Pass SOC 2 / ISO 27001 fast

360 Privacy

Privacy & Consent Management

360 Privacy was founded to reduce the critical gap between cybersecurity and real-world protection, securing personal data that puts high-profile people, families, and companies at risk.

Delete

Privacy & Consent Management

Works to remove Personally Identifiable Information (PII) from hundreds of data broker websites and continuously monitor and delete data to control repopulation.

Action1 is an autonomous endpoint management platform trusted by many Fortune 500 companies. Cloud-native, infinitely scalable, highly secure, and configurable in 5 minutes, it just works and is always free for the first 200 endpoints, with no functional limits. Pioneering autonomous OS and third-party patching with peer-to-peer patch distribution and real-time vulnerability assessment, no VPN required.

Acunetix (by Invicti Security)

Vulnerability Management

The Invicti Web + API (formerly Acunetix) legacy is built on runtime accuracy, speed, and proof your team can trust. We pioneered the DAST market 20+ years ago and continue to drive AppSec forward with innovations in AI, code-to-runtime correlation, and vulnerability management.

OneSite Patch

Vulnerability Management

Effortlessly protect your endpoints with autonomous patch management that scales with your organization

OneSite Wake

Vulnerability Management

Continuously deliver software and patches to devices across your organization without infrastructure

Aisy Ai

Vulnerability Management

aisy helps security teams move from isolated vulnerability tickets to the threats they actually care about. We build context from an offensive security perspective ahead of time, clean up findings, and feed the recurring patterns into their coding agent as they build - so every finding makes the next one less likely.

AIOS

Compliance & GRC

The operating system to keep your agents, context, and data current, governed, and improving

Enforce

Compliance & GRC

Automates compliance enforcement through policy-as-code and generates compliance evidence while integrating security checks into build pipelines and runtime monitoring.

Anecdotes.ai

Compliance & GRC

We're Anecdotes, and we're transforming how enterprise teams manage governance, risk, and compliance. We built the world's first enterprise agentic GRC platform to fundamentally change what's possible in GRC, and empower teams to focus on what matters.

Archer (formerly RSA Archer)

Compliance & GRC

Archer, formerly RSA Archer and now independent after RSA Security divestiture, provides an integrated GRC platform for enterprise governance, risk, and compliance management. It centralizes data aggregation from multiple sources, supports risk assessments, policy management, audit workflows, incident tracking, and business continuity planning. The configurable platform enables automated compliance monitoring for regulations like GDPR and HIPAA, with modules for controls testing and reporting. Widely adopted by large organizations and governments like Virginia Commonwealth, Archer serves enterprises needing holistic risk visibility across IT, operational, and third-party domains.

Evolv AI Compliance

Compliance & GRC

AI-powered compliance solution for accelerating regulatory obligation management

Evolv Audit

Compliance & GRC

Risk-based audit planning with connected evidence and audit management

Evolv Compliance

Compliance & GRC

Compliance management with AI-powered insights for regulatory obligations

Evolv Foundation

Compliance & GRC

Core GRC infrastructure supporting unified compliance, risk, and audit management

Evolv Risk

Compliance & GRC

Contextual risk visibility and quantification across the organization

RMIS AI

Compliance & GRC

Continuously executes work within your controls and permissions for risk management

Security Compliance Management

Compliance & GRC

An enterprise-grade solution that automates the entire risk assessment process, manages execution, and generates detailed reports of IT risk factors.

Arctic Security

Vulnerability Management

Arctic EWS provides a comprehensive and international early warning service for distributed organizations, expanding on the scope of services available from the government. Our service lets you split your organization into areas of responsibility, and automatically routes the security warnings to the right people. Our monitoring can also cover your suppliers.

Risk-Based Vulnerability Management

Vulnerability Management

Prioritizes infrastructure vulnerabilities using threat intelligence, asset context, and business impact rather than generic severity scores.

Unified Exposure Management

Vulnerability Management

The independent Agentic Control Plane where AI agents help security teams correlate, triage, and remediate vulnerabilities across multiple infrastructure domains.

Vulnerability Management

Vulnerability Management

Consolidates vulnerability findings from multiple sources into a single inventory, correlates each CVE to specific assets, and applies risk scoring that combines CVSS with threat intelligence.

AuditBoard

Compliance & GRC

Built by practitioners for practitioners, Optro is an AI-powered GRC system of action that unifies audit, risk, infosec, and compliance into a single, connected platform. We empower the world's leading organizations to turn intelligence into a competitive advantage.

Autonomous Testing

Compliance & GRC

Execute tests across unstructured evidence, eliminating manual fieldwork by automating controls testing and documentation tasks.

Controls Management

Compliance & GRC

Tackle controls management with embedded AI, streamline testing, monitor controls in real-time, and simplify workflows across the entire controls lifecycle.

CrossComply

Compliance & GRC

Unify compliance across every auditable entity and framework, like ISO 27001, SOC2, NIST CSF, and more, in one dynamic platform.

Cyber Risk Management

Compliance & GRC

Understand your threat landscape, quantify risks, and improve cyber resilience by automating the identification, assessment, and treatment of IT and cyber risks.

RiskOversight

Compliance & GRC

Enable real-time, risk-informed decisions to meet strategic objectives by providing unified visibility across enterprise and operational risks.

Compliance Guardian

Compliance & GRC

Automated enterprise solution that enables organizations to continuously protect, classify, and govern sensitive data across cloud and on-premises environments while maintaining regulatory compliance.

Avertro

Vulnerability Management

CyberHQ by Avertro is a cloud-native cyber resilience platform that unifies governance, risk, and compliance into a single, operationally integrated system. It replaces fragmented spreadsheets and siloed workflows with dynamic modules spanning risk registers, capabilities assessments, threat modelling, issue tracking, and board-ready reporting. Its multi-workspace architecture lets organisations manage risk locally while maintaining enterprise-wide visibility from a single pane of glass

CyberHQ

Compliance & GRC

A unified cyber resilience command platform that converts fragmented security data into actionable business-driven decisions by integrating compliance, risk quantification, threat modeling, and data connectors above existing security tools.

Inspector

Vulnerability Management

Automated and continual vulnerability management at scale

Backline

Vulnerability Management

Since 1995, BACKLINE has been providing professional musicians, bands and studios with top quality equipment rentals. More than just a rental company, we are a full-service backline company. Our technicians will deliver, set up and strike the equipment, leaving the musician with only one job: plug in and play.

Backline

Vulnerability Management

An agentic security platform built for Autonomous Exposure Remediation that consolidates multi-scanner findings and delivers verified, production-ready fixes for vulnerabilities.

Cookie Consent

Privacy & Consent Management

Helps organizations discover tracking technologies, classify cookies by purpose and risk, deploy compliant consent banners, enforce user preferences, and maintain audit-ready evidence across global privacy regulations.

Data Deletion

Privacy & Consent Management

Automates the removal of personal, sensitive, and regulated data across structured and unstructured sources to fulfill privacy rights, enforce retention policies, and reduce organizational risk.

Data Rights Automation

Privacy & Consent Management

Automates the management and fulfillment of privacy rights requests including access, deletion, correction, and portability requests by discovering personal data and correlating it to individual identities.

Vulnerability Intelligence

Vulnerability Management

Exploit-aware scoring and reachability analysis that reduces false positives and identifies only relevant runtime vulnerabilities

GravityZone Compliance Manager

Compliance & GRC

From Complexity to Clarity: Compliance Made Simple, streamlines regulatory adherence by automating compliance tracking across multiple frameworks.

BitSight

Compliance & GRC

Risk now moves across enterprises, supply chains, cloud environments, and digital identities, and AI is accelerating how quickly vulnerabilities can be exploited. Bitsight continuously maps assets and vulnerabilities, prioritizing them with real-time threat intelligence so teams can see where risk is building, focus on what matters, and act before exposure becomes disruption.

Security Ratings

Compliance & GRC

Dynamic scoring of organizational cybersecurity diligence

Trust Management Hub

Compliance & GRC

Centralized platform for managing trust and risk relationships

Vendor Risk Management

Compliance & GRC

Assessment and management of third-party security posture

Vulnerability Intelligence

Vulnerability Management

Tracking of known exploitable weaknesses

Black Kite

Compliance & GRC

We're building a world where cyber risk is no longer a barrier to business performance.

Assess

Compliance & GRC

Smarter Cyber Assessments, Powered by AI - Automates document analysis, maps controls to compliance frameworks, and validates vendor responses.

Agentic GRC

Compliance & GRC

Platform that automates governance, risk, and compliance processes by using AI agents to collect evidence, map controls across frameworks, detect gaps, and prepare audit responses.

Agentic Vulnerability Management

Vulnerability Management

Automates the process of prioritizing vulnerabilities, generating security fixes, and routing them through approval workflows to close exploitable risks faster.

Continuous Threat Exposure Management

Vulnerability Management

Continuously validates, prioritizes, and fixes exploitable risks through a unified platform combining continuous attack surface discovery, autonomous penetration testing, and certified manual testing services.

Brinqa

Vulnerability Management

Brinqa helps exposure management teams reduce risk faster by unifying data across IT, security, cloud, identity, and application security through 240+ pre-built connectors and the Cyber Risk Graph™, creating a single source of truth. AI agents improve data quality by identifying owners, deduplicating findings, and assessing real exploitability. SmartFlows automate remediation across teams without custom code.

AI Layer

Vulnerability Management

Applies agentic AI to continuously analyze exposures in context, identifying real-world risk pathways and delivering AI-driven vulnerability prioritization grounded in actual risk rather than inflated metrics.

Exposure Management Platform

Vulnerability Management

A unified exposure management platform that ingests data from 260+ security and IT systems to identify, prioritize, and remediate cyber risks through a single trusted foundation.

CalCom

Vulnerability Management

CalCom Hardening Suite (CHS) is an automated hardening solution at scale. We do both the detection and enforcement remediation of misconfigured baselines based on CIS . The key game changer of CalCom is we are able to remediate and enforce without causing any disruption. No outages, no downtime. This is achieved by our learning model where smart algorithms understand the behavior of the configurations.

Apex

Vulnerability Management

An autonomous security agent that investigates like an attacker, tracing subtle logic flaws and chained exploits that traditional scanners miss.

Bounties

Vulnerability Management

A researcher-powered security validation platform that combines AI with experienced security researchers to triage and validate bug bounty submissions.

Onchain Security

Vulnerability Management

A hybrid smart contract security platform combining elite independent researchers with AI-native analysis for audits and managed bug bounties.

The Center for Internet Security (CIS) provides Hardened Images and configuration benchmarks that serve as the industry standard for securing cloud operating systems and infrastructure. Their virtual machine images are pre-configured to meet CIS Benchmark standards, providing a secure baseline for AWS, Azure, and GCP environments out of the box. They complement CSPM tools by providing the gold-standard configurations used for compliance auditing and system hardening.

Prescriptive configuration recommendations for 25+ vendor product families representing consensus-based security guidance from global cybersecurity experts.

Automates assessment of system configurations against security benchmarks, delivering compliance reporting and security insights through scanning and analysis.

A prioritized set of actionable cybersecurity best practices and safeguards designed to strengthen security posture and defend against top threats.

DORA & MiCA Compliance

Compliance & GRC

End-to-end security testing across applications, infrastructure, and smart contracts to help EU digital asset businesses achieve Digital Operational Resilience Act and MiCA regulatory readiness.

Proof of Reserves Audit

Compliance & GRC

Independent verification service that demonstrates transparency and builds trust by verifying reserves in real time with continuous monitoring and cryptographic proofs.

VARA Compliance Solutions

Compliance & GRC

Comprehensive security and compliance services tailored to Dubai's Virtual Assets Regulatory Authority requirements, guiding entities through regulatory compliance methodology.

Exposure Management

Vulnerability Management

Identifies and prioritizes vulnerabilities and risks across cyber-physical systems to reduce attack surface and ensure business continuity.

Cloaked

Privacy & Consent Management

We empower people to own their data, enabling smarter AI and apps without compromising privacy and safety.

Compliance Essentials Platform

Compliance & GRC

AI-Enhanced Compliance platform that automates policy reviews, evidence collection, and framework mapping across 100+ compliance standards while enabling AI agents to execute actual compliance work.

Coalition

Compliance & GRC

Active Insurance is coverage designed to prevent digital risk before it strikes. We combine the power of technology and insurance to help organizations identify, mitigate and respond to digital risks.

Commugen

Vulnerability Management

Commugen is a market leader in GRC management solutions

Commugen AI

Compliance & GRC

Specialized AI agents that automate repetitive Cyber GRC tasks from policy generation to evidence analysis.

Cyber Security Compliance Automation

Compliance & GRC

Automates compliance monitoring and control management to ensure regulatory adherence across multiple compliance frameworks.

Cyber Security Risk Management

Vulnerability Management

Assesses cyber posture, identifies and prioritizes risks, and manages vulnerability and incident response across all frameworks.

PT and Vulnerability Management

Vulnerability Management

Enables distributed management of penetration testing and vulnerability information through centralized collaboration and automation.

Risk Quantifier

Compliance & GRC

Automates risk register creation by quantifying cybersecurity risks in financial terms to enable data-driven investment decisions.

ComplianceQuest

Compliance & GRC

ComplianceQuest provides a cloud-based platform built natively on Salesforce for quality management (QMS), product lifecycle management (PLM), environmental health and safety (EHS), supplier relationship management (SRM), and regulatory compliance. SafetyQuest module handles EHS data analysis for incidents, inspections, chemical management, permits, waste, and sustainability. It serves regulated industries like manufacturing, life sciences, energy, and healthcare, unifying siloed processes to mitigate risks and ensure adherence to standards such as GDPR, ISO 9001, and SOC 2 Type II. Best for enterprises needing integrated QHSE workflows with Salesforce scalability and security.

Compyl

Compliance & GRC

To redefine GRC by delivering flexible, powerful solutions that help organizations confidently manage risk and compliance with clarity and ease.

Compliance Management Platform

Compliance & GRC

AI-powered platform that maps a single control library to 70+ frameworks and automatically collects audit evidence to keep organizations compliance-ready year-round.

Contract Management

Compliance & GRC

Transforms contracts from siloed documents into connected objects within a unified GRC platform, linking them to vendor risk, obligations, assets, and renewal dates with proactive alerts.

Evidence Studio

Compliance & GRC

Automates control testing and evidence collection by gathering live, auditable proof from connected systems using AI-powered blueprints mapped to compliance frameworks.

Policy Management

Compliance & GRC

Centralizes policy creation, approval workflows, and version control, then automatically maps policies to compliance controls and frameworks using agentic AI to maintain audit readiness.

Risk Management

Compliance & GRC

Centralizes enterprise risks in a connected register that quantifies exposure in dollars rather than heat-map colors, enabling leadership to prioritize based on business impact.

Vendor Risk Management

Compliance & GRC

Automates the entire vendor lifecycle, from onboarding and assessment through continuous monitoring, keeping third-party risks visible and connected to contracts, assets, and controls.

C

Continuity

Compliance & GRC

Continuity is a cloud-native, automated regulatory change management and risk solutions for the financial services industry, continuously updated by subject matter experts.

CVE Shield

Vulnerability Management

Detects and blocks the exploitation of known vulnerabilities in live production applications in real time, even before patches are available.

Govern

Compliance & GRC

Define & enforce AI policy mapped to regulatory frameworks like NIST AI RMF and EU AI Act.

Prove

Compliance & GRC

Demonstrate AI compliance posture on-demand by sharing trusted evidence with stakeholders.

Falcon Exposure Management

Vulnerability Management

Continuously identifies exploitable vulnerabilities, misconfigurations, and attack paths across environments while prioritizing fixes using adversary intelligence.

CSide

Vulnerability Management

We're building the next generation of web security, accessible to all, no matter how big or small your venture. Because security is not something we should put behind an unclimbable paywall.

Vulnerability Management

Vulnerability Management

Proactive endpoint security capability that continuously assesses applications, identifies CVEs, and delivers actionable patching recommendations.

Exposure Management

Vulnerability Management

AI-Driven Preemptive Security platform that leverages artificial intelligence and agentic tools to identify and prioritize vulnerabilities across cloud, user, network, and Active Directory environments.

CyLock

Vulnerability Management

I could not verify a CyLock vulnerability management product from the provided search results or from the information available to me here. The sources returned in the query do not include an official CyLock product page, technical documentation, pricing, or integration list. For a CISO evaluating vulnerability management, that means I cannot factually describe CyLock’s scanner coverage, prioritization logic, remediation workflow, or deployment model without inventing details. If CyLock is a private vendor, its public footprint appears too limited in the supplied material to support a reliable profile.

Exposures

Vulnerability Management

Consolidates security findings from multiple tools and contextualizes them against actual assets and business priorities for intelligent prioritization.

Software Assets

Vulnerability Management

Provides automated software inventory across entire device ecosystem, identifying risky software and correlating data from all tools into a single reliable inventory.

Cytidel

Vulnerability Management

Cytidel helps security teams identify and prioritise the top 1% of vulnerabilities that pose real risk. Our platform combines real-time threat intelligence, threat actor TTPs, exploitability signals, third-party risk context, and business impact analysis to deliver contextual alerts and automated threat-led prioritisation. By moving beyond CVSS-led triage, Cytidel helps teams reduce noise, act faster on emerging threats, and focus remediation on the vulnerabilities most likely to be exploited.

DarkInvader

Vulnerability Management

DarkInvader is an external attack surface management vendor that includes vulnerability scanning for internet-facing assets. In the vulnerability management scope, it focuses on identifying exposed weaknesses on web applications and other public-facing infrastructure, then ranking them by severity, exploitability, and business impact. Its positioning is strongest for teams that need external asset visibility and remediation prioritization rather than internal host-based scanning. The platform is a fit for security teams protecting high-value staff and critical assets, especially where exposure data from open web and dark web sources needs to be tied back to remediation workflows.

DataGrail

Privacy & Consent Management

We believe transparency builds trust. That's why we created a platform that is purpose-built for brands to create robust privacy programs with ease.

Consent Management

Privacy & Consent Management

Fully-automated, deeply customizable, and easy-to-use consent management for privacy teams.

Privacy Assessments

Compliance & GRC

Create fast, accurate privacy assessments with Vera, your integrated AI agent.

Request Manager

Compliance & GRC

Automate your data subject access, deletion, and opt-out requests with DataGrail in a repeatable, scalable way.

Risk Register

Compliance & GRC

Centralize, prioritize, and manage privacy risks from across your organization with AI-powered detection and actionable insights.

Identifies and remediates database security weaknesses across multiple database types and cloud environments.

Continuous Threat Exposure Management

Vulnerability Management

Transforms organizations to a preemptive and proactive security posture by prioritizing vulnerabilities, streamlining compliance, and accelerating threat detection and response.

Vulnerability Management

Vulnerability Management

Collaborative vulnerability management program offering clear visibility of threat landscapes and expert-guided remediation strategies.

Didomi

Privacy & Consent Management

Didomi helps organizations implement great Privacy User Experiences that respect choices and give people control over their data.

Agility

Compliance & GRC

An enterprise agile planning tool designed for large organizations with AI-powered analytics and end-to-end value stream visibility.

Diligent

Compliance & GRC

At Diligent, we believe in a world where transformational leaders can build more successful, equitable and sustainable organizations.

ACL Analytics

Compliance & GRC

AI-powered analytics platform that enables audit, risk, and compliance teams to automate testing, analyze 100% of their data and detect issues before they become costly problems.

AI Risk Essentials

Compliance & GRC

Enterprise risk management solution that leverages artificial intelligence to quickly implement an AI-powered ERM program by identifying relevant organizational risks from financial disclosures.

Enterprise Risk Management

Compliance & GRC

Software designed to identify, assess and mitigate risks that could impact your organization's objectives by centralizing risk data and automating workflows with AI-powered insights.

IT Compliance

Compliance & GRC

Software that automates and streamlines regulatory compliance management by centralizing compliance requirements across 75+ frameworks and providing real-time monitoring with board-ready dashboards.

IT & Cyber Risk Management

Compliance & GRC

Platform that helps organizations effectively monitor, assess and remediate IT and cyber risks by aligning cybersecurity threats with business impact.

Policy Manager

Compliance & GRC

Compliance software that automates the complete policy lifecycle from creation and approval to distribution and tracking, enabling teams to maintain audit readiness.

Speak Up Manager

Compliance & GRC

Whistleblowing and case management platform that enables organizations to streamline reports, manage investigations and demonstrate a culture of integrity through AI-powered intake and centralized case management.

Vulnerability Management

Vulnerability Management

Delivers risk-based OT vulnerability management with prioritization guidance to help defenders mitigate vulnerabilities without disrupting operations.

Drata

Compliance & GRC

Building the Trust Layer Between Great Companies

AI Questionnaire Assistance

Compliance & GRC

Complete Security Questionnaires in Minutes by automating the process of answering lengthy security questionnaires based on existing security documentation and policies.

Compliance Automation

Compliance & GRC

Automate evidence collection across connected tools, continuously monitor controls to maintain current compliance status, and stay audit-ready without manual spreadsheets.

Enterprise GRC

Compliance & GRC

Unified GRC for the Modern Enterprise, a platform designed to centralize controls, risks, policies, and evidence across business units.

Third-Party Risk Management

Compliance & GRC

Make defensible and scalable third-party risk decisions by replacing manual, questionnaire-heavy vendor reviews with criteria-based, evidence-driven assessments and continuous monitoring.

Trust Center

Compliance & GRC

Give prospects, customers, auditors, and stakeholders a secure, self-serve destination to review your security posture, request access to documents, and get answers immediately.

Echo

Vulnerability Management

Echo is creating the trusted source for agentic-ready software.

EOL Support

Vulnerability Management

Extended security support for end-of-life container images, libraries, virtual machines, and serverless environments with CVE remediation and version stability.

SBOM Hub & VEX

Compliance & GRC

One system of record for every SBOM in the enterprise, enabling teams to ingest, generate, and continuously monitor Software Bill of Materials and Vulnerability Exploitability eXchange documents.

SCA with Reachability

Vulnerability Management

See which open source vulnerabilities are exploitable by performing function-level analysis to determine which vulnerabilities in dependencies are actually callable within application code.

Vulnerability Remediation

Vulnerability Management

Transforms continuous penetration testing into clear, actionable remediation, helping security leaders reduce real-world risk with confidence.

Vulnerability Management

Vulnerability Management

Unifies vulnerability insights with broader security data to prioritize critical exposures and drive faster remediation across your modern attack surface.

Outcomes Navigator

Compliance & GRC

Guidance tool that maps security coverage to compliance frameworks and standards like MITRE ATT&CK and OWASP

Human Risk Reporting

Compliance & GRC

Provides continuously updated human risk profiles based on employee behaviors and threat exposure with behavior drill-downs and recommended actions.

AI-R Privacy

Privacy & Consent Management

AI-powered detection and de-identification of personal information across text, images, and scanned documents.

Compliance and Risk Management

Compliance & GRC

A compliance and security platform that automates evidence collection and technical controls to help startups achieve SOC 2, ISO 27001, and other compliance certifications without disrupting product development.

Vulnerability Management

Vulnerability Management

Fix vulnerabilities without juggling tools, a unified platform to find and remediate security issues across code, cloud, and infrastructure.

Feroot Security

Compliance & GRC

Automated PCI, HIPAA & Privacy Compliance

DXComply

Compliance & GRC

Automates privacy compliance and consent audits across websites and mobile apps against GDPR, CCPA, HIPAA, and 50+ global regulations.

PaymentGuard

Compliance & GRC

Continuously inventories and monitors every script running across payment pages and mobile apps, detects unauthorized changes in real time, and automatically generates evidence for PCI DSS compliance.

Policy Optimizer

Compliance & GRC

An automated rule recertification platform that triggers reviews, routes decisions to owners, and keeps audit-ready records of compliance decisions.

Vulnerability Intelligence

Vulnerability Management

Combines NVD-independent data, real-time exploit analysis, and advanced scoring to help security teams discover vulnerabilities and prioritize threats across IT, OT, IoT, and supply chain environments.

F-Secure Radar

Vulnerability Management

F‑Secure is a human-first, AI‑powered consumer cyber security experience company with 38 years of expertise in tackling digital threats. We help digital service providers turn trust into a high-value growth engine, protecting their customers while enabling them to live their best digital lives in a world of relentless, AI‑driven scams.

Furl

Vulnerability Management

Furl is an autonomous remediation platform that closes security findings such as vulnerabilities, misconfigurations, and endpoint hardening gaps after they are identified by existing vulnerability scanners. It is built for security and IT operations teams responsible for reducing vulnerability backlogs across endpoints and servers. The platform integrates with tools such as Qualys, Tenable, and Rapid7 for findings, and with CrowdStrike, SentinelOne, AWS, Okta, and Google for execution, rather than replacing existing infrastructure. It investigates each issue, builds an environment specific fix, and validates closure within guardrails and approval thresholds the customer defines. Furl is deployed as a SaaS solution and was founded by veterans of Rapid7, Automox, and Censys.

GRC-Maestro

Compliance & GRC

GRC-Maestro, from Dynamic GRC, is a Compliance-as-a-Service platform for automating governance, risk, and compliance processes. It supports rule-based incident identification, manual breach assessment with classification and reasoning, and targeted controls applied to employees, clients, legal entities, regulators, and departments. The platform enables automated checks, incident management, and record keeping for evidence and reporting. Designed for regulated firms, it uses customizable Maestro-Templates for regulatory, legal, and internal controls across GRC requirements, providing flexible functionality without system replacement.

Greenbone Enterprise Appliance

Vulnerability Management

Greenbone Enterprise Appliance (also known as OpenVAS, Open Vulnerability Assessment System, Greenbone's open-source scanner) provides professional vulnerability management built on the OpenVAS framework. It offers robust scanning, asset management, and reporting capabilities, with both an enterprise appliance for organizations seeking reliable, scalable security assessments and an open-source edition often used for cost-effective vulnerability assessment, penetration testing support, and educational purposes.

Hyperproof

Compliance & GRC

Hyperproof provides an AI-powered GRC platform for managing compliance programs, automating evidence collection via hypersyncs, and standardizing control operations across multiple frameworks like SOC 2. It positions as a competitor to AuditBoard and Vanta, targeting technology companies scaling GRC for global entities and new markets. Best suited for IT, security, and compliance teams at enterprises like Reddit and Fortinet handling complex organizations with hierarchical scopes, real-time risk monitoring, and control-to-risk mapping to reduce duplicated work.

iDox.ai

Privacy & Consent Management

iDox.ai Was Created To Deliver The World's #1 Data Privacy Solution.

IntelliGRC

Compliance & GRC

IntelliGRC is a cloud-based governance, risk, and compliance platform built for organizations pursuing certifications such as CMMC, NIST 800-171, SOC 2, ISO 27001, HIPAA, and CIS Controls. It targets managed service providers and managed security service providers that operationalize compliance work across multiple clients, as well as compliance teams managing a single organization's certification. The platform maps assets across people, technology, facilities, and data, then uses AI-assisted evidence collection and gap analysis against a chosen framework. Continuous monitoring dashboards, audit-ready reporting, and cross-framework control mapping help teams track remediation and maintain compliance on an ongoing basis rather than as a one-time audit exercise.

Intruder

Vulnerability Management

Intruder provides a cloud-based vulnerability management platform founded in 2015 by Chris Wallis to address prioritization challenges in vulnerability scanning. It serves over 3,000 mid-market enterprise and government customers worldwide with continuous scanning using 65,000+ checks for known vulnerabilities, proactive emerging threat scans for zero-days, and attack surface discovery across external infrastructure, web apps, APIs, and cloud environments. The platform emphasizes risk prioritization, automated alerts, resolution tracking, and reporting on fix velocity and threat posture trends, replacing fragmented tools for lean security teams facing advanced threats.

Ketch

Privacy & Consent Management

Ketch was founded in San Francisco in 2020 to help businesses move from rules to tools: infrastructure that lets them collect, control, and activate permissioned data responsibly.

Kovrr

Compliance & GRC

Kovrr is a leading provider of AI and cyber risk, security, and governance solutions, helping global organizations evaluate exposure, quantify potential business impact, and strengthen resilience with data-driven insights.

LogicGate Risk Cloud

Compliance & GRC

LogicGate Risk Cloud is a configurable GRC platform focused on compliance workflow automation, evidence collection, control mapping, and audit preparation. In the Compliance & GRC category, it is positioned as a central system for linking obligations, assessments, controls, and reporting across regulatory programs. The platform is best suited for mid-market and enterprise teams managing recurring compliance tasks across multiple frameworks and internal control sets. LogicGate also offers adjacent GRC modules such as risk quantification and broader risk management, but the compliance offering centers on automating the operational side of governance and assurance.

LogicManager

Compliance & GRC

LogicManager is the industry leader in SaaS-based Enterprise Risk Management (ERM) software that empowers organizations to anticipate what's ahead, uphold their reputations, and improve business performance.

Magnitude

Compliance & GRC

Multi-agent TPRM platform that assesses products, monitors risk, and remediates issues across Nth-parties continuously.

MazeBolt

Vulnerability Management

RADAR provides the missing DDoS vulnerability data layer that pinpoints what can bypass your protections. It prioritizes the fixes that matter most, and ensures defenses are always validated, always optimized, and always ready. - Detect Vulnerabilities at the Speed of AI - Prioritize Remediation at Scale - Validate DDoS Defense Readiness - Full Attack Surface Coverage

Compliance Management

Compliance & GRC

Centralizes policy, privacy and incident management with advanced analytics, detailed reporting, and automated alerts.

MetricStream

Compliance & GRC

An AI-First GRC Platform that drives smarter decisions across risk, audit, compliance, cyber, and resilience.

Connected GRC

Compliance & GRC

A unified, cloud-based platform that integrates risk management, compliance, audit, cybersecurity, third-party risk management, and operational resilience on a single system.

Enterprise Risk Management

Compliance & GRC

Enables organizations to systematically identify, assess, monitor, and manage risks across their operations through structured methodologies and real-time analytics.

IT & Cyber Compliance

Compliance & GRC

Provides a common framework to manage and monitor compliance for a range of IT regulations and standards through a unified platform.

IT & Cyber Policy

Compliance & GRC

Streamlines the creation, communication, management, and lifecycle tracking of IT and cyber policies across an organization.

IT & Cyber Risk

Compliance & GRC

Enables organizations to identify, assess, quantify, and mitigate information technology and cybersecurity threats through an integrated, business-driven approach.

Vendor Risk Management

Compliance & GRC

Provides real-time visibility and automated management of IT vendor risks throughout their entire lifecycle.

Microsoft Defender Vulnerability Management

Vulnerability Management

Microsoft Defender Vulnerability Management is Microsoft's risk-based vulnerability management solution, built natively into the Microsoft Defender suite. It provides asset discovery, vulnerability assessment, and prioritised remediation guidance across Windows, macOS, Linux, iOS, Android, and network devices. It is particularly valuable for organisations already standardised on Microsoft 365 Defender or Intune, as it integrates without additional agent deployment and feeds directly into existing Microsoft security operations and compliance workflows.

Prove

Vulnerability Management

Delivers runtime exploitability validation and vulnerability prioritization, identifying which vulnerabilities actually matter based on attack-path analysis.

Aware

Compliance & GRC

Identifies and addresses non-compliance, data loss, and security threats in collaboration platforms while accelerating incident response times.

Email Archive

Compliance & GRC

Streamlined email and collaboration data storage solution that enables organizations to simplify e-discovery, maintain compliance, and ensure data is never lost through secure archiving.

Virtual Patching

Vulnerability Management

Protects vulnerable applications from exploitation by enforcing a known-good baseline at the kernel level, eliminating the need to wait for vendor patches.

AI Governance & Compliance

Compliance & GRC

Compliance and governance tools for AI systems

Mondoo

Vulnerability Management

Mondoo provides an AI-native security platform that integrates agentic automation with human expertise to manage the lifecycle of vulnerability remediation. The platform focuses on 'Full-Stack' visibility across cloud, containers, and infrastructure, moving beyond simple scanning to automated fix generation and validation. It replaces legacy vulnerability scanners that lack context and helps teams transition to a Continuous Threat Exposure Management (CTEM) framework.

MyCISO

Compliance & GRC

MyCISO is a GRC and security program management platform designed to replace manual spreadsheets with an automated, data-driven security operations hub. It provides integrated modules for risk management, compliance tracking (SOC2, ISO27001), supplier risk, and incident response planning. The platform focuses on 'Board-ready' reporting, translating technical security posture into financial and risk-prioritized metrics.

Nagomi Security

Vulnerability Management

Nagomi Security provides a threat exposure management platform that bridges the gap between identification and remediation within a Continuous Threat Exposure Management (CTEM) framework. It provides an 'execution layer' that unifies security asset visibility with contextual prioritization and guided remediation, ensuring that exposure gaps are closed based on actual threat actor behavior and internal security controls. It complements existing EDR and XDR investments by identifying where defenses are misconfigured or failing.

Nessus (by Tenable)

Vulnerability Management

Nessus is Tenable's flagship vulnerability scanner and core component of Tenable Vulnerability Management, a cloud-managed risk-based platform for identifying and prioritizing vulnerabilities across on-premises, cloud, and OT/IoT environments. The platform combines continuous asset discovery with passive network monitoring (Nessus Network Monitor) to detect software flaws, missing patches, malware, misconfigurations, and default credentials. Nessus uses Vulnerability Priority Rating (VPR) algorithms and threat intelligence integration to rank exposures by exploitability. Best suited for enterprises and security teams requiring comprehensive vulnerability coverage with low false positive rates across dynamic infrastructure.

ZeroLens

Vulnerability Management

Identify weaknesses in compiled software before bad actors find and exploit them through decompilation and binary analysis

Auditor

Compliance & GRC

IT audit software that tracks activity and generates real-time alerts to identify risks, detect threats, and automate compliance reporting from a centralized platform.

Change Tracker

Compliance & GRC

File integrity monitoring and security configuration management solution that detects unauthorized changes, hardens system configurations, and simplifies compliance audits.

Autonomous Patch Management

Vulnerability Management

Automatically evaluates, prioritizes, and deploys patches across Windows, macOS, Linux, and thousands of third-party applications using AI-driven intelligence.

Vulnerability Management

Vulnerability Management

AI-powered vulnerability intelligence delivered in real time with Known Exploited Vulnerability insights to prioritize and remediate faster.

Nucleus Security

Vulnerability Management

Nucleus Security is the leader in Unified Exposure Management turning exposure into measurable exposure reduction at enterprise scale. The Nucleus platform orchestrates enterprise programs to drive outcomes, continuously unifying security data from 200+ sources, prioritizing risk with AI-powered vulnerability and exploit intelligence, and effectively mobilizing remediation. A FedRAMP authorized vendor

Nucleus Helix

Vulnerability Management

An AI engine built for exposure management programs that pairs agentic AI with fast, accurate, and reliable execution to remediate vulnerabilities faster at enterprise scale.

Nucleus Platform

Vulnerability Management

An enterprise vulnerability and exposure management platform that unifies data from 200+ security sources to identify, prioritize, and remediate security risks at enterprise scale.

Runtime Vulnerability Management

Vulnerability Management

Identifies vulnerabilities actively loaded in execution memory

OneTrust

Compliance & GRC

Our mission is to enable innovation through the responsible use of data and AI. We believe that trusted data can be a transformative force in business and society.

Compliance Automation

Compliance & GRC

Helps InfoSec and IT teams automate evidence collection and stay audit-ready across 50+ compliance frameworks and standards.

Consent Management Platform

Privacy & Consent Management

Enables organizations to capture consent, manage user privacy preferences, and demonstrate regulatory compliance across websites, mobile apps, and connected TV devices.

DataGuidance

Privacy & Consent Management

Enables organizations to monitor global privacy regulations, access expert guidance, and maintain compliance through a database of regulatory insights and personalized alerts.

Data Subject Request (DSR) Automation

Privacy & Consent Management

Automates the end-to-end process of fulfilling privacy rights requests, including intake, identity verification, data discovery, deletion, and secure response delivery.

IT Risk Management

Compliance & GRC

Streamlines data collection and mapping of risk relationships to assess and quantify risk across IT and business ecosystems.

Privacy Operations

Privacy & Consent Management

Automates privacy compliance activities by detecting data assets, monitoring personal data, mapping data flows, managing risk assessments, and streamlining incident response to help organizations meet regulatory requirements.

Third-Party Risk Management

Compliance & GRC

Automates the entire third-party lifecycle, enabling organizations to streamline vendor onboarding, assessments, monitoring, and compliance reporting through a centralized platform.

Universal Consent and Preference Management

Privacy & Consent Management

Enables organizations to centralize customer consent and communication preferences through a single portal, allowing individuals to control their data while helping businesses deliver personalized marketing at scale.

Onyxia

Compliance & GRC

Setting the standard for Operational Cyber Resilience.

OPSWAT

Vulnerability Management

OPSWAT prevents known, unknown, and AI-generated threats from reaching the systems the world depends on. The MetaDefender Platform, OPSWAT's AI-powered cybersecurity solution, secures every file, device, and data transfer across IT, OT, and cross-domain environments.

Optery

Privacy & Consent Management

We remove your personal information from the internet.

Optro

Compliance & GRC

Optro provides an "agentic" GRC platform that utilizes AI to automate audit, risk management, and compliance workflows for Fortune 500 enterprises. The system transforms static compliance checks into active, automated systems of action that integrate with enterprise data sources. It competes with legacy GRC platforms by offering more dynamic, real-time risk assessments and automated evidence collection.

AI Governance

Compliance & GRC

Manages governance and oversight of artificial intelligence systems and implementations.

Autonomous Testing

Compliance & GRC

Enables AI agents to independently execute attribute tests across evidence like access reviews and reconciliations.

Controls Management

Compliance & GRC

Tackle controls management with embedded AI, all within the GRC Intelligence Platform.

Cyber Risk Management

Compliance & GRC

Understand your threat landscape, quantify risks, and improve cyber resilience.

Operational Audit

Compliance & GRC

Conducts audits focused on operational efficiency and risk assessment.

Regulatory Compliance

Compliance & GRC

Maintains alignment with changing regulatory requirements and compliance obligations.

Risk Management

Compliance & GRC

Centralizes risk identification and management across the enterprise.

Third-Party Risk Management

Compliance & GRC

Manages risks associated with external vendors and third-party relationships.

Osano

Privacy & Consent Management

Simplify Data Privacy Compliance

Cookie Consent

Privacy & Consent Management

Automated compliance with global cookie consent laws across 50+ countries by deploying customizable, regulation-compliant banners that manage user consent and cookie preferences.

Data Mapping

Privacy & Consent Management

Automates the discovery and visualization of where personal and sensitive data resides throughout an organization to streamline compliance tasks.

Privacy Assessments

Privacy & Consent Management

Enables organizations to efficiently manage, track, and complete various privacy evaluations, including DPIAs, RoPAs, and vendor assessments, through pre-built templates and automated workflows in a single, secure platform.

Subject Rights Management

Privacy & Consent Management

Automates the processing of data subject access requests (DSARs) to streamline compliance with privacy regulations while building consumer trust.

TrustHub

Privacy & Consent Management

Simplifies privacy operations by consolidating policy management, GDPR representation, and transparency tools in one platform to help organizations demonstrate compliance and build consumer trust.

Unified Consent & Preference Hub

Privacy & Consent Management

Enables organizations to centralize and manage user consent and data preferences across their business while maintaining compliance with global privacy regulations.

Vendor Privacy Risk Management

Privacy & Consent Management

Helps organizations identify, assess, monitor, and mitigate privacy risks posed by third-party vendors who handle customer data.

Outpost24

Vulnerability Management

Leading Global Provider of Exposure, Identity and Access Management, made in Europe

Panorays

Compliance & GRC

Panorays is a third-party risk and vendor compliance platform used by security and procurement teams to collect evidence, run security questionnaires, and document risk decisions across supplier relationships. Within Compliance & GRC, it centers on vendor onboarding, assessment workflows, remediation tracking, and audit-ready records rather than enterprise-wide policy management. The platform is best suited for organizations that need repeatable third-party due diligence, especially where security, legal, and compliance teams must review SOC 2, ISO 27001, and similar attestations. It can also synchronize third-party risk data into Archer for broader GRC workflows.

Continuous Cyber Security Monitoring

Compliance & GRC

Provide real-time visibility into third-party vendors' security posture and enable continuous risk assessment across the supply chain.

Cybersecurity Questionnaires

Compliance & GRC

Streamline vendor security assessments through customizable questionnaires with AI-driven response validation and automated workflows.

Regulatory Compliance Monitoring

Compliance & GRC

Automate the assessment and monitoring of vendor regulatory adherence and compliance posture throughout the supply chain.

Risk DNA Cybersecurity Posture

Compliance & GRC

Assess and monitor the security posture of vendors using AI-driven analysis to identify and prioritize the most critical third parties.

Patch My PC

Vulnerability Management

Patch My PC provides automated patch management for third-party applications, integrating directly with Microsoft Configuration Manager (ConfigMgr/SCCM), WSUS, and Intune. It handles packaging, testing, and deployment of thousands of updates, delivering CVE-linked vulnerability details for prioritization. The SaaS-based Publisher portal consolidates reporting on patch compliance, installed updates, and endpoint risks. Trusted by over 10,100 customers, it targets IT/security teams in Microsoft-centric environments seeking to reduce manual patching efforts and enhance endpoint security against known vulnerabilities.

Advanced Insights

Compliance & GRC

Comprehensive reporting and analytics platform that consolidates compliance data and provides endpoint visibility through unified dashboards covering patch compliance, software updates, and device health.

Application Management

Vulnerability Management

Platform that streamlines packaging apps and automates detection, packaging, and deployment of third-party application updates across ConfigMgr and Intune environments.

Patch My PC Cloud

Vulnerability Management

Cloud-native SaaS solution that automates packaging, deployment, and updating of third-party applications across Intune and ConfigMgr environments.

Home Updater

Vulnerability Management

Free software utility that automatically installs and updates over 500 applications on personal computers to keep systems secure by automating the patching process.

Patch Management

Vulnerability Management

Advanced patch management platform that automates the packaging, testing, and deployment of thousands of third-party updates across enterprise environments.

Patch My PC Publisher

Vulnerability Management

All-in-one solution for managing third-party application updates across enterprise environments with support for over 2,000 applications.

Pathlock (formerly Greenlight Technologies)

Compliance & GRC

Driving secure and compliant digital transformation through risk-aware identity governance.

Email Archiving

Compliance & GRC

Compliance-focused solution for automatic retention and full-text search of all inbound and outbound emails across users

Forms

Compliance & GRC

HIPAA-compliant patient data collection tool with AI-powered form generation and e-signature capabilities

Pentera

Vulnerability Management

Pentera sets the global standard for exposure validation by building the most advanced attack emulation platform, easily applied to any attack surface.

Phoenix Blue

Vulnerability Management

AI-driven vulnerability intelligence helping teams identify which CVEs are actually coming for you.

Cyber Resilience Program

Compliance & GRC

Expert-guided programs combining surveys, insights, and tailored communication strategies with branded content like toolkits and newsletters to transform awareness into action.

Picus Security

Vulnerability Management

We are on mission to reduce cyber risk through security validation.

Exposure Validation

Vulnerability Management

Proves what's exploitable across every exposure by combining breach simulation, automated penetration testing, and TTP-chaining into a defensible remediation decision.

Governance & Compliance

Compliance & GRC

Translate policy into enforceable technical controls, automate compliance evidence collection, and close the gap between governance documents and runtime protection.

Plainsea

Vulnerability Management

Plainsea is a cybersecurity service-delivery platform whose vulnerability management scope centers on mapping assets, identifying weaknesses, and prioritizing remediation for pentest and security teams. It combines manual asset mapping with automated discovery, integrates vulnerability data sources for risk scoring, and produces structured reports and remediation guidance. The product appears aimed at MSSPs, internal security teams, and enterprises that run recurring vulnerability assessments and penetration testing workflows. Outside vulnerability management, Plainsea also mentions collaboration and reporting features, but its core buyer value in this category is coordinating discovery, scoring, and remediation planning around exposed systems and findings.

PlexTrac

Vulnerability Management

Meet PlexTrac, the #1 offensive security management and reporting automation platform.

Prevalent

Compliance & GRC

Assess, monitor, and remediate risk across your third-party vendor and supplier risk management lifecycle with unified, AI-powered software.

365 Permission Manager

Compliance & GRC

Governance and compliance solution that manages file permissions across Microsoft 365 to prevent unauthorized data access.

Email Archiving

Compliance & GRC

Cloud-based solution that automatically preserves, securely stores, and makes searchable all business emails while ensuring compliance.

Neurons for Risk-Based Vulnerability Management

Vulnerability Management

Vulnerability management platform that prioritizes vulnerabilities based on actual risk context, enabling organizations to move from detection to remediation in minutes.

Qualys

Vulnerability Management

Qualys provides Vulnerability Management, Detection and Response (VMDR), a cloud-based platform that automatically discovers assets across on-premises, cloud, and mobile environments, including unmanaged devices. It scans for vulnerabilities using over 20,000 checks from its Vulnerability KnowledgeBase, correlates findings with threat intelligence and machine learning to prioritize risks on critical assets, and detects indicators of compromise. VMDR supports hybrid IT scanning from a single console, generates role-based reports for compliance, and integrates with ticketing systems for automated remediation workflows. Best for enterprises needing continuous visibility and prioritization in complex, distributed networks.

Patch Management

Vulnerability Management

Automated patch deployment and vulnerability remediation solution for reducing critical vulnerabilities

TruRisk Platform

Vulnerability Management

Risk-based prioritization and consolidated cybersecurity platform that measures, communicates, and eliminates cyber risk across the enterprise

Rapid7

Vulnerability Management

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, enriching it with AI, threat intelligence, and 25 years of expertise and innovation to reduce risk and disrupt attackers.

Exposure Command

Vulnerability Management

Identify & remediate at-risk data with proactive mitigation and threat-aware risk prioritization across hybrid infrastructures.

InsightVM

Vulnerability Management

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations' cyber resilience.

Runtime SCA

Vulnerability Management

De-prioritizes vulnerabilities by identifying which ones actually execute in production, enabling teams to focus remediation on real security risks.

Reciprocity (ZenGRC)

Compliance & GRC

Reciprocity provides the ZenGRC platform, a SaaS GRC solution for managing information security risk and compliance across multiple frameworks. Built on the ROAR platform, it integrates risk observation, assessment, and remediation into a single interface. ZenConnect offers pre-built connectors for automating data flows between systems, vendors, and partners. ZenComply maps over 10,000 content objects across frameworks, threats, and risks, providing real-time insights into compliance impact on risk posture. Best for mid-to-large organizations standardizing multi-framework compliance and third-party risk management with centralized evidence collection and auditor access.

Business Intelligence Portal

Compliance & GRC

Provides direct, secure access to your ZenGRC database, enabling advanced reporting and analytics capabilities.

Integrated Trust Center Solution

Compliance & GRC

A secure, branded portal that lets organizations share compliance and security documentation with customers and stakeholders while reducing time spent on security questionnaires.

ZenGRC

Compliance & GRC

Simply Powerful GRC: the first GRC platform using agentic AI to power an entire compliance, risk, and audit program, with automated evidence collection and cross-mapped frameworks.

AI Compliance Analyst

Compliance & GRC

Automated compliance monitoring and analysis tool that focuses on NIS2 regulatory compliance.

RedMimicry

Vulnerability Management

RedMimicry is a breach-and-attack emulation vendor, not a traditional vulnerability management scanner. In the vulnerability management context, it is used to validate whether known weaknesses, exposed services, and misconfigurations can actually be exploited through realistic multi-stage attack paths. Its fit is strongest for security teams that already run vulnerability scanners and want to prioritize remediation based on exploitability, detection gaps, and defensive control effectiveness rather than CVSS alone. Public materials emphasize semi-automated emulation of ransomware, supply chain, and other real-world attack chains.

Reflectiz

Vulnerability Management

Reflectiz is the AI-powered web exposure platform that continuously monitors and protects what executes on your websites. It detects and remediates security threats, privacy violations, compliance gaps, and AI-generated attacks in real time.

PCI Module

Compliance & GRC

Compliance automation platform designed for PCI DSS v4.0.1 requirements that performs script inventory management, change detection, and generates QSA-ready audit documentation for payment page security.

Privacy Hub

Privacy & Consent Management

Runtime web privacy assurance platform that tracks unauthorized data collection, identifies where data flows, and verifies compliance with user consent choices and privacy regulations.

Relativity

Compliance & GRC

We help organizations organize data, discover truth, and act on it. Learn more about how our customers enjoy reduced risk, unparalleled technical support, and a great product experience backed by generative AI.

Attack Surface and Exposure Management

Vulnerability Management

Provide comprehensive visibility into assets and identities across hybrid environments with automated risk prioritization and exposure remediation.

End-to-End Privacy Automation

Privacy & Consent Management

Automates privacy program management by generating and maintaining compliance records from live data flows including ROPAs, data maps, DSR fulfillment, and compliance assessments.

Resilience

Compliance & GRC

Resilience offers a GRC Resilience Suite that focuses on governance, risk, and compliance workflows rather than security testing or incident response. Its core value in this category is no-code automation for policy, risk, control, and compliance processes, with a centralized view of evidence, obligations, and review tasks. The product is aimed at organizations that want to replace manual spreadsheets and email-based tracking with structured workflow and auditability. Public materials indicate it is part of a broader ReadiNow platform, but the relevant scope here is its GRC process automation layer.

Multi-Entity & Portfolio Risk

Compliance & GRC

Automate risk assessments for every business unit with centralized visibility of financial exposure from cyber threats

Security Investment Prioritization

Compliance & GRC

Financially prioritized cyber risk management platform that translates technical cyber risks into financial terms

Threatonomics Risk Graph

Compliance & GRC

AI-powered quantification models that translate technical risk into financial risk

DawnTreader

Compliance & GRC

An autonomous deployment and compliance engine designed to deliver security tools into air-gapped, sovereign, and compliance-restricted environments.

Risk Ledger

Compliance & GRC

Risk Ledger is a network-first platform delivering Active Supply Chain Security, transforming outdated TPRM processes into connected collaboration for security and risk teams. We’re building the largest interconnected database of supplier security data. Companies get standardised, continuously updated supplier assessments that reveal every connection and dependency, because every link matters.

Riskonnect

Compliance & GRC

Riskonnect is the leading integrated risk management software solution provider.

runZero

Vulnerability Management

See what others miss. Secure what others can't.

Exposure Management Platform

Vulnerability Management

Complete security visibility across IT, OT, IoT, cloud, mobile, and remote assets with agent-free, credential-free deployment.

MaintainCert

Compliance & GRC

Ongoing software and certificate maintenance service that keeps FIPS 140-3 validations current throughout a product's lifecycle.

RapidCert

Compliance & GRC

Accelerated FIPS 140-3 validation service that enables companies to obtain FIPS certificates in approximately 90 days.

ARCPaaS

Compliance & GRC

Audit, risk and compliance management platform that gives enterprises complete visibility and control over audit processes and regulatory compliance.

MonitorPaaS

Compliance & GRC

Continuous control monitoring solution that monitors critical business transactions in real time to detect anomalies and policy violations.

ProcessPaaS

Compliance & GRC

Business process controls platform that automates approvals, enforces policies, and continuously monitors compliance across critical enterprise processes.

Safe Security

Compliance & GRC

Safe Security (SAFE) provides an AI-powered Cyber Risk Management platform that focuses on Cyber Risk Quantification (CRQ) and Continuous Threat Exposure Management (CTEM). It utilizes agentic AI to ingest telemetry from the entire security stack to calculate the probability of a breach in monetary terms, effectively replacing manual, point-in-time risk assessments. The platform helps CISOs prioritize remediation efforts based on business impact and manages Third-Party Risk Management (TPRM) through automated risk scoring.

Sahl

Compliance & GRC

Sahl transforms compliance from a manual, spreadsheet-driven process into a continuous and automated GRC operation.

Audit Management

Compliance & GRC

A platform that streamlines the internal audit lifecycle through AI-generated audit plans, engagement tracking, resource allocation, report generation, and automated issue management.

GRC Platform

Compliance & GRC

An AI-powered platform that automates compliance workflows including evidence collection, control mapping, and continuous compliance monitoring across multiple regulatory frameworks.

Password Auditing

Vulnerability Management

Agentless discovery of weak, default, and compromised Linux user credentials across systems to protect against brute force attacks and lateral movement.

Workforce Security Culture & Knowledge Assessments

Compliance & GRC

Baseline measurement tools that identify behavioral and knowledge gaps within an organization to inform targeted training interventions.

SCANOSS

Vulnerability Management

SCANOSS finds the cryptography in your source code, the part PKI tools and certificate managers can't see. Crypto Finder scans Java, Python, Go, and C across both proprietary and open source codebases, identifying cryptographic algorithms and producing a CycloneDX CBOM ready for post-quantum migration planning. The visibility your dependency scanners and certificate inventories miss. Built for CI/CD, developed in collaboration with IBM.

Security Dataset

Vulnerability Management

Identifies vulnerabilities across all code components by cross-referencing data from NVD, OSV, and GitHub Advisories.

aiCompliance CMX360

Compliance & GRC

Turn existing security data into audit-ready compliance across 20+ global frameworks with 60-80% compliance readiness instantly achieved without months of setup

SecPod SanerNow

Vulnerability Management

SecPod was founded on a clear belief cyberattacks should be prevented, not chased after the damage is done.

SANER CVEM

Vulnerability Management

Unified vulnerability and exposure management platform that consolidates detection, prioritization, and patch deployment with AI-powered asset visibility and SSVC-aligned risk prioritization.

SANER Platform

Vulnerability Management

World's only natively built, unified cyberattack prevention platform that consolidates vulnerability scanning, patch deployment, compliance benchmarking, and threat detection.

Secureframe

Compliance & GRC

Empower businesses to build trust

Comply

Compliance & GRC

Automated evidence collection, continuous monitoring, and risk management with support – all in one place

Questionnaires

Compliance & GRC

AI-powered automation tool to streamline vendor selection and security questionnaire completion, saving teams 35 hours per month on average

Trust

Compliance & GRC

Combined solution with Trust Center, Knowledge Base, and AI-powered questionnaire automation to help organizations proactively showcase security measures and streamline compliance documentation

Risk Management

Compliance & GRC

Cyber risk management platform for security teams and organizations to automate risk assessment and decision-making across their IT infrastructure.

Vulnerability Management

Vulnerability Management

Risk-based vulnerability management platform for security teams to prioritize vulnerabilities based on real organizational impact rather than technical scores alone.

Securiti

Privacy & Consent Management

At Securiti, our mission is to enable organizations to safely harness the incredible power of Data & AI.

Compliance Management

Compliance & GRC

Streamline compliance automation across global AI and data regulations through common controls and predefined frameworks

Consent Management

Privacy & Consent Management

Manage your first-party and third-party consent lifecycle

Data Mapping Automation

Privacy & Consent Management

Manage your entire data mapping lifecycle and automate RoPA reports

TITAN Assess

Compliance & GRC

AI-powered platform that automates security questionnaire completion with human verification to dramatically accelerate vendor risk assessment processes.

BrowserTotal

Vulnerability Management

A browser security analysis tool that provides comprehensive assessment of enterprise browser posture, extension security, and URL threats.

Sky BlackBox

Compliance & GRC

Sky BlackBox was created for this new reality. Our connected platform combines multi-layer vendor assurance methodologies, continuously refreshed vendor intelligence, and intelligent automation to help clients, vendors, and service providers maximize business confidence while minimizing operational effort.

Intelligent Continuous Vendor Risk Management Platform

Compliance & GRC

AI-powered platform that enables organizations to continuously monitor and assess third-party and vendor risks with intelligent audit, operational intelligence, and external visibility monitoring.

SmartSuite

Compliance & GRC

SmartSuite is a no-code Governance, Risk, and Compliance (GRC) platform designed to unify enterprise risk management, audit, and business continuity. Built by the founders of industry-standard ArcherIRM, it modernizes legacy GRC workflows with connected data structures and automated reporting. It replaces rigid, siloed risk tools and spreadsheets, offering a flexible environment for managing enterprise resilience and third-party risk.

Socify by TAC Security

Compliance & GRC

Socify by TAC Security is a SOC 2 compliance automation platform positioned in the Compliance & GRC category, centered on control mapping, evidence collection, policy management, and auditor collaboration for organizations preparing for Type I or Type II attestation. It is aimed at teams that want to reduce manual audit preparation and maintain ongoing compliance without relying heavily on external consultants. TAC Security presents it as an audit-focused product with cloud checks, policy templates, and guided remediation. Adjacent capabilities are mentioned only briefly, as the product is sold primarily as SOC 2 compliance software.

Socify

Compliance & GRC

Automate SOC 2 Compliance

Lifecycle

Vulnerability Management

Avoids rework with automated SCA and remediation for software composition analysis

SBOM Manager

Compliance & GRC

Automates software compliance and reporting through software bill of materials management

ArcTitan

Compliance & GRC

Email archiving solution that is Office 365 integrated with lightning fast email search speeds and easy deployment.

Runtime Exposure Management Platform

Vulnerability Management

Continuous runtime exposure management platform that identifies what's actually exploitable in your environment through live environmental evidence, addressing vulnerability prioritization, AI security, and zero-day detection.

AI Governance & Compliance

Compliance & GRC

Automate AI compliance management by mapping organizational AI systems against global regulatory frameworks.

Sprinto

Compliance & GRC

The world's first Autonomous Trust Platform. Sprinto detects change across your posture, determines what's at risk, and acts, across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos.

Autonomous Trust Platform

Compliance & GRC

Autonomous Trust Platform for Compliance, Risk & GRC that automates compliance from setup to audit with continuous monitoring and AI-driven risk assessment

StandardFusion

Compliance & GRC

We are a global leader in audit and GRC expert solutions with over 30 years dedicated to enabling organizations to become more resilient, anticipate change, adapt quickly, and respond with confidence.

SureCloud

Compliance & GRC

SureCloud helps organizations secure their futures by enabling governance, risk, and compliance (GRC) success. Recognised in the Gartner Magic Quadrant for Integrated Risk Management Solutions, SureCloud has been delivering innovative GRC solutions for 19 years.

AI Governance

Compliance & GRC

Provides a structured platform to classify, assess, and manage AI risk across the business while maintaining compliance with regulatory frameworks.

Business Continuity Management

Compliance & GRC

Transforms business continuity management from a periodic compliance exercise into an ongoing operational program that keeps plans aligned with real business changes and risk data.

Compliance Management

Compliance & GRC

Automates compliance management across multiple frameworks, reducing manual work and duplicate controls while keeping organizations audit-ready.

Continuous Control Monitoring

Compliance & GRC

Replaces point-in-time compliance testing with continuous automated monitoring to identify control gaps immediately and maintain audit readiness year-round.

Data Privacy Management

Compliance & GRC

Centralizes privacy processing activities, automates compliance workflows, and connects privacy obligations to control frameworks for regulatory readiness.

Internal Audit Management

Compliance & GRC

Centralizes audit planning, testing, and reporting in a unified platform with automated evidence collection and AI-powered assistance.

Risk Management

Compliance & GRC

Consolidates risk registers and connects risks to controls, providing real-time insights for faster decision-making.

Third-Party Risk Management

Compliance & GRC

Standardizes vendor assessment, onboarding, and monitoring to make supplier risk visible and auditable across supply chains.

Vulnerability Management

Vulnerability Management

A runtime-powered vulnerability management solution that prioritizes vulnerabilities based on real-time telemetry and AI analysis to focus on critical and active risks.

Compliance Audit Readiness

Compliance & GRC

Transforms GRC operations from manual spreadsheets into a consolidated, multi-framework compliance view.

Vulnerability Response Management

Vulnerability Management

Extends beyond traditional vulnerability scanning to prioritize risk intelligently and automate remediation workflows.

Vulnerability Disclosure Program

Vulnerability Management

A managed service that handles vulnerability submissions from external researchers, triages findings, and verifies exploitability before presenting validated vulnerabilities to clients.

Tanium

Vulnerability Management

Tanium is the Autonomous IT company

Vulnerability Management

Vulnerability Management

Identifies and prioritizes vulnerabilities across endpoints, OT devices, container images, and software supply chain components with continuous monitoring and risk-based prioritization.

Tenable Vulnerability Management

Vulnerability Management

We are dedicated to isolating and eradicating the exposures that hold organizations back.

TestifySec

Compliance & GRC

TestifySec is an evidence-driven security and compliance platform that turns every software build into cryptographic proof, letting teams ship secure, audit-ready software at the speed of development.

Customer Cloud

Compliance & GRC

Unified compliance management system providing real-time control implementation tracking, live attestation feeds, and System Security Plan management across multi-repository authorization boundaries

TestifySec Platform

Compliance & GRC

Compliance automation platform that transforms every build into cryptographic, audit-ready evidence automatically mapped to NIST 800-53, FedRAMP, SOC 2, and other frameworks

Theta Lake

Compliance & GRC

Redefining Modern Compliance and Security for Unified, AI-Powered Communications

Proactive Compliance

Compliance & GRC

Detects compliance risks, facilitates efficient review, and enables remediation across digital communications using AI and machine learning.

Unified Capture

Compliance & GRC

Seamlessly captures communications across chat, voice, video, and other modalities from unified communications platforms to maintain regulatory compliance without disrupting productivity.

Unified Search and Archiving

Compliance & GRC

Enables organizations to respond quickly to compliance, discovery and investigation requests by consolidating communications data across multiple platforms into a single searchable archive.

ThreatAware

Vulnerability Management

ThreatAware transforms the way organisations secure their cyber assets globally.

Patch Management

Vulnerability Management

Rapidly deploys software updates addressing security gaps to reduce risk exposure from exploitable vulnerabilities across endpoint infrastructure.

Vulnerability Assessment

Vulnerability Management

Continuously scans endpoints to identify vulnerabilities before exploitation and prioritizes remediation through a centralized dashboard.

Tidal Cyber

Vulnerability Management

Tidal Cyber is primarily a threat-informed defense platform, not a traditional vulnerability management scanner. In a vulnerability-management evaluation, it is best understood as a tool for mapping exposure and defensive coverage to adversary techniques in MITRE ATT&CK, helping security teams identify where their controls may leave gaps against relevant threats. It fits organizations that already run vulnerability scanners and want to prioritize remediation using threat context, especially detection engineering, SOC, CTI, and threat hunting teams. Adjacent capabilities include ATT&CK-aligned intelligence processing and defensive coverage analysis.

Vulnerability Management

Vulnerability Management

Workflow automation for detecting, prioritizing and responding to vulnerabilities

Tonic Security

Vulnerability Management

It's not just another dashboard. It's a context-driven decision and execution engine for exposure management.

Agentic Exposure Management Platform

Vulnerability Management

Transforms fragmented security data into actionable risk decisions and orchestrates remediation through completion while keeping humans in control.

Tromzo

Vulnerability Management

Tromzo is a vulnerability management platform focused on triage, ownership assignment, prioritization, governance, and remediation reporting across software delivery environments. In this category, it correlates findings from existing scanners with application, asset, and business context so security teams can decide which issues are real, who owns them, and whether to fix or accept risk. It is best suited for application security and product security teams that need to reduce manual triage work and push actionable issues to engineering. Adjacent ASPM and code-to-cloud features are secondary to its vulnerability management use case.

TrustArc

Privacy & Consent Management

TrustArc is an enterprise-grade Privacy & Consent Management platform specializing in cookie consent banners, preference centers, and vendor inventory for GDPR, CCPA, and LGPD compliance. It handles cookie scanning, user consent capture, and Global Privacy Control (GPC) signal processing, categorizing tracking technologies to block non-consented scripts. The platform supports IAB TCF 2.2/2.3 and integrates with tag managers to prevent unauthorized script execution. TrustArc is best suited for large organizations with complex multi-property portfolios and multilingual consent requirements. While it also offers adjacent modules for data subject rights and privacy risk assessments, its core consent product delivers audit-ready reporting and granular consent choices.

TrustCloud (Kintent)

Compliance & GRC

TrustCloud (Kintent) is a cloud-delivered security assurance platform focused on governance, risk, and compliance (GRC) programs for CISOs and GRC teams. In the Compliance & GRC category, it is used to automate control management, audit preparation, risk tracking, vendor risk workflows, and evidence collection across frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and related standards. The product is positioned around continuous control monitoring and AI-assisted questionnaire and reporting workflows, with adjacent trust-sharing capabilities that help teams expose compliance posture to customers and auditors.

TrustLens

Compliance & GRC

Third-party risk management solution that uses artificial intelligence and automation to assess vendor security posture by analyzing external security ratings, internal control validation, and AI-powered document review.

TrustOps

Compliance & GRC

Continuous IT control assurance and compliance automation platform that provides real-time visibility into security control implementation and operational status across applications, data, and infrastructure.

TrustRegister

Compliance & GRC

Risk quantification application designed to automate application risk assessment and monitoring with continuous AI-native security and risk visibility across every enterprise application.

TrustShare

Compliance & GRC

Dynamic trust portal combined with AI automation technology designed to streamline security questionnaire completion and customer assurance processes.

Trustero

Compliance & GRC

Trustero is a Compliance & GRC platform focused on automated evidence collection, control mapping, audit readiness, and continuous control monitoring. It uses a multi-agent workflow to collect artifacts from connected systems, map them to controls and frameworks such as SOC 2, ISO 27001, and PCI, and validate evidence over time. The product is aimed at security, compliance, internal audit, and operations teams that want to reduce manual control testing and maintain a current view of compliance status. It can be used alongside existing GRC tooling or as a standalone system.

Continuous Control Monitoring

Compliance & GRC

AI examines compliance controls around the clock, reading test procedures, evaluating evidence, flagging gaps, and routing corrective actions continuously.

Evidence Management

Compliance & GRC

Automatically collects, organizes, routes, and analyzes compliance evidence so GRC teams focus on risk, not busywork.

Trustero Intelligence

Compliance & GRC

Multi-agent AI system that answers GRC questions instantly with evidence-backed insights across controls, policies, risks, and audit history.

Policy and Control Assessment

Compliance & GRC

AI automatically compares business policies against regulatory frameworks and identifies gaps in minutes.

Questionnaire Automation

Compliance & GRC

AI agents automatically answer inbound RFP and security questionnaires using verified organizational GRC context.

Requests

Compliance & GRC

AI-powered workflow management system that structures compliance requests with ownership, due dates, and automatic resolution attempts.

TI Playbooks

Compliance & GRC

Turn team GRC routines into structured, repeatable AI workflows scheduled and executed automatically.

SecureTrack+

Compliance & GRC

Centralize visibility, enforce policy, and prove continuous compliance across your entire multi-vendor hybrid network.

TuxCare

Vulnerability Management

TuxCare’s vulnerability management offering centers on Linux and open-source environments, combining TuxCare Radar for CVE discovery and risk-based prioritization with patch-aware validation and adjacent remediation workflows. Radar is positioned to reduce scan noise by identifying which findings are actually relevant after in-memory or rebootless patching, then ranking issues using CVSS, patch availability, and threat intelligence. It is best suited for enterprises running Linux fleets, containers, and open-source stacks that need continuous vulnerability identification and remediation without relying on heavyweight scanners or disruptive maintenance windows.

Endless Lifecycle Support

Vulnerability Management

Delivers ongoing CVE patches for out-of-support operating systems, language runtimes, libraries, and applications after vendor support ends.

TuxCare Enterprise Support

Vulnerability Management

Enterprise-grade Linux support for AlmaLinux and Rocky Linux that delivers RHEL-equivalent capabilities with up to 16 years of lifecycle support and FIPS 140-3 compliance.

KernelCare

Vulnerability Management

Enables Linux kernel security patches without requiring system reboots, reducing CVE patching time by 72% and shrinking vulnerability exposure by 90%.

TuxCare Radar

Vulnerability Management

Linux-native vulnerability scanner that eliminates false positives by accurately identifying which vulnerabilities have already been patched, with AI-assisted risk scoring.

UpGuard

Compliance & GRC

UpGuard is a cybersecurity vendor whose platform includes GRC-adjacent workflows, but it is primarily positioned around cyber risk posture and third-party risk rather than a full enterprise GRC suite. In a Compliance & GRC evaluation, it is best suited to teams that need continuous vendor risk monitoring, compliance tracking, and automated evidence-style workflows tied to security posture. UpGuard says it can track risk reduction against major compliance standards and support board-ready security ratings, making it useful for mid-market organizations and lean security teams that need ongoing assurance across suppliers and external exposure.

Security Ratings

Vulnerability Management

A data-driven, objective, and dynamic measurement of organizational security posture through continuous monitoring of billions of data points across internet-facing assets.

Trust Exchange

Compliance & GRC

Prove your security in minutes, not weeks, through AI-powered questionnaire automation and centralized trust documentation sharing.

VanishID

Privacy & Consent Management

VanishID is a managed privacy and executive-exposure reduction service that continuously discovers and removes publicly exposed personal information from data brokers, people-search sites, and other open-web sources. In the Privacy & Consent Management category, it is best understood as a personal-data exposure remediation product rather than a traditional website consent platform: it focuses on reducing how much PII is available to be collected, correlated, and abused. It is best suited for enterprises protecting executives, board members, and employees whose personal data can drive social engineering, credential attacks, or harassment.

Vanta

Compliance & GRC

Vanta provides a trust management platform focused on automating governance, risk, and compliance (GRC) workflows. It integrates with over 350 tools including AWS, CrowdStrike, and Jira to collect evidence across 30 frameworks such as SOC 2, ISO 27001, NIST AI RMF, HITRUST, and CIS CSF. Features include a Report Center for program visibility, vendor risk management with customizable inherent risk rubrics, and cross-mapped controls for multi-framework compliance. Best suited for security and GRC teams in scaling organizations seeking continuous monitoring over manual audits.

Automated Compliance

Compliance & GRC

Achieve and maintain compliance across 35+ frameworks with automated evidence collection and continuous monitoring.

Continuous GRC

Compliance & GRC

Modern governance, risk, and compliance management platform that automates compliance monitoring and evidence collection.

Questionnaire Automation

Compliance & GRC

AI-powered solution that streamlines security questionnaire completion by automatically generating responses and organizing knowledge bases.

Risk Management

Compliance & GRC

Automates and centralizes risk management processes to identify, assess, and remediate risks across compliance and security programs.

Streamlined Audits

Compliance & GRC

Automates evidence collection and enables real-time collaboration with auditors to reduce audit preparation time across multiple frameworks.

Third Party Risk Management

Compliance & GRC

AI-powered platform that automates vendor discovery, security assessments, and continuous monitoring for third-party risk.

Trust Center

Compliance & GRC

Security documentation platform that automates the sharing of compliance information and security posture with customers and prospects.

Vendict

Vulnerability Management

Vendict is redefining how organizations manage third-party risk. Our end-to-end Third-Party Risk Management (TPRM) managed solution combines AI-native automation with expert GRC services to transform how organizations identify, assess, and manage vendor risk. Vendict provides enterprises with the scalability, speed, and precision required to navigate today’s complex regulatory and threat landscapes.

GRC Mentor

Compliance & GRC

Your AI compliance expert; precise, contextual and hallucination-free

Interactive Trust Center

Compliance & GRC

Showcase your security posture with a smart, self-serve knowledge hub

Managed TPRM

Compliance & GRC

Scale your TPRM program at the speed of business with agentic AI and GRC expertise

RFP/RFI Automation

Compliance & GRC

Turn time-consuming RFPs into fast, AI-driven submissions

Security Questionnaire Automation

Compliance & GRC

Cut response time by up to 92% by automating completion of security questionnaires

Self Assessment

Compliance & GRC

Run instant gap analyses and stay audit-ready across key compliance frameworks

Third-Party Risk Management (TPRM)

Compliance & GRC

Cut third-party risk assessment costs with fully managed, AI-driven TPRM

Veriti

Vulnerability Management

Veriti is an exposure assessment and remediation vendor that sits near the vulnerability management market, but its focus is broader than traditional scanning. In vulnerability-management terms, it continuously identifies vulnerabilities, misconfigurations, and exploitability across on-prem and cloud environments, then helps teams prioritize and remediate them without disrupting operations. It is best suited for enterprises that already have multiple security tools and need to turn findings into safe, compensating controls rather than rely only on patch cycles. Veriti was founded in 2021 and is now part of Check Point.

VioletX

Compliance & GRC

VioletX is a managed compliance and GRC services vendor that operates trust programs on behalf of customers rather than selling a standard self-serve platform. In the Compliance & GRC scope, it covers framework implementation, evidence collection, auditor coordination, and ongoing program operation for SOC 2, ISO 27001, HIPAA, CMMC, FedRAMP, and related programs. VioletX also manages third-party risk workflows and security questionnaire responses. It is best suited for organizations that need practitioner-led compliance execution and ongoing program ownership across regulated or audit-sensitive environments.

Compliance Automation

Compliance & GRC

Continuous compliance and security monitoring solution that generates audit evidence on demand across AI agents, SaaS applications, and identity providers.

Vulners

Vulnerability Management

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Alerts

Vulnerability Management

Notifies users of matching vulnerabilities based on watch lists.

Assessment

Vulnerability Management

Analyzes inventory data to identify affected assets from vulnerability data.

Whistic

Compliance & GRC

Whistic is an agentic vendor risk management (VRM) platform that automates the third-party risk assessment process using AI. It streamlines the exchange of security documentation through a centralized Trust Center, allowing companies to share their security posture and automate the review of inbound vendor questionnaires. The platform replaces manual spreadsheet-based assessments with an automated, AI-driven workflow that accelerates procurement cycles and risk mitigation.

CORA

Compliance & GRC

Risk-based cybersecurity inspection program that evaluates network defense posture against evolving threats

Wolters Kluwer TeamMate

Compliance & GRC

Wolters Kluwer TeamMate is a comprehensive GRC platform specifically designed to unite internal audit, risk management, and compliance workflows. It provides a centralized source of truth for organizational governance, allowing for data-driven risk assessments and efficient audit management. The software helps large enterprises manage complex regulatory requirements and provides executive-level reporting on the overall risk posture.

Workspace Audit

Vulnerability Management

Workspace Audit provides a security assessment solution specifically designed for Google Workspace. Our platform automates the discovery and remediation of vulnerabilities, identifying misconfigurations and security gaps across your domain. Using an intuitive risk dashboard, we help Google Admins prioritize critical issues and simplify compliance with industry standards like NIST and CIS.

Vulnerability Risk Management

Vulnerability Management

Prioritizes and remediates high-impact vulnerabilities by validating actual exploitability against business-critical assets.

Yottasecure, Inc

Vulnerability Management

Yottasecure provides contextual risk intelligence designed to filter out CVE noise and focus remediation on truly exploitable vulnerabilities. The platform correlates asset configuration, internal business context, and external threat signals to determine the actual reachability of a vulnerability. It replaces static legacy scanners by providing a dynamic, risk-based view of the attack surface.

Autonomous Vulnerability Intelligence Platform

Vulnerability Management

AI-powered platform for identifying, prioritizing, and remediating software vulnerabilities with contextual intelligence.

Zafran Security

Vulnerability Management

Zafran is an AI-native Threat Exposure Management platform that automates the mitigation and remediation of exploitable vulnerabilities. By analyzing the existing security stack's configuration, it identifies where native tool settings can be adjusted to neutralize threats, proving that most vulnerabilities are already shielded. It complements existing VM scanners by providing the orchestration layer for actual risk reduction.

Threat Exposure Management Platform

Vulnerability Management

An AI-native platform for Continuous Threat Exposure Management (CTEM) that unifies vulnerability findings, assesses exploitability risk, applies compensating controls to mitigate without patching, and automates remediation workflows.

Software Composition Analysis

Vulnerability Management

Dependency security that intelligently prioritizes vulnerabilities by analyzing which ones your code actually reaches and whether they're actively exploited in the wild.

ZEST

Vulnerability Management

Agentic Exposure Management & Remediation platform that unifies security risks and automatically maps them to prioritized resolution pathways to remediate, mitigate, and prevent exposure.

Zywave

Compliance & GRC

Zywave is a Milwaukee-based insurance software vendor whose Compliance & GRC scope is centered on broker-delivered HR compliance portals and risk-management content for employers. Its Client Cloud and related HR compliance resources provide document libraries, training materials, forms, notices, and compliance support that brokers can brand for clients. In this category, Zywave is best suited for insurance agencies, brokers, and benefits consultants that need to distribute compliance content and keep employer clients informed, rather than a standalone enterprise GRC suite. It also sells broader insurance technology products outside this scope.