Toba Capital is an investment firm committed to helping create incredible technology companies. We specialize in business applications, IT, and internet infrastructure markets.

Toba Capital

Riverwood Capital is a growth-stage technology investment firm that invests in technology companies in need of financial and intellectual capital to scale.

Riverwood Capital

Hyperproof

Hyperproof is a cloud-based compliance operations software that collects evidence automatically and manages a compliance program. It serves as a system of record for an organization’s compliance data and gives teams involved in compliance the tools they need to collaborate with stakeholders in and outside of their organization.  With this innovative approach, it helps organizations meet their aspirations and demonstrate their commitment to protecting their customers, shareholders, partners, and suppliers along with the community. The software not only reduces administrative work from compliance processes, but it also helps organizations mitigate their risks on an ongoing basis which is especially important in a time when the regulatory and economic environments are uncertain and cybersecurity risk is on the rise.

Hyperproof delivers a risk, compliance, and privacy command center to manage compliance workflows of an organization which includes streamlining project management, automating manual processes (compliance evidence collection and testing), and audit preparation. Hyperproof’s compliance operations platform integrates with the entire company ecosystem, and its compliance workflows automatically identify and flag compliance issues when they happen and provide remediation tasks accordingly. Organizations can manage daily compliance operations, track risk (via a central risk register), prepare risk mitigation plans, map risks to existing security controls, and track their progress in real time.

New data privacy regulations have opened up space for a new wave of compliance-focused startups.

Digital Privacy Tools

Hyperproof is a software-as-a-service company that provides compliance and risk management solutions. Founded in 2018 by Craig Unger, the company offers a platform designed to streamline and automate governance, risk, and compliance (GRC) processes. Hyperproof's software centralizes compliance operations, allowing organizations to manage multiple compliance frameworks and risks in a single place. The platform covers various areas including compliance and audit management, risk management, and vendor risk management.

Grant Thornton partners with Hyperproof on compliance reporting

7 Best Compliance Software Solutions (2024) ⤵

Hyperproof, a compliance and risk management startup, raises $40M

Innovative Compliance Operations Software

Learn About Hyperproof's Dedicated Compliance Software Team!

US compliance platform Hyperproof gets extra $40m in funding

Automated Security & Compliance Software Built For Scale

Threat Prevention Toolchain

Hyperproof Expands Operations to Europe, Addressing Growing Compliance Needs

Hyperproof delivers a risk, compliance, and privacy command center to manage compliance workflows of an organization which includes streamlining project management, automating manual processes (compliance evidence collection and testing), and audit preparation. Hyperproof’s compliance operations platform integrates with the entire company ecosystem, and its compliance workflows automatically identify and flag compliance issues when they happen and provide remediation tasks accordingly. Organizations can manage daily compliance operations, track risk (via a central risk register), prepare risk mitigation plans, map risks to existing security controls, and track their progress in real time.Key customers and partnershipsThe company’s platform was used by several technology and Fortune 1000 companies such as Outreach, Reddit, Veeva, Nutanix, AppLovin, and Fortinet as of September 2024. Hyperproof supports over 100 compliance frameworks including the GDPR and CCPA and integrates with cloud services such as AWS, Azure, Google Cloud, GitHub, Okta, Jamf, Jira, and ZenDesk, to automate evidence management and support collaboration between stakeholders. The company provides its platform at a minimum subscription price of USD 4,800 per annum.

OneTrust provides compliance solutions that leverage AI tools and automation across all areas of privacy compliance. The company’s AI-powered solution sees widespread use, providing automation in the areas of data discovery, data subject rights management, consent management (with a user-facing preference center for greater control), data protection impact assessments, third-party risk management, incident response reporting, and monitoring.The company also provides regulatory research software that companies can use to train staff and even benchmark their own privacy programs. The company’s Government Records Request Automation solution helps government organizations intake requests, automate data discovery and redaction, and provide a secure two-way communication portal that demonstrates compliance with FOIA, PRR, and the Privacy Act. OneTrust’s products were backed by over 200 patents as of September 2024.OneTrust has strengthened its position in the digital privacy space through several acquisitions in recent years. In March 2021, OneTrust acquired DocuVision, an AI-powered data redaction platform to bolster its data subject rights capabilities through automatic redaction of non-relevant sensitive information. During the same month, OneTrust acquired Convercent to enhance its platform through advanced ethics and compliance capabilities, and helpline and disclosure management. OneTrust acquired the security assurance and certification platform Tugboat Logic in September 2021, to automate its InfoSec assurance and certification processes. Other notable acquisitions include Privacy Core e-learning, DataGuidance, and Integris Software.In March 2023, OneTrust announced the addition of certification automation to the OneTrust GRC and Security Assurance Cloud. This solution which combines automation, pre-built policies and controls spanning 29 industry frameworks, over 100 integrations, compliance content, and expert guidance enables customers to simplify and streamline compliance tasks according to OneTrust.Key customers and partnershipsAs of September 2024, OneTrust said it served over 14,000 active customers, including 75 of the Fortune 100. The company claims it serves notable organizations from all industries, with Adobe, Walgreens, Samsung, and Mearsk among its customer base.OneTrust entered a partnership with Dow Jones Risk and Compliance in April 2023, to incorporate risk and compliance data into its third-party due diligence solution.

OneTrust

CENTRL provides automated risk management and privacy management solutions. Through its Privacy360 platform, the company provides solutions to identify compliance gaps, automate data discovery, manage data subject rights requests, consent management (with a user-facing preference center), carry out impact assessments, third-party risk management, monitoring, and reporting.

CENTRL

HighSide provides a secure communications platform for organizations, enterprise archiving solutions, data discovery, and supervision tools in compliance with GDPR, CCPA, etc. In 2019, the company announced the acquisition of Hotshot Technologies, a secure team messaging platform.

HighSide

SecuPI provides a patented platform enabling organizations to achieve compliance with regulations such as GDPR and CCPA. The platform achieves this by providing multiple features to protect data such as pseudonymization, consent controls, audit logs, streamlining breach notifications, etc. SecuPI’s platform is deployed in organizations in the banking, insurance, telecommunications, and health industries.

SecuPi

JoinPrivacy is a B2C solution that allows users to manage their personal data from the websites they use, all from one place.

JoinPrivacy

Solutions to prevent the tracking and collection of the personal data of end-users.

Encrypted communications and data exchanges for internal and external collaboration around sensitive data.

Tools to provide compliance with privacy regulations, such as GDPR and CCPA, and carry out tasks such as data discovery, data governance, consent management, Data Subject Rights (DSR) management, Data Protection Impact Assessments (DPIA) and managing incident response as mandated by these privacy regulations.

Synthetic data generation, data de-identification and anonymization, and other solutions for managing sensitive data.

Storage infrastructure for holding data in compliance with regulations such as GDPR or data residency requirements.

Central management of data access and data privacy and security policies.

Uses AI/ML to automate workflows such as data discovery and data classification

Uses generative AI to provide conversational recommendations to users to remain compliant with privacy regulations

Solutions in this industry hub are offered under a B2B SaaS model

Hyperproof is a software-as-a-service company that provides compliance and risk management solutions. Founded in 2018 by Craig Unger, the company offers a platform designed to streamline and automate governance, risk, and compliance (GRC) processes. Hyperproof's software centralizes compliance operations, allowing organizations to manage multiple compliance frameworks and risks in a single place. The platform covers various areas including compliance and audit management, risk management, and vendor risk management.
Hyperproof's system integrates with numerous services such as AWS, Google Cloud, GitHub, Cloudflare, and task management apps like Jira, Asana, and ServiceNow. It leverages heuristics and AI to scale compliance and risk workflows, aiming to prevent duplicative work and create connections between user data and compliance regimes. The platform supports over 85 compliance and governance frameworks, including FedRAMP, and offers features like automated evidence collection, risk monitoring, audit preparation, and vendor risk assessment.
The company's software is designed to reduce the administrative burden associated with compliance tasks, allowing businesses to focus on core operations. Hyperproof claims its platform can save organizations significant time in audit preparation, with one customer reporting savings of 300-350 hours per year. As of August 2023, Hyperproof had raised a total of USD 66.5 million in funding, with its latest round of USD 40 million led by Riverwood Capital.
Key customers and partnerships
Hyperproof serves hundreds of companies across various industries. Its customer base includes notable firms such as Motorola, Nutanix, 3 million, Outreach, Applovin, and Veeva Systems. The company has experienced significant growth, with its customer base expanding by 130% year-over-year as of August 2023.
In September 2022, Hyperproof announced a partnership with Grant Thornton, a professional services firm. This collaboration aims to help Grant Thornton's clients manage compliance programs more effectively and efficiently prepare related reports. The partnership covers various compliance frameworks, including SOC and ISO 27001, and involves the joint development of a data exchange capability between Hyperproof's platform and Grant Thornton's SOC.x tool.

Axonius is a cybersecurity asset management company founded in 2017 by Dean Sysman, Ofri Shur, and Avidor Bartov. The company offers a platform designed to help organizations identify and secure devices on their networks by leveraging existing security and management tools. Axonius' solution integrates with over 300 security and management solutions to provide customers with a comprehensive asset inventory, uncover security gaps, and automatically validate and enforce security policies. The platform covers hardware, software, SaaS applications, cloud services, and user identities.
Axonius' approach focuses on correlating asset data from a customer's existing infrastructure and controls rather than deploying new agents or sensors. This allows for quick deployment, often within minutes, and provides immediate value by creating an up-to-date inventory of assets. The platform helps organizations mitigate threats, navigate risks, decrease incident response time, and eliminate manual, repetitive tasks.
In 2023, Axonius crossed the USD 100 million mark in annual recurring revenue. The company's growth has been rapid, with Amit Karp of Bessemer Venture Partners noting that Axonius took less than 15 months to grow from USD 1 million ARR to USD 10 million ARR, making it one of the fastest-growing companies in BVP's history. As of March 2024, Axonius has raised nearly USD 600 million in funding and is valued at USD 2.6 billion.
Key customers and partnerships
Axonius has built a significant customer base that includes more than a dozen Fortune 500 and global organizations. Notable customers include Schneider Electric, News Corp, Anheuser-Busch InBev, The New York Times, and Cimpress. The company also supports four of the five major US Department of Defense service agencies.
In February 2020, Axonius appointed Mark Daggett as Vice President of Channels and Alliances to expand its partner program and meet increasing customer demand. The company has partnerships with various channel programs and professional services partners, including 443 Technologies, Alta Technologia, Artha Mitra Interdata, Ascent Global, ePlus, CloverIT, Ignition Technology, and Netpoleon. Axonius has also formed strategic alliances with major technology providers such as CISCO, Okta, AWS, and ServiceNow.
In March 2024, Axonius announced a partnership with Claroty to bring enterprise attack surface management to cyber-physical systems (CPS) environments. This collaboration aims to provide organizations with a unified view of assets across various environments, extending from cloud to on-premises infrastructure.

Axonius

JupiterOne is a cloud-native cyber asset attack surface management (CAASM) platform that helps organizations map, analyze, and secure complex cloud environments. Founded by Erkang Zheng, JupiterOne uses a graph-based approach to provide visibility and context across an organization's entire cyber asset universe. The platform connects to over 180 systems and data sources to collect, integrate, and model cyber asset data, including cloud resources, devices, identities, access rights, code repositories, and more. JupiterOne's technology allows teams to discover, monitor, understand, and act on changes in their digital environments.
The platform's core features include a custom query language (J1QL), pre-built queries, and natural language search capabilities that enable users to ask complex questions about their environment and get answers within seconds. JupiterOne offers over 500 out-of-the-box English-language questions and the ability to create custom queries. The company's graph-based data model exposes intricate relationships between cyber assets, providing contextual insights for security investigations and incident response.
JupiterOne addresses multiple use cases, including cloud security posture management, security operations and engineering, and governance and compliance. The platform helps organizations assess and monitor compliance with regulations like GDPR and identify vulnerabilities.
As of June 2022, JupiterOne had raised a total of USD 119 million in funding and achieved a valuation of over USD 1 billion.
Key customers and partnerships
JupiterOne's client base includes cloud-native enterprises such as Cisco, Databricks, Indeed, and Robinhood. The company has formed strategic partnerships with several major technology firms. In November 2021, JupiterOne and Cisco announced the launch of Secure Cloud Insights, an expanded cloud security and security operations partnership. This solution integrates JupiterOne's cyber asset context into Cisco technologies to provide enhanced cybersecurity capabilities for Cisco customers.
JupiterOne has also established partnerships with other cybersecurity companies. In April 2023, the company announced an integration with Splunk to provide better data visibility for Splunk users. Additionally, JupiterOne is part of the AWS Partner Network (APN) and was recognized as an AWS Rising Star Independent Software Vendor (ISV) Partner of Year 2022.

JupiterOne

Noetic Cyber is a cyber asset attack surface management (CAASM) company founded in 2019 by Paul Ayers, Allen Hadden, and Allen Rogers. The company provides a cloud-based continuous cyber asset management and controls platform that aims to give organizations better visibility into their digital infrastructure and help them identify and address security gaps. Noetic's platform uses API aggregation and correlation to gather data from various security and IT management tools, leveraging graph database technology to create a dynamic map of cyber connections between entities in both cloud and on-premises environments. This approach enables the discovery of cyber risks and non-compliant systems.
The Noetic platform employs automation and orchestration to deliver remediation capabilities and help cybersecurity teams anticipate and react to changing IT and security requirements. In September 2023, Noetic introduced significant enhancements to its platform, including Data Insights, Unified Model Explorer, and Machine Learning Classifiers. These features are designed to streamline the process of managing large volumes of security data from disparate systems and help users quickly uncover critical insights and coverage gaps.
Noetic Cyber's technology addresses common security asset management challenges, such as establishing relationships between different assets and business applications, managing assets across various tools and business units, and handling the volume and pace of change in IT environments. The company's goal is to improve security tool and control efficacy by breaking down existing data silos and enhancing the entire security ecosystem.

Noetic Cyber

Nagomi Security, founded in January 2023, is a company that specializes in proactive security and threat exposure management. The company offers a Proactive Defense Platform designed to help cybersecurity teams optimize the effectiveness of their existing security tools against real-world threats. Nagomi's platform provides end-to-end visibility of defense capabilities mapped against the MITRE ATT&CK framework, enabling organizations to prioritize risks based on their unique threat profiles and receive actionable remediation plans. The platform integrates with solutions from vendors such as CrowdStrike, Microsoft, SentinelOne, Okta, Qualys, Rapid7, and Google through read-only API connections. Nagomi's technology aims to address the issue that over 80% of breaches occur in organizations that already had tools in place to prevent them. The platform can identify misconfigurations, highlight critical gaps, and prescribe clear steps for improvement. As of September 2024, Nagomi reported that its customers had identified over 13 million misconfigurations out of more than 40 million total configurations, with over 3.6 million exposures fixed.
Key customers and partnerships
Nagomi Security has established partnerships with several prominent organizations in the cybersecurity industry. In September 2024, the company announced a partnership with CrowdStrike to integrate CrowdStrike's threat intelligence feeds with Nagomi's Proactive Defense Platform. This collaboration aims to enable organizations to convert threat insights into concrete, prescriptive actions. Nagomi's customer base includes notable organizations such as Applied Systems, HFW, and WELL Health Technologies. The company has also reported working with a Fortune 500 manufacturing company, which saw a 9% improvement in CrowdStrike utilization after implementing Nagomi's solution. Additionally, Nagomi has assisted various companies across industries, including healthcare, technology, law, insurance, and energy, in improving their security postures and addressing specific cybersecurity challenges.

Nagomi Security

DoControl is a SaaS Security Posture Management solution that provides automated data access controls for SaaS applications. Founded in 2020 and headquartered in New York, DoControl offers comprehensive visibility, threat detection, and remediation for SaaS data exposure and insider threats. The company's platform is designed to secure sensitive data and files within business-critical SaaS applications such as Google Drive, Slack, Microsoft SharePoint, Salesforce, and Box.
DoControl's solution combines CASB (Cloud Access Security Broker) and DLP (Data Loss Prevention) capabilities to ensure protection across major SaaS ecosystems. It harnesses user interactions and API access across SaaS applications and feeds them into powerful no-code workflows that automatically identify, respond to, and remediate threats stemming from SaaS data policy violations. The platform incorporates business and security context to ensure quick response to emerging threats and effective insider risk management.
The company's technology uses an event-based approach for near-real-time threat detection, replacing industry standards of days and weeks. Leveraging automated security workflows and end-user interactions, DoControl significantly reduces SaaS data exposure over time, ensuring robust security with minimal effort and no impact on productivity.
In March 2024, DoControl released a report which found that companies were generating approximately 286,000 new SaaS assets each week. The report also highlighted that one out of six employees shared company data with their personal email, emphasizing the need for comprehensive security strategies to mitigate insider threats and control data exposure.
Key customers and partnerships
DoControl has gained recognition for its innovative approach to SaaS security. In 2024, the company won two gold awards at the 20th Annual Globee Cybersecurity Awards in the categories of Insider Threat Management and Most Innovative Security Software of the Year. Additionally, DoControl received a silver award for its achievements in Data Loss Prevention.
Vox Media, a modern mass media company, is a notable customer of DoControl. The company uses DoControl to proactively detect and mitigate accidental data oversharing within their cloud collaboration environments. DoControl's advanced monitoring and alerting capabilities ensure sensitive information is not exposed to unauthorized individuals. When oversharing incidents are detected, DoControl automatically takes appropriate actions to restrict access or notify administrators for further review.
DoControl has also integrated its solution with Zoom to provide comprehensive SaaS data protection for the video conferencing platform. This integration allows users to gain visibility into specific details on account users and cloud recordings, enforce strong password protection for high-risk users, provide secure access to sensitive video recordings and text-based files, and establish robust data access control policies to protect sensitive data and files within Zoom.

DoControl

Platforms that help proactively reduce an organization's exposure to cyber attacks by locating and managing infrastructure, including SaaS, apps, and devices.

Solutions that leverage GenAI to present cybersecurity information in simple language or to generate remediation code.

Platforms that use AI and other methods to automate cybersecurity workflows, such as threat detection and remediation.

Platforms that manage or automate compliance with cybersecurity industry standards.

Solutions that help organizations test their security measures through simulated cyber attacks.

Platforms that help organizations ensure the security of open-source or third-party components used in software development.

Organizations that track and collate cyber threats, making them easier to detect and repel.

Most cybersecurity firms offer their services to enterprises on subscription bases.

AI and machine learning are heavily used in cybersecurity for automation and workflow streamlining.

Cybersecurity copilots or AI assistants leverage GenAI to display information in simple language or to generate remediation code.

Compliance management company, Hyperproof, has secured $40 million in funding led by Riverwood Capital and participated in by existing investor Tobal Capital. This brings the company's total raised funding to $66.5 million. Hyperproof intends to use the funds to enhance its platform, expand its team, and invest in go-to-market strategies. The company's valuation has reportedly doubled in just nine months.

Hyperproof

About EDGE

Contact Us

Resources

Area of Focus

Technology Research Made Effortless