Vendor Directory
Explore GRC platform and regulatory change management vendors.
Alter Domus
Tailored Insights for Transformative Investment Strategies
Risk Modeler is presented as a platform for data analytics and enhanced model risk management offered by Alter Domus. The record describes a technology suite and standalone data solutions alongside services and technology solutions tailored for alternative investments and asset managers. Alter Domus positions its offering within private equity fund services, describing tailor-made solutions, the ability to build a model to fit specific needs, and support across fund operations, reporting and risk reduction. The company states its services aim to reduce operational burden, strengthen transparency and minimize risk for PE, VC and fund-of-funds clients, combining specialist expertise with modern technology platforms.
Stern Security
Quantify risks, optimize security investments
Stern Security's Velocity platform provides data-driven cyber risk quantification, enabling organizations to accurately assess risk from both internal and third-party sources. This platform helps security teams optimize costs and demonstrate ROI by tracking improvements in security posture. Stern Security also specializes in penetration testing and virtual Chief Information Security Officer (vCISO) services, further enhancing organizations' security strategies. Through a comprehensive approach, Stern Security focuses on empowering businesses to secure their operations effectively.
Ostrich Cyber-Risk
Navigate Cyber Risks with Precision and Insight
Ostrich Cyber-Risk provides a comprehensive cyber risk management software known as Birdseye™ that enables businesses to identify and mitigate their substantial cyber risks. The platform offers a unique combination of qualitative analysis and quantitative risk simulation, making it a cost-effective alternative to traditional assessments. Users can prioritize security projects, quantify risk through unlimited scenarios, and benchmark their cyber risk programs against industry peers. Additionally, Birdseye integrates NIST CSF 2.0 Assessments for a streamlined evaluation process, enhancing the overall cybersecurity risk analysis framework.
BCT DIGITAL
Transforming Risk into Strategic Advantage
BCT Digital offers the rt360 risk management product suite, positioned as an AI-based set of solutions for Credit Risk, Model Risk, GRC, and ESG monitoring. The rt360 Model Risk Management (MRM) product is described as helping to manage the lifecycle of models used in a bank. The company presents rt360 as drawing on AI/ML models, data-driven algorithms, and predictive analytics. BCT Digital positions its products for banking and energy verticals and describes the suite as a next-generation risk management offering for large enterprises. The site emphasizes experience in fintech and a focus on risk management product development and deployment.
Monaco Risk Analytics Inc
Transforming Cyber Defense into Strategic Insights
Monaco Risk offers a patented control analytics model called the Cyber Defense Graph and Cyber Risk Advisory Services that calculate and visualize each control's baseline and projected contribution to overall cyber defense. The offering analyzes control efficacy and shows how technical metrics translate into reduced probability of material financial impact. Monaco Risk provides a Risk-Informed Defense process, prebuilt templates for loss event types, and default values for control efficacy, coverage, and governance that can be overridden for individual business requirements. The advisory service is positioned to help CISOs collaborate with business leaders on cybersecurity budgets and to reduce analysis time from months to hours by prioritizing controls and visualizing aggregate control portfolio efficacy.
C-Risk
Transforming Cyber Risk into Financial Clarity
C-Risk delivers cyber risk quantification (CRQ) through a combination of advisory services, managed services, software, and training. The company describes a data-driven approach to model, measure, and manage digital and technology risk, producing in-depth risk assessments that express risk in financial terms by measuring the probability and range of potential loss events. C-Risk positions its CRQ approach to support regulatory reporting and oversight requirements, citing frameworks such as DORA, NIS 2, IDW PS340, and the SEC. The offering is presented for organisations seeking to transform cyber and technology risk management and to establish actionable timelines based on risk frequency and cost.
RiskFlag
Navigate Risks with Confidence and Precision
RiskFlag is a cloud-based risk assessment and safety assurance platform designed for professionals making high-stakes decisions. The software equips users with integrated modules for risk management, including features for assessment, task management, and reporting. It facilitates the creation of digital safety cases, Bow Ties, and customizable risk registers, allowing organizations to assess risks uniquely in their operational context. With strong support from a tech team, RiskFlag emphasizes clear and defensible risk reasoning, making it essential for those overseeing critical operations and regulatory compliance.
FAIR Institute
Quantifying Cyber Risk for Informed Decisions
The FAIR Institute is dedicated to sharing and advancing standards and practices for measuring, monitoring, managing, and mitigating cyber risk. They focus on risk quantification and provide resources around the FAIR (Factor Analysis of Information Risk) framework. The institute aims to enhance the discipline of cyber and operational risk management through education, research, and collaboration, promoting a systematic approach to understand and communicate risk in a business context. They also provide metrics and analytics to improve organizational risk posture.
Culinda Inc.,
Transforming Cyber Risk into Strategic Insight
Culinda offers a Cyber Asset Risk Management (CARM) platform designed to help businesses manage risk for thousands of on‑premise and external cyber assets. The platform can discover cyber assets including shadow IT, discover threats and vulnerabilities and prioritize them based on risk, and provide network visibility and lateral movement of threats. Culinda describes automated mediation via integration with network access control solutions and firewalls. Capabilities include third‑party risk management, security rating, dark web monitoring and continuous monitoring of security posture across the surface, dark and deep web. The product also claims to identify potential financial loss to the business using statistical modeling.
Dataminr
Instant insights for critical decision-making
Dataminr is an AI-powered platform that provides real-time event, threat, and risk intelligence. Trusted by over 100 U.S. government agencies and major Fortune 50 companies, Dataminr enables faster and more informed decision-making to protect critical interests. Its capabilities span from military operations to corporate governance, ensuring that users receive timely and relevant intelligence, which is essential for navigating various risk scenarios in both public and private sectors.
National Association of State Chief Information Officers (NASCIO)
Transforming risk into strategic advantage
NASCIO focuses on advancing government excellence through collaborative partnerships and technology leadership. They provide an enterprise software tool that implements a FAIR-based risk quantification process designed to transform risk into reward. This innovative approach helps businesses relay their risk management strategies effectively and targets state CIOs, reflecting their priorities and challenges. NASCIO also offers member benefits, access to resources, and facilitates engagement within the state IT community.
Antea
Transforming asset insights into actionable intelligence
Antea Web is a complete asset integrity management software solution, designed for real-time access to asset intelligence. It features robust risk assessment capabilities through customized Risk-Based Inspection (RBI) methodologies aimed at preventing risks and optimizing maintenance costs. The software employs 3D digital twin technology for powerful visualization of asset conditions and risk levels. Configurable and scalable, Antea Web serves owner operators in process industries worldwide, providing tailored solutions that integrate diverse asset data into a centralized platform. Supported by expert resources throughout the digital transformation journey, Antea offers unparalleled service to ensure successful implementation and sustainable operations.
Beakon
Simplifying risk management for every industry
Beakon provides high-performance software that manages safety, risk, and compliance in one simple interface. Their solutions are designed for businesses of all sizes and can be tailored to meet the unique needs of different industries such as food and beverage, mining, and equipment handling. Beakon aims to identify, evaluate, and report on risk-related concerns, streamlining the risk management process. They focus on delivering functionality that is both comprehensive and user-friendly, making it easier for organizations to manage their operational risks effectively.
Phoenix Security
Secure your cloud, conquer vulnerabilities
Phoenix Security provides a robust Cloud Platform designed to manage vulnerabilities across software, infrastructure, and cloud environments. By unifying application security and cloud security, the platform enhances risk-based exposure and vulnerability management using their proprietary Phoenix Cybersecurity framework. This approach not only aligns security teams with business executives but also promotes a DevSecOps culture, enabling proactive risk management. The solution has garnered recognition, being nominated for awards such as Risk Management Solution of the Year, evidencing its impact within the cybersecurity space.
Numerix
Precision analytics for informed trading decisions
Numerix provides quantitative analytics, pricing, and risk solutions for capital markets. Its offerings include trading and risk management software and pricing and risk libraries for OTC and exchange‑traded derivatives, fixed income securities, and structured finance products available in Excel and SDKs for multiple languages. Platforms support valuations, market risk, counterparty risk, XVAs, OTC trading, and regulatory reporting. The company also references model validation tools and a cloud-based IDE connected to pricing and risk analytics, data, Python libraries, and APIs. Numerix describes its technology as embeddable into client systems or usable in client engagements to deliver accurate analytics and transparency for quants and operations teams.
MyRISK
Transforming cyber risk into strategic advantage
MyRISK helps organizations cut costs and reduce cyber risk with AI-driven risk management solutions. It empowers cyber security leaders to unify fragmented systems and automate governance processes. The platform transforms cyber risk management by integrating AI and intelligent workflows, allowing for streamlined processes and significant cost reductions. Designed for mid-sized enterprises, MyRISK provides affordable GRC solutions that simplify compliance while promoting scalability and resilience. The modular framework evolves with the organization, breaking down data silos and automating workflows, evidence collection, and reporting, thereby enhancing overall risk and compliance functions.
