Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.
- Categories
- Third-party risk and security ratings, GRC and compliance automation, Compliance audits (SOC 2, ISO 27001)
- Based in
- West Jordan, United States
- Ownership
- Private
About Whistic
Whistic provides a platform for managing third-party risk and security assurance. It sells to information security, compliance and risk teams that assess vendors and must also prove their own controls to customers. The platform connects assessment, monitoring, compliance testing and trust sharing in one place. Its products use AI agents to read vendor evidence, map it to controls and produce cited findings. Vendor Monitoring shows severity-rated events with context so teams can respond. Compliance supports control testing with captured evidence and audit history. Trust Center lets organisations publish approved security documents and govern access. The Trust Center Exchange is a network where vendors publish profiles and buyers can view them.
Products
- AssessCollects vendor evidence, maps it to controls and helps teams reach a risk decision.
- Vendor MonitoringShows severity-rated vendor events with source evidence and context so teams can act.
- ComplianceDefines controls and tests, runs them manually or with a Browser Agent, and keeps evidence for audit.
- Trust CenterPublishes approved security documents and questionnaires for controlled sharing with customers and partners.
- Trust Center ExchangeA network of published vendor profiles that buyers can view and vendors can use to reach many customers.
- Automation OrchestratorCoordinates four specialised agents that move assessment work from trigger to executive summary.
Ownership and deals
- Raised $35m in a Series B roundInvestor JMI EquityReport on the Whistic funding round of June 2022 (opens in a new tab)
Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.