Agent directory

ComplianceCow MCP Servers

self-hosted

Four MCP servers (Rules, Insights, Workflow, Assistant) that let AI agents create and execute compliance rules, query evidence and compliance posture, and build compliance workflows against the ComplianceCow platform.

ComplyAI MCP Server

SaaS

Enterprise MCP server from Comply that connects the ComplyAI financial-services compliance platform to AI tools, so authorized teams can build agentic workflows such as trade pre-clearances, policy guidance, and annual reviews.

IBM OpenPages MCP Server

open-source

Open-source MCP server from IBM that lets AI agents query and update IBM OpenPages GRC objects such as issues and controls over HTTP or stdio.

Secureframe MCP Server

SaaS

Hosted MCP server that exposes Secureframe compliance data as tools for AI assistants: controls, tests, vendors, frameworks, risks, and more.

Complyance AI Agents

SaaS

Configurable GRC AI agents that review evidence, draft policies, score vendor risk, and fill trust questionnaires inside the Complyance platform.

ComplyDo

SaaS

Agentic compliance graph that maps requirements, collects evidence, fills questionnaires, and watches regulatory change.

ComplyJet

SaaS

Startup SOC 2 and ISO platform with AI GRC agents for policy onboarding, control mapping, and questionnaires.

Compyl Copilot

SaaS

Ask-your-GRC-data copilot and questionnaire assist on the Compyl platform. Does not list the not-yet-GA Agent Library.

Kertos KAIA

SaaS

KAIA is Kertos's AI guide that automates European privacy and information-security compliance workflows.

Norm AI

SaaS

Regulatory AI agents that encode law and run compliance analyses, including a Microsoft 365 Copilot compliance agent.

Probo Agent

open-source

Open-source compliance platform agent that handles requirements, docs, risks, controls, and evidence for SOC 2, GDPR, HIPAA, and ISO.

Productiv AI Compliance Agent

SaaS

Named agent that logs into SaaS apps, reads contracts and privacy settings, and checks them against the company's AI policy.

Regology Compliance Agent

SaaS

Named regulatory compliance agent that maps obligations and monitors regulatory change.

ResponseHub

SaaS

Purpose-built security questionnaire automation for SaaS teams that need to answer CAIQ-style reviews without a dedicated GRC hire.

Risk Cognizance AI GRC Agents

SaaS

Named AI GRC agent fleet for governance, risk, and compliance workflows.

Scrut Teammates

SaaS

AI GRC teammates inside Scrut that evaluate evidence, fill questionnaires, score vendors, and open remediation tickets.

Scy (Scytale AI Agent)

SaaS

Scytale's named GRC AI agent for evidence review, gap scanning, policy work, and security questionnaires.

SecurityPal

SaaS

AI-drafted security questionnaire and trust-center workflows with certified analysts reviewing answers before send.

Simbian AI GRC Agent

SaaS

Named GRC agent that fills security questionnaires and portal reviews from a sourced knowledge base, with a complimentary trust center.

Skypher

SaaS

YC-backed AI agent for security, privacy, DDQ, and ESG questionnaire automation across portals and files.

Strike Graph

SaaS

AI-native compliance management platform with agentic workflows for audits, evidence, and trust.

TrustCloud TrustLens

SaaS

Agentic third-party cyber assessment surface on TrustCloud that scores vendors from outside-in and inside-out signals.

Trustero

SaaS

Multi-agent GRC system with specialized control, evidence, policy, and risk agents that work on top of an existing GRC program.

Vanta AI Agent

SaaS

Named GRC agent inside Vanta that drafts policies, checks evidence, answers questionnaires, and flags vendor risk.

Anecdotes

SaaS

Enterprise agentic GRC platform with broad integrations and pre-mapped frameworks.

ChatGPT agent workflows (compliance)

SaaS

OpenAI ChatGPT/Custom GPTs used as workflow agents for policy drafting and compliance research.

Claude (compliance workflows)

SaaS

General-purpose Anthropic Claude used via Skills/MCP for custom GRC workflows in enterprise teams.

Conveyor

SaaS

AI-assisted security questionnaire automation and trust center for B2B vendors.

Credo AI

SaaS

AI governance platform for policy, risk, and regulatory alignment across AI systems.

Cursor Bugbot

SaaS

Cursor's automated PR review agent for bugs and regressions; usage-metered agent runs on pull requests.

Drata continuous compliance

SaaS

Automated evidence collection and continuous control monitoring for security and privacy frameworks.

Endor Labs

SaaS

Dependency and reachability analysis to prioritize open-source risk for security programs.

GitHub Copilot coding agent

SaaS

GitHub-hosted agent that can implement tasks and open pull requests in your repositories.

Harvey

SaaS

Domain-specific legal AI used by firms and in-house teams for research and drafting.

heyGRC

Listed by Better ISMS (same rules as everyone)

SaaS

GitHub App that reviews every pull request for compliance impact: flags changes that put controls, evidence, or framework posture at risk.

Holistic AI

SaaS

AI risk management and governance tooling for enterprise AI portfolios.

Hyperproof

SaaS

GRC platform with AI-assisted workflows for controls, audits, and risk programs.

ISMS Copilot

Listed by Better ISMS (same rules as everyone)

SaaS

Compliance AI engine for 75+ frameworks. Chat, tasks, and account MCP so agents and practitioners run GRC work with an auditable trail.

ISMS Copilot for Agents

Listed by Better ISMS (same rules as everyone)

SaaS

Account MCP + PAT so Claude Code, Cursor, and other agents use your ISMS Copilot workspace tools directly.

ISMS Directory MCP

Listed by Better ISMS (same rules as everyone)

open-source

MCP server that lets agents search a curated directory of human GRC services and submit listings.

Legora

SaaS

AI legal workspace used by legal teams for document-heavy compliance and contract workflows.

PagerDuty Advance AI

SaaS

AI operations agents for incident response workflows with audit-friendly operational trails.

SafeBase

SaaS

Trust center and security review automation for vendor questionnaires.

Scrut Automation

SaaS

Continuous compliance automation platform for cloud-native companies across security and privacy frameworks.

Scytale AI compliance

SaaS

AI-powered compliance automation with expert-backed workflows for cloud-native companies.

Seconize DeRisk Center

SaaS

AI-driven compliance audit solution that collects evidence artifacts from IT systems.

Secureframe AI

SaaS

AI-assisted compliance automation for evidence, questionnaires, and multi-framework programs.

Semgrep Assistant

SaaS

AI-assisted static analysis triage and fix guidance for security findings in code.

Snyk Agent Fix / DeepCode AI

SaaS

Security-focused code analysis and AI fix suggestions integrated into developer workflows.

Socket

SaaS

Supply-chain security agent that monitors dependencies for malware and risk signals.

Spire

SaaS

AI-powered SOC 2 and EU AI Act compliance with continuous evidence collection.

Sprinto

SaaS

Compliance automation with continuous monitoring for SOC 2, ISO 27001, GDPR, and more.

Thoropass

SaaS

End-to-end compliance platform combining AI automation with in-house audit services.

trail

SaaS

AI governance software helping organizations comply with the EU AI Act and manage AI-specific risk.

Vanta continuous compliance automation

SaaS

Continuous control monitoring and evidence collection automation for SOC 2, ISO 27001, and related frameworks.

Vanta Trust Report AI

SaaS

AI-assisted trust and questionnaire workflows adjacent to Vanta's compliance automation suite.

Whistic

SaaS

Vendor risk automation with AI-assisted questionnaire and trust center workflows.

Zerberus.ai

SaaS

AI-driven automation to accelerate ISO 27001 and SOC 2 for SaaS companies.