AI governance
Inventory, policy, risk assessment and regulatory compliance tracking for AI systems.
12 vendors · alphabetical, never ranked
- Adaptive SecurityAdaptive Security sells a platform that unifies security awareness training, phishing simulations, agentic email security and AI governance.Privately held
- CraniumCranium sells a platform that gives visibility into AI models, agents and vendors, enforces AI policy against frameworks such as the NIST AI RMF and EU AI Act, stress-tests models for vulnerabilities, and generates compliance evidence.Privately held · primary category
- Credo AICredo AI sells software that discovers AI systems, agents, vendors and models across an organization, enforces AI policy, and manages AI risk and compliance evidence.Privately held · primary category
- Enkrypt AIEnkrypt AI sells software that red-teams AI systems for security, safety and brand risks, applies real-time guardrails against threats, and monitors AI risk and compliance.Privately held
- KetchKetch sells data privacy and permissioning software that discovers where data flows, enforces consent and data-subject rights in real time, and activates permissioned data for AI, advertising and personalization.Privately held
- KnosticKnostic sells software that discovers and secures AI agents and coding assistants, along with related supply chain components such as MCP servers and IDE extensions, and is intended to detect shadow AI and block data exfiltration and destructive commands.Privately held
- Noma SecurityNoma Security sells software that discovers AI agents, models and tools across an organization's environments, manages AI security posture and policy enforcement, and combines red teaming with runtime protection against attacks such as prompt injection and data exfiltration.Privately held
- OneTrustOneTrust sells a governance platform covering privacy automation, consent and preference management, AI governance, data use policy enforcement, technology risk and compliance tracking, and third-party risk management.Ownership not established
- SprintoSprinto sells a platform that scopes and automates compliance work for standards such as SOC 2, ISO 27001 and HIPAA, monitors controls continuously, and automates vendor risk assessments and AI-tool discovery.Ownership not established
- TrustArcTrustArc sells a privacy management platform that automates data subject request handling, privacy risk assessments and compliance reporting, along with a tool that guides organizations through building and maturing a privacy program.Ownership not established
- WitnessAIWitnessAI sells a platform that discovers AI applications, agents and MCP servers in use across an organization, governs what employees and AI agents can do, and applies runtime security controls against threats such as prompt injection and jailbreaks.Privately held
- ZenityZenity sells a platform that governs and secures AI agents by examining how they are built, what they can access, and what they do, combining agentic red teaming with runtime defense across SaaS, homegrown agent platforms and end-user devices.Privately held
No vendor pays to be listed or to change what we write. Descriptions are ours, drawn from each company's own site and filings. Corrections: /corrections.