Compliance management Category leader

Secureframe

Compliance automation for SOC 2, ISO 27001, HIPAA and CMMC

Visit Secureframe

Secureframe automates tests and evidence collection, monitors controls continuously and manages risk, personnel and vendors. It offers Fundamentals and Complete packages plus a Defense package for CMMC and CUI.

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Auditor access (not listed)
  • Continuous control monitoring

Also includes

  • Vendor risk management
  • Security questionnaire answers
  • Access reviews
  • Trust center
  • Custom frameworks
  • Asset inventory

From the vendor's own site. Not yet verified by SoftScout. A missing item may just mean we haven't confirmed it.

Compliance management Rising

Comp AI

Contact sales 2–500 people

Open-source, AI-driven compliance automation

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Continuous control monitoring

Compliance management Category leader

Drata

Contact sales 2–500+ people

Compliance automation and trust management platform

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Continuous control monitoring

Compliance management Rising

Oneleet

Contact sales 2–500 people

Security-first compliance platform with built-in pen testing

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Continuous control monitoring