FAQ
What is a grc cybersecurity company?
A firm whose primary offering sits in grc. This index lists companies, not SKUs — products live on the company profile.
Is the order paid?
No. Organic order is recency. Promoted shelves are labeled and separate. That is the opposite of buying a rank.
How do I get listed in GRC?
Submit a company. We review before anything is public. Paid plans buy a labeled shelf, not a silent bump in this list.
Why is this a focus rather than a tool category?
Buyers shortlist firms. Tools change names; the company is the contract.
Companies 5
VEVenvera
Sofia, BG · Product vendor
Multi-framework GRC for SOC 2, ISO 27001, DORA, and NIS2.
ASAtlant Security
Sofia, BG · Consultancy / pentest
Founder-led pentest, vCISO, and compliance consulting.
GRC · Application security
SESecurityScorecard
New York, US · Product vendor
Security ratings and vendor-risk monitoring.
QUQualys
Foster City, US · Product vendor
VMDR, cloud posture, and compliance scanning as a service.
Threat & vulnerability · Cloud security
SASailPoint
Austin, US · Product vendor
Identity governance and administration for large directories.