continuous-compliance
(6)
The Company That Made Audit Season Boring
Meiran Galis spent years at EY watching startups treat security audits like a fire drill. Scytale is his bet that compliance can run in the background instead of eating a quarter.
Legit Security
Legit Security is an AI-native Application Security Posture Management (ASPM) company that gives security teams a single platform to discover, prioritize, and remediate risk across the entire software development lifecycle - from a developer's IDE and AI coding assistant to production. Founded in 2020 by three veterans of Israel's elite cyber units, the company consolidates fragmented AppSec findings, cuts false positives with context and reachability analysis, scans for exposed secrets, and now governs AI-generated code before it ships. Legit serves large enterprises including Google, Kraft Heinz, AIG, Freddie Mac, Cboe Global Markets, and ZoomInfo.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
RiskOpsAI
RiskOpsAI (formerly OptimEyes AI) is an AI/ML-driven integrated risk modeling and decisioning platform that helps Fortune 2000 and Global 500 organizations discover, measure, prioritize, predict and optimize cyber risk, data privacy, third-party threat exposure and regulatory compliance. Its patented, AI-native risk quantification aggregates data from multiple risk sources into a single source of truth, giving CXOs a near real-time, transparent view of enterprise-wide risk and the actions to remediate it.
Aayush Ghosh Choudhury
Aayush Ghosh Choudhury is the Co-Founder and CEO of Scrut Automation, a SaaS-based GRC platform that automates compliance and risk management for mid-market and enterprise companies. A former McKinsey consultant and IIT Ropar / ISB graduate, he co-built Scrut after experiencing firsthand how compliance bottlenecks stall enterprise sales - discovering the solution while trying to sell a different product entirely. Under his leadership, Scrut has grown to 800+ customers globally, raised $20.5M from Lightspeed, MassMutual Ventures, and Endiya Partners, earned a LinkedIn Top 20 Startup 2024 ranking, and been recognized by G2 as a fastest-growing and highest-satisfaction product in security compliance.