# GRC Agents Directory: full catalog
# 34 live agents

## Anecdotes
Enterprise agentic GRC platform with broad integrations and pre-mapped frameworks.
- Jobs: evidence, monitoring, audit prep, chat/tasks
- Frameworks: SOC 2, ISO 27001, GDPR, NIST CSF, ISO 42001
- Integrations: API, Jira, Slack
- Deployment: SaaS; residency: multi
- URL: https://www.anecdotes.ai
- Details: https://grcagents.io/agents/anecdotes

## ChatGPT agent workflows (compliance)
OpenAI ChatGPT/Custom GPTs used as workflow agents for policy drafting and compliance research.
- Jobs: chat/tasks, policy
- Frameworks: ISO 27001, SOC 2, GDPR
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://chatgpt.com
- Details: https://grcagents.io/agents/chatgpt-compliance-workflows

## Claude (compliance workflows)
General-purpose Anthropic Claude used via Skills/MCP for custom GRC workflows in enterprise teams.
- Jobs: chat/tasks, policy, audit prep
- Frameworks: ISO 27001, SOC 2, GDPR, EU AI Act
- Integrations: MCP, Claude, API
- Deployment: SaaS; residency: multi
- URL: https://claude.ai
- Details: https://grcagents.io/agents/claude-compliance-workflows

## Conveyor
AI-assisted security questionnaire automation and trust center for B2B vendors.
- Jobs: vendor risk, chat/tasks
- Frameworks: SOC 2, ISO 27001, GDPR
- Integrations: API, Slack
- Deployment: SaaS; residency: US
- URL: https://www.conveyor.com
- Details: https://grcagents.io/agents/conveyor

## Credo AI
AI governance platform for policy, risk, and regulatory alignment across AI systems.
- Jobs: AI governance, policy, audit prep
- Frameworks: EU AI Act, ISO 42001, NIST AI RMF
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://www.credo.ai
- Details: https://grcagents.io/agents/credo-ai

## Cursor Bugbot
Cursor's automated PR review agent for bugs and regressions; usage-metered agent runs on pull requests.
- Jobs: PR review
- Frameworks: n/a
- Integrations: GitHub, Cursor
- Deployment: SaaS; residency: US
- URL: https://cursor.com
- Details: https://grcagents.io/agents/cursor-bugbot

## Drata continuous compliance
Automated evidence collection and continuous control monitoring for security and privacy frameworks.
- Jobs: evidence, monitoring, audit prep
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, PCI DSS
- Integrations: API, Slack, Jira
- Deployment: SaaS; residency: US
- URL: https://drata.com
- Details: https://grcagents.io/agents/drata-automation

## Endor Labs
Dependency and reachability analysis to prioritize open-source risk for security programs.
- Jobs: monitoring, vendor risk
- Frameworks: ISO 27001, SOC 2
- Integrations: GitHub, API
- Deployment: SaaS; residency: US
- URL: https://www.endorlabs.com
- Details: https://grcagents.io/agents/endor-labs

## GitHub Copilot coding agent
GitHub-hosted agent that can implement tasks and open pull requests in your repositories.
- Jobs: PR review, chat/tasks
- Frameworks: n/a
- Integrations: GitHub
- Deployment: SaaS; residency: US
- URL: https://github.com/features/copilot
- Details: https://grcagents.io/agents/github-copilot-coding-agent

## Harvey
Domain-specific legal AI used by firms and in-house teams for research and drafting.
- Jobs: policy, chat/tasks
- Frameworks: GDPR
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://www.harvey.ai
- Details: https://grcagents.io/agents/harvey

## heyGRC
GitHub App that reviews every pull request for compliance impact: flags changes that put controls, evidence, or framework posture at risk.
- Jobs: PR review
- Frameworks: ISO 27001, SOC 2, GDPR, NIS2, DORA, ISO 42001, EU AI Act
- Integrations: GitHub, API
- Deployment: SaaS; residency: multi
- URL: https://heygrc.com
- Details: https://grcagents.io/agents/heygrc
- Note: house product (Better ISMS), same ranking rules

## Holistic AI
AI risk management and governance tooling for enterprise AI portfolios.
- Jobs: AI governance, monitoring
- Frameworks: EU AI Act, ISO 42001, NIST AI RMF
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://www.holisticai.com
- Details: https://grcagents.io/agents/holistic-ai

## Hyperproof
GRC platform with AI-assisted workflows for controls, audits, and risk programs.
- Jobs: audit prep, evidence, policy
- Frameworks: SOC 2, ISO 27001, GDPR, NIST CSF
- Integrations: API, Jira, Slack
- Deployment: SaaS; residency: US
- URL: https://hyperproof.io
- Details: https://grcagents.io/agents/hyperproof

## ISMS Copilot
Compliance AI engine for 75+ frameworks. Chat, tasks, and account MCP so agents and practitioners run GRC work with an auditable trail.
- Jobs: chat/tasks, policy, audit prep
- Frameworks: ISO 27001, SOC 2, GDPR, NIS2, DORA, ISO 42001, EU AI Act, HIPAA
- Integrations: API, MCP, Claude, Cursor
- Deployment: SaaS; residency: EU
- URL: https://www.ismscopilot.com
- Details: https://grcagents.io/agents/isms-copilot
- Note: house product (Better ISMS), same ranking rules

## ISMS Copilot for Agents
Account MCP + PAT so Claude Code, Cursor, and other agents use your ISMS Copilot workspace tools directly.
- Jobs: chat/tasks, policy
- Frameworks: ISO 27001, SOC 2, GDPR, NIS2, DORA, ISO 42001
- Integrations: MCP, Claude, Cursor, API
- Deployment: SaaS; residency: EU
- URL: https://www.ismscopilot.com/products/agents
- Details: https://grcagents.io/agents/isms-copilot-for-agents
- Note: house product (Better ISMS), same ranking rules

## ISMS Directory MCP
MCP server that lets agents search a curated directory of human GRC services and submit listings.
- Jobs: chat/tasks
- Frameworks: ISO 27001, SOC 2, GDPR, NIS2, DORA
- Integrations: MCP, Claude, Cursor, API
- Deployment: open-source; residency: EU
- URL: https://ismsdirectory.com
- Details: https://grcagents.io/agents/ismsdirectory-mcp
- Note: house product (Better ISMS), same ranking rules

## Legora
AI legal workspace used by legal teams for document-heavy compliance and contract workflows.
- Jobs: policy, chat/tasks
- Frameworks: GDPR
- Integrations: API
- Deployment: SaaS; residency: EU
- URL: https://legora.com
- Details: https://grcagents.io/agents/legora

## PagerDuty Advance AI
AI operations agents for incident response workflows with audit-friendly operational trails.
- Jobs: monitoring, chat/tasks
- Frameworks: DORA, ISO 27001, SOC 2
- Integrations: API, Slack
- Deployment: SaaS; residency: multi
- URL: https://www.pagerduty.com
- Details: https://grcagents.io/agents/pagerduty-advance

## SafeBase
Trust center and security review automation for vendor questionnaires.
- Jobs: vendor risk, chat/tasks
- Frameworks: SOC 2, ISO 27001, GDPR
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://safebase.io
- Details: https://grcagents.io/agents/safebase

## Scrut Automation
Continuous compliance automation platform for cloud-native companies across security and privacy frameworks.
- Jobs: evidence, monitoring, audit prep
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://www.scrut.io
- Details: https://grcagents.io/agents/scrut-automation

## Scytale AI compliance
AI-powered compliance automation with expert-backed workflows for cloud-native companies.
- Jobs: evidence, audit prep, monitoring
- Frameworks: SOC 2, ISO 27001, GDPR, ISO 42001
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://scytale.ai
- Details: https://grcagents.io/agents/scytale-ai

## Seconize DeRisk Center
AI-driven compliance audit solution that collects evidence artifacts from IT systems.
- Jobs: evidence, audit prep, monitoring
- Frameworks: ISO 27001, SOC 2, NIST CSF
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://seconize.com
- Details: https://grcagents.io/agents/seconize

## Secureframe AI
AI-assisted compliance automation for evidence, questionnaires, and multi-framework programs.
- Jobs: evidence, audit prep, vendor risk
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
- Integrations: API, Slack
- Deployment: SaaS; residency: US
- URL: https://secureframe.com
- Details: https://grcagents.io/agents/secureframe-ai

## Semgrep Assistant
AI-assisted static analysis triage and fix guidance for security findings in code.
- Jobs: PR review, monitoring
- Frameworks: n/a
- Integrations: GitHub, GitLab, API
- Deployment: SaaS; residency: US
- URL: https://semgrep.dev
- Details: https://grcagents.io/agents/semgrep-assistant

## Snyk Agent Fix / DeepCode AI
Security-focused code analysis and AI fix suggestions integrated into developer workflows.
- Jobs: PR review, monitoring
- Frameworks: n/a
- Integrations: GitHub, GitLab, API
- Deployment: SaaS; residency: multi
- URL: https://snyk.io
- Details: https://grcagents.io/agents/snyk-agent-fix

## Socket
Supply-chain security agent that monitors dependencies for malware and risk signals.
- Jobs: monitoring, PR review
- Frameworks: ISO 27001, SOC 2
- Integrations: GitHub, API
- Deployment: SaaS; residency: US
- URL: https://socket.dev
- Details: https://grcagents.io/agents/socket

## Spire
AI-powered SOC 2 and EU AI Act compliance with continuous evidence collection.
- Jobs: evidence, audit prep, AI governance
- Frameworks: SOC 2, EU AI Act
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://www.spire.ai
- Details: https://grcagents.io/agents/spire

## Sprinto
Compliance automation with continuous monitoring for SOC 2, ISO 27001, GDPR, and more.
- Jobs: evidence, monitoring, audit prep
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA
- Integrations: API, Slack
- Deployment: SaaS; residency: multi
- URL: https://sprinto.com
- Details: https://grcagents.io/agents/sprinto

## Thoropass
End-to-end compliance platform combining AI automation with in-house audit services.
- Jobs: evidence, audit prep
- Frameworks: SOC 2, ISO 27001, HIPAA, GDPR
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://thoropass.com
- Details: https://grcagents.io/agents/thoropass

## trail
AI governance software helping organizations comply with the EU AI Act and manage AI-specific risk.
- Jobs: AI governance, policy, audit prep
- Frameworks: EU AI Act, ISO 42001
- Integrations: API
- Deployment: SaaS; residency: EU
- URL: https://www.trail-ml.com
- Details: https://grcagents.io/agents/trail

## Vanta continuous compliance automation
Continuous control monitoring and evidence collection automation for SOC 2, ISO 27001, and related frameworks.
- Jobs: evidence, monitoring, audit prep
- Frameworks: SOC 2, ISO 27001, GDPR, HIPAA, ISO 42001
- Integrations: API, Slack, Jira
- Deployment: SaaS; residency: US
- URL: https://www.vanta.com
- Details: https://grcagents.io/agents/vanta-automation

## Vanta Trust Report AI
AI-assisted trust and questionnaire workflows adjacent to Vanta's compliance automation suite.
- Jobs: vendor risk, chat/tasks
- Frameworks: SOC 2, ISO 27001
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://www.vanta.com
- Details: https://grcagents.io/agents/vanta-trust-report-ai

## Whistic
Vendor risk automation with AI-assisted questionnaire and trust center workflows.
- Jobs: vendor risk
- Frameworks: SOC 2, ISO 27001, GDPR
- Integrations: API
- Deployment: SaaS; residency: US
- URL: https://www.whistic.com
- Details: https://grcagents.io/agents/whistic

## Zerberus.ai
AI-driven automation to accelerate ISO 27001 and SOC 2 for SaaS companies.
- Jobs: evidence, audit prep, policy
- Frameworks: ISO 27001, SOC 2
- Integrations: API
- Deployment: SaaS; residency: multi
- URL: https://zerberus.ai
- Details: https://grcagents.io/agents/zerberus-ai