Governance, risk and compliance

GRC and integrated risk platforms

Systems of record for policies, risks, controls, audits and issues across an enterprise.

17 vendors · alphabetical

• ABIR NetworksABIR Networks sells penetration testing, cloud security, risk consulting and compliance services.Ownership not established
• AnecdotesAnecdotes sells an enterprise agentic GRC platform that combines core GRC applications, AI agents and data collected automatically from an organization's systems.Ownership not established · primary category
• ApptegaApptega sells an end-to-end security and compliance platform for assessments, risk management, third-party oversight and audit readiness.Ownership not established
• ArcherArcher sells a governance, risk and compliance platform that connects enterprise risk, compliance, audit, AI governance, ESG, third-party risk and resilience on shared data and one reporting layer.Ownership not established · primary category
• CISO GlobalCISO Global sells expert-led services and purpose-built software, delivered as one unified program.Public (NASDAQ: CISO)
• CoplaCopla is a cybersecurity compliance platform that automates evidence collection, policy management, audit cycles, and control monitoring across frameworks like DORA, NIS2, ISO 27001, SOC 2, and PCI DSS.Ownership not established
• CyberSaintCyberSaint sells CyberStrong, a platform that connects controls, assets, and vulnerabilities to live threat and business data.Ownership not established
• CynomiCynomi describes a Security Growth Platform as one that enables service providers to deliver, scale, and grow security services across their entire client base.Ownership not established · primary category
• HyperproofHyperproof sells an AI-powered GRC platform that centralizes compliance, risk, and security workflows.Ownership not established
• LogicGateLogicGate sells AI agents and purpose-built applications for governance, risk and compliance.Ownership not established · primary category
• MetricStreamMetricStream sells a connected GRC system that automates risk and compliance work with AI assistants and agents.Ownership not established · primary category
• OnspringOnspring is a flexible, cloud-based GRC platform that connects and monitors business-critical functions, processes and information.Ownership not established · primary category
• OptroOptro sells the GRC Intelligence Platform, which delivers real-time insights, autonomous testing and a connected view for enterprises.Owned by Hg since 2024 · primary category
• RegScaleRegScale sells a Continuous Controls Monitoring platform that connects live cloud telemetry, security tools and CI/CD pipelines to federal and commercial compliance frameworks.Ownership not established
• ScytaleScytale sells an AI GRC platform that combines automation, AI agents, continuous monitoring and dedicated GRC experts.Ownership not established
• ServiceNowServiceNow sells Security Operations, a product that unifies security, IT, and risk into a single system of action.Ownership not established · primary category
• VantaVanta offers automation, continuous monitoring and the Vanta Agent so that organizations get and stay compliant.Ownership not established