continuous-compliance
(9)
ControlCase and the art of doing the audit once
Every new security standard can bring another request for the same evidence. ControlCase has built a business around a sensible objection: why collect it twice?
Progress Chef: Why 10,000 servers need a recipe
The hard part of running a fleet of computers is getting them to agree. Progress Chef turns configuration and compliance into code - and makes a business of checking whether the machines obey.
Anecdotes and the Evidence That Refused to Sit Still
A compliance record can be correct on Monday and wrong by Friday. Anecdotes built its business around that awkward interval - and the enterprises willing to stop treating an audit as an annual scavenger hunt.
FireMon Built a Business Cleaning Up the Firewall Rules Nobody Wants to Touch
Every enterprise wants zero trust. First, someone has to explain the 10-year-old firewall rule labeled “temporary.” FireMon sells the control plane for that unglamorous, expensive job.
The Company That Made Audit Season Boring
Meiran Galis spent years at EY watching startups treat security audits like a fire drill. Scytale is his bet that compliance can run in the background instead of eating a quarter.
Legit Security
Legit Security is an AI-native Application Security Posture Management (ASPM) company that gives security teams a single platform to discover, prioritize, and remediate risk across the entire software development lifecycle - from a developer's IDE and AI coding assistant to production. Founded in 2020 by three veterans of Israel's elite cyber units, the company consolidates fragmented AppSec findings, cuts false positives with context and reachability analysis, scans for exposed secrets, and now governs AI-generated code before it ships. Legit serves large enterprises including Google, Kraft Heinz, AIG, Freddie Mac, Cboe Global Markets, and ZoomInfo.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
RiskOpsAI
RiskOpsAI (formerly OptimEyes AI) is an AI/ML-driven integrated risk modeling and decisioning platform that helps Fortune 2000 and Global 500 organizations discover, measure, prioritize, predict and optimize cyber risk, data privacy, third-party threat exposure and regulatory compliance. Its patented, AI-native risk quantification aggregates data from multiple risk sources into a single source of truth, giving CXOs a near real-time, transparent view of enterprise-wide risk and the actions to remediate it.