third-party risk management

Accorian is a cybersecurity and compliance firm based in New Jersey. It delivers security and compliance services including penetration testing, third-party risk management (TPRM), compliance services, AI risk management, and vCISO advisory, supported by its AI-enabled unified platform GORICO. The company states it is one of 10 accredited organizations offering both audit and testing services on a unified platform.

AI Risk Managementauditpenetration testingsecurity compliancesecurity consultingstaffingtestingvCISO advisory

Agrada is a boutique data privacy and cybersecurity consulting firm that tailors solutions to each client's business objectives rather than offering one-size-fits-all approaches. It offers flexible engagement models including Advisory Services, Staff Augmentation, and Managed Services, and was founded to bridge the gap between large firms' expertise and boutique consultancy care.

Advisory Servicescompliance auditscybersecurity consultingData MappingData Privacy Consultingmanaged servicesstaff augmentation

Anchor Technologies provides cybersecurity services focused on risk management and breach prevention. Since 2002, the company has helped organizations identify, remediate, and monitor cyber risk through advisory, integration, technology procurement, and risk management services, including assessments, penetration testing, compliance, and incident response.

compliance auditsendpoint detection and responsefirewall implementationidentity and access managementincident responsemanaged detection and responsenetwork design and deploymentpenetration testingRisk assessmentsecurity planningsecurity technology integration

Aravo provides purpose-built third-party risk management (TPRM) software with AI embedded natively into its Intelligence First™ Platform. The platform supports the full lifecycle of third-party risk management, including vendor nomination and intake, onboarding, due diligence, continuous monitoring, contracts management, performance management, issue management and remediation, and termination and offboarding. Aravo is headquartered in San Francisco with offices and partners across the US, Europe, and Asia.

AI-powered SaaS platformcontinuous monitoringcontracts managementintegrationsissue management and remediationno-code configurationrisk scoringVendor due diligencevendor onboardingvendor performance management

Archer Technologies LLC provides governance, risk, and compliance (GRC) software. For 25 years Archer has unified compliance, risk quantification, and intelligence in a single platform, serving 1,500+ organizations including half the Fortune 500 and 37 of the top 50 global banks. Its Archer Evolv product uses compliance-trained AI to monitor regulatory sources and connect obligations, controls, policies, and evidence.

AI-powered regulatory change monitoringaudit trail and evidence managementcompliance-trained AIcontrol testing and automationincident managementoperational resiliencerisk quantificationSaaS and on-premises deploymentscenario analysis

CISOnow provides CISO advisory services, also known as Fractional CISO or vCISO services, designed for small and medium-sized businesses. Its CISO advisors are experienced former CISOs who work alongside client teams to provide cybersecurity leadership, risk management, strategic guidance, and cybersecurity oversight on a flexible schedule.

AI governance and securityaudit readiness and evidence collectionCISO advisorycompliance support (SOC 1, SOC 2, PCI, HITRUST, HIPAA, GDPR, CCPA)cybersecurity assessmentsdata governancemanaged GRCpolicy developmentrisk managementsecurity program assessments

CompCiti Business Solutions, Inc., founded in 1996, provides managed IT services, cybersecurity, networking, cloud computing, and digital marketing solutions to small and large businesses, government agencies, schools, and other organizations throughout New York City. The company offers 24/7 emergency service and in-house technicians who install, troubleshoot, repair, and maintain business IT systems from simple routers to complex enterprise solutions.

cloud computingcompliance auditscybersecuritydisaster recovery and business continuityhardware maintenanceIT audits and risk assessmentManaged IT servicesnetwork design and installationSEOsocial media managementVoIP installationweb and mobile app developmentWeb design and development

Case IQ provides end-to-end compliance and case management solutions, including investigative case management, whistleblower hotlines with anonymous reporting, compliance monitoring, third-party risk oversight, and compliance approval and disclosure workflows. Its AI-powered tools help ethics, compliance, HR, security, fraud, and investigations teams manage, investigate, and proactively detect risk. The company cites 25+ years of industry knowledge and serves mid-sized to global enterprises.

AI-powered insightscase managementcompliance monitoringintegrations (HRIS, SSO, CRM/ERP, ticketing)reporting and analyticswhistleblower hotlineworkflow automation

Digital 360 Secure is a Service-Disabled Veteran-Owned Business located in Brookville, PA, providing Virtual Chief Information Security Officer (vCISO) services. It helps organizations build, manage, and mature security programs using frameworks such as NIST CSF 2.0, NIST 800-53, CJIS Security Policy, ISO standards, and PCI, backed by more than 30 years of cybersecurity and IT leadership experience.

compliance alignment (NIST CSF 2.0, NIST 800-53, CJIS, HIPAA, PCI, ISO)incident response planningIT vendor oversightpolicy creation and governancerisk management and mitigation planningsecurity awareness and trainingtabletop exercisesvCISO leadershipvulnerability management tracking

DigitalXForce provides an AI-powered Enterprise Trust, Risk, Security and Compliance Management (TRiSCM) platform that converges automated GRC with security posture management (X-SPM) into one real-time system. The platform is built from 15 modules sharing one data layer, 50+ compliance frameworks and 250+ technology integrations, and delivers Continuous Control Assurance, risk quantification and digital trust. It was named a Leader in IDC MarketScape assessments for GRC (2025) and Third-Party Risk Management (2026).

250+ technology integrationsAI risk governance and assessmentsAutomated GRCBusiness continuity and operational resilienceContinuous Control AssuranceContinuous Control MonitoringCyber risk quantificationCybersecurity Mesh ArchitectureExtended Security Posture Management (X-SPM)

Exiger is a supply chain AI company and provider of supply chain technology to the U.S. Government. Its 1Exiger.AI platform unifies supplier, product, part, component, and risk data to help organizations map and orchestrate compliant and resilient physical and software supply chains. Founded in 2013, Exiger has more than 850 employees in 10 global offices and serves 550+ global customers, including 150 Fortune 500 companies and 60+ government and Defense Industrial Base organizations.

agentic AIcompliance automationdue diligenceentity resolutionNLPprocurement automationSupply Chain Risk Management

Fortified Health Security provides tailored cybersecurity solutions for healthcare organizations, ensuring patient data protection and regulatory compliance. It is an MSSP partner for healthcare systems in the U.S. and across the globe, offering Advisory and Threat Defense services with a 24/7 Threat Defense center and dedicated security analysts.

24/7 SOCAttack surface monitoringincident responseManaged connected medical device securityManaged endpoint detection and responseManaged phishing servicesManaged security awareness trainingmanaged SIEMManaged XDRpenetration testingred teamingsecurity risk assessmentsvirtual CISO servicesVulnerability threat management

Fortress Information Security is an AI-powered risk management company defending critical infrastructure and government agencies against cyber threats. It provides a platform for cyber supply chain risk management (C-SCRM), third-party risk management, vulnerability management, software supply chain security, and GRC/CIP compliance, combining AI agents with human analyst validation. It serves eight of the top ten U.S. investor-owned utilities and multiple U.S. military branches.

AI-powered risk managementexposure managementforward deployed engineersGRC and NERC CIP compliancemanaged servicesSBOM and HBOM analysisSupply Chain Risk Managementvulnerability management

Fusion Risk Management provides an Enterprise Resilience Decision System, a software platform that connects critical services to the processes, technology, suppliers, facilities, and teams they depend on. It helps organizations identify exposure, model impact, and prioritize action before and during disruption. The company also offers consulting, customer success, training, and support services.

Business continuity planningconsultingcrisis and incident managemententerprise resilience softwareIT disaster recovery planningoperational resilienceoperational risk managementscenario testingSoftware Implementationtraining