Alternatives to Delve
Compare Delve alternatives for your business or organization using the curated list below. SourceForge ranks the best alternatives to Delve in 2026. Compare features, ratings, user reviews, pricing, and more from Delve competitors and alternatives in order to make an informed decision for your business.
-
1
MOVEit
Progress Software
MOVEit Managed File Transfer (MFT) software is used by thousands of organizations around the world to provide complete visibility and control over file transfer activities. Assure the reliability of core business processes and the secure and compliant transfer of sensitive data between partners, customers, users and systems with MOVEit. MOVEit's flexible architecture allows you to choose the exact capabilities to match your organizations specific needs. MOVEit Transfer enables the consolidation of all file transfer activities to one system to ensure better management control over core business processes. It provides the security, centralized access controls, file encryption and activity tracking needed to ensure operational reliability and compliance with SLA, internal governance and regulatory requirements. MOVEit Automation works with MOVEit Transfer or FTP systems to provide advanced workflow automation capabilities without the need for scripting. -
2
Carbide
Carbide
Carbide is a tech-enabled service that strengthens your company’s information security and privacy management capabilities. Our platform and expert services are tailored for companies aiming for a sophisticated security posture, particularly valuable for organizations that must meet rigorous compliance requirements of security frameworks like SOC 2, ISO 27001, HIPAA, GDPR, and more. With Carbide, you can benefit from continuous cloud monitoring and the educational resources of Carbide Academy. Our platform supports over 100 technical integrations, enabling efficient evidence collection and meeting of security framework controls necessary for passing audits. -
3
Feroot
Feroot Security
Feroot Security is a global leader in AI-powered website compliance and security. Feroot AI protects websites and web applications from hidden threats while enforcing compliance with PCI DSS 4.0.1, HIPAA rules on online tracking technologies, CCPA/CPRA, GDPR, CIPA, and 50+ laws and standards. The Feroot AI Platform replaces manual compliance work with continuous automation, delivering real-time protection and audit-ready evidence in minutes. Feroot unifies JavaScript behavior analysis, web compliance scanning, third-party script monitoring, consent enforcement, and data privacy posture management to stop Magecart, formjacking, and unauthorized tracking. Trusted by enterprises, healthcare providers, retailers, SaaS platforms, payment service providers, and public sector organizations. Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI. Visit feroot for more information. -
4
Safetica
Safetica
Safetica’s Intelligent Data Security protects sensitive data where teams work, using powerful AI to deliver contextual awareness, reduce false positives, and stop real threats without disrupting productivity. With Safetica, security teams can maintain visibility and control over sensitive data, stay ahead of insider risks, maintain compliance, and secure sensitive cloud-based data. ✔️ Data Protection: Classify, monitor and control sensitive data across devices and clouds in real time. ✔️ Insider Risk and User Behavior: Spot risky behavior, detect intent, and stop insider threats to stay ahead of the careless handling of sensitive data, compromised user accounts and malicious user activity. ✔️ Compliance and Data Discovery: Prove compliance with audit-ready reporting for data in use, in motion, and at rest. ✔️ Cloud Security: Protect Microsoft 365, cloud, and file-sharing platforms to secure sensitive cloud-based data. -
5
LogicGate Risk Cloud
LogicGate
LogicGate’s leading GRC process automation platform, Risk Cloud™, enables organizations to transform disorganized risk and compliance operations into agile process applications, without writing a single line of code. LogicGate believes that flexible, easy-to-use enterprise technology can change the trajectory of organizations and the lives of their employees. We are dedicated to transforming the way companies manage their governance, risk, and compliance (GRC) programs, so they can manage risk with confidence. LogicGate’s Risk Cloud platform and cloud-based applications, combined with raving fan service and expertly crafted content, enable organizations to transform disorganized risk and compliance operations into agile processes, without writing a single line of code. -
6
Hyperproof
Hyperproof
Hyperproof makes building out and managing your information security frameworks easy by automating repetitive compliance operation tasks so your team can focus on the bigger things. The Hyperproof solution also offers powerful collaboration features that make it easy for your team to coordinate efforts, collect evidence, and work directly with auditors in a single interface. Gone are the days of uncertainty around audit preparation and compliance management process. With Hyperproof you get a holistic view of your compliance programs with progress tracking, program health monitoring, and risk management. -
7
StandardFusion
StandardFusion
A GRC solution for technology-focused SMB and Enterprise Information Security teams. StandardFusion eliminates spreadsheet pain by using a single system of record. Identify, assess, treat, track and report on risks with confidence. Turn audit-based activities into a standardized process. Conduct audits with certainty and direct access to evidence. Manage compliance to multiple standards; ISO, SOC, NIST, HIPAA, GDPR, PCI-DSS, FedRAMP and more. Manage vendor and 3rd party risk, and security questionnaires easily in one place. StandardFusion is a Cloud-Based SaaS or on-premise GRC platform designed to make InfoSec compliance simple, approachable and scalable. Connect what your organization does, with what your organization needs to do.Starting Price: $1800 per month -
8
6clicks
6clicks
6clicks is an easy way to implement your risk and compliance program or achieve compliance with ISO 27001, SOC 2, PCI-DSS, HIPAA, NIST, FedRamp and many other standards. Hundreds of businesses trust 6clicks to set up and automate their risk and compliance programs and streamline audit, vendor risk assessment, incident and risk management and policy implementation. Easily import standards, laws, regulations or templates from our massive content library, use AI-powered features to automate manual tasks, and integrate 6clicks with over 3,000 apps you know and love. 6clicks has been built for businesses of all shapes and sizes and is also used by advisors with a world-class partner program and white label capability available. 6clicks was founded in 2019 and has offices in the United States, United Kingdom, India and Australia. -
9
OpenText CloudAlly Backup
OpenText
OpenText CloudAlly Backup provides a secure, enterprise-grade solution for protecting all major SaaS applications, including Microsoft 365, Google Workspace, Salesforce, Box, and Dropbox. The platform offers automated and on-demand immutable backups stored in AWS S3 or in customer-owned cloud environments such as Azure, GCP, or AWS. With unlimited retention, granular restore options, and point-in-time recovery, organizations can rapidly recover from malware, human error, sync issues, or outages. CloudAlly’s backup services include full metadata preservation and support for advanced use cases such as sandbox seeding and anomaly detection. Built with strong security standards—AES 256-bit encryption, MFA, Okta/OAuth authentication, HIPAA/GDPR compliance, and ISO certifications—the platform ensures data protection that meets global regulatory requirements. Trusted by more than 30,000 organizations, CloudAlly simplifies SaaS data protection while delivering cost savings.Starting Price: $3.00/month -
10
Runecast
Runecast Solutions
Runecast is an enterprise CNAPP platform that saves your Security and Operations teams time and resources by enabling a proactive approach to ITOM, CSPM, and compliance. It automates vulnerability assessment, configuration drift management and continuous compliance – for VMware, Cloud and Containers. By proactively using our agentless scanning in real-time admins discover potential risks and remediation solutions before any issues can develop into a major outage. It provides continuous audits against vendor best practices, common security standards, and frameworks such as BSI IT-Grundschutz, CIS, Cyber Essentials, DISA STIG, DORA, Essential 8, GDPR, HIPAA, ISO 27001, KVKK, NIST, PCI DSS, TISAX, VMware Security Hardening Guidelines, and the CISA KEVs catalog. Detect and assess risks and be fully compliant across your hybrid cloud in minutes. Runecast has been recognized with Frost & Sullivan's 2023 European New Product Innovation Award in the CNAPP industry. -
11
Compliancy Group
Compliancy Group
Mastering healthcare regulatory compliance just got simpler! Compliancy Group's Healthcare Compliance Software is a powerful solution tailored to the healthcare industry. With a user-friendly dashboard, customizable policies, and risk assessment tools, it streamlines compliance with regulations like HIPAA, OSHA, and SOC 2. It also handles employee training, document management, incident tracking, and automated reporting, simplifying the complex task of healthcare compliance management. Our user-friendly dashboard provides more than just insights; it empowers you with real-time visibility into your compliance status, allowing you to proactively address potential issues. Seamlessly align your operations with the latest standards by tailoring policies and procedures using our adaptable framework. Say goodbye to deciphering complex regulations – our software takes the guesswork out of compliance, covering not only HIPAA but also extending to encompass OSHA and SOC 2 requirements. -
12
SanerNow
SecPod Technologies
SecPod SanerNow is the world's best unified endpoint security & management platform that powers IT/Security Teams automate cyber hygiene practices. It works on an intelligent agent-server model to execute effective endpoint management and security. It gives you accurate vulnerability management with scanning, detection, assessment, prioritization, and remediation capabilities. SanerNow is available on both cloud and on-premise, whose integrated patch management automates patching across all major OSs like Windows, MAC, Linux, and a vast collection of 3rd party software patches. What makes it unique? You can now access other salient features like security compliance management, IT asset management, endpoint management, software deployment, application & device control, and endpoint threat detection and response, all on a single platform. With SanerNow, you can remotely perform and automate these tasks to secure your systems from the emerging wave of cyberattacks.Starting Price: $50/year/device -
13
Netwrix Auditor
Netwrix
Netwrix Auditor is a visibility platform that enables control over changes, configurations and access in hybrid IT environments and eliminates the stress of your next compliance audit. Monitor all changes across your on-prem and cloud systems, including AD, Windows Server, file storage, databases, Exchange, VMware and more. Simplify your reporting and inventory routines. Regularly review your identity and access configurations, and easily verify that they match a known good state. -
14
SaltStack
SaltStack
SaltStack is an intelligent IT automation platform that can manage, secure, and optimize any infrastructure—on-prem, in the cloud, or at the edge. It’s built on a unique and powerful event-driven automation engine that detects events in any system and reacts intelligently to them, making it an extremely effective solution for managing large, complex environments. With the newly launched SecOps offering, SaltStack can detect security vulnerabilities and non-compliant, mis-configured systems. As soon as an issue is detected, this powerful automation helps you and your team remediate it, keeping your infrastructure securely configured, compliant, and up-to-date. The SecOps suite includes both Comply and Protect. Comply scans and remediates against CIS, DISA-STIG, NIST, PCI, HIPAA compliance standards. And Protect scans for vulnerabilities and patches and updates your operating systems. -
15
RiskWatch
RiskWatch
RiskWatch risk assessment and compliance management solutions use a survey-based process for physical & information security in which a series of questions are asked about an asset and a score is calculated based on responses. Additional metrics can be combined with the survey score to value the asset, rate likelihood, and impact. Assign tasks and manage remediation based on survey results. Identify the risk factors of each asset you assess. Receive notifications for non-compliance to your custom requirements and any relevant standards/regulations.Starting Price: $99/month/user -
16
Sprinto
Sprinto
Replace the slow, laborious and error-prone way of obtaining SOC 2, ISO 27001, HIPAA, GDPR & PCI DSS compliance with a swift, hassle-free, and tech-enabled experience. Unlike generic compliance programs, Sprinto is specifically designed for cloud-hosted companies. SOC 2, ISO 27001, HIPAA, GDPR & PCI DSS have different implications for different types of companies. This is why generic compliance programs end up giving you more compliance debt and less security. Sprinto is specifically built to suit your needs as a cloud-hosted company. Sprinto is more than just a SaaS tool, it comes baked in with security and compliance expertise. Compliance experts handhold you in live sessions. Custom designed for your needs. No compliance cruft. 14 session, well-structured implementation program. Sense of clarity & control for the head of engineering. 100% compliance coverage. No evidence is shared outside Sprinto. Compliance automation for policies, integrations and all other requirements. -
17
Delve
Delve
Delve lets fast-growing companies build security in days, not months. An AI-driven compliance platform designed to streamline and simplify the compliance process. Built with an intuitive, modern UX, Delve tailors a custom compliance program without using one-size-fits-all checklists, helping companies achieve SOC 2, HIPAA, and other regulatory standards quickly, often within a week. The platform’s AI features include automated code scanning on every git push to ensure ongoing security and real-time infrastructure monitoring. Delve also offers seamless onboarding, personalized strategy sessions, and 24/7 support via Slack and Zoom, eliminating the need for external consultants. With integrated tools for vulnerability management, audit preparation, and trust reports, Delve helps maintain compliance and security transparency year-round. This approach empowers companies to focus on growth without the complexity of traditional compliance processes. -
18
Thoropass
Thoropass
An audit without aggravation? Compliance without crisis? Yep, that’s what we’re talking about. SOC 2, ISO 27001, HITRUST, PCI DSS, and all of your favorite information security frameworks now worry-free. Whether you need last-minute compliance to close a deal, or multiple frameworks to expand into new markets, we can solve all of your challenges on a single platform. If you’re new to compliance or rebooting old processes, we can get you started quickly. Free your team from time-consuming evidence collection so that they can focus on strategy and innovation. Complete your audit end-to-end on Thororpass, without gaps or surprises. Our in-house auditors can provide you with the just-in-time support you need and use our platform to expand that into future-proof strategies for years to come. -
19
anecdotes
anecdotes
Now you can collect hundreds of pieces of evidence in minutes, utilizing unlimited plugins to comply with various frameworks, including SOC 2, PCI, ISO, SOX ITGC, customised internal audits and more to meet your compliance requirements with ease. The platform continuously collects and maps relevant data into normalized, credible evidence and offers advanced visibility to ensure the best cross-team collaboration. Our platform is fast, intuitive and you can start your free trial today. Eliminate compliance legwork and enjoy a SaaS platform that automates evidence collection and scales with you. For the first time, get ongoing visibility into your compliance status and track audit processes in real time. Use anecdotes' innovative audit platform to offer your customers the best audit experience on the market. -
20
CyberArrow
CyberArrow
Automate the implementation & certification of 50+ cybersecurity standards without having to attend audits. Improve and prove your security posture in real-time. CyberArrow simplifies the implementation of cyber security standards by automating as much as 90% of the work involved. Obtain cybersecurity compliance and certifications quickly with automation. Put cybersecurity on autopilot with CyberArrow’s continuous monitoring and automated security assessments. Get certified against leading standards via a zero-touch approach. The audit is carried out by auditors using the CyberArrow platform. Get expert cyber security advice from a dedicated virtual CISO through the chat function. Get certified against leading standards in weeks, not months. Safeguard personal data, comply with privacy laws, and earn the trust of your users. Secure cardholder information and instill confidence in your payment processing systems. -
21
ZenGRC
ZenGRC
ZenGRC is a powerful Governance, Risk, and Compliance (GRC) solution designed to simplify and streamline risk management processes for organizations. By offering a unified system to securely store and manage risk and compliance data, ZenGRC provides businesses with an intuitive, user-friendly interface to stay ahead of regulatory requirements and risks. With features like AI automation, seamless integrations, and customizable frameworks, ZenGRC empowers businesses to automate tasks, gain real-time insights, and make informed decisions quickly. Awarded the ISACA Global Innovation Award in 2024, ZenGRC is trusted by organizations to enhance compliance and improve risk management effectiveness.Starting Price: $2500.00/month -
22
VigiTrust
VigiTrust
Educate your staff on the policies and procedures and the reasons for them, with VigiTrust’s engaging and informative eLearning. Vulnerability scanning, assessment, reporting with questionnaires, surveys and check-sheets and comprehensive, interactive reports and charts. Achieve continuous compliance across a number of regulations and standards (e.g. GDPR, PCI DSS and ISO27001) with one single program and platform. VigiTrust is an award-winning provider of Integrated Risk Management (IRM) SaaS solutions to clients in 120 countries in the hospitality, retail, transportation, higher education, government, healthcare, and eCommerce industries. VigiTrust solutions allow clients and partners to prepare for, validate, and maintain compliance with legal and industry frameworks and regulations on data privacy, information governance, and compliance. -
23
Truzta
Truzta
Truzta is an AI-powered security and compliance automation platform that helps organizations achieve, maintain, and scale compliance with major frameworks such as ISO 27001, SOC 2, HIPAA, and GDPR by automating gap assessments, controls implementation, policy generation, evidence collection, continuous monitoring, and audit readiness in one unified dashboard. It accelerates compliance readiness with automated evidence collection that integrates with hundreds of tools, real-time alerts on failing controls, and continuous penetration testing and risk assessment to detect vulnerabilities proactively. Truzta includes secure code review, cloud security posture management, API security, automated access reviews, incident management, third-party risk management, and customizable policy templates, reducing manual work and errors while keeping documentation audit-ready. It simplifies workflows with seamless integrations, structured change management, and centralized reporting. -
24
Scytale
Scytale
Scytale is an AI-powered compliance automation platform supported by dedicated GRC experts. It streamlines more than 40 security and privacy frameworks, including SOC 2, ISO 27001, PCI DSS, GDPR, ISO 42001 and SOX ITGC. Scytale centralizes all GRC workflows, penetration testing, AI security questionnaires and Trust Center solutions, into one platform to help organizations navigate complex regulatory requirements. In 2025, Scytale was named the AWS Rising Star Partner of the Year (Technology) in EMEA, recognized for helping customers innovate and scale securely on AWS. Key capabilities include the AI GRC Agent, automated evidence collection, continuous control monitoring, vendor risk management and automated user access reviews. Scytale also provides tailored GRC expert support throughout the compliance journey. Companies of all sizes use Scytale to reduce the time and resources spent on security and compliance and to support efficient growth. -
25
ComplyJet
ComplyJet
ComplyJet is a compliance automation platform built for cloud-native startups preparing for their first SOC 2, ISO 27001, or GDPR certification. We help you get audit-ready in as little as 7 days—without the complexity of legacy GRC tools. Built for founder-led teams, ComplyJet combines automation, AI assistance, and white-glove support from compliance experts to simplify every step—control mapping, evidence collection, policy drafting, and auditor coordination. We integrate with 100+ tools (like AWS, GitHub, and Okta) to auto-collect evidence and continuously monitor your environment. Our AI assistant drafts policies, maps controls, and flags gaps—so you can focus on building, not busywork. Whether you're starting from scratch or scaling fast, ComplyJet gets you compliant—without the grind.Starting Price: $4999/year -
26
Copla
Copla
Copla is a compliance automation platform designed to help organizations manage complex regulatory requirements more efficiently. The platform supports frameworks such as DORA, NIS2, ISO 27001, SOC2, and other security and governance standards. Copla automates tasks like evidence collection, control monitoring, and policy generation to reduce the manual workload involved in compliance management. By continuously monitoring systems and collecting documentation automatically, the platform ensures businesses remain audit-ready at all times. Copla also cross-maps controls across multiple frameworks, allowing companies to complete compliance work once and apply it to several standards. In addition to automation, the platform provides guidance from experienced CISOs who help organizations build effective compliance strategies. Through a combination of expert support and intelligent automation, Copla enables companies to meet regulatory requirements with less effort and greater confidence. -
27
TrustCloud
TrustCloud Corporation
Don’t struggle with 1000s of vulnerability smoke signals from your security tools. Aggregate feeds from your cloud, on-premises, and bespoke apps, and combine them with feeds from your security tools, to continuously measure the control effectiveness and operational status of your entire IT environment. Map control assurance to business impact to assess which gaps to prioritize and remediate. Use AI and API-driven automation to accelerate and simplify first-party, third-party, and nth-party risk assessments. Automate document analysis and receive contextual, reliable information. Run frequent, programmatic risk assessments on all your internal and third-party applications to eradicate the risk of one-time or point-in-time evaluations. Take your risk register from manual spreadsheets to programmatic, predictive risk assessments. Monitor and forecast your risks in real-time, enable IT risk quantification to prove financial impact to the board, and prevent risk instead of managing it. -
28
ByteChek
ByteChek
Simplify compliance with ByteChek’s advanced and easy-to-use compliance platform. Build your cybersecurity program, automate evidence collection, and earn your SOC 2 report so you can build trust faster, all from a single platform. Self-service readiness assessment and reporting without auditors. The only compliance software that includes the report. Complete risk assessments, vendor reviews, access reviews, and much more. Build, manage, and assess your cybersecurity program to build trust with your customers and unlock sales. Establish your security program, automate your readiness assessment, and complete your SOC 2 audit faster, all from a single platform. HIPAA compliance software to help you prove your company is securing protected health information (PHI) and building trust with healthcare companies. Information security management system (ISMS) software to help you build your ISO-compliant cybersecurity program and earn your ISO 27001 certification.Starting Price: $9,000 per year -
29
Dash ComplyOps
Dash
Dash ComplyOps provides security teams with a solution for building security programs in the cloud and meeting regulatory and compliance standards including HIPAA and SOC 2 Type 2. Dash enables teams to develop and maintain compliance controls across their IT infrastructure and cloud environments. Dash streamlines security and compliance operations, so your organization can easily manage HIPAA compliance. Security teams can save hundreds of man-hours a month by using Dash. Dash makes it easy to create administrative policies mapped to relevant regulatory standards and security best practices. Dash empowers teams to set and enforce high security and compliance standards. Our automated compliance process enables your team to set administrative and technical controls across your cloud environment. Dash continuously scans and monitors your cloud environment and connected security services for compliance issues, allowing your team to identify and resolve issues quickly. -
30
CyberCompass
CyberCompass
We build Information Security, Privacy, and Compliance Programs to improve your cyber resilience – saving you and your organization time and money. CyberCompass is a cyber risk management consulting and software firm. We navigate organizations through the complexity of cybersecurity and compliance at half the cost of full-time employees. We design, create, implement, and maintain information security and compliance programs. We provide consulting services and a cloud-based GRC workflow automation platform to save our clients over 65% of the time to become and remain cybersecure and compliant. We provide expertise and support for the following standards and regulations – CCPA/ CPRA, CIS-18, CMMC 2.0, CPA, CTDPA, FTC Safeguards Rule, GDPR, GLBA, HIPAA, ISO-27001, NIST SP 800-171, NY DFS Reg 500, Singapore PDPA, SOC 2, TCPA, TPN, UCPA, VCDPA. We also provide third-party risk management within the CyberCompass platform.Starting Price: $5000/year -
31
Atlantic.Net
Atlantic.Net
Atlantic.Net provides Cloud, GPU Cloud, Dedicated, Bare Metal Hosting, and Managed Services. From meeting the strictest security, privacy, and compliance requirements to ensuring a robust and scalable hosting environment, our hosting solutions are designed to help bring focus to your core business and applications. Our Compliance Hosting solutions are a perfect fit for financial services and healthcare organizations that require the most robust security levels for their data. Certified and audited by third-party independent auditors, Atlantic.Net compliance hosting solutions fulfill HIPAA, HITECH, PCI, or SOC requirements. From your first consultation to ongoing operations, you’ll benefit from our proactive, result-oriented approach to your digital transformation. Gain a clear, significant advantage with our managed services to make your organization more efficient and productive.Starting Price: $320.98 per month -
32
Apptega
Apptega
Simplify cybersecurity and compliance with the platform that’s highest rated by customers. Join thousands of CISOs, CIOs, and IT professionals who are dramatically reducing the cost and burden of managing cybersecurity and compliance audits. Learn how you can save time and money, have great cybersecurity, and grow your business with Apptega. Go beyond one-time compliance. Assess and remediate within a living program. Confidently report with one click. Quickly complete questionnaire-based assessments and use Autoscoring to pinpoint gaps. Keep your customers’ data safe in the cloud and out of the hands of cybercriminals. Ensure your compliance with the European Union's official privacy regulation. Prepare for the new CMMC certification process to maintain your government contracts. Enjoy Enterprise-class capabilities paired with consumer app. Quickly connect your entire ecosystem with Apptega’s pre-built connectors and open API. -
33
Cloudaware
Cloudaware
Cloudaware is a cloud management platform with such modules as CMDB, Change Management, Cost Management, Compliance Engine, Vulnerability Scanning, Intrusion Detection, Patching, Log Management, and Backup. Cloudaware is designed for enterprises that deploy workloads across multiple cloud providers and on-premises. Cloudaware integrates out-of-the-box with ServiceNow, New Relic, JIRA, Chef, Puppet, Ansible, and over 50 other products. Customers deploy Cloudaware to streamline their cloud-agnostic IT management processes, spending, compliance and security.Starting Price: $0.008/CI/month -
34
ISO Manager
ISO Manager
All-in-one digital command center designed specifically to manage ISO 27001:2013 and ISO 9001:2015, sections 4-10 auditable requirements and all applicable GRC compliance requirements (legal/regulatory and contractual). ISO 27001:2013 and ISO 9001:2015 ISO Manager is the one of simplest ISO management software in the world. Proven in large-scale deployments ISO Manager Cloud SaaS can be used by businesses of all sizes. ISO Manager is based on our proprietary ISO 27001 framework, which is a simple step-by-step process of implementing and managing ISO 27001`s section 4-10 generic requirements. Task management is one of the most tedious requirements of ISO 27001. Our software automatically organizes tasks into a simple calendar-based management system for easy compliance and time management. Everything you need to implement, certify and manage ISO 27001:2013 and ISO 9001:2015. Includes a free ISO 27001 toolkit (MS Word, Excel). -
35
Simplifies data regulation needs, enhances visibility and streamlines monitoring IBM® Guardium® Data Compliance helps organizations to move through regulatory compliance and audit requirements more quickly and easily, safeguarding regulated data wherever it resides. Available in IBM® Guardium® Data Security Center, IBM Guardium Data Compliance can reduce audit prep time for data compliance regulations, provide continuous visibility of data security controls, and solve data compliance and data activity monitoring challenges.
-
36
Optial EHS SmartStart
Optial
Implemented by Fortune 500 organizations in over 50 countries, Optial SmartStart provides advanced IT solutions for Environmental, Health & Safety, Audit, Governance, Risk and Compliance. Equipped with features that include Audit Trail, Environmental, FDA, HIPAA, ISO, OSHA, and Sarbanes-Oxley compliance, the platform also provides a number key solutions. The seamless data import from existing third-party systems allows onboarding business to integrate current configurations easily with the Optial SmartStart solution.Starting Price: $15000.00/year -
37
SISA RA
SISA Information Security
Soaring cyber-attacks emphasize the need for organizations to look forward and see what is coming ahead. A formal Risk Assessment helps entities to disclose vulnerabilities and build a robust security architecture. While assessing risks is highly recommended for organizations to gain insights into the evolving cyber threats, automated risk assessment tools simplify the job for businesses. With the right Risk Assessment tool, organizations can save 70 – 80% of efforts to conduct risk-related activities and concentrate on critical tasks. SISA being a PCI Risk and Compliance expert for more than a decade, identified the challenges faced by organizations in anticipating risks and built SISA Risk Assessor, an intuitive Risk Assessment solution. SISA’s Risk Assessor is the first PCI Risk Assessment tool in the market, built based on world-renowned security methodologies, including NIST, OCTAVE, ISO 27001, and PCI DSS risk assessment guidelines. -
38
Rizkly
Rizkly
Cybersecurity and data privacy compliance is now a continuous process and there’s no turning back. Rizkly is the answer to firms that must meet these growing requirements in an efficient and effective manner to keep growing the business. Rizkly keeps you on top of compliance with a smart platform and expert guidance. Our platform and experts guide and help you achieve timely compliance with EU privacy laws. Protect healthcare data and switch to a faster, more affordable path to privacy protection and cyber hygiene. Get a prioritized PCI compliance action plan and the option to have an expert keep your project on track. Gain from our 20+ years of SOC audit and assessment experience. Move faster with a smart compliance platform. Rizkly is your OSCAL compliance automation platform. Import your existing FedRAMP SSP and say bye to editing Word SSP fatigue. Rizkly is the efficient path to achieving FedRAMP authorization and continuous monitoring. -
39
SecurityMetrics
SecurityMetrics
We keep you current with the changing threat landscape by taking an intelligent approach to cybersecurity. We have the tools, training, and support you need to securely process and handle sensitive data. From payment card data to PII and healthcare records our intelligent tools and thorough, collaborative approach keep you secure and compliant. Testing in the right way helps to make sure that you don't waste time on false positives. We regularly update our scanning tools and techniques to efficiently expose your vulnerabilities. Our tools, technologies and experience simplify the compliance process and remove roadblocks so you can focus on the requirements that relate to your unique business. Your data is your business and you want to make certain it's secure. We provide the tools, training and support you need to be secure. -
40
Enigma Vault
Enigma Vault
Enigma Vault is your PCI level 1 compliant and ISO 27001 certified payment card, data, and file easy button for tokenization and encryption. Encrypting and tokenizing data at the field level is a daunting task. Enigma Vault takes care of all of the heavy liftings for you. Turn your lengthy and costly PCI audit into a simple SAQ. By storing tokens instead of sensitive card data, you greatly mitigate your security risk and PCI scope. Using modern methods and technologies, searching millions of encrypted values takes just milliseconds. Fully managed by us, we built a solution to scale with you and your needs. Enigma Vault encrypts and tokenizes data of all shapes and sizes. Enigma Vault offers true field-level protection; instead of storing sensitive data, you store a token. Enigma Vault provides the following services. Enigma Vault takes the mess out of crypto and PCI compliance. You no longer have to manage and rotate private keys nor deal with complex cryptography. -
41
MetricStream
MetricStream
Reduce losses and risk events with forward-looking risk visibility. Enable a modern and integrated risk management approach with real-time aggregated risk intelligence and their impact on business objectives and investments. Protect brand reputation, lower the cost of compliance, and build regulators and board’s trust. Stay on top of evolving regulatory requirements, proactively manage compliance risks, policies, cases, and controls assessments. Drive risk-aware decisions and accelerate business performance by aligning audits to strategic imperatives, business objectives and risks. Provide timely insights on risks and strengthen collaboration across various functions. Reduce exposure to third-party risks, make superior sourcing decisions. Prevent third-party risk incidents with continuous third-party risk, compliance and performance monitoring. Simplify and streamline entire third-party risk management lifecycle. -
42
Classify360
Congruity360
A single-source Data Governance solution delivering actionable data intelligence to empower strategic decisions around data reduction, compliance, and journey to the cloud. Classify360 enables enterprises to address their ROT (redundant, obsolete, trivial) data, PII, and risk data and apply policies to maintain compliance and to reduce their data sets – leading to smaller footprints and more efficient and compliant cloud migrations. Fully index and create a single view of your organization’s data from varied and growing data sets. Identify data at the source location eliminating the burden, cost, and risk of managing additional copies. Unlock data identification at petabyte scale across all of your on-prem and cloud data sources. -
43
Ignyte Assurance Platform
Ignyte Assurance Platform
Ignyte Assurance Platform is an AI-enabled integrated risk management platform that helps organizations from different industries implement simplified, measurable, and repeatable GRC processes. One of the main objectives of this platform is to ensure that users are able to easily keep up and comply with changing regulations, standards, and guidelines related to cybersecurity. Ignyte Assurance Platform provides users with automated ways of continuously monitoring and assessing how their organization is adhering to the requirements specified under GDPR, HIPAA, PCI-DSS, FedRAMP, FFIEC, FISMA, and PCI-DSS. Security frameworks and regulations are automatically mapped to the internal controls and policies they are implementing. The compliance management platform also offers audit management capabilities that make it easy for users to gather and organize the pieces of information and evidence needed by external auditors. -
44
NetLib Encryptionizer
NetLib Security
Transparent Data Encryption (TDE) for all Editions of SQL Server from Express to Enterprise. No programming required. Developer and OEM friendly: may be easily bundled with SQL Server based applications. Cost effective alternative to upgrading to SQL Server Enterprise. Assists with compliance with various regulations. Protects data and intellectual property. -
45
Koop
Koop
Koop is an AI-powered platform that consolidates compliance, security and insurance workflows into a single system for tech-enabled companies. It supports major frameworks like SOC 2, ISO 27001, HIPAA and GDPR, offering policy templates built by experts, integrations with over 200 systems, and guided audits with vetted U.S.-based auditors. Users can manage contractual requirements (including requirement extraction, evidence management and counter-party status tracking), automate third-party risk workflows (vendor onboarding, outbound requirements, trust tracking) and handle security-questionnaire responses (VSA, SIG, CAIQ) via standardized and custom formats. On the insurance side, Koop enables tech firms to procure lines such as general liability, cyber liability, technology errors & omissions, and management liability, all tied into the compliance and risk platform so that achieving controls helps unlock favourable insurance terms. -
46
ComplyAssistant
ComplyAssistant
ComplyAssistant was founded in 2002 to provide strategic planning and information privacy and security solutions. We are experts in risk assessment, risk mitigation and attestation readiness. Our GRC software is scalable for any size organization and offers unlimited user and location licenses. With over 100 healthcare clients nationwide, we are steadfast advocates for a culture of compliance, where security and compliance are foundational to healthcare operations. -
47
Cetbix GRC & ISMS
Cetbix
In three steps, you can achieve information security self-assessment, ISO 27001, NIST, GDPR, NFC, PCI-DSS, HIPAA, FERPA, and more. Cetbix® ISMS strengthens your certification. Information security management system that is comprehensive, integrated, documents ready and paperless. Cetbix® online SaaS ISMS. ISMS software from Cetbix®. Other features include IT/OT Asset Management, Document Management, Risk Assessment and Management, Scada Inventory, Financial Risk, Software Implementation Automation, Cyber Threat Intelligence Maturity Assessment, and others. More than 190 enterprises worldwide rely on Cetbix® ISMS to efficiently manage information security and ensure ongoing compliance with the Data Protection Regulation and other regulations. -
48
SOCLY.io
SOCLY.io
SOCLY.io is a compliance automation platform designed to help businesses streamline and manage complex regulatory and security requirements by centralizing evidence, documentation, and tasks into a unified system, reducing manual work and errors while improving audit readiness and operational efficiency. It supports major frameworks such as SOC 2, ISO 27001, GDPR, and other standards, automates risk assessments, compliance tracking, and audit workflows, and provides pre-built policy templates and real-time progress monitoring so teams can stay on top of requirements without disrupting daily operations. SOCLY.io integrates with existing tools and systems to pull evidence automatically, simplifies policy creation, and centralizes compliance documentation to cut weeks or months off traditional compliance timelines. -
49
ManageEngine AD360
Zoho
AD360 is an integrated identity and access management (IAM) solution for managing user identities, governing access to resources, enforcing security, and ensuring compliance. From user provisioning, self-service password management, and Active Directory change monitoring, to single sign-on (SSO) for enterprise applications, AD360 helps you perform all your IAM tasks with a simple, easy-to-use interface. AD360 provides all these functionalities for Windows Active Directory, Exchange Servers, and Office 365. With AD360, you can just choose the modules you need and start addressing IAM challenges across on-premises, cloud, and hybrid environments from within a single console. Easily provision, modify, and deprovision accounts and mailboxes for multiple users at once across AD, Exchange servers, Office 365 services, and G Suite from a single console. Use customizable user creation templates and import data from CSV to bulk provision user accounts.Starting Price: $595.00 / year -
50
SentinelTrails
LogSentinel
Our blockchain-based technology does not allow any audit trail changes or deletion even by privileged users. Meet the audit trail requirements of many standards and regulations: GDPR, PSD2, PCI-DSS, ISO 27001, HIPAA, SOX, etc. Real-time detailed analysis of everything that happens, as well as AI-driven anomaly detection will prevent any fraud attempts. Straightforward agent or agentless integration of all existing systems, as well as a simple RESTful API. Have a unified command centre for real-time control and insight across all systems and users. Demonstrate compliance at reduced operational cost and minimise effort on audit, forensics and fraud detection. Never again worry about the integrity of your critical data – we use blockchain so no one can ever tamper with it.
