Compliance management Rising

Oneleet

Security-first compliance platform with built-in pen testing

Visit Oneleet

Oneleet combines compliance automation for SOC 2, ISO 27001, HIPAA and other frameworks with penetration testing, code scanning, device management and a vCISO under one flat fee. It collects evidence from connected cloud, code and workplace tools and works with independent auditors for certification.

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Auditor access (not listed)
  • Continuous control monitoring

Also includes

  • Vendor risk management
  • Security questionnaire answers
  • Security awareness training
  • Access reviews
  • Trust center
  • Cloud and HR integrations
  • Custom frameworks
  • Cross-framework mapping
  • AI-assisted drafting

From the vendor's own site. Not yet verified by SoftScout. A missing item may just mean we haven't confirmed it.

Compliance management Rising

Comp AI

Contact sales 2–500 people

Open-source, AI-driven compliance automation

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Continuous control monitoring

Compliance management Category leader

Drata

Contact sales 2–500+ people

Compliance automation and trust management platform

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Continuous control monitoring

Compliance management Category leader

Secureframe

Contact sales 2–500 people

Compliance automation for SOC 2, ISO 27001, HIPAA and CMMC

Key features

  • Framework templates
  • Automated evidence collection
  • Policy management
  • Risk register
  • Continuous control monitoring