Choosing Cyber Risk Remediation Software (Key Features) | UpGuard
Learn the features to look for in a cyber risk remediation tool for effectively addressing internal and external security risks.
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
3,597 matching stories — in GRC & Compliance Automation — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
Cybersecurity Risk Assessment Platforms Explained | UpGuard
Discover leading cybersecurity risk assessment tools that help organizations identify vulnerabilities, manage threats, and enhance their security posture.
What is Cybersecurity Risk Management? Preventing Cyber Attacks | UpGuard
This is a complete overview of cybersecurity risk management. Learn about the 15 top considerations for cybersecurity risk management in this in post.
Secure APIs by Default: Prevent Breaches with Kiteworks Defense-in-Depth
The API You Didn’t Build Is the One That Gets You Breached Every organization that connects systems together, an ERP to a supplier portal, a custom application to a document repository, a mobile app to a back-end service, is making a decision about how much trust to place in that connection. Most of the time, Read more...
Build vs. Buy: Why Custom Integration Security Costs More Than You Think
Somewhere in nearly every organization, a project starts with a sentence that sounds simple: “we just need to connect these two systems.” A supplier needs files delivered on a schedule, a custom application needs to share data with a document repository, a business unit needs to provision user access programmatically. None of that sounds like Read more...
From insight to innovation: How Kiro Crew, Dynatrace, and AWS are helping teams do more
Modern businesses are sitting on a goldmine of information. Your observability data can help you understand what is breaking, what is underperforming, and where your next improvement should come from. The gap isn’t data – it is the distance between seeing something and being able to do something about it That’s exactly what Kiro Crew, […] The post From insight to innovation: How Kiro Crew, Dynatrace, and AWS are helping teams do more appeared first on Dynatrace news.
Automated Doesn’t Mean Ungoverned: Keeping API-Driven Workflows Audit-Ready
Automation is one of the clearest wins an API can deliver, and it’s also one of the easiest ways to quietly lose track of how sensitive data moves through an organization. When a script or an integration takes over a task a person used to do manually, like sharing a file with a supplier or Read more...
From tokenmaxxing to AI tokenomics: How to gain value and reduce risk
AI tokenomics: why matching model to task and getting your data layer right beats tokenmaxxing or blocking AI.
Meet ONEKEY at IoT Tech Expo Europe in Amsterdam
Secure your connected systems & products - make your products future-proof with ONEKEY: Book your meeting now!
Agent Contracts: Set the boundaries for your entire AI agent fleet
AI agents create a new control challenge. They don’t just generate outputs: they can access enterprise data, use tools, interact with systems, and take actions autonomously. And every agent can have a different purpose, risk profile, set of permissions, and environment in which it operates. As organizations move from a handful of experimental agents to hundreds or thousands in production, defining controls agent by agent won’t scale. Enterprises need clear, reusable rules of engagement that can…
Guardian Agents: Keep AI agents in control at runtime
AI agents are moving from experimentation into production — and the stakes are rising fast. An agent can access sensitive data, call tools, interact with enterprise systems, and take actions autonomously. As agent fleets grow, organizations can no longer rely on policies written at deployment or periodic reviews to stay in control. They need to continuously supervise what agents are actually doing and intervene when they move outside established boundaries. What's new: Guardian Agents …
Introducing Collibra Maestro: Automate governance operations, turning days of manual work into minutes
Agentic AI is scaling faster than most governance teams can keep up. A recent found that nine in ten organizations are actively deploying autonomous AI agents. Yet many governance teams are still performing tasks like resolving conflicting definitions and onboarding assets manually, work that can take weeks per task. General-purpose AI assistants can't close that gap since they lack business context and guardrails. Collibra Maestro changes that, bringing AI-powered automation directly into…
macOS 27: Great new privacy capabilities for IT… if you can use them
Apple's newest privacy controls in macOS 27 only work if your users are MDM-enabled, and only once they've actually shipped in your device management platform. A lot of fleets will hit both walls.
Fewer Vendors, More Time: Streamlining ITGC, GLBA, and FFIEC for Credit Unions
How MSPs Can Turn Compliance Work Into Recurring Revenue
Here is a question that stops most MSP owners mid-sentence: You deploy EDR, a backup platform, MFA, email security and a password manager for a client. Which CMMC practices does that stack actually satisfy? Which HIPAA safeguards? What did it cost you last month, and what did you charge for it? Most MSPs can produce… The post How MSPs Can Turn Compliance Work Into Recurring Revenue appeared first on Compliance Scorecard.
California AI Audit Laws: What SB 813 and AB 1405 Mean for AI Governance
Learn what California SB 813 and AB 1405 require of AI auditors, what they do not mandate, and how organizations can prepare for AI audit readiness. The post California AI Audit Laws: What SB 813 and AB 1405 Mean for AI Governance appeared first on RadarFirst.
Behind the Breach, Episode 4: The Ransomware Negotiation Leaked to the Press
In a cyber incident, the story rarely waits for the investigation. Customers notice something is wrong. Employees start asking questions. Social media fills the information vacuum. And all of this can happen before the organisation itself has a complete picture of the incident. That is the challenge at the centre of the latest episode of […] The post Behind the Breach, Episode 4: The Ransomware Negotiation Leaked to the Press appeared first on Cowbell.
Matt Polak on eChannelNews: Securing Identity Beyond the Perimeter
VanishID founder and CEO Matt Polak joined eChannelNews to talk about the attack surface most security programs still treat as someone else’s problem: the identity data about your executives and employees that lives outside your network. Firewalls and endpoint tools do what they’re built to do. They just don’t help when an attacker pulls an executive’s exposed identity data off the open web, clones their voice with AI, and calls the help desk with enough detail to clear k
IT Risk Management Strategies: Key Metrics & Trends
Cyberattacks and data breaches have ranked as the number one global business concern for three consecutive years, according to Aon’s 2025 Global Risk Management Survey. The organizations still managing risk reactively are paying a measurable price. Hyperproof’s 2026 IT Risk and Compliance Benchmark Report found that 50% of those organizations suffered a breach in 2025. Among organizations with integrated, automated programs, the breach rate dropped to 27%. That 23-point gap reflects
Best Tools for Mapping Application Dependencies in Hybrid Environments
TL;DR: Application dependency mapping tools reveal how applications connect across on-premises and cloud infrastructure. Faddom is best for agentless hybrid mapping in under an hour, Device42 CMDB-backed asset context, ServiceNow Service Mapping ITSM-driven service models, and Dynatrace real-time topology inside observability. What Is Application Dependency Mapping? Application dependency mapping is the process of identifying and […]
Kertos und Aikido bringen Security und Compliance aus einer europäischen Hand
Ergebnisse aus dem Schwachstellenmanagement in Aikido stehen in Kertos als Nachweis für ISO 27001, SOC 2 und NIS2 zur Verfügung.
Datenschutzvorfall richtig melden: 72-Stunden-Frist und Meldepflicht
Datenschutzvorfall melden: wann die 72-Stunden-Frist beginnt, wann die Meldung Pflicht ist, was die Aufsichtsbehörde tut und wie NIS2 sich unterscheidet.
How Much Does CMMC Certification Actually Cost?
Learn about CMMC certification costs by level, company size, and ongoing expenses. The post How Much Does CMMC Certification Actually Cost? appeared first on Scytale.
Berlin Data Leak: What Rhysida Published, and What Is Still Unresolved
Berlin Data Leak: What Rhysida Published, and What Is Still Unresolved This post consolidates what has been confirmed by the State of Berlin, what remains the threat actor's own claim, and what the published file listing
How to Advance Your SOC Maturity Model: A Practical Guide
In today’s vendor risk landscape, a SOC report isn’t just a compliance checkbox — it’s often the deciding factor in whether a deal closes at all. Enterprise buyers routinely eliminate vendors from consideration during security review if they can’t produce a current SOC 2 report, and sales cycles can stall for months while a prospect’s […]
Top 5 Compliance and Ethics Learning Solutions for 2026
The compliance training market has fundamentally shifted. Organizations no longer want annual check-the-box training divorced from the rest of their compliance program. They want compliance training platforms that connect to policies, incident response, risk assessments, and audit, integrated into a single, continuous system. This evolution reflects a deeper organizational reality: compliance and ethics training is ... The post Top 5 Compliance and Ethics Learning Solutions for 2026 appeared fir
Common Control Framework: How Compliance Teams Reduce Duplicate GRC Work
Compliance teams are dealing with more frameworks, more audits, more […] The post Common Control Framework: How Compliance Teams Reduce Duplicate GRC Work appeared first on COMPLYAN.
NIST SP 800-82r4 draft expands OT security guidance with zero trust, CSF 2.0, consequence-driven risk management
The U.S. National Institute of Standards and Technology (NIST) published an initial public draft of Special Publication (SP)... The post NIST SP 800-82r4 draft expands OT security guidance with zero trust, CSF 2.0, consequence-driven risk management appeared first on Industrial Cyber.
ISMS examples: what each core document looks like
Most searches for ISMS examples turn up the same disappointment: a page promising real-world examples, then handing over a company called XYZ Corp and a sentence like “implements strong controls.” Nothing you can actually use. This article shows the real thing: a scope statement, a policy line, a risk register row, a Statement of Applicability […] The post ISMS examples: what each core document looks like first appeared on Copla.
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures
Operation Conflict Compass: Konni Targets Ukraine via Malicious LNK Lures Since 2009, the Democratic People’s Republic of Korea (DPRK) has fully integrated cyber operations into its national strategy, leveraging state-ne
NIST AI RMF 1.0: The AI Risk Management Framework | UpGuard
Explore the NIST AI Risk Management Framework, its core functions, and learn how organizations can implement it to manage AI-related risks effectively.
Security Culture Assessment: A Practical Framework
August 2026: GTA VI Leak, Keyv & Carhartt Breaches
August 2026: GTA VI Leak, Keyv & Carhartt Breaches August 2026 brought a wide mix of cyber incidents, from large-scale data breaches affecting millions of people to software supply chain attacks targeting developers and
How One TPRM Programme Can Satisfy SS2/21, PS26/2, DORA and the EBA Guidelines
When the UK’s financial regulators finalised their new third-party reporting rules, they did something regulators rarely do: they told firms, explicitly, that the requirements were designed to line up. The PRA and FCA published aligned rules on the same day, with shared templates and a single submission system for dual-regulated firms. The incident report matches […] The post How One TPRM Programme Can Satisfy SS2/21, PS26/2, DORA and the EBA Guidelines appeared first on ProcessUnity.
Data Breach Laws: A State-by-State Framework
What you need to know for compliance coast-to-coast. Starting back in the year 2020 we unwittingly began an annual tradition by posting an article containing links to data breach laws from each state, only to have it go on to become one of our most popular posts. Because of this enduring popularity and because laws […] The post Data Breach Laws: A State-by-State Framework appeared first on infotex.
What’s Next for AI and GRC: Explore Archer AI Operators at Archer Accelerate
Written by Alessandro Fonseca, Director of Latin American Sales at Archer. I’ve been in risk and compliance long enough to know when a vendor is repackaging the same dashboard with a shinier label, and I’ve also learned to spot the rarer moment when something genuinely changes the shape of the work. What Archer has shipped […] The post What’s Next for AI and GRC: Explore Archer AI Operators at Archer Accelerate appeared first on Archer.
How Has the EU Digital Omnibus on AI Changed the AI Act?
The European Commission published the Digital Omnibus Package in late 2025, with proposals designed to simplify and harmonise parts of the EU’s digital legislative framework, proposing amendments to GDPR, NIS 2 and more. While the wider digital omnibus remains under negotiation, the separate Digital Omnibus on AI (AI Omnibus) was fast-tracked because it proposed amended … Continued
StyleSmuggler: The Magento Flaw That Turns a Template Into a Backdoor
Adobe patched a maximum-severity zero-day. You’ll want to apply it fast, but what if someone already got inside, and what if data is leaving your […] The post StyleSmuggler: The Magento Flaw That Turns a Template Into a Backdoor appeared first on Reflectiz.
Reachability is Only Half the Blast Radius
Action-Class Authority for Agentic Zero Trust The vulnerability-discovery curve has bent. AI-assisted tooling surfaces exploitable flaws faster than most organizations can test and ship patches, and CSA’s own guidance states the consequence plainly: slow, methodical change cannot keep pace with exploit development that now moves in hours. Patching faster is a losing race by design. Zero Trust never promised faster patching. Its promise was containment: assume breach, verify cont...
Gold Eagle: A New Operating Model for Vulnerability Coordination
Five practical priorities for turning AI-enabled vulnerability discovery into coordinated remediation and verified risk reduction. On July 14, 2026, the White House announced GOLD EAGLE, a cybersecurity clearinghouse created under Executive Order 14409. The initiative is intended to coordinate and deconflict vulnerability scanning, validate findings, prioritize remediation, and distribute patches through voluntary collaboration among government, the AI industry, critical infrastructure o...