nist
(4)
Compliant LLM
Compliant LLM (formerly FiddleCube, YC W23) is an AI security and compliance toolkit that helps infosec, compliance, and GenAI teams keep their AI agents, prompts, and MCP servers secure. It red-teams AI systems against attacks like prompt injection and jailbreaking, checks them against frameworks such as NIST, ISO, OWASP, GDPR, and HIPAA, and monitors employee use of third-party GenAI tools to catch data leaks and PII exposure across both approved and shadow AI workflows.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Maxxsure
Maxxsure is a Dallas-area cybersecurity company that turns cyber risk into a number executives can actually use. Its flagship product, the M-Score, quantifies an organization's cyber risk on a 0-to-1000 scale by collecting thousands of internal, external, and third-party variables and running them through AI and machine-learning models. Rather than handing boards another vulnerability report, Maxxsure frames risk in financial terms - 'down to the dollar' - so leadership can decide what to remediate, what to accept, and how much cyber insurance they actually need.
Paravision
Paravision is a San Francisco-based Identity AI company building face recognition, liveness, deepfake detection, and age estimation tools used by governments, airports, banks, and stadiums worldwide. Rebranded from Ever AI in 2019 after topping NIST's facial recognition leaderboard, it sells ethically trained biometric SDKs to enterprises and Five Eyes partners.