ISO/IEC 27001

International standard for information security management systems (ISMS), commonly required by global enterprise customers.

Official / primary source →

Many compliance automation and GRC platforms map controls to ISO 27001 Annex A.

Agents tagged for ISO 27001

27 listings. Tags indicate relevance for evaluation — not a certification that the vendor “implements” the law.

Vanta

compliance soc2iso27001hipaa

Agentic trust and compliance automation platform for continuous evidence collection, control monitoring, policies, and security questionnaire responses.

Pricing: Quote-based. AWS Marketplace lists Essentials from $14,000/year for 1–20 employees (12-month contracts); modules priced …

Drata

compliance soc2iso27001hipaa

Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.

Pricing: Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketp…

Sprinto

compliance soc2iso27001hipaa

Autonomous compliance platform aimed at SaaS and growth-stage teams, with AI agents for mapping obligations, gathering evidence, and monitoring controls.

Pricing: AWS Marketplace: Starter Platform $7,500/year (up to 100 employees) plus first compliance framework from $2,000/year (co…

Scytale

compliance soc2iso27001hipaa

AI-powered security and compliance platform combining agentic GRC automation with optional in-house GRC expert consulting bundles.

Pricing: Quote-based packages (Build Starter, Build DFY, Build Stronger; Scale; Enterprise). Dollar amounts not published on the …

Comp AI

compliance soc2iso27001hipaa

Open-source-leaning AI compliance software that automates evidence collection, policy generation, and continuous monitoring for SOC 2, ISO 27001, HIPAA and GDPR.

Pricing: Quote-based (Startup / Mid-Market / Enterprise). Specific dollar amounts not published on the homepage at last check.

Secureframe

compliance soc2iso27001hipaa

Compliance automation platform with Comply AI features for policies, remediation, risk, questionnaires and TPRM, plus Trust Center and CMMC/Defense packages.

Pricing: Quote-based. Public page lists Fundamentals / Complete / Defense feature packages without dollar amounts on the pricing …

Hyperproof

compliance soc2iso27001

AI-powered GRC platform for program management, evidence, audits and multi-framework compliance.

Scrut Automation

compliance soc2iso27001hipaa

Compliance and risk automation platform popular with startups and mid-market teams for continuous control monitoring and multi-framework programs.

Pricing: Public pricing page not available (404 at last check). Industry AWS Marketplace census has listed $15,000/year for up to…

Thoropass

compliance soc2iso27001hipaa

Compliance platform that combines software with audit delivery pathways for SOC 2 and related frameworks.

Strike Graph

compliance soc2iso27001

Compliance platform with published product pricing pages for building and maintaining security certification programs.

Pricing: Published on vendor pricing page (see source); verify current tiers on strikegraph.com/pricing.

Zania

compliance soc2iso27001hipaa

Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.

Credo AI

compliance iso27001

AI governance platform for policy packs, model risk and responsible AI compliance including EU AI Act and NIST AI RMF oriented programs.

AuditBoard

compliance soc2iso27001

Enterprise audit, risk and compliance platform used by large organizations for SOX, internal audit and connected risk workflows.

LogicGate Risk Cloud

risk soc2iso27001

AI GRC platform for enterprise risk and compliance program configuration, workflows and reporting.

Snyk

security soc2iso27001

Developer-first application security platform; Evo Agentic AppSec adds AI security agents that find, fix and verify vulnerabilities.

Pricing: Published plans on snyk.io/plans (Free / Team / Enterprise style tiers; verify current amounts on the plans page).

Wiz

security soc2iso27001

Cloud security / CNAPP platform with agentless visibility, risk prioritization and security graph across cloud environments.

Pricing: Custom quote (wiz.io/pricing).

Orca Security

security soc2iso27001

AI-powered cloud security platform (CNAPP) for agentless workload and cloud posture risk detection.

Mondoo

security soc2iso27001

Agentic vulnerability management that finds, prioritizes, remediates and verifies fixes with policy-as-code and approval gates.

Pricing: Published pricing page at mondoo.com/pricing (verify current tiers).

OneTrust

risk dpdpiso27001soc2

Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight.

BigID

risk dpdpiso27001hipaa

Enterprise data security and DSPM platform for discovering, classifying and governing sensitive data including AI data risk use cases.

UpGuard

risk soc2iso27001

Cyber risk and third-party risk management platform with published CRPM pricing page.

Pricing: Published on upguard.com/pricing (CRPM platform tiers; verify current figures).

SecurityScorecard

risk soc2iso27001

Supply-chain and third-party cyber risk platform providing security ratings and vendor monitoring.

Conveyor

security soc2iso27001

Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content.

Pricing: Published outcome-based pricing on conveyor.com/pricing.

SafeBase

security soc2iso27001

Trust center and security questionnaire automation platform for customer security reviews.

UiPath Autopilot / agents

business-ops soc2iso27001

Enterprise automation platform with Autopilot and agentic automation for business operations and process orchestration.

ServiceNow Now Assist

business-ops soc2iso27001

Generative AI assistance across the ServiceNow platform, including IT, customer and GRC/IRM workflows depending on licensed modules.

Optro

compliance soc2iso27001

GRC intelligence platform (newer entrant) focused on AI-assisted governance, risk and compliance workflows.