GRC Lab

Instant 27001

Instant 27001 is a ready-to-run ISMS, that contains all you need to implement ISO 27001 and get yourself ready for certification in a matter of weeks. You will start the implementation with 80% of the work already done, no prior experience or training necessary.

ISO27001security

Info on 100 "ISO27k" standards, plus a user community, FAQ and toolkit - all free

SecAware

ISO27k ISMS templates and awareness content

Cloud360 Technologies

Building an AI-native GRC platform that replaces manual, outdated governance processes with agentic frameworks designed for organizations enabling AI. Cloud360 delivers real-time security posture, AI-generated cyber risk profiles, continuous attack surface discovery, and AI pen testing — all built on the principle that compliance does not equal secure. Core focus areas: → AI governance frameworks for mid-market companies enabling AI across their engineering organizations → Continuous compliance monitoring for SOC 2, ISO 27001, and EU AI Act → Shadow AI detection and observability — if you can't see it, you can't secure it → Agentic GRC workflows that replace analyst headcount with purpose-built AI agents

FEHA

FEHA is an AI and Human powered platform supporting businesses to comply with various frameworks and regulations, and prepare for certification, seamlessly.

ISMS.online

Cloud-based ISMS platform that guides organizations to first-time ISO 27001 certification and compliance across 100+ frameworks.

Kertos

Kertos is the modern backbone of every company’s privacy and compliance operations. Providing support in Data & Process Discovery, Data Subject Requests (e.g. customer data deletion), Access Management, Compliance Documentation and various Certification Frameworks such as ISO27001, SOC2, TISAX® and similar. Our no-code SaaS solution connects to the entire IT infrastructure, identifies compliance relevant assets and processes, related data and automates compliance workflows to get an organization certification ready within weeks.

Kopexa

Kopexa is a compliance platform for building and maintaining ISO 27001–ready management systems. It helps organizations structure assets, risks, controls and evidence, enabling continuous compliance instead of one-time audits.