# Secureframe

> Secureframe is a San Francisco compliance-automation company that connects to a customer's cloud and business systems, gathers audit evidence, maps controls across security frameworks, tracks risk, and helps teams prove their security posture to auditors and buyers. It began with SOC 2 and ISO 27001, then expanded into trust centers, questionnaire automation, AI-assisted risk and policy work, and a defense product for CMMC and federal compliance.

- **Founded:** 2020
- **Headquarters:** San Francisco, United States
- **Founders:** Shrav Mehta (Co-founder and CEO), Natasja Nielsen (Co-founder and founding CTO)
- **Products:** Secureframe Comply, Secureframe Trust, Comply AI, Secureframe Federal, Secureframe Defense
- **Notable:** Grew annual recurring revenue tenfold during 2021, according to the company, while its customer count grew sevenfold., Raised $79 million in disclosed funding within roughly two years of launch., Built a platform supporting more than 40 frameworks and hundreds of integrations.

## Products & services

- **Secureframe Comply** — Core GRC platform for evidence collection, framework and control mapping, risk management, policy management, training, infrastructure monitoring, audits, and reporting.
- **Secureframe Trust** — Trust Center, knowledge base, and machine-learning questionnaire automation for sharing security posture and responding to customer reviews.
- **Comply AI** — AI features for policies, risk assessments, control mapping, vendor reviews, remediation guidance, and security assessments.
- **Secureframe Federal** — Suite supporting CMMC 2.0 and FedRAMP 20x readiness for federal contractors and cloud providers.
- **Secureframe Defense** — CMMC-focused product combining scoping guidance, automated compliant cloud provisioning, SSP and POA&M documentation, control monitoring, and assessor preparation.
- **Hosted MCP Server** — Permission-aware connection that lets compatible AI assistants query and act on current Secureframe compliance data.

## Achievements

- Grew annual recurring revenue tenfold during 2021, according to the company, while its customer count grew sevenfold.
- Raised $79 million in disclosed funding within roughly two years of launch.
- Built a platform supporting more than 40 frameworks and hundreds of integrations.
- Achieved CMMC Level 2 certification in 2025 after a C3PAO assessment with Redspin.
- Participated in the FedRAMP 20x pilots and achieved the Moderate-level authorization milestone in June 2026.
- Named to InfoWorld's 2025 Technology of the Year list for cloud compliance and governance.
- Recognized on Forbes' America's Best Startup Employers lists.

## Latest updates

- **2026-08** — Launched a fully hosted MCP server for permission-aware access to compliance data from compatible AI assistants.
- **2026-06** — Announced achievement of FedRAMP 20x Moderate authorization after participating in the limited pilot.
- **2026-04** — Added User Access Reviews to Secureframe Comply, replacing spreadsheet-led reviews with structured workflows and audit trails.
- **2026-03** — Launched Secureframe Defense for CMMC scoping, secure infrastructure deployment, documentation, continuous monitoring, and assessment preparation.
- **2025-06** — Introduced Secureframe Federal for CMMC 2.0 and FedRAMP 20x compliance work.
- **2024-05** — Expanded Comply AI and added support for NIST AI RMF and ISO 42001.

## Links

- Website: https://secureframe.com
- LinkedIn: https://www.linkedin.com/company/secureframe
- Twitter/X: https://twitter.com/secureframe
- GitHub: https://github.com/secureframe
- Facebook: https://facebook.com/secureframehq

---

Profile page: https://yespress.io/secureframe
Published by YesPress — https://yespress.io
Last updated: 2026-09-28