Average Ratings 0 Ratings
Average Ratings 0 Ratings
Similar Products
-
ReflectizReflectiz is a web exposure management platform that enables organizations to proactively identify, monitor, and mitigate security, privacy, and compliance risks across their digital environments. It provides comprehensive visibility and control over first, third, and even fourth-party components like scripts, trackers, and open-source libraries—elements that are often missed by traditional security tools. The unique advantage of Reflectiz is that it operates remotely, without embedding code on customer websites. This ensures no impact on site performance, no access to sensitive user data, and no additional attack surface. By continuously monitoring all publicly available components, Reflectiz identifies hidden risks in your digital supply chain, helping to detect vulnerabilities and compliance issues in real-time. With a centralized dashboard, Reflectiz gives businesses a holistic view of their web assets, making it easier to manage risk across all digital properties. The platform allows teams to establish baselines for approved behaviors, swiftly identifying deviations that may indicate threats. Reflectiz is particularly valuable for industries such as eCommerce, healthcare, and finance, where managing third-party risks is crucial. It helps businesses enhance security, reduce attack surfaces, and maintain compliance without requiring any changes to website code, offering continuous monitoring and detailed insights into external component behaviors.
-
Process StreetProcess Street is the Compliance Operations Platform built for teams that need to move fast without breaking standards. It combines document control, workflow automation, and AI-powered oversight in a single system so every policy is followed, every step is tracked, and every audit is effortless. Unlike legacy GRC tools or static SOP docs, Process Street turns compliance into a living system. Policies are documented in governed, version-controlled Pages. Those policies are executed through dynamic workflows with built-in task assignment, approvals, and forms. Every action is logged, monitored, and optimized in real time by Cora, our AI compliance agent. Used across industries like financial services, real estate, healthcare, and manufacturing, Process Street helps teams automate employee onboarding, streamline audits, manage policy updates, enforce vendor reviews, and run critical processes at scale. No code required. No micromanagement. Just proof that work gets done right, every time. Companies like Salesforce, Colliers, Drift, and Hartford Healthcare trust Process Street to eliminate busywork, improve operational visibility, and reduce compliance risk across the business. With native integrations, role-based access, audit trails, and ISO-aligned workflows, it is the platform that makes compliance a competitive advantage. From onboarding to audits, Process Street is how high-stakes teams enforce standards, automate execution, and prove compliance by default.
-
FerootFeroot Security is a global leader in AI-powered website and web application compliance and security. Feroot AI protects digital experiences from hidden threats while continuously enforcing compliance with PCI DSS 4.0.1, HIPAA rules on online tracking technologies, CCPA/CPRA, GDPR, CIPA, and over 50 global laws and standards. The Feroot AI Platform replaces manual compliance work and operational overhead with continuous automation. What once required months of effort across security, engineering, and legal teams can now be deployed in minutes, delivering real-time protection and audit-ready evidence. Feroot unifies critical capabilities into a single platform, including JavaScript behavior analysis, web compliance scanning, third-party script monitoring, consent enforcement, and data privacy posture management. It is purpose-built to detect and stop web-based threats such as Magecart, formjacking, e-skimming, and unauthorized tracking on high-risk assets like payment pages, login flows, iframes, and healthcare portals. Trusted by Fortune 500 enterprises, healthcare providers, retailers, SaaS platforms, utilities, payment service providers, universities, and public sector organizations, Feroot safeguards hundreds of millions of users worldwide. Feroot AI solutions include PaymentGuard AI, HealthData Shield AI, AlphaPrivacy AI, CodeGuard AI, and MobileGuard AI. Visit feroot for more information.
-
HyperproofCompliance work eats engineering time. Hyperproof exists to give that time back by automating the parts of GRC that don't need a human: pulling evidence out of GitHub, Jira, ServiceNow, Snyk, and cloud storage on a schedule, running recurring tests against high-frequency controls, and kicking off a task automatically the moment something fails instead of waiting for the next audit cycle to find out. Under the hood, Hyperproof maps one control to 160+ frameworks (SOC 2, ISO 27001, HIPAA, NIST, and others), so a control tested once can satisfy several standards instead of forcing teams to rebuild the same work per framework. AI agents handle the first pass on evidence review and gap-flagging, leaving humans to make the actual judgment calls rather than hunting down documentation. Teams using it report cutting audit prep by roughly 350 hours a year, a 66% drop in duplicate controls, and about $150K saved annually on control orchestration. It also scales to messier org charts, with the ability to scope controls by business unit or entity instead of flattening everything into one program. Built in 2018 out of the Seattle area, Hyperproof is used by engineering and security-heavy orgs like Reddit, Fortinet, Appian, and Outreach that are tired of treating compliance as a manual, spreadsheet and email process and want it to run more like the rest of their infrastructure: automated, monitored, and auditable.
-
GearsetGearset is a full‑featured Salesforce DevOps solution built for the enterprise, giving teams the tools to adopt best practices across every stage of the DevOps lifecycle. From metadata and CPQ deployments to CI/CD, testing, code analysis, sandbox seeding, backups, archiving, and observability, Gearset gives teams unmatched insight and control over their Salesforce workflows. Over 3,000 organizations — including names like McKesson and IBM — rely on Gearset to deliver with security and scale in mind. With advanced governance, detailed audit trails, SOX/ISO/HIPAA support, multi‑team pipelines, integrated security checks, and adherence to ISO 27001, SOC 2, GDPR, CCPA/CPRA, and HIPAA, Gearset combines enterprise‑ready compliance with rapid onboarding and an intuitive interface — all in one platform. Leading firms in finance, healthcare, and tech trust Gearset to power their DevOps initiatives without adding complexity.
-
NinjaOneNinjaOne automates the hardest parts of IT, empowering more than 20,000 IT teams. By providing deep insights into endpoints, robust security measures, and centralized control, NinjaOne boosts efficiency while safeguarding sensitive data and cutting IT expenses. This comprehensive platform offers a versatile toolkit for managing and securing endpoints, including patch management, mobile device oversight, software distribution, remote support, backup solutions, and more, thanks to its extensive IT and security integrations.
-
SafeticaSafetica Intelligent Data Security protects sensitive enterprise data wherever your team uses it. Safetica is a global software company that provides Data Loss Prevention and Insider Risk Management solutions to organizations. ✔️ Know what to protect: Accurately pinpoint personally identifiable information, intellectual property, financial data, and more, wherever it is utilized across the enterprise, cloud, and endpoint devices. ✔️ Prevent threats: Identify and address risky activities through automatic detection of unusual file access, email interactions, and web activity. Receive the alerts necessary to proactively identify risks and prevent data breaches. ✔️ Secure your data: Block unauthorized exposure of sensitive personal data, trade secrets, and intellectual property. ✔️ Work smarter: Assist teams with real-time data handling cues as they access and share sensitive information.
-
Predict360Predict360, by 360factors, is a risk and compliance management and intelligence platform that automates workflows and enhances reporting for banks, credit unions, financial services organizations, and insurance companies. The SaaS platform integrates regulations and obligations, compliance management, risks, controls, KRIs, audits and assessments, policies and procedures, and training in a single cloud-based SaaS platform and delivers robust analytics and insights that empower customers to predict risks and streamline compliance. Happy with your current GRC but lacking a true analytics and BI tool for intuitive executive and Board reports? Ask about Lumify360 from 360factors - a predictive analytics platform that can work alongside any GRC. Keep your process management workflows intact while providing stakeholders with the timely reports and dashboards they need.
-
Astra PentestAstra's Pentest is a comprehensive solution for penetration testing. It includes an intelligent vulnerability scanner and in-depth manual pentesting. The automated scanner performs 10000+ security checks, including security checks for all CVEs listed in the OWASP top 10 and SANS 25. It also conducts all required tests to comply with ISO 27001 and HIPAA. Astra provides an interactive pentest dashboard which allows users to visualize vulnerability analysis, assign vulnerabilities to team members, collaborate with security experts, and to collaborate with security experts. The integrations with CI/CD platforms and Jira are also available if users don't wish to return to the dashboard each time they want to use it or assign a vulnerability for a team member.
-
Rocket z/Assure VAPYour mission-critical systems carry the weight of your entire organization. Protecting them shouldn't leave you guessing about hidden vulnerabilities or compliance risks. Rocket® z/Assure™ Vulnerability Analysis Program (VAP) is a specialized mainframe security solution built to proactively scan and safeguard your most valuable environments. By identifying system-level risks before they become active threats, we partner with you to ensure your infrastructure remains locked down, resilient, and fully compliant. We understand the responsibility of managing enterprise security, and our tool gives you the exact insights you need to confidently eliminate weak points. Key benefits for your security team: - Identify and resolve hidden vulnerabilities with deep, automated scanning. - Protect your mission-critical data from evolving external and internal threats. - Streamline compliance reporting with clear, actionable security insights. Take control of your mainframe security. Partner with Rocket Software to protect your digital foundation today.
Description
Medcurity is a HIPAA compliance platform built for healthcare. From solo practices to large health systems, Medcurity guides organizations through their Security Risk Analysis and keeps them audit-ready year-round. Trusted by 1,000+ healthcare organizations since 2018, including Temple Health, Greater Baltimore Medical Center, and Yale.
What Medcurity offers:
- Security Risk Analysis (SRA) aligned with current OCR standards. Guided walkthroughs cover administrative, physical, and technical safeguards. Produces an audit-ready final report with risk-stratified remediation actions that can be assigned to team members and tracked from the dashboard. Meets SRA requirements for MACRA/MIPS and Promoting Interoperability programs.
- Small Practice SRA for practices with 1 to 20 employees. A simplified assessment covering all three HIPAA safeguards, starting at $499/year.
- PolicyScan scans your existing policies and auto-fills SRA questions, reducing hours of manual documentation work.
- Medcurity Academy HIPAA training for employees and compliance officers, with real-world scenarios and completion tracking.
- Network Vulnerability Assessments with a live dashboard, Attack Path Visualization, and AD Security Configuration Analysis.
- BAA management with centralized tracking and e-signature. Keep all vendor agreements in one place.
- Vendor risk management to assess and track third-party compliance.
- Customizable policies and procedures built from guided templates. Share them with your team and receive reminders ahead of review dates.
A dedicated support team works alongside your organization throughout the year, not just at assessment time. Medcurity was founded in 2018 in Spokane, WA and serves healthcare organizations of all sizes nationwide.
Description
Mondoo serves as a comprehensive platform for security and compliance, aiming to significantly mitigate critical vulnerabilities within businesses by merging complete asset visibility, risk assessment, and proactive remediation. It catalogs a thorough inventory of all types of assets, including cloud services, on-premises systems, SaaS applications, endpoints, network devices, and developer pipelines, while consistently evaluating their configurations, vulnerabilities, and interrelations. By incorporating business relevance, such as the importance of an asset, potential exploitation risks, and deviations from established policies, it effectively scores and identifies the most pressing threats. Users are provided with options for guided remediation through pre-tested code snippets and playbooks, or they can opt for autonomous remediation facilitated by orchestration pipelines, which include features for tracking, ticket generation, and verification. Additionally, Mondoo allows for the integration of third-party findings, works seamlessly with DevSecOps toolchains including CI/CD, Infrastructure as Code (IaC), and container registries, and boasts over 300 compliance frameworks and benchmark templates to ensure a thorough approach to security. Its robust functionality not only enhances organizational resilience but also streamlines compliance processes, offering a holistic solution for modern security challenges.
API Access
Has API
No
API Access
Has API
Yes
Integrations
AWS CloudFormation
No
AlmaLinux
No
Amazon Elastic Container Registry (ECR)
No
Atlassian Insight
No
Azure Blob Storage
No
Azure Container Registry
No
CircleCI
No
Debian
No
Docker
No
Fedora
No
Integrations
AWS CloudFormation
Yes
AlmaLinux
Yes
Amazon Elastic Container Registry (ECR)
Yes
Atlassian Insight
Yes
Azure Blob Storage
Yes
Azure Container Registry
Yes
CircleCI
Yes
Debian
Yes
Docker
Yes
Fedora
Yes
Pricing Details
$499/year
Annual subscriptions based on organization size. Security Risk Analysis starts at $499/year for practices with up to 20 employees.
Free Trial
No
Free Version
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
Yes
iPad App
Yes
Android App
Yes
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
Yes
On-Premises
Yes
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
Yes
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
Yes
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
Yes
In Person
No
Vendor Details
Company Name
Medcurity
Founded
2018
Country
United States
Website
medcurity.com
Vendor Details
Company Name
Mondoo
Founded
2020
Country
United States
Website
mondoo.com
Product Features
Compliance
Archiving & Retention
Yes
Artificial Intelligence (AI)
Yes
Audit Management
Yes
Compliance Tracking
Yes
Controls Testing
No
Environmental Compliance
No
FDA Compliance
No
HIPAA Compliance
Yes
ISO Compliance
No
Incident Management
Yes
OSHA Compliance
No
Risk Management
Yes
Sarbanes-Oxley Compliance
No
Surveys & Feedback
No
Version Control
No
Workflow / Process Automation
Yes
Product Features
Vulnerability Management
Asset Discovery
No
Asset Tagging
No
Network Scanning
No
Patch Management
No
Policy Management
No
Prioritization
No
Risk Management
No
Vulnerability Assessment
No
Web Scanning
No
