Average Ratings 0 Ratings
Average Ratings 0 Ratings
Similar Products
-
RealCISORealCISO is a compliance intelligence platform for two audiences: MSPs and MSSPs managing security across multiple clients, and enterprise teams running compliance in-house. MSPs, MSSPs, and security consultants use it to run compliance assessments, manage cyber risk, track remediation, and report to boards — all in one place. Assessments map directly to NIST CSF, SOC 2, NIST 800-171, HIPAA, CIS Controls, CMMC, and 30+ other frameworks. Instead of months of spreadsheet work, clients get a clear picture of where they stand and what to fix — in days. Over 3,000 security providers rely on RealCISO to deliver vCISO services at scale. Built by practitioners. Founded by Brian Haugli — former DoD, former VP & CSO at The Hanover Insurance Group, CISSP, and co-author of the NIST CSF book published by Wiley.
-
Predict360Predict360, by 360factors, is a risk and compliance management and intelligence platform that automates workflows and enhances reporting for banks, credit unions, financial services organizations, and insurance companies. The SaaS platform integrates regulations and obligations, compliance management, risks, controls, KRIs, audits and assessments, policies and procedures, and training in a single cloud-based SaaS platform and delivers robust analytics and insights that empower customers to predict risks and streamline compliance. Happy with your current GRC but lacking a true analytics and BI tool for intuitive executive and Board reports? Ask about Lumify360 from 360factors - a predictive analytics platform that can work alongside any GRC. Keep your process management workflows intact while providing stakeholders with the timely reports and dashboards they need.
-
NINJIONINJIO is an all-in-one cybersecurity awareness training solution that lowers human-based cybersecurity risk through engaging training, personalized testing, and insightful reporting. This multi-pronged approach to training focuses on the latest attack vectors to build employee knowledge and the behavioral science behind human engineering to sharpen users’ intuition. Our proprietary NINJIO Risk Algorithm™ identifies users’ social engineering vulnerabilities based on phishing simulation data and informs content delivery to provide a personalized experience that changes individual behavior. With NINJIO you get: - NINJIO AWARE attack vector-based training that engages viewers with Hollywood style, micro learning episodes based on real hacks. - NINJIO PHISH3D simulated phishing identifies the specific social engineering tricks most likely to fool users in your organization. - NINJIO SENSE is our new behavioral science-based training course that shows employees what it “feels like” when hackers are trying to manipulate them.
-
SOCRadar Extended Threat IntelligenceSOCRadar Extended Threat Intelligence is a holistic platform designed from the ground up to proactively detect and assess cyber threats, providing actionable insights with contextual relevance. Organizations increasingly require enhanced visibility into their publicly accessible assets and the vulnerabilities associated with them. Relying solely on External Attack Surface Management (EASM) solutions is inadequate for mitigating cyber risks; instead, these technologies should form part of a comprehensive enterprise vulnerability management framework. Companies are actively pursuing protection for their digital assets in every potential exposure area. The conventional focus on social media and the dark web no longer suffices, as threat actors continuously expand their methods of attack. Therefore, effective monitoring across diverse environments, including cloud storage and the dark web, is essential for empowering security teams. Additionally, for a thorough approach to Digital Risk Protection, it is crucial to incorporate services such as site takedown and automated remediation. This multifaceted strategy ensures that organizations remain resilient against the evolving landscape of cyber threats.
-
HyperproofCompliance work eats engineering time. Hyperproof exists to give that time back by automating the parts of GRC that don't need a human: pulling evidence out of GitHub, Jira, ServiceNow, Snyk, and cloud storage on a schedule, running recurring tests against high-frequency controls, and kicking off a task automatically the moment something fails instead of waiting for the next audit cycle to find out. Under the hood, Hyperproof maps one control to 160+ frameworks (SOC 2, ISO 27001, HIPAA, NIST, and others), so a control tested once can satisfy several standards instead of forcing teams to rebuild the same work per framework. AI agents handle the first pass on evidence review and gap-flagging, leaving humans to make the actual judgment calls rather than hunting down documentation. Teams using it report cutting audit prep by roughly 350 hours a year, a 66% drop in duplicate controls, and about $150K saved annually on control orchestration. It also scales to messier org charts, with the ability to scope controls by business unit or entity instead of flattening everything into one program. Built in 2018 out of the Seattle area, Hyperproof is used by engineering and security-heavy orgs like Reddit, Fortinet, Appian, and Outreach that are tired of treating compliance as a manual, spreadsheet and email process and want it to run more like the rest of their infrastructure: automated, monitored, and auditable.
-
ThreatLockerThreatLocker is a Zero Trust security platform that stops cyber threats by allowing only approved applications and activity to run. It removes standing admin rights, enforces least privilege, and gives organizations precise control over software behavior. With capabilities like application control, ringfencing, and device and storage restrictions, it prevents ransomware, zero day exploits, and unauthorized actions before they can execute. Purpose built for IT and security teams, ThreatLocker offers centralized management and full visibility across endpoints, users, and applications. It helps shrink the attack surface, restrict lateral movement, and meet compliance requirements with detailed auditing. Quick to deploy and easy to manage, the platform includes a large maintained application library and simplified approval workflows, enabling stronger security with less operational burden while keeping the business running smoothly.
-
EmtrainOur online training (via our LXP or xAPI to your LMS) provides online training employees actually appreciate plus skills assessments and risk benchmarking. Compliance courses for Preventing Workplace Harassment, Cybersecurity, Global Data Privacy, AI Governance, and more. Content is written by lawyers with decades of expertise preventing workplace harassment & motivating business compliance. Our flagship anti-harassment courses meet all relevant laws (CA, NY, IL, UK, AUS, CAN, IND, MEX, etc.) Emtrain courses include binge-worthy workplace video, interactive scenarios, skill building techniques, reflection questions, completion certificates, and litigation-ready reports. 100+ microlessons for continued learning OR to remediate disrespectful or non-compliant behaviors. Clients include Cisco, Degreed, Genentech, Glassdoor, Google, Instacart, NPR, Whirlpool. Partners: Workday Cloud Connect; Udemy Business; Ninjio Don't just check the compliance box. Your co-workers deserve more!
-
D&B Risk AnalyticsGlobally, teams in risk, procurement, and compliance are under pressure to manage geopolitical risks and business risks. Third-party risks are impacted by the complexity of domestic and international businesses, as well as complex and diverse regulations. It is crucial that companies proactively manage third-party relationships. This cutting-edge platform, powered by D&B Data Cloud's 520M+ Global Business Records with 2B+ annual updates for third-party risks, is an AI-powered solution that mitigates and monitors counterparty risk on a continual basis. D&B Risk Analytics uses best-in class risk data, including alerts for high-risk purchases and match points of more than a billion. This helps to drive informed decisions. Intelligent workflows allow for quick and thorough screening. Receive alerts on key business indicators.
-
GoAnywhere MFTGoAnywhere MFT offers secure file transfer for businesses. GoAnywhere MFT software can be deployed on-premise, in cloud or hybrid environments. It allows organizations to securely exchange data between employees, customers, trading partners, and systems. GoAnywhere MFT won the Cybersecurity Excellence Award in Secure File Transfer.
-
BrandMailBrandMail®, created by BrandQuantum, is an innovative software tool that integrates seamlessly with Microsoft Outlook, enabling all employees within the organization to automatically generate emails that consistently reflect the brand through an easy-to-use toolbar that grants access to brand guidelines and the most current pre-approved materials. With this solution, email signatures are crafted according to your branding requirements, ensuring a uniform appearance regardless of the device or platform used to view them. These signatures are secure and managed from a central location, providing peace of mind regarding their integrity. Notably, users can view their signatures, banners, and surveys when composing, replying to, or forwarding emails. Unlike other solutions, BrandMail does not redirect emails through external servers nor does it modify the rules within your exchange environment, functioning entirely within Microsoft Outlook. By utilizing BrandMail, organizations can turn every email into a branding opportunity while also reducing the security vulnerabilities linked to the manipulation of HTML signatures, thereby enhancing both brand consistency and cybersecurity. This not only streamlines communication but also reinforces the brand identity across all employee interactions.
Description
Quantum is an innovative platform for cyber risk quantification (CRQ) that offers a range of functionalities and services aimed at helping organizations interpret cyber risk in terms of its impact on business operations. Tailored for CISOs, Chief Risk Officers, and board members, Quantum empowers users to gain insight into the effectiveness of their cybersecurity initiatives while evaluating the potential benefits of future investments aimed at risk reduction. This platform also facilitates the development of robust risk transfer strategies, allowing companies to secure more advantageous terms for their cyber insurance policies. Users can leverage the security control ROI calculator to gain clarity on the financial advantages associated with enhancing their cybersecurity measures. By quantifying cyber risk in financial terms, Quantum enhances the decision-making capabilities of boards and C-Suites, enabling them to prioritize and justify cybersecurity expenditures based on their potential business impacts and risk mitigation outcomes. Furthermore, the platform allows organizations to evaluate the ROI of their cybersecurity efforts and conduct stress tests based on various risk mitigation strategies, ultimately leading to more effective resource allocation and strategic planning. With Quantum, businesses are equipped to proactively manage cyber risks while aligning their cybersecurity investments with overarching business goals.
Description
The surge in cyber-attacks highlights the urgency for organizations to proactively anticipate future threats. Conducting a formal Risk Assessment is crucial for organizations to identify weaknesses and develop a strong security framework. While evaluating risks is essential for understanding the changing landscape of cyber threats, automated risk assessment tools can streamline this process for companies. Utilizing an effective Risk Assessment tool allows organizations to reduce the time spent on risk management activities by as much as 70 to 80%, enabling them to focus on more critical priorities. SISA, which has been a leader in PCI Risk and Compliance for over a decade, recognized the difficulties organizations face in predicting risks and developed the SISA Risk Assessor, an intuitive solution for Risk Assessment. Notably, SISA’s Risk Assessor is the first PCI Risk Assessment tool available in the market, designed using globally recognized security frameworks such as NIST, OCTAVE, ISO 27001, and PCI DSS risk assessment standards. This innovative tool not only simplifies risk evaluation but also empowers organizations to enhance their overall cybersecurity posture.
API Access
Has API
No
API Access
Has API
No
Integrations
No details available.
Integrations
No details available.
Pricing Details
No price information available.
Free Trial
No
Free Version
Yes
Pricing Details
No price information available.
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
No
Linux
No
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
Yes
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Kovrr
Founded
2017
Country
Israel
Website
www.kovrr.com
Vendor Details
Company Name
SISA Information Security
Founded
2003
Country
India
Website
sisainfosec.com
Product Features
Product Features
Compliance
Archiving & Retention
Yes
Artificial Intelligence (AI)
No
Audit Management
Yes
Compliance Tracking
No
Controls Testing
Yes
Environmental Compliance
No
FDA Compliance
No
HIPAA Compliance
No
ISO Compliance
Yes
Incident Management
No
OSHA Compliance
No
Risk Management
Yes
Sarbanes-Oxley Compliance
No
Surveys & Feedback
No
Version Control
Yes
Workflow / Process Automation
No
Cybersecurity
AI / Machine Learning
No
Behavioral Analytics
No
Endpoint Management
No
IOC Verification
No
Incident Management
No
Tokenization
No
Vulnerability Scanning
No
Whitelisting / Blacklisting
No
PCI Compliance
Access Control
No
Compliance Reporting
No
Exceptions Management
No
File Integrity Monitoring
No
Intrusion Detection System
No
Log Management
No
PCI Assessment
No
Patch Management
No
Policy Management
No
