Compliance management Category leader

Drata

Compliance automation and trust management platform

Visit Drata

Drata automates evidence collection and continuous control monitoring across frameworks including SOC 2, ISO 27001, HIPAA and PCI DSS. It adds a trust center, AI-drafted questionnaire answers and third-party risk management.

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register (not listed)
  • Auditor access (not listed)
  • Continuous control monitoring

Also includes

  • Vendor risk management
  • Security questionnaire answers
  • Trust center
  • Cloud and HR integrations
  • Custom frameworks
  • Cross-framework mapping
  • AI-assisted drafting

From the vendor's own site. Not yet verified by SoftScout. A missing item may just mean we haven't confirmed it.

Compliance management Rising

Comp AI

Contact sales 2–500 people

Open-source, AI-driven compliance automation

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Continuous control monitoring

Compliance management Rising

Oneleet

Contact sales 2–500 people

Security-first compliance platform with built-in pen testing

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Continuous control monitoring

Compliance management Category leader

Secureframe

Contact sales 2–500 people

Compliance automation for SOC 2, ISO 27001, HIPAA and CMMC

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Continuous control monitoring