cybersecdirectory
ZeroRisk logo

ZeroRisk

GRC vendors

ZeroRisk provides an agentic platform that automates compliance and vendor risk assessments.

Categories
GRC and compliance automation, Third-party risk and security ratings
Based in
Amsterdam, Netherlands
Ownership
Private

About ZeroRisk

ZeroRisk sells an agentic compliance platform that automates governance, risk and compliance work. It helps companies manage their own certifications and monitor their vendors. The agent learns the business, scopes out what does not apply, pre-fills assessments, drafts missing controls and keeps watch over vendors. Users review and sign off. The platform covers frameworks such as SOC 2, ISO 27001, GDPR, NIS2, DORA and CRA. It starts with an asset register where every dataset, system and business function is classified for confidentiality, integrity and availability. From there it works out which frameworks each asset falls under and which vendors need vetting. The agent pre-fills assessments with confidence scores, drafts controls and policies for gaps, and monitors vendors daily. Evidence is attached once and counts across frameworks. The audit package can be exported at any time. Pricing is based on the frameworks used, not team size, with plans from Starter to Enterprise. A free gap report is offered.

Products

Ownership and deals

  1. Raised $10m in a Series A roundInvestor Middlegame VenturesReport on the ZeroRisk funding round of September 2026 (opens in a new tab)

Acquisitions come from SecurityWeek's monthly M&A round-ups from 2021 onwards, from Cybersecurity Ventures' quarterly M&A reports for 2020, and a few from Wikipedia lists. Funding rounds from 2022 onwards come from Return on Security's weekly Security, Funded newsletter. These are dated to the month. A few deals added from the news are dated to the day. Smaller deals may be missing. Amounts are in US dollars.

Other GRC vendors

See all GRC vendors

Sources

  1. zerorisk.com
  2. zerorisk.com/about
  3. zerorisk.com/contact