{ "meta": { "name": "Agent Index by Heritage Services", "version": "0.1.0", "generated": "2026-10-15", "license": "CC-BY-4.0", "citation": "Agent Index by Heritage Services (https://agentindex.heritageservices.online). Dataset version 0.1.0.", "organization": { "name": "Heritage Services", "legal_name": "Heritage Services", "url": "https://agentindex.heritageservices.online", "email": "sales@heritageservices.online", "gstin": "27ACQPA3590B1ZS", "udyam": "UDYAM-MH-33-0712021" } }, "agents": [ { "slug": "vanta", "name": "Vanta", "vendor": "Vanta Inc.", "url": "https://www.vanta.com/", "category": "compliance", "categories": [ "compliance", "security" ], "summary": "Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.", "description": "Vanta helps organizations automate compliance programs across many frameworks. It collects evidence from integrations, maps controls, drafts policies, monitors continuously, and automates security questionnaire answers. Positioning includes an agentic trust platform with Trust Center modules.", "pricing": "Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1\u201320 employees (12-month contracts); modules priced separately.", "pricing_model": "annual-contract", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "PCI DSS", "GDPR", "CMMC", "NIST", "FedRAMP" ], "tasks": [ "evidence-collection", "control-monitoring", "questionnaire-automation", "policy-management", "trust-center" ], "india_relevance": "", "featured": false, "source_url": "https://www.vanta.com/pricing", "sources": [ "https://www.vanta.com/", "https://www.vanta.com/pricing", "https://www.vanta.com/products/additional-frameworks", "https://aws.amazon.com/marketplace/pp/prodview-5ophamrbfxt44" ], "last_checked": "2026-10-15" }, { "slug": "drata", "name": "Drata", "vendor": "Drata", "url": "https://drata.com/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.", "description": "Drata automates SOC 2, ISO 27001, HIPAA and other compliance workflows with integrations, continuous monitoring, risk management, and AI features for questionnaires and vendor document retrieval. Public pricing pages are commonly quote-based; AWS Marketplace listings publish starting package prices.", "pricing": "Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1\u201350 employees (third-party census of marketplace listing).", "pricing_model": "annual-contract", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "PCI DSS", "NIST" ], "tasks": [ "evidence-collection", "control-monitoring", "questionnaire-automation", "vendor-risk" ], "india_relevance": "", "featured": false, "source_url": "https://drata.com/", "sources": [ "https://drata.com/", "https://drata.com/platform" ], "last_checked": "2026-10-15" }, { "slug": "sprinto", "name": "Sprinto", "vendor": "Sprinto", "url": "https://sprinto.com/", "category": "compliance", "categories": [ "compliance" ], "summary": "Autonomous compliance platform aimed at SaaS and growth-stage teams, with AI agents for mapping obligations, gathering evidence, and monitoring controls.", "description": "Sprinto positions itself as an autonomous compliance platform with integrations across cloud, identity, and security systems. It supports a large framework library (vendor claims 200+) including SOC 2, ISO 27001, HIPAA, GDPR and others. AWS Marketplace publishes a Starter Platform plus framework add-on pricing.", "pricing": "AWS Marketplace: Starter Platform $7,500/year (up to 100 employees) plus first compliance framework from $2,000/year (combined entry often cited as $9,500/year).", "pricing_model": "annual-contract", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "PCI DSS", "ISO 42001" ], "tasks": [ "evidence-collection", "control-monitoring", "policy-management" ], "india_relevance": "India-founded vendor; commonly used by India and global SaaS teams pursuing SOC 2 / ISO 27001.", "featured": false, "source_url": "https://sprinto.com/", "sources": [ "https://sprinto.com/", "https://sprinto.com/integrations" ], "last_checked": "2026-10-15" }, { "slug": "scytale", "name": "Scytale", "vendor": "Scytale", "url": "https://scytale.ai/", "category": "compliance", "categories": [ "compliance", "security" ], "summary": "AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles.", "description": "Scytale publishes Build / Scale / Enterprise platform packages and consulting bundles (LaunchReady, StayReady, ComplianceShield). Agentic features include evidence review, gap scanning, vendor intel, and questionnaire automation. Framework coverage includes SOC 2, ISO 27001, HIPAA, GDPR, SOX ITGC and ISO 42001 among others (vendor materials).", "pricing": "Quote-based packages (Build Starter, Build DFY, Build Stronger; Scale; Enterprise). Dollar amounts not published on the public pricing page.", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "SOX ITGC", "ISO 42001" ], "tasks": [ "evidence-collection", "gap-analysis", "questionnaire-automation", "vendor-risk", "pen-test-management" ], "india_relevance": "", "featured": false, "source_url": "https://scytale.ai/pricing/", "sources": [ "https://scytale.ai/", "https://scytale.ai/pricing/" ], "last_checked": "2026-10-15" }, { "slug": "comp-ai", "name": "Comp AI", "vendor": "Comp AI", "url": "https://www.trycomp.ai/", "category": "compliance", "categories": [ "compliance" ], "summary": "Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.", "description": "Comp AI markets AI agents for continuous evidence collection across 580+ integrations, policy generation tailored to the customer's stack, a device agent, live trust centers, and expert Slack support. Named frameworks on the homepage include SOC 2, ISO 27001, HIPAA, GDPR and FedRAMP.", "pricing": "Quote-based (Startup / Mid-Market / Enterprise). Specific dollar amounts not published on the homepage at last check.", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "FedRAMP" ], "tasks": [ "evidence-collection", "policy-management", "control-monitoring", "trust-center" ], "india_relevance": "", "featured": false, "source_url": "https://www.trycomp.ai/", "sources": [ "https://www.trycomp.ai/" ], "last_checked": "2026-10-15" }, { "slug": "secureframe", "name": "Secureframe", "vendor": "Secureframe", "url": "https://secureframe.com/", "category": "compliance", "categories": [ "compliance", "security" ], "summary": "Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.", "description": "Secureframe publishes Fundamentals, Complete and Defense packages covering evidence collection, personnel and policy management, risk, Trust Center, questionnaire automation and CMMC-oriented SSP/POA&M tooling on Defense.", "pricing": "Quote-based. Public page lists Fundamentals / Complete / Defense feature packages without dollar amounts on the pricing page at last check.", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "PCI DSS", "CMMC", "HIPAA" ], "tasks": [ "evidence-collection", "policy-management", "questionnaire-automation", "vendor-risk", "trust-center" ], "india_relevance": "", "featured": false, "source_url": "https://secureframe.com/pricing", "sources": [ "https://secureframe.com/", "https://secureframe.com/pricing" ], "last_checked": "2026-10-15" }, { "slug": "hyperproof", "name": "Hyperproof", "vendor": "Hyperproof", "url": "https://hyperproof.io/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.", "description": "Hyperproof provides GRC program workflows for collecting evidence, managing audits, linking controls across frameworks, and using AI assistance for compliance operations. Pricing is typically enterprise/quote-based.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "NIST", "HIPAA", "PCI" ], "tasks": [ "evidence-collection", "audit-management", "control-mapping" ], "india_relevance": "", "featured": false, "source_url": "https://hyperproof.io/product/", "sources": [ "https://hyperproof.io/", "https://hyperproof.io/product/" ], "last_checked": "2026-10-15" }, { "slug": "scrut", "name": "Scrut Automation", "vendor": "Scrut Automation", "url": "https://www.scrut.io/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.", "description": "Scrut Automation provides automated evidence collection, controls, questionnaires and GRC workflows. The public /pricing path returned 404 at last check; AWS Marketplace and industry price censuses have listed published annual package prices for small headcounts.", "pricing": "Public pricing page not available (404 at last check). Industry AWS Marketplace census has listed $15,000/year for up to 20 employees \u2014 treat as secondary pending vendor confirmation.", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "PCI DSS" ], "tasks": [ "evidence-collection", "control-monitoring", "questionnaire-automation", "risk-management" ], "india_relevance": "India-founded; relevant for India SaaS teams pursuing global certifications and Indian customer due diligence.", "featured": false, "source_url": "https://www.scrut.io/", "sources": [ "https://www.scrut.io/" ], "last_checked": "2026-10-15" }, { "slug": "thoropass", "name": "Thoropass", "vendor": "Thoropass", "url": "https://www.thoropass.com/", "category": "compliance", "categories": [ "compliance" ], "summary": "Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.", "description": "Thoropass (formerly Laika) markets compliance software with audit confidence and partner/affiliated audit pathways. Public homepage focuses on compliance outcomes; detailed dollar pricing is typically quote or marketplace-listed.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR" ], "tasks": [ "evidence-collection", "audit-management" ], "india_relevance": "", "featured": false, "source_url": "https://www.thoropass.com/", "sources": [ "https://www.thoropass.com/" ], "last_checked": "2026-10-15" }, { "slug": "strike-graph", "name": "Strike Graph", "vendor": "Strike Graph", "url": "https://www.strikegraph.com/", "category": "compliance", "categories": [ "compliance" ], "summary": "Compliance platform with published product pricing pages for building and maintaining security certification programs.", "description": "Strike Graph provides tooling for compliance program build-out, evidence and certification readiness. A public product pricing page exists on the vendor site.", "pricing": "Published on vendor pricing page (see source); verify current tiers on strikegraph.com/pricing.", "pricing_model": "published-tiers", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR" ], "tasks": [ "evidence-collection", "control-mapping" ], "india_relevance": "", "featured": false, "source_url": "https://www.strikegraph.com/pricing", "sources": [ "https://www.strikegraph.com/", "https://www.strikegraph.com/pricing" ], "last_checked": "2026-10-15" }, { "slug": "zania", "name": "Zania", "vendor": "Zania Inc.", "url": "https://zania.ai/", "category": "compliance", "categories": [ "compliance", "risk", "security" ], "summary": "Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.", "description": "Zania markets purpose-built AI agents for TPRM, continuous compliance, controls testing, policy maintenance and security questionnaires. Vendor states SOC 2 Type 2 for its own security posture and lists support for SOC 2, HIPAA, ISO 27001, GDPR, PCI DSS and ISO 42001 among frameworks it helps customers work against.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001", "hipaa" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "HIPAA", "GDPR", "PCI DSS", "ISO 42001", "NIST CSF" ], "tasks": [ "vendor-risk", "controls-testing", "evidence-collection", "questionnaire-automation", "gap-analysis" ], "india_relevance": "", "featured": true, "source_url": "https://zania.ai/", "sources": [ "https://zania.ai/" ], "last_checked": "2026-10-15" }, { "slug": "credo-ai", "name": "Credo AI", "vendor": "Credo AI", "url": "https://www.credo.ai/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.", "description": "Credo AI focuses on governing AI systems with policy packs, assessments and governance workflows aligned to emerging AI regulations and risk frameworks.", "pricing": "", "pricing_model": "quote", "frameworks": [ "iso27001" ], "frameworks_claimed": [ "EU AI Act", "NIST AI RMF", "ISO 42001" ], "tasks": [ "ai-governance", "policy-management", "risk-assessment" ], "india_relevance": "Useful context for Indian enterprises preparing AI governance alongside DPDP data obligations; DPDP-specific mapping not verified on vendor homepage.", "featured": false, "source_url": "https://www.credo.ai/", "sources": [ "https://www.credo.ai/" ], "last_checked": "2026-10-15" }, { "slug": "auditboard", "name": "AuditBoard", "vendor": "AuditBoard", "url": "https://www.auditboard.com/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "Enterprise audit, risk and compliance platform used by large organizations for SOX, internal audit and connected risk workflows.", "description": "AuditBoard provides connected risk, audit and compliance modules widely adopted by enterprises. Pricing is enterprise/quote-based.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [ "SOX", "SOC 2", "ISO 27001", "NIST" ], "tasks": [ "audit-management", "risk-management", "control-testing" ], "india_relevance": "", "featured": false, "source_url": "https://www.auditboard.com/", "sources": [ "https://www.auditboard.com/" ], "last_checked": "2026-10-15" }, { "slug": "logicgate", "name": "LogicGate Risk Cloud", "vendor": "LogicGate", "url": "https://www.logicgate.com/", "category": "risk", "categories": [ "risk", "compliance" ], "summary": "AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting.", "description": "LogicGate Risk Cloud is a configurable GRC platform for risk, compliance and related workflows, with AI-assisted capabilities marketed for enterprise programs.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [ "SOC 2", "ISO 27001", "NIST", "HIPAA" ], "tasks": [ "risk-management", "compliance-workflows", "vendor-risk" ], "india_relevance": "", "featured": false, "source_url": "https://www.logicgate.com/", "sources": [ "https://www.logicgate.com/", "https://www.logicgate.ai/" ], "last_checked": "2026-10-15" }, { "slug": "snyk", "name": "Snyk", "vendor": "Snyk", "url": "https://snyk.io/", "category": "security", "categories": [ "security" ], "summary": "Developer-first application security platform; Evo Agentic AppSec adds AI security agents that find, fix and verify vulnerabilities.", "description": "Snyk provides SAST, SCA and related AppSec engines used by thousands of customers. In 2026 Snyk announced Evo Agentic AppSec \u2014 a team of AI security agents operating those engines for detection and remediation with human-on-the-loop controls.", "pricing": "Published plans on snyk.io/plans (Free / Team / Enterprise style tiers; verify current amounts on the plans page).", "pricing_model": "freemium", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "vulnerability-management", "appsec", "remediation" ], "india_relevance": "Supports secure SDLC practices relevant to CERT-In-oriented secure development and vulnerability handling programs; CERT-In-specific controls not claimed as a product module.", "featured": true, "source_url": "https://snyk.io/plans/", "sources": [ "https://snyk.io/", "https://snyk.io/plans/", "https://snyk.io/news/snyk-launches-evo-agentic-appsec/" ], "last_checked": "2026-10-15" }, { "slug": "wiz", "name": "Wiz", "vendor": "Wiz", "url": "https://www.wiz.io/", "category": "security", "categories": [ "security", "risk" ], "summary": "Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.", "description": "Wiz scans cloud environments without agents to surface toxic combinations of vulnerabilities, misconfigurations, identities and data exposure. Pricing is custom quote on the public pricing page.", "pricing": "Custom quote (wiz.io/pricing).", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "cloud-security", "vulnerability-management", "risk-prioritization" ], "india_relevance": "", "featured": false, "source_url": "https://www.wiz.io/pricing", "sources": [ "https://www.wiz.io/", "https://www.wiz.io/pricing" ], "last_checked": "2026-10-15" }, { "slug": "orca-security", "name": "Orca Security", "vendor": "Orca Security", "url": "https://orca.security/", "category": "security", "categories": [ "security" ], "summary": "AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.", "description": "Orca Security provides agentless cloud security covering vulnerabilities, misconfigurations, identity and data risks with AI-assisted prioritization and workflows.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "cloud-security", "vulnerability-management", "compliance-posture" ], "india_relevance": "", "featured": false, "source_url": "https://orca.security/", "sources": [ "https://orca.security/" ], "last_checked": "2026-10-15" }, { "slug": "crowdstrike-charlotte-ai", "name": "CrowdStrike Charlotte AI", "vendor": "CrowdStrike", "url": "https://www.crowdstrike.com/en-us/platform/charlotte-ai/", "category": "security", "categories": [ "security" ], "summary": "Agentic AI analyst for cybersecurity within the CrowdStrike Falcon platform, assisting detection, investigation and response workflows.", "description": "Charlotte AI is CrowdStrike's agentic analyst for cybersecurity, designed to accelerate investigations and analyst workflows on the Falcon platform.", "pricing": "", "pricing_model": "quote", "frameworks": [], "frameworks_claimed": [], "tasks": [ "threat-detection", "incident-response", "security-operations" ], "india_relevance": "Relevant to CERT-In incident detection and response capability building; not a CERT-In compliance product by itself.", "featured": false, "source_url": "https://www.crowdstrike.com/en-us/platform/charlotte-ai/", "sources": [ "https://www.crowdstrike.com/en-us/platform/charlotte-ai/" ], "last_checked": "2026-10-15" }, { "slug": "tenable-one", "name": "Tenable One (Hexa AI)", "vendor": "Tenable", "url": "https://www.tenable.com/products/tenable-one", "category": "security", "categories": [ "security", "risk" ], "summary": "Exposure management platform with Tenable Hexa AI agentic orchestration for vulnerability triage and remediation workflows.", "description": "Tenable One unifies exposure data; Hexa AI orchestrates specialized AI agents for vulnerability triage, remediation workflows and scheduled autonomous routines with human-in-the-loop guardrails.", "pricing": "", "pricing_model": "quote", "frameworks": [], "frameworks_claimed": [], "tasks": [ "vulnerability-management", "exposure-management", "remediation" ], "india_relevance": "", "featured": false, "source_url": "https://www.tenable.com/products/tenable-one/capabilities/hexa-ai", "sources": [ "https://www.tenable.com/products/tenable-one", "https://www.tenable.com/products/tenable-one/capabilities/hexa-ai" ], "last_checked": "2026-10-15" }, { "slug": "mondoo", "name": "Mondoo", "vendor": "Mondoo", "url": "https://mondoo.com/", "category": "security", "categories": [ "security" ], "summary": "Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates.", "description": "Mondoo markets agentic vulnerability management: agents detect issues, prioritize by risk, prepare remediations, seek approval where configured, and verify closure against policy.", "pricing": "Published pricing page at mondoo.com/pricing (verify current tiers).", "pricing_model": "published-tiers", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "vulnerability-management", "policy-as-code", "remediation" ], "india_relevance": "", "featured": false, "source_url": "https://mondoo.com/pricing", "sources": [ "https://mondoo.com/", "https://mondoo.com/pricing", "https://mondoo.com/solutions/agentic-vulnerability-management" ], "last_checked": "2026-10-15" }, { "slug": "onetrust", "name": "OneTrust", "vendor": "OneTrust", "url": "https://www.onetrust.com/", "category": "risk", "categories": [ "risk", "compliance" ], "summary": "Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.", "description": "OneTrust offers modules spanning privacy management, GRC, ethics and responsible AI. Useful for organizations mapping privacy programs; India DPDP-specific product claims should be verified per module with the vendor.", "pricing": "", "pricing_model": "quote", "frameworks": [ "dpdp", "iso27001", "soc2" ], "frameworks_claimed": [ "GDPR", "ISO 27001", "SOC 2" ], "tasks": [ "privacy-management", "consent", "vendor-risk", "ai-governance" ], "india_relevance": "Privacy platforms are commonly evaluated for DPDP Act readiness (notice, consent, security). Confirm DPDP-specific templates/modules directly with OneTrust before relying on them.", "featured": false, "source_url": "https://www.onetrust.com/", "sources": [ "https://www.onetrust.com/" ], "last_checked": "2026-10-15" }, { "slug": "bigid", "name": "BigID", "vendor": "BigID", "url": "https://bigid.com/", "category": "risk", "categories": [ "risk", "compliance", "security" ], "summary": "Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.", "description": "BigID focuses on data discovery, classification, DSPM and privacy/security workflows over sensitive data estates.", "pricing": "", "pricing_model": "quote", "frameworks": [ "dpdp", "iso27001", "hipaa" ], "frameworks_claimed": [ "GDPR", "HIPAA", "CCPA" ], "tasks": [ "data-discovery", "dspm", "privacy-management" ], "india_relevance": "Data discovery/classification tools are frequently used as part of DPDP inventory and purpose-limitation programs; DPDP-branded modules not verified on homepage.", "featured": false, "source_url": "https://bigid.com/", "sources": [ "https://bigid.com/" ], "last_checked": "2026-10-15" }, { "slug": "transcend", "name": "Transcend", "vendor": "Transcend", "url": "https://www.transcend.io/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "Data privacy infrastructure for DSRs, consent and data governance automation across systems.", "description": "Transcend provides privacy infrastructure for data subject requests, consent and related automation. Pricing is obtained via contact/sales.", "pricing": "", "pricing_model": "quote", "frameworks": [ "dpdp" ], "frameworks_claimed": [ "GDPR", "CCPA" ], "tasks": [ "dsr-automation", "consent", "privacy-management" ], "india_relevance": "DSR/consent automation patterns map to DPDP rights and notice/consent workflows; confirm India-specific support with vendor.", "featured": false, "source_url": "https://www.transcend.io/", "sources": [ "https://www.transcend.io/", "https://transcend.io/contact" ], "last_checked": "2026-10-15" }, { "slug": "upguard", "name": "UpGuard", "vendor": "UpGuard", "url": "https://www.upguard.com/", "category": "risk", "categories": [ "risk", "security" ], "summary": "Cyber risk and third-party risk management platform with published CRPM pricing page.", "description": "UpGuard provides external attack-surface and vendor risk ratings, questionnaires and continuous monitoring for third-party cyber risk programs.", "pricing": "Published on upguard.com/pricing (CRPM platform tiers; verify current figures).", "pricing_model": "published-tiers", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "vendor-risk", "attack-surface", "security-ratings" ], "india_relevance": "", "featured": false, "source_url": "https://www.upguard.com/pricing", "sources": [ "https://www.upguard.com/", "https://www.upguard.com/pricing" ], "last_checked": "2026-10-15" }, { "slug": "securityscorecard", "name": "SecurityScorecard", "vendor": "SecurityScorecard", "url": "https://securityscorecard.com/", "category": "risk", "categories": [ "risk", "security" ], "summary": "Supply-chain and third-party cyber risk platform providing security ratings and vendor monitoring.", "description": "SecurityScorecard scores organizations' security posture for third-party and supply-chain risk programs.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "vendor-risk", "security-ratings" ], "india_relevance": "", "featured": false, "source_url": "https://securityscorecard.com/", "sources": [ "https://securityscorecard.com/" ], "last_checked": "2026-10-15" }, { "slug": "conveyor", "name": "Conveyor", "vendor": "Conveyor", "url": "https://www.conveyor.com/", "category": "security", "categories": [ "security", "compliance", "business-ops" ], "summary": "Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.", "description": "Conveyor focuses on customer trust: Trust Centers and AI-assisted security questionnaire responses with outcome-based pricing published on its pricing page.", "pricing": "Published outcome-based pricing on conveyor.com/pricing.", "pricing_model": "published-tiers", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "questionnaire-automation", "trust-center" ], "india_relevance": "", "featured": false, "source_url": "https://www.conveyor.com/pricing", "sources": [ "https://www.conveyor.com/", "https://www.conveyor.com/pricing" ], "last_checked": "2026-10-15" }, { "slug": "safebase", "name": "SafeBase", "vendor": "SafeBase (Epicor)", "url": "https://safebase.com/", "category": "security", "categories": [ "security", "compliance", "business-ops" ], "summary": "Trust center and security questionnaire automation platform for customer security reviews.", "description": "SafeBase provides shareable Trust Centers and automation for responding to customer security questionnaires during sales cycles.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "trust-center", "questionnaire-automation" ], "india_relevance": "", "featured": false, "source_url": "https://safebase.com/", "sources": [ "https://safebase.com/" ], "last_checked": "2026-10-15" }, { "slug": "complyadvantage", "name": "ComplyAdvantage", "vendor": "ComplyAdvantage", "url": "https://complyadvantage.com/", "category": "risk", "categories": [ "risk", "business-ops" ], "summary": "AI-driven AML, fraud and financial crime risk detection platform for regulated financial institutions.", "description": "ComplyAdvantage provides AI-driven adverse media, sanctions and financial crime risk data/APIs used in KYC/AML programs.", "pricing": "", "pricing_model": "quote", "frameworks": [], "frameworks_claimed": [], "tasks": [ "aml", "fraud-detection", "kyc" ], "india_relevance": "Relevant to RBI-regulated entities' AML/KYC operational controls; not a substitute for RBI IT Governance or SEBI CSCRF cyber frameworks.", "featured": false, "source_url": "https://complyadvantage.com/", "sources": [ "https://complyadvantage.com/" ], "last_checked": "2026-10-15" }, { "slug": "moveworks", "name": "Moveworks", "vendor": "Moveworks", "url": "https://www.moveworks.com/", "category": "business-ops", "categories": [ "business-ops" ], "summary": "Enterprise AI assistant platform that automates employee support and business operations workflows across IT, HR and related systems.", "description": "Moveworks provides an AI assistant platform for resolving employee requests and automating workplace service workflows.", "pricing": "", "pricing_model": "quote", "frameworks": [], "frameworks_claimed": [], "tasks": [ "employee-support", "workflow-automation", "it-service" ], "india_relevance": "", "featured": false, "source_url": "https://www.moveworks.com/", "sources": [ "https://www.moveworks.com/" ], "last_checked": "2026-10-15" }, { "slug": "uipath", "name": "UiPath Autopilot / agents", "vendor": "UiPath", "url": "https://www.uipath.com/", "category": "business-ops", "categories": [ "business-ops" ], "summary": "Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration.", "description": "UiPath combines RPA, API automation and AI agents/Autopilot capabilities for enterprise process automation.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "process-automation", "workflow-automation", "agentic-ops" ], "india_relevance": "", "featured": false, "source_url": "https://www.uipath.com/", "sources": [ "https://www.uipath.com/" ], "last_checked": "2026-10-15" }, { "slug": "servicenow-now-assist", "name": "ServiceNow Now Assist", "vendor": "ServiceNow", "url": "https://www.servicenow.com/", "category": "business-ops", "categories": [ "business-ops", "risk", "compliance" ], "summary": "Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules.", "description": "Now Assist brings generative AI into ServiceNow workflows. Organizations often use ServiceNow IRM/GRC modules alongside Now Assist for enterprise risk and compliance operations.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "workflow-automation", "irm", "it-service" ], "india_relevance": "", "featured": false, "source_url": "https://www.servicenow.com/", "sources": [ "https://www.servicenow.com/" ], "last_checked": "2026-10-15" }, { "slug": "optro", "name": "Optro", "vendor": "Optro", "url": "https://optro.ai/", "category": "compliance", "categories": [ "compliance", "risk" ], "summary": "GRC intelligence platform (newer entrant) focused on AI-assisted governance, risk and compliance workflows.", "description": "Optro markets a GRC intelligence platform. Details and pricing should be confirmed on the vendor site as the product evolves.", "pricing": "", "pricing_model": "quote", "frameworks": [ "soc2", "iso27001" ], "frameworks_claimed": [], "tasks": [ "grc-intelligence", "risk-management" ], "india_relevance": "", "featured": false, "source_url": "https://optro.ai/", "sources": [ "https://optro.ai/" ], "last_checked": "2026-10-15" } ], "categories": [ { "slug": "compliance", "name": "Compliance", "description": "AI agents and platforms that help achieve and maintain compliance frameworks such as SOC 2, ISO 27001, HIPAA and related audit programs." }, { "slug": "security", "name": "Security", "description": "AI agents for application, cloud and security operations \u2014 vulnerability management, detection, response and trust automation." }, { "slug": "risk", "name": "Risk", "description": "AI agents for enterprise, third-party, privacy and financial crime risk programs." }, { "slug": "business-ops", "name": "Business operations", "description": "AI agents that automate workplace, process and service operations for security and compliance teams' broader business context." } ], "frameworks": [ { "slug": "dpdp", "name": "DPDP Act (India)", "short_name": "DPDP", "description": "India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025. Core notice, security, breach and retention duties largely apply from 13 May 2027 (18 months after 13 Nov 2025).", "official_url": "https://www.meity.gov.in/static/uploads/2024/02/Digital-Personal-Data-Protection-Act-2023.pdf", "notes": "Few global vendors publish India-DPDP-branded modules yet. Listings here are tools commonly evaluated for privacy inventory, consent, DSR and security \u2014 confirm DPDP fit with each vendor." }, { "slug": "cert-in", "name": "CERT-In Directions (2022)", "short_name": "CERT-In", "description": "Indian Computer Emergency Response Team directions dated 28 April 2022 require reporting of listed incidents within 6 hours and retention of ICT system logs for 180 days within India, among other obligations.", "official_url": "https://www.cert-in.org.in/PDF/CERT-In_Directions_70B_28.04.2022.pdf", "notes": "Security operations, logging, vulnerability and incident-response agents can support CERT-In capability building. No listing here is a certified CERT-In compliance product unless the vendor states so." }, { "slug": "soc2", "name": "SOC 2", "short_name": "SOC 2", "description": "AICPA System and Organization Controls 2 reports on security, availability, processing integrity, confidentiality and/or privacy trust services criteria \u2014 widely requested in B2B SaaS due diligence.", "official_url": "https://www.aicpa-cima.com/topic/audit-assurance/audit-and-assurance-greater-than-soc-2", "notes": "Most compliance automation vendors in this index target SOC 2 evidence collection and continuous monitoring." }, { "slug": "iso27001", "name": "ISO/IEC 27001", "short_name": "ISO 27001", "description": "International standard for information security management systems (ISMS), commonly required by global enterprise customers.", "official_url": "https://www.iso.org/standard/27001", "notes": "Many compliance automation and GRC platforms map controls to ISO 27001 Annex A." } ], "comparisons": [ { "slug": "vanta-vs-drata", "a": "vanta", "b": "drata", "verdict": "Both are leading compliance automation platforms for SOC 2 and ISO 27001. Choose based on quote, integrations and questionnaire automation needs \u2014 verify current packaging on each vendor site." }, { "slug": "sprinto-vs-comp-ai", "a": "sprinto", "b": "comp-ai", "verdict": "Sprinto emphasises autonomous compliance with a large framework library; Comp AI emphasises open integrations/agents and expert Slack support. Compare quotes for the same frameworks and headcount." }, { "slug": "vanta-vs-secureframe", "a": "vanta", "b": "secureframe", "verdict": "Both automate evidence and trust workflows. Secureframe publishes Fundamentals/Complete/Defense packages including CMMC-oriented Defense; Vanta publishes an agentic trust platform with modular add-ons. Request matched quotes." }, { "slug": "wiz-vs-orca-security", "a": "wiz", "b": "orca-security", "verdict": "Both are agentless-leaning CNAPP/cloud security platforms. Evaluate coverage of your cloud accounts, identity graph depth and workflow integrations rather than marketing labels alone." }, { "slug": "conveyor-vs-safebase", "a": "conveyor", "b": "safebase", "verdict": "Both focus on Trust Centers and security questionnaire automation for sales-led security reviews. Compare AI answer quality on your knowledge base and pricing model (outcome-based vs seat/quote)." } ] }