All companies

A-LIGN provides cybersecurity compliance audits and certifications across frameworks like SOC 2 and ISO 27001.

Sets standards, audits and insures frontier AI systems and agents for security, safety and reliability.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Provides cloud security, compliance and managed detection and response services to regulated industries.

BARR Advisory helps organisations establish, manage, and audit cybersecurity and compliance programmes.

Compliance-focused cybersecurity advisory firm and FedRAMP 3PAO specializing in penetration testing that meets stringent regulatory requirements.

Cortile automates vendor security reviews for healthcare third-party risk teams.

Cyberneza provides cybersecurity and compliance consulting for defense contractors and regulated organizations.

CyberSheath provides cybersecurity compliance services for DOD contractors, focusing on CMMC, DFARS, and NIST standards.

RedTeam Security is now part of DeepSeas, which offers penetration testing, red teaming and physical testing as its offensive security practice.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

IBM is a technology company that sells software, infrastructure, and consulting services.

Integris provides managed IT, cybersecurity, AI and cloud services to small and midsize businesses.

IntelliGRC provides software that helps managed service providers automate cybersecurity compliance and audit readiness.

Johanson Group is a CPA firm providing security and compliance audits.

Jones IT provides managed IT services, cybersecurity, and compliance support to businesses in the San Francisco Bay Area.

KirkpatrickPrice is a licensed CPA firm that performs cybersecurity audits and compliance assessments.

Global risk advisory firm with a 400+ person cyber practice. IR-led penetration testing that feeds active breach intelligence straight into test scoping.

Lattix Technologies Corp provides data security with encryption, policy, and audit trails.

Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments.

Living Security provides a platform that measures and reduces human risk in organisations.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

Fraud management, money laundering detection, KYC and trading compliance software for banks and financial institutions, with case management and investigation tools.

Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

Prescient Assurance provides SOC 2 audits and security compliance certifications for SaaS companies.

PreVeil provides end-to-end encrypted email and file sharing for defence and regulated industries.

ProcessUnity provides a software platform for managing third-party and cybersecurity risk.

Pulumi provides an infrastructure as code platform that lets teams build and manage cloud infrastructure using general purpose programming languages such as TypeScript, Python, Go, .NET, Java, YAML and HCL.

Qualys provides an enterprise cyber risk and security platform.

Quantara AI provides an AI-native platform for cyber risk quantification and prioritization.

Quzara provides FedRAMP compliance advisory and managed detection and response services.

Safetica provides AI-powered data protection, insider risk, cloud security, and compliance software.

US cybersecurity consulting, audit and testing firm founded in 2004, focused on community banks and credit unions, with external, internal, web application, wireless and PCI DSS penetration testing plus CMMC Level 1 and 2 readiness work.

Second Front Systems provides a DevSecOps suite that helps software providers and government agencies build, secure, and deploy software to government and regulated networks.

Securiti provides a platform for data security, privacy, governance and compliance across hybrid multicloud environments.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Senteon automates endpoint hardening and CIS benchmark compliance for audits.

Integrated risk management software for policy, compliance, audit and third-party risk, sold as part of a wider IT and business workflow platform.

Provides managed IT services, cybersecurity, compliance support and AI adoption guidance to businesses.

CREST-accredited California consultancy blending compliance expertise with penetration testing. First to earn ISO 17020 for MITRE ATT&CK and PTES frameworks.

TRM Labs provides blockchain intelligence and AI tools to help investigate and disrupt criminal networks.

Vanta provides a platform for automating security compliance and risk management.

vCISO Lite sells a subscription platform that helps growing companies handle security compliance and risk.

Third-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.

Virtue AI provides an enterprise AI safety platform for securing AI agents and applications.

VxLabs provides an AI-powered platform for automotive cybersecurity compliance and risk management.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.