All companies

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

Bitsight provides a cyber risk intelligence platform.

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

Cortile automates vendor security reviews for healthcare third-party risk teams.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments.

Lumu provides network detection and response to identify and stop cyber threats in real time.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

ProcessUnity provides a software platform for managing third-party and cybersecurity risk.

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Integrated risk management software for policy, compliance, audit and third-party risk, sold as part of a wider IT and business workflow platform.

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

Vanta provides a platform for automating security compliance and risk management.

vCISO Lite sells a subscription platform that helps growing companies handle security compliance and risk.

Third-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.