third-party-risk
(29)
Optro sees the risk between the spreadsheets.
It began with two friends and a neglected customer: the auditor. Now the company formerly called AuditBoard is teaching AI to do the paperwork - and helping businesses keep an eye on AI.
iCOUNTER and the danger of a respectable vendor
A supplier can pass its security review while an attacker prepares the next move. iCOUNTER is building a business around the uncomfortable interval between those two facts.
Fusion Risk Management makes the next failure easier to see
A business can have a plan for every department and still miss the connection that brings them all down. Fusion turns those connections into something teams can map, test and act on.
MCO and the expensive art of joining the dots
A trade, a gift, a private conversation: each can look innocent on its own. MyComplianceOffice is building a business around what happens when a financial firm sees them together.
TDI and the Art of the Deal You Don’t Make
A promising investment can survive a bad headline and fail a quiet inquiry. TDI sells the research, judgment and software that help businesses tell the difference.
Sayari and the Art of Following the Paper
A company can have a spotless name and a rather inconvenient family tree. Sayari connects corporate records and trade routes to show banks, businesses, and investigators who is really on the other side of a deal.
Ncontracts and the Bank That Forgot Its Own Spreadsheet
A bank can remember every transaction and still forget how its own rules work. Ncontracts has built a business around that peculiar lapse, turning contracts, compliance and institutional knowledge into something people can actually use.
The Security Scanner That Wants to Finish the Job
Lineaje began with a small heresy: finding vulnerable code is the easy part. Its larger bet is to trace every ingredient, judge the real risk, and send back a repair that does not wreck the build.
Gatekeeper Wants Your Contracts to Stop Renewing Themselves
The vendor-management company connects contracts, supplier risk and spending in one place. Its most persuasive pitch is the money and hours customers say they recovered from work nobody wanted to own.
NAVEX Turned the Ethics Hotline Into a $2.5 Billion Risk Machine
The company began as a private-equity roll-up of four compliance specialists. Fourteen years later, its real advantage is not the hotline - it is the data trail that begins when someone decides to speak up.
Onspring Turned Compliance's Spreadsheet Problem Into a No-Code Control Room
Risk teams do not need another place to store a checklist. Onspring's wager is that they need a system they can reshape themselves - and one customer's three-year software search shows why that matters.
Exiger Put the Supply Chain Under an X-Ray - Now It Wants to Tell You What Breaks Next
The company began by helping banks survive regulatory scrutiny. A decade, several acquisitions and one decisive divestiture later, it is selling a more ambitious promise: see every hidden dependency before it becomes an expensive surprise.
Avetta Turned Contractor Paperwork Into a Passport to Work
Avetta built a $3 billion business around an unglamorous question: is this contractor actually ready to step onto the site? Its answer combines software, audits and a network - while asking suppliers to do some of the paying and plenty of the paperwork.
The $5.3 Billion Cookie-Banner Company Had to Grow Up - Now OneTrust Wants to Govern Your AI
OneTrust turned a deadline called GDPR into one of software's fastest growth stories. After a bruising reset, the company behind countless cookie pop-ups is betting that the next compliance emergency will be every company's unruly fleet of AI models and agents.
Archer Built the Risk Register. Now It Wants to Make It Think.
The Kansas software veteran spent 25 years turning scattered audits, vendor questionnaires and risk registers into one enterprise system. Its next wager is that purpose-built AI can spot the trouble before the quarterly heat map does.
Mitratech Built a Compliance Empire. Now It Has to Make the Pieces Feel Like One Product.
The 39-year-old legal-tech veteran stitched together matter management, risk, HR compliance and workflow automation. The bet is that regulated teams want one governed system more than another clever point solution.
The Riskiest Supplier Is the One Whose Numbers You’ve Never Seen
RapidRatings built a business by asking private suppliers for the one thing risk databases rarely possess: their actual financial statements. Now it is trying to pair that deep view with coverage broad enough for the whole supply chain.
Cranium Wants to Be the Control Room for Every AI Your Company Forgot It Had
Companies rushed to install copilots, models and agents. Cranium built a business around the awkward question that followed: who knows where all of them are - and can anyone prove they are safe?
Riskonnect's $683,000 Bet: Put Every Corporate Risk Under One Roof
Most companies still manage danger in spreadsheets and departmental silos. Riskonnect built a sprawling enterprise platform to connect the clues - and one commissioned study shows both the appeal and the price of the bet.
LogicGate Turned the Spreadsheet Swamp Into a Risk Map - Now AI Has to Prove It Belongs There
Three consultants got tired of forcing risk teams into rigid software, so they built a no-code system around the way those teams actually work. A decade later, LogicGate is testing whether the same flexible foundation can make enterprise AI governable without turning judgment over to a machine.
Plutto
Plutto is a Santiago-based KYB (Know Your Business) and due diligence platform for Latin America. It lets financial services, procurement, legal and compliance teams verify and continuously monitor the businesses they work with - vendors, clients and partners - by pulling legal, financial, tax and labor data from 15+ official sources, screening against sanctions and PEP lists, and producing auditable, AI-summarized risk reports. What once took lawyers weeks and cost about $100 per client now runs in minutes for a few dollars per check.
Compyl
Compyl is a New York-based SaaS company that unifies governance, risk, and compliance (GRC) on a single platform. Founded in 2020 by former CISOs, it pulls evidence directly from more than 125 integrated systems, maps controls across 70+ frameworks like SOC 2, ISO 27001 and HIPAA, and uses agentic AI to draft evidence, score vendors and answer security questionnaires while keeping humans in control of decisions. Compyl raised a $12M Series A in June 2025 to scale its AI-led platform for mid-market and enterprise security teams.
Cyble
Cyble is an AI-native threat intelligence company that continuously monitors the surface, deep, and dark web to help enterprises and governments detect, predict, and disrupt cyber threats before they cause damage. Founded in 2019 by Beenu Arora and Manish Chachada, the company packages dark web monitoring, digital risk protection, attack surface management, and agentic AI analysis into a unified platform used by organizations ranging from agile startups to Fortune 50 companies and national agencies.
Nudge Security
Nudge Security is an Austin-based cybersecurity company that helps organizations discover and govern the SaaS and AI applications their employees adopt, often without IT's knowledge. Founded in 2021 by Russell Spitler and Jaime Blasco, the platform combines Day One SaaS and AI app discovery, security posture management, identity governance, third-party risk, and spend management, then reaches employees directly with 'security nudges' via browser, Slack, and Teams to guide safer choices without blocking work. It raised a $22.5M Series A in November 2025 and serves nearly 200 customers.
Trustero
Trustero is a Palo Alto AI company building software for security and compliance teams. Founded in 2020 by SignalFx co-founder Phillip Liu, it applies generative AI and a patent-pending 'Trust Graph' to automate the grind of governance, risk and compliance (GRC): gap analysis, evidence collection, control testing, security questionnaires, third-party risk reviews and audit prep across frameworks like SOC 2, ISO 27001, FedRAMP, PCI, SOX and DORA. In November 2024 it raised a $10.35M Series A led by Bright Pixel Capital.
Zania
Zania builds autonomous AI agents for governance, risk, and compliance (GRC). Founded in 2023 by former CISO Shruti Gupta, the Palo Alto company deploys domain-specific 'AI teammates' that run third-party risk reviews, controls testing, evidence collection, security questionnaires, and continuous compliance across frameworks like SOC 2, ISO 27001, and HIPAA - work it claims runs up to 30x faster at 90% lower cost with 94%+ accuracy. It raised an $18M Series A led by NEA in 2025.
Maxxsure
Maxxsure is a Dallas-area cybersecurity company that turns cyber risk into a number executives can actually use. Its flagship product, the M-Score, quantifies an organization's cyber risk on a 0-to-1000 scale by collecting thousands of internal, external, and third-party variables and running them through AI and machine-learning models. Rather than handing boards another vulnerability report, Maxxsure frames risk in financial terms - 'down to the dollar' - so leadership can decide what to remediate, what to accept, and how much cyber insurance they actually need.
RiskOpsAI
RiskOpsAI (formerly OptimEyes AI) is an AI/ML-driven integrated risk modeling and decisioning platform that helps Fortune 2000 and Global 500 organizations discover, measure, prioritize, predict and optimize cyber risk, data privacy, third-party threat exposure and regulatory compliance. Its patented, AI-native risk quantification aggregates data from multiple risk sources into a single source of truth, giving CXOs a near real-time, transparent view of enterprise-wide risk and the actions to remediate it.
Seclore
Seclore is a data-centric security company that protects sensitive files and emails wherever they travel - across any user, device, app, or cloud. Its browser-based ARMOR platform unifies Data Security Posture Management, AI-powered Data Loss Prevention, data classification, and Enterprise Digital Rights Management so organizations keep persistent, granular control over data even after it leaves their walls. Founded in India in 2008 and headquartered in Santa Clara, California, Seclore serves more than 2,000 enterprises and government bodies across roughly 29 countries.