Secureframe
Compliance automation platform for SaaS companies and defense contractors pursuing SOC 2, ISO 27001 and CMMC
Highlights
- New on EvolcAdded 2026-11-14
About Secureframe
Secureframe provides a compliance automation platform that automates evidence collection, continuous control monitoring, risk management and questionnaire responses. It covers frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST and CMMC 2.0, and includes a Defense package for protecting CUI and meeting CMMC requirements.
Customers are businesses that need to get and maintain security and privacy compliance and show it to their own customers, and the company states that more than 6000 customers use it. It sells subscription packages named Fundamentals, Complete and Defense; Fundamentals starts at $7,500 per year, and other tiers are priced on quote.
Secureframe was founded in 2020 and is headquartered in San Francisco. It also has offices in Denver, Austin, New York, Toronto and London, and the company reports $79M in funding from investors including Kleiner Perkins and Gradient Ventures. Current open roles are in engineering, customer success and sales, mostly based in New York.
Product: Secureframe Comply and Secureframe Defense: compliance automation software with AI-assisted remediation, trust center and questionnaire automation.
Jobs at Secureframe
More cybersecurity companies
Security Risk Advisors
Cybersecurity consulting, purple teaming and 24x7 managed SOC services for enterprises and their CISOsSalary transparentSecuritymetrics
PCI, HIPAA and CMMC compliance assessments, penetration testing and scanning for merchants, healthcare providers and defense contractorsNew on EvolcSecurityScorecard
Cybersecurity risk monitoring and third-party risk management software for organizations managing vendor supply chainsNew on EvolcSemgrep
Application security platform that scans code, open-source dependencies and secrets for developer and AppSec teamsNew on EvolcSentinelOne
AI-powered cybersecurity software for organizations' endpoints, identities, cloud workloads and AI toolsRemote-friendlySeven AI
AI security platform that automates alert investigation and response for enterprise security teamsNew on Evolc
Website technologies
Tools and platforms detected on this company’s website, grouped by purpose. Dates record when Evolc observed them.
Content management
- PrismicHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
- Website resourcedeclared script/iframe or software asset
Frontend frameworks
- Next.jsHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
- ReactMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Related technologyimplied by Next.js
- Tailwind CSSMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Hosting
- AWSHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Website resourcedeclared script/iframe or software asset
- VercelHigh confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Response headerx-vercel-id
- Response headerx-vercel-id
- Response headerx-vercel-id
Recruiting
- AshbyMedium confidence
- First detected
- Last detected
- Last checked
Detection evidence
- Page markupsoftware structure signature
- Page markupsoftware structure signature
Website detection does not establish a paid subscription or company-wide use. Tools loaded after consent or sign-in may be missed. “No longer observed” does not prove the company stopped using a tool.