A neutral map of the GRC platform market
144 governance, risk, and compliance software platforms, each in one primary category by what the product mainly does: from compliance automation and enterprise GRC suites to third-party risk and financial-crime tooling. No pay-for-rank.
Every listed platform by name, on one page: see the market map.
By what they do
View all- Compliance Automation28Automated evidence collection and continuous monitoring for SOC 2, ISO 27001, and similar frameworks.
- Enterprise GRC Suites22Integrated enterprise platforms spanning risk, compliance, audit, and policy management.
- Integrated Risk Management17Enterprise and operational risk, risk registers, and risk quantification.
- Third-Party Risk15Vendor, supplier, and third-party risk assessment and monitoring.
- Financial Crime & AML14Anti-money-laundering, KYC, sanctions screening, and financial-services compliance.
- Privacy & Data Governance13Privacy program management, data mapping, and consent.
- EHS, Quality & ESG12Environment, health, safety, quality, and ESG compliance.
- Cyber Risk & CCM8Cyber risk quantification and continuous control monitoring.
- Audit Management6Internal audit, SOX, and controls testing.
- Policy, Training & Awareness6Policy lifecycle management, compliance training, and security awareness.
- AI Governance3Governance, risk, and compliance for AI systems: ISO 42001, the EU AI Act, and NIST AI RMF.
For buyers
One primary category per platform, assigned by main product focus. Compare compliance-automation tools against full enterprise GRC suites, or integrated risk management against third-party risk, without wading through positioning copy.
For platforms
Not listed yet? Listing on request is paid: one payment, a review against the bar, and publication within 48 hours of payment or a full refund. No one can buy rank or a better category.
For AI agents
The whole catalog is machine-readable: search API, full JSON dump, llms.txt, and an MCP server. Built to be quoted by agents doing GRC platform research.