Vendor Directory
Explore GRC and compliance management vendors.
ControlMonkey
Automate with confidence, govern with clarity
ControlMonkey is presented as an agentic Infrastructure-as-Code (IaC) automation platform that helps organizations spin up, visualize, automate and govern cloud infrastructure. The record describes it as an end-to-end IaC Automation Platform delivering visibility, automation, governance and resilience for Terraform-based infrastructure, and calls out suitability for regulated industries such as banking and insurance. ControlMonkey emphasizes policy and governance across clouds, regions and teams, and warns that infrastructure not captured in code is not recoverable. Messaging highlights AI-powered visibility and automation, reduction of manual provisioning and tickets, and a focus on readiness, resilience and audit risk for large-scale cloud infrastructure.
UsableNet
Access for All, Compliance Made Simple
UsableNet provides a comprehensive managed service for digital accessibility, helping organizations achieve compliance with the Americans with Disabilities Act (ADA) and Web Content Accessibility Guidelines (WCAG). The UsableNet Assistive solution combines expert testing, remediation, and ongoing support to ensure websites are accessible for users with disabilities. Their service includes customized accessibility fixes, regular status reports, and conformance documentation. With expertise serving a variety of industries including retail, healthcare, and government, UsableNet supports businesses in maintaining long-term accessibility compliance as their sites evolve.
Codenotary
Secure your software supply chain effortlessly
Codenotary is an AI-driven cybersecurity platform focusing on compliance and security posture management. The platform helps organizations streamline SBOM creation, enforce security policies, and prepare for audits. With features like cryptographically signed SBOMs, automated compliance scoring, and real-time vulnerability alerts, Codenotary ensures every component meets industry regulations. It is used across various sectors including financial services and healthcare, providing tools for policy enforcement and monitoring to safeguard the software supply chain. Their immutable ledger meets strict audit requirements, assisting in incident investigations and regulatory reporting.
Earthly Technologies
Guardrails for Seamless Engineering Excellence
Earthly Lunar is a platform that automates the enforcement of engineering standards as policies in code, focusing on creating guardrails for platform engineering teams. It transforms ad hoc documentation, standards, and compliance requirements into automated checks that integrate seamlessly with all tools. By employing continuous checks, Earthly Lunar provides operational readiness, quality assurance, security, and compliance across deployments. The solution eliminates inefficiencies, allowing teams to avoid deployment blockers while ensuring that critical standards are consistently enforced without manual intervention.
ExdionInsurance
Navigate E&O Risks with Smart Tech Solutions
Exdion Insurance is a cutting-edge technology provider dedicated to empowering commercial insurance agencies in managing Errors and Omissions (E&O) risks effectively. They deliver end-to-end Compliance as a Service Technology (CaaST) solutions tailored to specific business requirements. Their advanced technology, including AI and machine learning, is designed to help brokers reduce errors, automate processes, and enhance operational efficiency. Exdion's services enable M&A teams to leverage data for improved acquisition strategies, positioning them as a pioneering entity in the insurance technology landscape.
Revenera
Transforming compliance into competitive advantage
Revenera provides a suite of modern software monetization, installation, and compliance solutions tailored for software and IoT companies. Their offerings facilitate the management of open source software license compliance and automate compliance checks, ensuring businesses can navigate complex regulatory environments effectively. By leveraging the Software Bill of Materials (SBOM) and compliance as code principles, Revenera enhances security and streamlines operations, assisting organizations in delivering secure products while protecting intellectual property. Their platform aims to drive revenue growth while reducing risk in software delivery.
Fiddler AI
Master AI Insights with Confidence and Clarity
Fiddler offers a comprehensive AI Observability Platform designed to monitor, analyze, and protect AI agents, Large Language Models (LLMs), and machine learning models. It provides enterprise-grade MLOps and LLMOps tools that simplify model monitoring through unified management, centralized controls, and actionable insights. The platform aims to address complex operational challenges, ensuring model explainability and bias assessment while enhancing overall operational stability and performance. With easy integration into existing data and AI infrastructure, Fiddler is tailored to accelerate the time-to-market for AI solutions while maintaining confidence in model performance.
LayerX Security
Guardrails for Safe AI Interactions
LayerX is a comprehensive AI and browser security platform that secures user interactions with AI applications, SaaS, and web applications. The platform enforces security guardrails to prevent leakage of sensitive data on AI tools and restricts user access to unsanctioned AI tools. It protects against prompt injection and compliance violations while securing remote SaaS access by contractors and BYOD. The platform also detects and blocks risky browser extensions on any browser, ensuring the safety of corporate and personal SaaS identities. Additionally, it offers insights on GenAI security risks through its Enterprise GenAI Security Report 2025.
TrustSource
Secure your software supply chain seamlessly
TrustSource is a software supply chain security platform that efficiently organizes and automates compliance for both open and closed source software. Designed for corporate buyers and compliance managers, the platform helps users maintain control over their software suppliers while automating documentation processes. It supports compliance initiatives by keeping users informed about relevant standards such as OpenChain and SPDX, and provides tools to manage open source details effectively.
