Best Security Compliance Software - Page 19

Kaizy

Kaizy is ISO 27001 compliance software and an information security management system (ISMS) platform for organisations worldwide. It brings risk assessments, policies, controls, evidence, audits, findings and corrective actions together in one place. Build and maintain your ISMS, organise evidence against ISO 27001 requirements, and track the work needed for certification preparation and ongoing audits. Kaizy helps teams move away from scattered spreadsheets, disconnected documents and last-minute audit preparation. Built in Australia for teams around the world, Kaizy supports a practical, ongoing approach to information security management. Built in Australia. Shaped by Estonian thinking. Progress is what comes next.

kameon AUDIT

kameon Audit – The smart solution for efficient audit management kameon Audit is the intuitive audit management software designed for auditors and certification bodies. Our cloud-based solution significantly reduces administrative effort, standardizes audit processes, and optimizes planning. With collaborative features, it enhances communication with clients and stakeholders, ensuring seamless audits and better results.

Kantis

Kantis gets B2B and AI startups ready for ISO 27001, SOC 2 and GDPR in weeks, without pulling the CTO off the product for months. It's a compliance platform plus a team that does the work with you. We fit policies, risks and evidence to how your company actually runs, connect your cloud and code tools, run the internal audit as a dress rehearsal, and join your audits with a UKAS-accredited certification body. Every auditor comment becomes a concrete fix. After certification, your Trust Center shows buyers your security posture and shares documents like the audit report under NDA. Continuous monitoring keeps you ready for surveillance audits. Built for teams of 2-50 in the UK and Europe, and for companies selling into Europe. Frameworks: ISO 27001, SOC 2, GDPR, ISO 42001 and TISAX preparation.

Kaspera Shield

Kaspera Shield is a complete cybersecurity platform built for small and medium-sized businesses that don't have a dedicated IT or security team. Most security tools are built for enterprises with six-figure budgets and full-time security staff. Kaspera Shield brings that same level of protection to any business — law firms, medical practices, accounting firms, agencies, startups — at a price that makes sense. From a single dashboard, businesses can scan their external attack surface for vulnerabilities, run phishing simulations to test and train employees, generate AI-powered security policies, monitor for data breaches, and track compliance against frameworks like SOC 2, HIPAA, and ISO 27001. There's no complex setup, no security expertise required, and no need to stitch together five different tools. Kaspera Shield gives you a security score, tells you exactly what's wrong, and helps you fix it — all in one place. Key features: External vulnerability scanning with prioritized findings and CVE tracking Phishing simulation and employee security training AI-generated security policies with employee acknowledgement tracking Breach monitoring across employee email addresses Compliance audit workflows for SOC 2, HIPAA, ISO 27001, NIST, PCI DSS, and more Automated monthly security reports and shareable trust pages Native Microsoft 365 and Google Workspace integrations Built-in AI security assistant for plain-English guidance 14-day free trial. No credit card required.

Kawach.AI

Kawach.AI is a global GRC automation platform that helps organizations manage privacy, security, and regulatory compliance through a centralized platform. Kawach.AI supports compliance programs covering standards and regulations including ISO 27001, SOC 2, GDPR, DPDP, HIPAA, and PCI-DSS, among others. Core workflows include: People Management • Policy Management • Risk Management • Vendor Risk Management • Audit Management • Compliance Monitoring • Privacy & Consent • DSAR • Cloud Compliance • Security Questionnaires • Trust Management

Keel GRC

Keel helps growing organizations manage risk, meet their obligations, and prove their work through one connected, practical GRC platform. Self-serve GRC and vendor risk for SMBs and the MSPs that serve them. One control-and-evidence graph, crosswalked across the frameworks you run, so you collect evidence once and comply everywhere. One workspace covers controls, evidence, policies, access reviews, and a trust center, alongside risk, vendor assessments, internal audits, nonconformities and CAPA, and security-awareness training. AI is woven through it to draft your policies, profile your vendors, and build your questionnaires. Available today: ISO/IEC 27001, CIS Critical Security Controls, PCI DSS, SOC 2, NIST Cybersecurity Framework and more. Every new workspace starts with a 14-day free trial of Pro, no credit card, with a free plan after it. Paid plans start at $99/month.

kliper

Konforma

Konforma helps small and medium-sized businesses in Belgium prove they are in order with GDPR and NIS2, without drowning in legal jargon or expensive consultancy. Most compliance tools are built for enterprises with legal teams. Konforma is built for the bakery, the logistics firm, the accounting office, the software company and the sports club: organisations that need to be demonstrably compliant but do not have a compliance department. Everything in the platform is written in plain language, available in Dutch, French, English and German. GDPR, done properly A guided processing register with templates per organisation type, DPIA support, data subject request handling, incident reporting with step-by-step guidance for the Belgian supervisory authority, staff training, and ready-to-use privacy statements and policy documents. NIS2 through CyberFundamentals® Konforma is built on CyberFundamentals® (CyFun®), the official framework of the Centre for Cybersecurity Belgium for NIS2 compliance. Run your self-assessment at Basic, Important or Essential level with the official scoring method, assign measures to team members, document exceptions, track key measures, and see exactly how far you are from conformity and what to do next. Evidence you can show Every step produces evidence: a public proof page you can share with customers, signed policy documents, sign-off rounds for staff and management, supplier questionnaires for supply chain security, and an audit-ready trail of who did what and when. Work as a team Assign roles and responsibilities, invite your IT partner to fill in technical measures, let employees sign policies through a personal link without needing an account, and keep management involved with clear dashboards and deadlines tied to the official Belgian NIS2 timeline. Konforma is made in Belgium, hosted in Europe, and priced for SMEs.

Kravklar

Kravklar is a NIS2 compliance self-assessment tool for Norwegian SMBs. It evaluates organizational maturity across all 10 security categories in NIS2 Article 21, generates a radar chart visualization, and provides a prioritized gap analysis with board-ready PDF reports. Free tier includes the full 56-question assessment with scores. Paid tier adds detailed gap analysis, action plans, and exportable reports.

Kunnus

Kunnus is a compliance management platform that enables manufacturers of products with digital elements to meet the requirements of the EU Cyber Resilience Act (CRA). Developed by Think Ahead Technologies GmbH in Stuttgart, Germany, Kunnus provides an all in one solution for organizing, documenting, and managing the regulatory obligations introduced by the CRA. Kunnus is covering everything from product classification and SBOM management to vulnerability tracking and audit preparation. The CRA requires manufacturers to implement cybersecurity measures throughout the entire product lifecycle, from design and development through post market monitoring. Kunnus supports organizations in structuring these processes by centralizing compliance relevant documentation, vulnerability handling, and reporting workflows in a single platform. The regulation affects a broad spectrum of products, including IoT devices, industrial equipment with digital interfaces, RFID enabled items, smart home products, and many other connected products that manufacturers may not immediately associate with cybersecurity regulation. Kunnus automatically generates SBOMs from build processes and continuously monitors all dependencies for new vulnerabilities. Kunnus is built on a foundation of European digital sovereignty. All data is hosted exclusively within the EU, with no reliance on US based cloud providers or infrastructure. With Kunnus Think Ahead is ensuring full alignment with European data protection standards and giving manufacturers complete control over their compliance data. Think Ahead values open source principles, which is reflected in tools like the Kunnus Scanner, an open source utility available on GitHub that can scan Windows based systems and feed the results directly into the platform. With key CRA deadlines approaching, including mandatory vulnerability reporting from September 2026 and full compliance by December 2027, Kunnus helps manufacturers establish structured compliance processes early. The platform serves any company worldwide that sells products with digital elements within the European Union.

Launch Ready Code

Launch Ready Code scans any SaaS, website, or app and produces a Launch Readiness Score out of 100, covering four dimensions: Security (OWASP Top 10, auth flaws, exposed secrets), Reliability (error handling, race conditions), Performance (N+1 queries, bundle bloat, slow pages), and Monitoring (error tracking, alerting gaps). No code access needed — just the URL. Used by founders who built with Lovable, Bolt, Cursor, Replit, and other AI coding tools to find critical issues before they hit production or investors. Products start at $0 (free scan) through $499 one-time audit report and subscription plans from $149/month. Every paid audit is reviewed by a senior engineer before delivery.

Lumiaxiom

Lumiaxiom is an AI Governance and Information Security (AI/IS) platform that shifts organizations from static, policy-based compliance to Continuous Operational Control. Built for security teams, compliance officers, and AI product leaders, Lumiaxiom automates the full governance lifecycle — from framework mapping and real-time risk detection to evidence collection and audit readiness. Key capabilities: - AI Bill of Materials (AI BOM) — automatically discover, catalog, and enrich AI models, datasets, and third-party components with risk scoring and license intelligence. - Continuous Compliance — dynamically adopt security frameworks (NIST, ISO 27001, PCI DSS, custom) and map live controls to real evidence. - Threat & License Intelligence — aggregate vulnerability findings, CISA KEV matches, and open-source license risks in one unified feed. - Monitor Sidecars — ingest runtime telemetry from CI/CD pipelines, cloud connectors, and agent deployments to detect drift instantly. - Cyber Insurance Integration — quantify risk posture and generate insurance-ready quotes directly from your live control data. Why teams choose Lumiaxiom: Unlike traditional GRC tools that rely on quarterly snapshots, Lumiaxiom connects governance to actual operations — so you know your compliance status is accurate today, not three months ago. Category: IT Governance, Risk & Compliance (GRC), AI Governance, Cybersecurity, Compliance, Vulnerability Management.

Lupasafe

Lupasafe is a cyber risk and compliance platform built for small and mid-sized businesses and the managed service providers (MSPs) who protect them. It brings security awareness training, phishing simulation, NIS2 compliance and IT risk monitoring together in one dashboard, so organisations can see where they are vulnerable, fix what matters most, and prove it to auditors, customers and insurers. Most cyber attacks start with people, and most SMEs lack the time or in-house expertise to manage security and compliance properly. Lupasafe closes that gap by covering three areas. People: Short, engaging security awareness training and realistic phishing simulations build a security-minded culture. Employees can report suspicious emails with the native Microsoft report button, and custom training lets organisations add their own policies and scenarios. Managers and directors get dedicated content on their responsibilities under NIS2. Process: A clear risk dashboard, monthly insights and audit-ready reports turn security into a measurable, manageable process. The built-in NIS2 module guides organisations through each control step by step, tracks evidence and policy documents, and shows progress toward compliance. Lupasafe also maps controls to frameworks such as ISO 27001 and the Spanish ENS. IT: Automated scans cover Microsoft 365 configuration, devices, website, email and domain security (SPF, DKIM, DMARC), network exposure, dark web leaks and emerging threats such as AI-driven impersonation. Findings are ranked by risk and paired with practical, plain-language fixes, so business owners can act without a security team. Built for MSPs: Lupasafe is designed for the MSP channel. Partners manage all of their clients from a multi-tenant environment, offer security awareness and NIS2 compliance as a recurring service, and integrate through an open API. Implementation and support are included, and white-label delivery is available for larger distribution partners.

Madgeek Compliance Solutions

ManagementSysteem.nl