house security experts.
NTT Security
NVISIONx, an early-stage company founded in 2018, provides data-risk-management and sensitive-data-discovery technology.
Olakai Platform
Omega Systems, founded in 2000, serves regulated industries with managed IT, cloud, and cybersecurity compliance.
Onapsis, founded in 2009, gives security and audit teams visibility and control over threats, risks, and compliance gaps in enterprise applications.
Onapsis, Inc.
ONEKEY Platform
Automated compliance and security platform for SOC 2, ISO 27001, and HIPAA
Oneleet Cybersecurity & Compliance Platform
Privacy, GRC, and trust management.
Consent Management PlatformDSR AutomationIT Risk ManagementOneTrust AI-Ready Governance PlatformOneTrust Compliance AutomationOneTrust Consent Management PlatformOneTrust Governance PlatformOneTrust IT Risk ManagementOneTrust Privacy OperationsOneTrust Third-Party Due DiligenceOneTrust Third-Party Risk ExchangeOneTrust Third-Party Risk ManagementPrivacy Operations
Cloud-based GRC platform for managing governance, risk, and compliance programs
Onspring Strategic GRC Software
Cybersecurity mgmt platform unifying security tools via integrations.
Onyxia Cyber Platform
Open Systems, a Swiss company founded in 1990 and later acquired by Swiss Post, is an early SASE provider offering managed, cloud-native network and security services with round-the-clock operations.
Real-time data replication and automated failover for Windows/Linux servers
OpenText Business Communication Archive
Cloud & database asset intelligence platform for visibility & compliance
Opscompass Compliance
AI-powered GRC platform module for audit, risk, and compliance automation.
Optro AI
Cyber risk assessment platform for insurance underwriting and portfolio mgmt.
Orpheus Cyber Regulatory ComplianceOrpheus Third-Party Risk Management
GRC platform for multi-framework compliance, risk, and vendor assessments.
Ostendio GRC PlatformOstendio HITRUSTOstendio ISO 27001 ComplianceOstendio SOC 2 Compliance
Continuous cyber risk assessment app for enterprise GRC programs.
Ostrich Cyber-Risk Birdseye
AD password security suite with breached password protection & self-service
Outpost24 PCI
AI-powered human risk management platform with adaptive training & phishing sim
OutThink AI-Powered Human Risk ManagementOutThink Human Risk Intelligence
OWASP, a nonprofit that went online in 2001 and was formally chartered in 2004, is a large (500+ employee) organization supporting open application-security research and tools.
OWASP
Palqee Technologies, an early-stage UK company founded in 2018, provides data-privacy and compliance-management software for GDPR and other regulations.
Panorays is a third-party cyber risk management platform that combines external attack surface monitoring with automated security questionnaires to assess, remediate, and continuously monitor vendor security postures.
Panorays
Compliance automation platform for FedRAMP, CMMC, FISMA, and DoD ATO.
Paramify
Supply chain infostealer detection platform monitoring vendor compromises
Passguard
PCI Checklist, an early-stage French company founded in 2015, provides PCI DSS compliance assessment and management software.
PCI Checklist
End-to-end vendor risk management platform with AI-powered doc analysis.
Perimeter VRMPerimeter VRM MonitorPerimeter VRM - Respond
Compliance mgmt platform tracking manual & technical controls in one system.
Pervade Software OpAudit
Perygee, an early-stage company founded in 2019, provides asset-management and vulnerability-prioritization technology for OT and IoT environments.
Analytics platform measuring human cyber risk via phishing report rates & AI forecasting.
PhishFirewall Analytics
PhishLabs, founded in 2008 and later acquired by HelpSystems, built 24/7 services to detect attacks that exploit people rather than systems.
Phishing simulation & security awareness training platform for organizations
Phriendly Phishing Human (Centred) Risk Management
Picnic Corporation, an early-stage company founded in 2020, provides social-engineering risk assessment and human attack-surface-management technology.
Picnic Corporation
Pinion, formerly known as Anderson ZurMuehlen and founded in 1955, provides IT audit, cybersecurity, and risk-advisory services.
Pinion
Enterprise MDM with VPN, BYOD support, and ML-based mobile threat protection.
Pligence GRC Lens
SAP authorization compliance checker identifying security gaps and SoD conflicts
PointSharp Compliance Quick Check
Precisely, a large (2,000+ employee) company founded in 1985, provides data-integrity technology used by roughly 12,000 customers, including 90% of the Fortune 100, spanning data security and identity management.
Prescient Security, founded in 2013, runs SOC 2 and compliance-auditing engagements for technology companies.
Prescient Security
Prevalent, founded in 2004, provides vendor-risk-management and cyber-threat-intelligence analytics for managing third-party security risk.
Prevalent, Inc.
Enterprise admin module for encrypted email & file sharing with E-discovery controls.
PreVeil Compliance AcceleratorPreVeil GRC
Prey Project, a Chilean company founded in 2009, provides anti-theft software for tracking and managing lost or stolen mobile devices.
PrimeKey Solutions, a Swedish PKI specialist founded in 2002 and later acquired by Keyfactor, built EJBCA, SignServer, and its PKI appliance, used by large corporations and government agencies.
Privitar, founded in the UK in 2014 and later acquired by Informatica, built data-privacy and de-identification technology from its London base.
Vendor security assessments and third-party risk-management software are what ProcessBolt, founded in 2015, builds.
ProcessBolt
Process-driven GRC software for compliance, risk control, and regulation mgmt.
ProcessGene GRC Software
Third-party risk assessment database with 18K+ validated assessments
ProcessUnity Global Risk ExchangeProcessUnity Third-Party Risk ManagementProcessUnity Third-Party Risk Management Platform
Risk intelligence platform for supply chain cyber risk assessment & monitoring
BLINDSPOT
Proficio, founded in 2010, is an MSSP providing managed detection and response, round-the-clock monitoring, and data-breach-prevention services.
Proficio
TPRM platform for assessing and monitoring AI risk in third-party vendors.
PromptArmor TPRM
Enterprise risk management platform for risk, compliance, and audit management
Protecht Enterprise Risk Management
Protenus, founded in 2014, applies AI to monitor patient privacy and healthcare compliance.
Protenus
Continuous cyber risk monitoring platform for SMB employees and orgs.
Protexxa Defender Platform
Protiviti, a large (10,000+ employee) firm founded in 2002, is a global consulting practice covering finance, technology, operations, governance, risk, and internal audit.
Protiviti
PureCyber, founded in the UK in 2019, provides managed cybersecurity services and compliance consulting for SMBs.
User behavior analytics & audit solution for insider threat detection
Qmulos Q-Core
Cyber governance & compliance mgmt platform for SMBs across NIS2, ISO 27001, DORA.
QontrolQontrol FrameworksQontrol Pilot
AI platform automating continuous cybersecurity control assessments & risk quantification.
Quantara AI Cyber Loss Breach AnalyticsQuantara AI Dynamic Cyber Risk QuantificationQuantara AI Executive Reporting
SaaS GRC platform for enterprise risk, compliance, and governance mgmt.
Quantivate GRC Software Platform
Quorum Cyber, a large (250+ employee) UK company founded in 2016, combines technology with human expertise across cybersecurity consulting and managed services.
Quorum Cyber
Onboarding service for RadarFirst's Radar privacy automation platform
RadarFirst Radar Compliance
Raz-Lee Security, founded in 1983, provides security compliance and monitoring software for IBM i (AS/400) systems.
Raz-Lee
Automates policy enforcement & compliance across regulations with audit trails
RecordPoint Compliance
AI platform simulating & defending against mobile social engineering attacks.
Redcoat AI
Redscan, founded in the UK in 2002 and later acquired by Kroll, provides services spanning custom vulnerability assessments through managed detection and response.
Redscan
RedVector, founded in 1997 and part of Vector Solutions, provides online training and compliance-education content.
Remote web scanning tool for DORA compliance in financial services.
Reflectiz DORA
Continuous Controls Monitoring platform for compliance automation and GRC
RegScale Automated Controls MappingRegScale Continuous Compliance for DevSecOpsRegScale Platform
Regulativ.ai, an early-stage UK company founded in 2020, provides AI-driven regulatory-compliance and risk-management software.
Regulativ.ai
Governance platform for Microsoft 365, Copilot, agents & Power Platform.
Rencore Governance
Cyber risk mgmt platform quantifying risk in financial terms using real loss data
Resilience The Edge Solution
Automates third-party vendor risk assessment, monitoring, and compliance mgmt.
ResilientX TPRM
Enterprise resilience platform for risk, compliance, security & incident mgmt.
Resolver Enterprise Resilience Solutions
AI-powered platform for automating security questionnaire responses
ResponseHub Security Questionnaires
Responsible Cyber, an early-stage Singaporean company founded in 2020, provides a cyber-risk-management platform and CISO advisory services.
Responsible Cyber Pte. Ltd.
Revenera, founded in 2008, helps software and IoT companies build secure products while managing open-source compliance and monetization.
AI agent platform for phishing/vishing simulations and security awareness training.
Right-Hand Agentic Security AwarenessRight-Hand Human Risk Mgmt Platform
Employee security posture mgmt platform with awareness training & scoring.
Riot
GRC platform for consultants/MSSPs to automate compliance risk management
Risk Cognizance GRC Platform
Standardized supplier security assessment framework for third-party risk mgmt.
Risk Ledger Supplier Assessment FrameworkRisk Ledger Supply Chain Risk ManagementRisk Ledger Third-Party Risk Management
risk3sixty, founded in 2013, runs SOC 2 and ISO 27001 compliance consulting and audit-readiness work.
risk3sixty LLC
RiskAnalytics, founded in 2015, feeds third-party risk intelligence and threat data to security teams.
RiskAnalitics
Supply chain security platform for third-party risk visibility and monitoring
Riskey
AI-assisted TPRM platform for vendor lifecycle, risk assessment & monitoring.
RiskImmune TPRM Platform
IT risk mgmt platform for identifying & managing tech, cyber & operational risks
Riskonnect IT Risk Management Software
RiskOptics, formerly known as Reciprocity and founded in 2009, provides GRC and continuous-compliance software for enterprises.
RiskOptics
AI-powered EASM platform for discovering and prioritizing external risks
RiskProfiler - Third Party Risk Mgmt
Third-party cyber risk ratings and TPRM platform by Mastercard/RiskRecon.
Mastercard Cyber Secure
Managed third-party risk mgmt service with vendor assessments & compliance
RiskXchange AssuredRiskXchange Vendor Risk Management
GRC platform for governance, risk management, and compliance operations
RISMA Systems GRC Platform
Automated vulnerability patching for open-source libraries and containers
Root Compliance Proofwork
Runecast Solutions, founded in the Czech Republic in 2015 and later acquired by Dynatrace, provided automated compliance, security, and vulnerability management for virtualized and cloud environments.
Runecast Solutions
Cyber risk quantification platform using FAIR methodology for financial analysis
Balbix Cyber Risk QuantificationSAFE Cyber Risk QuantificationSafe Security Autonomous TPRM
Analytics platform for security review and trust program performance metrics
SafeBase Analytics
SafeGuard Cyber, founded in 2013, provides risk protection for digital communications, including social media and collaboration-tool security.
SafeGuard Cyber
Fully managed human risk platform with awareness, evidence, and board-ready reporting
SafeHabits
Integrated GRC platform for managing ethics, risk, and compliance programs
SAI360 GRC Software
Automated web vulnerability scanner for SQLi, XSS, and other web app flaws
SaltyCloud Isora GRC
Identity security platform mapping attack paths and misconfigurations
Saporo Compliance Risk
SAS Institute, a large (10,000+ employee) company founded in 1976, provides advanced analytics, AI, and fraud/risk-management software for enterprises and government.
AI-powered cybersecurity platform with specialized agents for leadership tasks
SATARK AI
Sayata Labs, founded in Israel in 2019, gives brokers technology for underwriting and assessing cyber-insurance risk.
Sayata Labs
Compliance automation and GRC: continuous compliance, live risk management, vendor risk, access reviews, audit center, and a trust center.
Scrut Access ReviewsScrut AutomationScrut Compliance AutomationScrut Monitor Cyber RiskScrut Risk ManagementScrut Trust CenterScrut Vendor Risk Management
Compliance automation platform for achieving and maintaining security certs.
ScytaleScytale AI Security QuestionnairesScytale Audit Management HubScytale Scy (AI GRC Agent)Scytale Vendor Risk Management
SDG Corporation, a large (200+ employee) company founded in 1995, builds TruOps, an integrated risk-management and GRC software platform.
SDG Corporation (TruOps)
AI-driven CSPM for multi-cloud risk detection and compliance monitoring
Sec1 Third-Party Risk Management
Deterministic AI API mapping security text to compliance controls via JSON.
Secberus Compliance Mapping AISecberus Cyber Governance Platform
Automated risk management platform for ISO 27001, SOC 2, TISAX compliance
Secfix Trust Center
Automated compliance platform for EU standards like NIS2, ISO 27001, TISAX
SECJUR Automated Compliance
Multi-cloud CSPM tool for misconfiguration detection, compliance & remediation.
SecLogic CyberQ ORO
Cloud-based continuous IT risk assessment & vulnerability mgmt platform
Seconize DeRisk Centre
Secure Digital Solutions, founded in 2005, advises on GRC and helps organizations build out their information-security programs.
Secure Digital Solutions
Consulting services for insider threat detection, prevention, and mgmt.
Secure Halo Third-Party Risk Management
Secure&IT, a Spanish company founded in 2009, provides cybersecurity consulting, managed security services, and compliance.
Compliance automation.
Secureframe ComplySecureframe Questionnaire AutomationSecureframe Risk ManagementSecureframe SOC 2Secureframe Third-party Risk ManagementSecureframe TrustSecureframe Trust Center
AI service that automates security questionnaire responses
SecureLight
SecureStrux, founded in 2015, provides cybersecurity compliance and risk-management consulting.
SecureStrux
OT/ICS cybersecurity assessment & risk management platform for critical infrastructure.
SecurityGate Third Party Risk Mgmt
AI-powered security questionnaire automation with human analyst oversight
SecurityPal CopilotSecurityPal Security Questionnaire ConciergeSecurityPal Vendor Assess
Attack surface intelligence platform for threat hunting and asset discovery
SecurityScorecard Cyber Risk QuantificationSecurityScorecard Real-Time Third-Party Cyber Risk ManagementSecurityScorecard Supply Chain Risk Intelligence
SeeMetrics, an early-stage Israeli company founded in 2021, provides a cybersecurity performance-management and metrics-aggregation platform.
SeeMetrics
Sekorti is the free AI-native trust center platform for modern SaaS companies.
Sekorti
SentiLink, founded in 2017, provides identity-fraud prevention and synthetic-identity-detection technology.
Sera-Brynn, founded in 2011, provides cybersecurity compliance auditing and risk assessment.
Sera-Brynn
SHIELD, founded in Singapore in 2017, provides device-intelligence and fraud-prevention technology.
SHIELD
Agentic TPRM platform automating vendor risk across the full third-party lifecycle.
Shift Security
Automated OS hardening & compliance platform for DISA STIGs and CIS Benchmarks.
SicuraSicura Security Control Management
Sift, a large (250+ employee) company founded in 2011, provides a digital trust-and-safety fraud-prevention platform.
Sift
Sign In Compliance, formerly ThreatSwitch and founded in 2015, provides personnel-security and insider-threat compliance-management software.
Sign In Compliance
Cyber risk quantification platform with Level 1 & 2 assessments
SignetRisk
AI agents for security operations.
Simbian GRC Agent
DoD-compliant OT/CS security platform for installations w/ hybrid cloud.
Simplesense STIG Hardened AMIs
Simplex, founded in Israel in 2014, provides fraud-prevention and payment-security technology for crypto transactions.
Simplex
Smart Protection, a Spanish company founded in 2010, provides anti-piracy and brand-protection online monitoring services.
Smart Protection
Dark web monitoring platform for threat detection and fraud protection
SOC Radar Supply Chain Intelligence
GRC automation platform with 25+ frameworks, audit workflows & risk visibility.
EasyCompliance® GRC
AI-powered chatbot providing real-time security guidance and alerts via Teams/Slack
SoSafe Human Risk OS
Email archiving solution with encryption, compression, and compliance features
SpamExperts Email Archiving
Cloud-based anti-spam and antivirus email filtering with AI threat detection.
SpamTitan ArcTitan Cloud
Spec, an early-stage company founded in 2020, provides bot-detection and fraud-prevention technology.
Spec
SpecTrust, an early-stage company founded in 2020, provides fraud- and bot-detection technology for account and transaction abuse.
SpecTrust
AI-native GRC platform for compliance, audit, vendor risk, and risk management
Sprinto AI GRC
OT risk management platform with unified visibility across plants and operations
Steryon Module - Compliance
Stoik, an early-stage French company founded in 2021, provides a cyber-insurance and risk-monitoring platform for SMBs.
Stoik
StreamScan, founded in Canada in 2014, provides an AI-based fraud-detection and transaction-monitoring platform.
StreamScan
AI-native GRC platform for compliance mgmt and security certification.
Strike Graph
AI-powered attack surface management platform for cybersecurity monitoring
StrikeOne Cybersecurity Posture Tool (CPT)
Superscript, founded in the UK in 2015, provides cyber insurance and business-risk protection for SMBs.
Superscript
End-to-end TPRM platform with advisory, managed services, and cloud tools
Abilene Advisors Supplier ShieldAbilene Advisors Supplier Shield Managed Services
Continuous monitoring platform for third-party supplier and location risks
Supply Wisdom Continuous MonitoringSupply Wisdom Risk Insights
Business continuity & resilience platform with BIA, incident response workflows
SureCloud Compliance ManagementSureCloud FoundationsSureCloud GRCSureCloud GRC PlatformSureCloud Internal AuditSureCloud Risk Management
Cyber resilience & governance SaaS platform for SMEs.
Sydekick
Audit management software for planning, executing, and tracking audits.
Symbiant Audit Management SoftwareSymbiant Compliance Management SoftwareSymbiant Risk Controls & Policies Software
Tall Poppy, an early-stage company founded in 2018, provides a digital executive-protection and doxxing-prevention platform.
Tall Poppy
Cyber GRC platform with continuous compliance assessment and authorization
Telos Xacta 360
GRC platform for cyber governance, risk, compliance, and reporting.
Tenacy
Third-party cyber risk mgmt platform with continuous monitoring & remediation
Tenchi Zanshin
Automates FedRAMP compliance via CI/CD evidence collection & AI docs.
TestifySec
Tevora Business Solutions, founded in 2003, provides cybersecurity consulting, risk, and compliance services.
Tevora Business Solutions
AI-augmented GRC platform unifying 50+ compliance frameworks for defense & enterprise.
Thalorin GRC
The Chertoff Group, founded in 2009, is a global advisory firm focused exclusively on security and risk management, spanning strategy, M&A, and risk-management services.
The Chertoff Group
AI-based archiving and eDiscovery for unified communications platforms
Theta Lake Compliant Collaboration Archive
Automates user access reviews for compliance audits and evidence collection.
Thoropass Access Reviews
ThreatMark, a Czech company founded in 2015, provides a behavioral-biometrics and fraud-detection platform for banking.
ThreatMark
Cybersecurity platform combining human risk assessment with behavioural science,
Digital Type
Tor Project, a nonprofit dating to 2002, runs a volunteer-operated network enabling privacy, secure information sharing, and censorship circumvention.
Tor Project
Traceforce Platform
TraceSecurity, founded in 2004, provides a cybersecurity risk-assessment and compliance-management platform.
TraceSecurity
Transcend, founded in 2017, provides a data-privacy-infrastructure and consent-management platform.
Transcend
Trava Security, an early-stage company founded in 2020, provides a cyber-risk-management and vCISO platform for SMBs.
Trava Security
Tripwire, part of Belden and founded in 1997, provides endpoint detection and response alongside configuration management, file-integrity monitoring, vulnerability management, and log management.
Compliance automation platform for multi-framework compliance management
Compliance Automation Software
TrustedSec, a large (100+ employee) company founded in 2012, is a well-regarded security-consulting firm known for prioritizing long-term client relationships.
AI-powered GRC platform for compliance automation and control assurance.
Trustero AI Suite
Trustfull, an early-stage Italian company founded in 2021, provides a digital identity-risk and fraud-prevention scoring platform.
Trustfull
TrustNet, founded in 1999, provides cybersecurity compliance and risk-assessment services.
TrustNet Inc.
Trustpair, a French company founded in 2017, provides a fraud-prevention and payment/vendor-validation platform.
Trustpair
Trustwave, a large (1,000+ employee) company founded in 1995 and later acquired by LevelBlue, combines cloud and managed security services with a team of researchers and ethical hackers.
UL Solutions, a large (10,000+ employee) company, guides mobile, payments, and transit businesses through the complexities of electronic-transaction security through its Transaction Security division.
UL Solutions
Unit21, a large (100+ employee) company founded in 2018, provides a no-code fraud- and risk-detection platform for financial institutions.
Unit21
AI-native GRC platform for governance, risk, compliance, and resilience
Uno AI Agents Native GRC PlatformUno Compliance & ControlsUno Third Party Risk Management
External attack surface monitoring with threat intel and brand protection
Upguard User RiskUpGuard Vendor Risk
Cloud workload protection platform for hybrid cloud environments
Uptycs Integrated Compliance Platform
Platform for managing org-wide data privacy and security compliance programs.
uRISQ
Usercentrics, a large (250+ employee) German company founded in 2016, provides a consent-management platform for data-privacy compliance.
Usercentrics
Valarian Technologies Platform
GRC automation platform for compliance, risk, access, and asset mgmt.
Vamu Platform
VanishID, an early-stage company founded in 2022, provides a personal-data-removal and digital-footprint-protection platform.
VanishID
Compliance automation and trust management.
Vanta Automated ComplianceVanta Continuous GRCVanta HITRUST CSFVanta Personnel & AccessVanta PlatformVanta Questionnaire AutomationVanta Risk ManagementVanta Third Party Risk ManagementVanta Trust Center
AI-native platform for security questionnaire automation and GRC/TPRM.
Vendict
TPRM module for logging, tracking, and remediating vendor performance issues.
Venminder Issue ManagementVenminder Risk Assessments
Veracity Trust Network, an early-stage UK company founded in 2016, provides an ad-fraud and bot-detection platform.
Veracity Trust Network
VerifyMe (LaserLock), founded in 1999, provides anti-counterfeiting and brand-protection authentication technology.
VerifyMe – LaserLock
Vigilant Software, founded in the UK in 2010, provides ISMS (information security management system) software and compliance tools.
Vigilant Software
GRC platform for compliance mgmt across PCI DSS, GDPR, HIPAA & more.
VigiTrust VigiOne
Cloud-based email archiving solution for compliance and e-discovery
VIPRE Email Archiving
Third-party risk management platform with AI-powered vendor assessments
VISO TRUST
AI-driven platform to quantify & manage third-party data breach risk.
VivoSecurity
ASM platform for continuous discovery and risk validation of internet-exposed assets.
Vulneri TPRM
Wald AI Platform
Wavestrong, founded in 1998, provides cybersecurity consulting and risk-management services.
Wavestrong, Inc.
AI-powered TPRM platform for vendor assessments and security questionnaires
Whistic AIWhistic PlatformWhistic Profile
Whittlesey, founded in 1963, provides IT audit and cybersecurity consulting services.
Whittlesey
Willis Towers Watson, a large (10,000+ employee) UK company with roots to 1828, provides global risk management, insurance brokerage, and cyber-risk advisory services.
Willis Towers Watson
Cloud platform for financial reporting, risk management, and sustainability
Workiva Workiva Platform
GRC platform that quantifies cyber risk in financial terms for exec reporting.
X-Analytics
XTN Cognitive Security, an Italian company founded in 2010, provides a behavioral-biometrics and mobile-fraud-prevention platform for banking.
XTN Cognitive Security
Zania is an AI-driven platform that automates security and compliance tasks using autonomous agents for security inquiries, compliance assessments, and privacy regulation adherence.
Zania
Holistic cyber risk management platform for SMBs with training, monitoring, and insurance.
Zeguro Cyber Safety
ZeroDrift Platform
AI-powered platform for cyber risk quantification, mgmt, and compliance.
ZERON
Automated CrowdStrike EDR deployment & mgmt platform for macOS & Windows devices
Zip Security One-Click Compliance
