
Automated security and compliance platform for SOC 2, ISO 27001, HIPAA, and other frameworks.
Drata's Security and Compliance Automation product continuously monitors controls across cloud services, identity providers, and developer tools to automate evidence collection for audits.
It supports frameworks such as SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, and NIST, and is designed to reduce the manual work required to achieve and maintain security certifications.


Security compliance automation platform that streamlines SOC 2, ISO 27001, and HIPAA audits.


Vanta Automated Compliance provides continuous monitoring and automation for SOC 2, ISO, HIPAA, GDPR, FedRAMP and more.


AI-native platform that assesses and optimizes security controls across the stack.


Thoropass Compliance Suite automates framework evidence, monitoring, and audits for growing businesses.



Cloud-native application protection platform for security and compliance automation.


Aqua Real-Time CSPM combines agentless cloud scanning with real-time in-workload visibility across AWS, Azure, and Google Cloud.


Platform that discovers and manages cyber assets and security coverage gaps.


AI platform that enforces existing IAM controls across apps and identities.


Scrut Platform runs a company's governance, risk, and compliance work in one place with automated evidence collection.


Qualys Policy Compliance assesses and reports security configurations against CIS Benchmarks and DISA STIGs across cloud, endpoints, and network assets.



Aqua Container Security protects containers across all platforms and clouds from build through runtime.


Risk Automations is UpGuard’s workflow product for AI-assisted risk triage and automated remediation.


Cloud-native application protection platform that prioritizes cloud risk.


Security compliance automation platform that streamlines SOC 2, ISO 27001, and HIPAA audits.

Vanta Automated Compliance provides continuous monitoring and automation for SOC 2, ISO, HIPAA, GDPR, FedRAMP and more.

AI-native platform that assesses and optimizes security controls across the stack.

Thoropass Compliance Suite automates framework evidence, monitoring, and audits for growing businesses.

Delve automates compliance work with agents that handle evidence collection and audit support for startups and mid-market teams.

Cloud-native application protection platform for security and compliance automation.

Aqua Real-Time CSPM combines agentless cloud scanning with real-time in-workload visibility across AWS, Azure, and Google Cloud.

Platform that discovers and manages cyber assets and security coverage gaps.

AI platform that enforces existing IAM controls across apps and identities.

Scrut Platform runs a company's governance, risk, and compliance work in one place with automated evidence collection.

Qualys Policy Compliance assesses and reports security configurations against CIS Benchmarks and DISA STIGs across cloud, endpoints, and network assets.

Virtru data protection and encryption for cloud applications.

Aqua Container Security protects containers across all platforms and clouds from build through runtime.

Risk Automations is UpGuard’s workflow product for AI-assisted risk triage and automated remediation.

Cloud-native application protection platform that prioritizes cloud risk.

Vanta Agent is the 24/7 AI GRC engineer for policies, questionnaires, and TPRM.

AI agent product that automates security data engineering workflows.
