GRC Automation Security Tools

Vanta was first to market and heavily relied on automating endpoint evidence. They have since rapidly expanded and deserve to be considered right next to Drata as a leader in the space.

Drata had the advantage of starting after Vanta, and they quickly built a greater depth of automation. They were less focused on their endpoint solution, and more focused on powerful evidence automation. That said, these tools have struggled providing the depth needed for enterprise risk teams.

Zania is a really cool product. They ingest audit reports of various types and format them into controls with suggested feedback, confidence, and direct attestation of where the evidence came from. An extremely helpful tool, especially for third party risk assessments.

Acquired by Drata. Safebase is a simple way to host a public security page with your compliance information and NDA document request workflows.

Conveyor is a platform for managing vendor questionnaires and trust center workflows

SecureFrame is a great third choice to Vanta and Drata, but lacks the same depth and breadth of features.

Akitra has built an automation platform focused on in depth automation creation. They've done the hard work of building various cloud reports that can be attached to various frameworks, creating a more realistic automation approach for enterprises.