[ About ]

About GRC Agents Directory

We are the neutral, data-backed directory of software agents that do GRC work: PR reviewers, evidence collectors, AI-governance agents, and compliance MCP tools. Human consultancies and classic GRC platforms belong in a services directory, not here.

What is a GRC agent (vs a GRC platform)?

A GRC agent is software whose product does governance, risk, and compliance work with some autonomy: reviewing a pull request against a control, collecting or mapping evidence, drafting or checking a policy, or answering compliance questions through a purpose-built MCP tool or skill. A GRC platform is a system you operate: it stores controls, evidence, and tasks, but a person still does the work click by click. The line we draw is who does the work, not how modern the UI looks.

• Acts, not just displays: it takes an action on a GRC task (reviews, collects, drafts, decides) rather than only recording state for a human to act on.
• Some autonomy: it runs at least one step without a person driving every click.
• Compliance is the job, not a side effect: GRC work is the product's primary purpose. A general-purpose assistant that can also be prompted to answer a compliance question, with no GRC product surface of its own, does not qualify.
• An installable agent surface: something you can wire into a repo, a CI pipeline, a chat client, or an MCP host.

Passive dashboard-only platforms and human consultancies stay on our sibling directory, ismsdirectory.com. A platform with a real agent surface can list that surface here while the parent platform stays there. Browse who clears this bar in the directory. Category definition reviewed 2026-08-14.

Eligibility

• In: PR compliance agents, chat/task GRC agents, evidence collectors, continuous monitoring agents, AI-governance reviewers, MCP servers or skills whose primary job is compliance.
• Out: pure human consultancies; dashboard-only GRC platforms with no agent surface; generic chatbots with no GRC product.
• Borderline: platforms with a real agent surface may list that surface here; the parent platform stays on ismsdirectory. Do not clone identical copy both places.

Ranking

Filter by taxonomy match; sort by recency then name. No pay-for-rank. Paid submission only skips the free queue.

Ownership

Operated by Better ISMS. See transparency.