continuous-monitoring
(17)
Complyance wants your auditors to arrive bored
The enterprise GRC company is putting AI agents to work on evidence, vendors and policies. Its most revealing customer story begins with a CISO who wanted nothing to do with AI.
Drata Turned the Audit Scramble Into an Always-On Machine - Then Went After the Sales Cycle
The founders met compliance as a recurring evidence hunt. Five years later, Drata had crossed $100 million in annual recurring revenue and was selling a bigger idea: make proof of trust useful every day, not just during an audit.
Oversight Wants to Audit Every Dollar - Before the Weird Ones Get Away
Most finance teams still inspect a sliver of company spend after the fact. Oversight sells a different bargain: watch every transaction, find the odd ones early, and let human auditors spend their time on what actually looks wrong.
The $50,000 Crash Problem: How SambaSafety Built a 6.5 Million-Driver Early-Warning System
Annual driving-record checks are a photograph of a moving target. SambaSafety turned that blind spot into a subscription business - then bought the training and telematics pieces needed to do something about the alerts.
The Rice-Sized Sensor Trying to End the IVF Blood-Test Marathon
A fertility patient can give blood every other day for weeks and still miss the hormone surges that decide whether a cycle works. Impli wants to put a continuous read of that biology under the skin - or on it.
Best Buy Paid $400 Million for Current Health. Then Its Founder Bought the Company Back - and Narrowed the Bet
Current Health began with a wearable, grew into a hospital-at-home operating system, and became a $400 million retail-health wager. Its second act is more disciplined: help hospitals and drugmakers move the hardest care out of the building without making clinicians gamble on safety.
The Background Check Is Becoming a Living Trust Layer
First Advantage built its business checking people before they start work. Now, with Sterling absorbed and identity fraud rising, it wants to become the trust layer that stays switched on long after day one.
Prana
Prana is a San Francisco startup building a 24/7 AI doctor that watches your health data between checkups. It pulls your medical records and wearable data into one clinical timeline, watches for early warning signs the company calls 'clinical drift' - rising blood pressure or glucose weeks before a crisis - and lets you chat with its AI for free or see a real physician for a flat $39 visit. Founded by Meer Patel, Vishvam Rawal, and Sanjit Menon, Prana launched out of Y Combinator's Winter 2026 batch.
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Knox Systems, Inc.
Knox Systems is an Austin, Texas company that operates a pre-authorized, AI-managed federal cloud so that commercial SaaS vendors can reach FedRAMP authorization in roughly 90 days for about 90% less than the traditional cost. By running a shared, continuously monitored compliance boundary across AWS, Azure, and GCP, Knox lets customer applications inherit 60-80% of required security controls on day one, then automates evidence collection, documentation, and remediation. Founded in 2023 by Irina Denisenko, the company raised a $25M Series A in March 2026 and serves vendors such as Adobe, Celonis, OutSystems, Armis, and BigID across 15+ federal agency authorizations.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Supply Wisdom
Supply Wisdom is a New York-based SaaS company that delivers real-time, continuous third-party and location risk intelligence. Its platform monitors suppliers and business locations across seven risk domains - financial, cyber, operational, compliance, ESG/sustainability, nth-party, and location - tracking 350+ risk metrics and pushing early-warning alerts so enterprises can act before a disruption hits. Its clients are Fortune 100 and Global 2000 firms in financial services, insurance, healthcare, and technology.
Aulisa Medical USA, Inc.
Aulisa Medical USA is a Palo Alto medical device company that builds Guardian Angel, a line of FDA-cleared, wireless, wearable vital-sign monitoring systems for infants, children and adults. Its devices continuously track oxygen saturation, pulse rate and body temperature and stream the data to caregivers and clinicians, in the hospital or at home, with customizable alarms for early detection of health incidents. Founded in 2012 by serial medical-device entrepreneur Augie Lien, the company raised a $13M Series A in 2022 and manufactures its products in its own GMP-certified factory.
Project Canary
Project Canary is a Denver-based climate-tech public-benefit corporation that turns methane and emissions data into operational intelligence for energy companies. It pairs high-fidelity continuous monitoring hardware (the EPA-approved Canary X sensor) with a cloud platform (SENSE) and independent well-level ESG ratings (TrustWell), helping oil & gas producers and natural gas utilities detect leaks, cut emissions, meet regulations, and prove the climate attributes of their gas.
QURA, Inc.
QURA, Inc. is a preclinical medical-technology company in Massachusetts building a tiny implanted sensor that continuously measures blood pressure and wirelessly transmits medical-grade waveform data to patients and physicians in real time. Its QSmart platform - a vitamin-sized QSense implant paired with software and analytics - aims to replace the occasional cuff reading with always-on monitoring, targeting hypertension, the leading cardiovascular risk factor worldwide. The technology grew out of an earlier wireless implantable pressure sensor developed for glaucoma (intraocular pressure) monitoring.