Tagged: grc
29 results
Dan Zitting
Dan Zitting is the CEO of Nitrogen, the wealth management technology company formerly known as Riskalyze, best known for its Risk Number and advisor growth platform. Before wealthtech, he spent more than a decade building governance, risk and compliance software: he founded the cloud audit tool Workpapers.com, ran Galvanize (formerly ACL) as CEO and grew it to roughly $100M in ARR, and helped steer its roughly $1 billion sale to Diligent, where he served as Chief Product and Strategy Officer. He took the top job at Nitrogen in December 2023, focused on helping financial advisors reduce friction and grow through connected workflows and AI.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
CyberSaint
CyberSaint is a Boston-based cybersecurity software company whose CyberStrong platform helps enterprises assess, quantify, and communicate cyber risk. It converges compliance, security operations, and risk management, using AI to automate control scoring, translate cyber risk into financial terms, and produce board-ready reporting for Fortune 500 companies and high-growth organizations.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Process Street
Process Street is a San Francisco-based SaaS company that helps teams turn recurring, human-driven work into structured, trackable workflows. Founded in 2014 by Vinay Patankar and Cameron McKay to tame the repetitive processes of their remote marketing agency, it began as no-code, checklist-based process software and has since repositioned as an AI-powered compliance operations platform. Today it lets non-technical teams document policies, run standardized workflows, capture data through forms, automate approvals, and prove control for standards like ISO 9001 and SOC 2 - with AI agents such as Cora monitoring execution and flagging risk.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Supply Wisdom
Supply Wisdom is a New York-based SaaS company that delivers real-time, continuous third-party and location risk intelligence. Its platform monitors suppliers and business locations across seven risk domains - financial, cyber, operational, compliance, ESG/sustainability, nth-party, and location - tracking 350+ risk metrics and pushing early-warning alerts so enterprises can act before a disruption hits. Its clients are Fortune 100 and Global 2000 firms in financial services, insurance, healthcare, and technology.
Thoropass
Thoropass is a New York-based compliance and audit company that pairs compliance-automation software with an in-house, tech-enabled CPA and security audit firm. Founded in 2019 as Laika and rebranded in 2023, it lets companies get and stay certified across 30+ frameworks - SOC 2, ISO 27001, HIPAA, PCI DSS, HITRUST, GDPR, and ISO 42001 for AI - through a single platform where the auditor is assigned on day one. By reusing evidence across frameworks and layering AI features like First Pass AI and Smart Sort AI on top of continuous control monitoring, Thoropass helps growing businesses complete audits meaningfully faster than the traditional consultant-plus-auditor route.
Jenna Wells
Jenna Wells is the Chief Executive Officer and a board member of Supply Wisdom, a real-time risk intelligence platform based in New York. A former U.S. Marine Corps signals intelligence officer and Purdue University graduate, she spent nearly two decades in intelligence and third-party risk management, including leadership roles at Wellington Management and Iron Mountain, before joining Supply Wisdom. She rose through the company from Head of Customer Experience to Head of Product to Chief Operating Officer, and was named CEO in June 2025 alongside a $14 million Series B funding round led by Jurassic Capital. Notably, she used the Supply Wisdom platform as a customer before joining the team that builds it.
Jerry Layden
Jerry Layden is the CEO of CyberSaint, a Boston-based cybersecurity software company that helps organizations measure, quantify, and report cyber risk in financial terms. He stepped into the top job in September 2021 after leading revenue as CRO, and before that spent 18 years at Dell EMC, most recently as Vice President of Global Accounts. Layden runs CyberSaint's CyberStrong platform, which uses AI and actuarial data to automate compliance work and translate cyber risk into language boards and executives understand.
Hitachi Cyber
Hitachi Cyber is the global cybersecurity and performance analytics arm of the Hitachi Group, operating under Hitachi Systems Trusted Cyber Management Inc. With roots going back to 1999, it delivers 24/7 managed security services, threat intelligence, governance-risk-compliance advisory, and performance analytics to more than 350 private and government organizations across 50-plus countries. A network of Security Operations Centers spanning Canada, Switzerland, Japan, India and Poland - integrated with Google Security Operations, Microsoft Sentinel and Splunk - anchors its detection and response work across IT, OT and AI environments.
Trustero
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
VComply
VComply is a cloud-based governance, risk, and compliance (GRC) platform that helps mid-market organizations turn compliance from scattered spreadsheets and missed deadlines into a single system of record. Founded in 2019 by Harshvardhan Kariwala after a costly missed filing at a prior business, the Sunnyvale-based, Accel-backed company packages compliance, risk, policy, and case management into four connected modules - ComplianceOps, RiskOps, PolicyOps, and CaseOps - that it now frames as a Compliance & Risk Operating System (CROS). It serves thousands of customers across healthcare, financial services, education, energy, and nonprofits in more than 100 countries.
Stas Bojoukha
Stas Bojoukha is the founder and CEO of Compyl, a New York-based governance, risk and compliance platform he built after years of running security programs himself as a CISO across financial services, real estate and energy. Compyl closed a $12 million Series A in June 2025 led by Venture Guides, bringing its total funding to $13.7 million, as the company doubles its customer base year over year and pushes into an AI-driven "Compliance Copilot."
BEMO
BEMO is a Redmond, Washington-based managed IT and security service provider built specifically for small and mid-sized businesses that run on Microsoft 365 and Azure. Founded in 2010 by ex-Microsoft veterans Bruno Lecoq and Joel Lachance, the fully remote company bundles cybersecurity, compliance (SOC 2, ISO 27001, CMMC, NIST 800-171), managed helpdesk, and AI/Copilot security into packaged tiers so 10-to-500-person organizations can meet audit requirements without hiring an in-house security team. BEMO is a repeat Microsoft US Partner of the Year and a four-time Inc. 5000 honoree.
SolidCore.ai
SolidCore.ai is a Menlo Park cybersecurity startup building the security and governance layer for enterprise generative AI. Founded in 2024 by HyTrust veteran Eric Chiu and former Microsoft security architect Hemma Prafullchandra, its platform captures an immutable record of every LLM prompt, response, and configuration inside a customer's own cloud, then continuously monitors for misconfigurations, policy violations, and risky usage while generating audit-ready evidence for frameworks like NIST AI RMF, ISO 42001, and the EU AI Act. The company emerged from stealth in September 2025 with $4M in seed funding led by Runtime Ventures.
ServiceNow
ServiceNow is the enterprise software company behind the Now Platform, a single cloud system that turns the messy, cross-departmental work of large organizations - IT tickets, HR cases, customer issues, security incidents - into digital workflows that can be automated. Founded in 2004 by Fred Luddy and now led by CEO Bill McDermott, the company has grown into one of the most valuable software firms in the world, generating over $13 billion in annual revenue and racing to embed agentic AI into every business process for the 8,000-plus enterprises and the vast majority of the Fortune 500 that run on it.
VentureSoft
VentureSoft is a Silicon Valley IT services and consulting firm that helps enterprises modernize through AI, secure cloud infrastructure, and data solutions. Founded in 1996 and headquartered in Pleasanton, California, with offices in Dubai and Bengaluru, the company has delivered 1,000+ projects to more than 300 clients ranging from venture-backed startups to Fortune 500 names like Nike, Tesla, Intuit and Gap. Its work spans data analytics and AI, security and GRC, cloud and DevSecOps, ERP/CRM, application development, and 24/7 managed services.
Valora Technologies
Valora Technologies is a Massachusetts-based information governance company that builds AutoClassification software powered by machine learning. Its PowerHouse engine and BlackCat interface scan, analyze, tag, and defensibly dispose of enterprise content across cloud and on-premises repositories, helping legal, compliance, records, and IT teams tame sprawling, unstructured data for privacy, eDiscovery, and AI-readiness use cases.
Workiva
Workiva is a cloud software company that turns the painful, deadline-driven work of regulatory, financial, and sustainability reporting into a connected, audit-ready process. Founded in Ames, Iowa, in 2008 as WebFilings, its platform links data, documents, and people in real time so finance, risk, audit, and ESG teams can collect, manage, and report critical business data with full version control and traceability. Today Workiva serves more than 6,000 organizations - including a large share of the Fortune 500 - and is layering agentic AI across finance, GRC, and sustainability workflows.
Julie Iskow
Julie Iskow is the President and CEO of Workiva, the cloud platform behind a lot of the world's regulatory, ESG, and financial reporting. A Bay Area engineer who spent her first decade in robotics and automation, she scaled SaaS companies through IPOs and acquisitions before taking over from Workiva's founder in April 2023.
Aravo Solutions
Aravo Solutions is a San Francisco-based enterprise SaaS company that builds cloud software for third-party risk, governance, and compliance. Its Intelligence First Platform - now wrapped with an AI agent layer called Aravo AI - helps Fortune 500 companies manage vendors, suppliers, and partners across 154 countries and 36 languages.
Aayush Ghosh Choudhury
Aayush Ghosh Choudhury is the Co-Founder and CEO of Scrut Automation, a SaaS-based GRC platform that automates compliance and risk management for mid-market and enterprise companies. A former McKinsey consultant and IIT Ropar / ISB graduate, he co-built Scrut after experiencing firsthand how compliance bottlenecks stall enterprise sales - discovering the solution while trying to sell a different product entirely. Under his leadership, Scrut has grown to 800+ customers globally, raised $20.5M from Lightspeed, MassMutual Ventures, and Endiya Partners, earned a LinkedIn Top 20 Startup 2024 ranking, and been recognized by G2 as a fastest-growing and highest-satisfaction product in security compliance.
Jasvir Gill
Jasvir Gill is the Founder and CEO of AlertEnterprise, a Fremont-based enterprise SaaS platform that converges physical security, cybersecurity, and identity governance through AI. A serial entrepreneur who immigrated from Punjab in 1985, Gill previously founded Virsa Systems — a pioneer in governance, risk, and compliance software — which was acquired by SAP in 2006. He then built the SAP GRC business unit before leaving to found AlertEnterprise in 2007. Backed by Kleiner Perkins, the company has become an industry leader in cyber-physical security convergence, deploying AI-powered access control and identity management for critical infrastructure, utilities, and enterprise clients worldwide.
Michael Saracini
Michael Saracini is the CEO of Aravo Solutions, a San Francisco-based enterprise SaaS company he has led since 2011. With over two decades building profitable high-growth software businesses across CRM, HCM, and supply chain, Saracini has positioned Aravo as the category-defining platform for third-party risk management - managing 10.5 million suppliers and vendors across 177 countries for global enterprises in financial services, pharma, high-tech, and consumer goods. Under his leadership, Aravo has earned five consecutive Chartis Category Leader designations, won the 2025 TPRM Innovator Award, and built an AI-driven TPRM platform trusted by Fortune 500 companies navigating an era of regulatory complexity.
Scrut Automation
Scrut Automation is a security-first GRC (governance, risk, and compliance) platform that helps cloud-native companies automate evidence collection, manage risk, and stay continuously audit-ready across 60+ frameworks like SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
Sprinto
Sprinto is a compliance and trust automation platform that helps cloud-first companies achieve and maintain certifications like SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR without drowning in spreadsheets. It connects to 300+ business systems, continuously monitors controls, and orchestrates audits end-to-end - turning what used to be a six-month consulting project into a continuous, mostly-automated background process.
Vanta
Vanta is the trust management platform that automates security and compliance for more than 16,000 companies - turning SOC 2, ISO 27001, HIPAA, GDPR and dozens of other frameworks from a months-long PDF marathon into something a startup can pass before lunch.
Venkat Bhat
Venkat Bhat is the CEO and founder of VentureSoft Global, an $80 million IT services and consulting firm headquartered in Pleasanton, California. Founded in 1996, VentureSoft has grown to serve over 300 clients - from startups to Fortune 500 companies including Tesla, Nike, Intuit, and Citigroup - across data & AI, cybersecurity, cloud, ERP/CRM, and managed services. With offices in North America, Dubai, and Bengaluru, Bhat has built a global delivery model that blends deep technical expertise with business transformation, and is now steering the company into the era of generative AI and enterprise AI platforms.