{
  "version": 1,
  "generated_at": "2026-08-03T16:58:46.247Z",
  "source": "competitor-tracker-api",
  "licence": {
    "id": "CC-BY-4.0",
    "url": "https://creativecommons.org/licenses/by/4.0/",
    "attribution": "Competitor Tracker & Co. — https://competitortracker.io"
  },
  "canonical": "https://competitortracker.io/industries/soc-2-compliance-automation-software/2026-q2/",
  "self": "https://competitortracker.io/data/industries/soc-2-compliance-automation-software/2026-q2.json",
  "track": {
    "mode": "industry",
    "url": "https://app.competitortracker.io/track/soc-2-compliance-automation-software",
    "label_id": "019f295f-7b26-7039-840d-adf8f5565de4"
  },
  "industry": {
    "slug": "soc-2-compliance-automation-software",
    "name": "SOC 2 Compliance Automation Software",
    "label_id": "019f295f-7b26-7039-840d-adf8f5565de4",
    "url": "https://competitortracker.io/industries/soc-2-compliance-automation-software/2026-q2/",
    "data_url": "https://competitortracker.io/data/industries/soc-2-compliance-automation-software.json"
  },
  "window": {
    "quarter": "2026-Q2",
    "quarter_slug": "2026-q2",
    "since": "2026-04-01T00:00:00.000Z",
    "until": "2026-06-30T23:59:59.999Z",
    "published_at": "2026-06-30T23:59:59.999Z"
  },
  "summary": {
    "changes_total": 558,
    "by_priority": {
      "high": 0,
      "medium": 0,
      "low": 0
    },
    "by_category": {}
  },
  "companies": [
    {
      "id": "019f295f-ea3a-702b-b469-64bbc9da5243",
      "name": "A Lign",
      "domain": "a-lign.com",
      "slug": "a-lign",
      "url": "https://competitortracker.io/companies/a-lign/",
      "data_url": "https://competitortracker.io/data/companies/a-lign.json",
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added AI Governance and AS9100 services and unveiled AI ASCEND platform capabilities.",
          "source_url": "https://www.a-lign.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Expanded NIST 800-171 services from one assessment to six: readiness, self-assessment scoring, third-party assessment, remediation, CMMC Level 2 certification, and ongoing monitoring.",
          "source_url": "https://www.a-lign.com/service/fisma"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Homepage hero text changed to 'Rigor, made repeatable' and value proposition shifted to emphasize expert judgment, technology, and proven process.",
          "source_url": "https://www.a-lign.com/service/fisma"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 56,
        "shipping_volume": 59,
        "raw_change_count": 22
      }
    },
    {
      "id": "019f295f-ff1f-7024-bfae-a91f3f632062",
      "name": "Anecdotes",
      "domain": "anecdotes.ai",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Anecdotes added 'Stop Compromising' value-proposition framework across governance, risk, compliance, and accuracy pillars.",
          "source_url": "https://www.anecdotes.ai"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added enterprise features: Findings Management, Auto Risk Calculation, and Multi-Entity Management.",
          "source_url": "https://www.anecdotes.ai"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Anecdotes removed legacy capabilities: Data Delegation, Scale Advisor, and Screenshot Activator.",
          "source_url": "https://www.anecdotes.ai"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 24,
        "shipping_volume": 44,
        "raw_change_count": 10
      }
    },
    {
      "id": "019f2961-3c12-7003-91c2-fd6650fb6e04",
      "name": "Apptega",
      "domain": "apptega.com",
      "slug": "apptega",
      "url": "https://competitortracker.io/companies/apptega/",
      "data_url": "https://competitortracker.io/data/companies/apptega.json",
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Apptega released a report finding that 90% of security providers face market differentiation challenges.",
          "source_url": "https://www.apptega.com/solutions/consulting-firms-security-compliance"
        },
        {
          "code": "IA",
          "category": "Integrations and APIs",
          "description": "Apptega Hero copy rewritten to target MSSPs and security teams, citing 75% manual work reduction and fast ROI.",
          "source_url": "https://www.apptega.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Learn menu featured headline changed from Third-Party Risk Manager enhancement to Operating System for security, risk, and compliance transformation.",
          "source_url": "https://www.apptega.com/platform/assessment-manager"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 68,
        "shipping_volume": 72,
        "raw_change_count": 36
      }
    },
    {
      "id": "019f2960-645a-7002-b984-2e168ca47307",
      "name": "Auditboard",
      "domain": "auditboard.com",
      "slug": "auditboard",
      "url": "https://competitortracker.io/companies/auditboard/",
      "data_url": "https://competitortracker.io/data/companies/auditboard.json",
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Controls Management, Autonomous Testing, and AI Governance products; removed SOXHUB; renamed ITRM to Cyber Risk Management.",
          "source_url": "https://www.auditboard.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Replaced ESG product with Business Continuity Management (BCM) in platform product listings; 1 related product and capability change reinforced the same Business Continuity Management signal.",
          "source_url": "https://www.auditboard.com/platform/services"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Redesigned homepage hero and value proposition, pivoting from 'AI-first GRC' to 'GRC Intelligence' with agentic positioning and solution-based modules.",
          "source_url": "https://www.auditboard.com"
        }
      ],
      "movement": {
        "quadrant": "slow_burn",
        "novelty": 50,
        "shipping_volume": 25,
        "raw_change_count": 5
      }
    },
    {
      "id": "019f2960-858b-7023-9abb-400e42a63f9b",
      "name": "Certification Automation By Onetrust",
      "domain": "onetrust.com",
      "slug": "onetrust",
      "url": "https://competitortracker.io/companies/onetrust/",
      "data_url": "https://competitortracker.io/data/companies/onetrust.json",
      "changes": [
        {
          "code": "IA",
          "category": "Integrations and APIs",
          "description": "Certification Automation By Onetrust added AI agents, data discovery across 200+ connectors, dynamic data graphs, and AI-accelerated assessments.",
          "source_url": "https://www.onetrust.com/content/onetrust/us/en/platform"
        },
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Removed free trial offer; hero and nav CTAs changed from 'Free trial' to 'Contact Sales' / 'Talk to Sales'.",
          "source_url": "https://www.onetrust.com/products/certification-automation"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Certification Automation By Onetrust expanded framework library from over 20 to 50+ and added NIS2 as a newly supported framework.",
          "source_url": "https://www.onetrust.com/products/certification-automation"
        }
      ],
      "movement": {
        "quadrant": "slow_burn",
        "novelty": 78,
        "shipping_volume": 47,
        "raw_change_count": 9
      }
    },
    {
      "id": "019f2961-757f-7019-87e9-5340dffb77bd",
      "name": "Trycomp",
      "domain": "trycomp.ai",
      "slug": "comp-ai",
      "url": "https://competitortracker.io/companies/comp-ai/",
      "data_url": "https://competitortracker.io/data/companies/comp-ai.json",
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Trycomp reduced free-plan emphasis and pushed demo bookings and workflow-fit language, shifting conversion toward sales-led evaluation.",
          "source_url": "https://www.trycomp.ai"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Trycomp added expert-run penetration testing with remediation tracking and final report generation.",
          "source_url": "https://www.trycomp.ai/tools"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added FedRAMP, NIST, and PCI DSS to supported compliance frameworks.",
          "source_url": "https://www.trycomp.ai/demo"
        }
      ],
      "movement": {
        "quadrant": "shipping_steadily",
        "novelty": 39,
        "shipping_volume": 65,
        "raw_change_count": 36
      }
    },
    {
      "id": "019f2961-8aa9-7030-a2fd-2cf7acdbea91",
      "name": "Complyjet",
      "domain": "complyjet.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "IA",
          "category": "Integrations and APIs",
          "description": "Complyjet Increased supported integrations from 200+ to 350+.",
          "source_url": "https://www.complyjet.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added product modules: Questionnaire Automation, Risk Management, Vendor Risk Management, Access Reviews, Policy Management, Personnel Management, Security Awareness Training, MDM Agent, and Vulnerability Management.",
          "source_url": "https://www.complyjet.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Expanded supported compliance frameworks to over 25, adding NIST CSF, HITRUST, ISO 42001, and custom frameworks.",
          "source_url": "https://www.complyjet.com"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 32,
        "shipping_volume": 32,
        "raw_change_count": 7
      }
    },
    {
      "id": "019f2960-0f1f-7019-9aa8-6f6d299cba86",
      "name": "Compyl",
      "domain": "compyl.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added FAIR-based risk quantification with Monte Carlo simulations.",
          "source_url": "https://www.compyl.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Introduced industry-specific GRC programs for Financial Services, Healthcare, Legal, Insurance, Energy & Utilities, and Higher Education.",
          "source_url": "https://www.compyl.com"
        },
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Compyl expanded framework coverage to include ISO 42001, CCPA, and NIS2.",
          "source_url": "https://www.compyl.com"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 28,
        "shipping_volume": 28,
        "raw_change_count": 7
      }
    },
    {
      "id": "019f2960-2290-702d-942e-da8dfc10df5b",
      "name": "Controlmap",
      "domain": "controlmap.io",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Controlmap added AI Copilot module to interpret requirements, review evidence, draft documentation, and answer questionnaires.",
          "source_url": "https://www.controlmap.io"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added CMMC SSP and SPRS generation tools with GovCloud hosting for defense industrial base clients.",
          "source_url": "https://www.controlmap.io"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Replaced employee-facing My Compliance Portal with multi-tenant client-facing Trust Portals and Trust Center.",
          "source_url": "https://www.controlmap.io"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 72,
        "shipping_volume": 81,
        "raw_change_count": 44
      }
    },
    {
      "id": "019f2961-ab97-7036-b082-8bb5c2fb2038",
      "name": "Cybersierra",
      "domain": "cybersierra.co",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Cybersierra removed \"Who It Is For\" buyer persona section featuring CISO, Head of Compliance, Group CISO, and IT Governance/CII Operator roles.",
          "source_url": "https://cybersierra.co/analyst/ccm"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added air-gapped, on-premises, and bring-your-own-model deployment options with 140+ integrations to existing stacks.",
          "source_url": "https://cybersierra.co"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Cybersierra Rebranded product name from \"Controls Break AI Analyst\" to \"Continuous Controls Monitoring AI Analyst\" throughout the page.",
          "source_url": "https://cybersierra.co/analyst/ccm"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 87,
        "shipping_volume": 90,
        "raw_change_count": 54
      }
    },
    {
      "id": "019f2960-32e7-7003-86c9-77ba6aead15e",
      "name": "Cypago",
      "domain": "cypago.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added support for ISO 42001 and NIST AI RMF compliance frameworks.",
          "source_url": "https://www.cypago.com"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Added contact form with name, company, email, and country fields to pricing page.",
          "source_url": "https://cypago.com/pricing/"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 47,
        "shipping_volume": 13,
        "raw_change_count": 2
      }
    },
    {
      "id": "019f2960-761d-7008-88bb-7d8c9d2375ec",
      "name": "Delve",
      "domain": "delve.co",
      "slug": "delve",
      "url": "https://competitortracker.io/companies/delve/",
      "data_url": "https://competitortracker.io/data/companies/delve.json",
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Added Startup, Midmarket, and Enterprise segments with tailored value propositions.",
          "source_url": "https://www.delve.co/product/company/startup"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Delve added segment- and framework-based top navigation.",
          "source_url": "https://www.delve.co/product/framework/iso-27001"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Expanded product offering to cover SOC 2, HIPAA, ISO 27001, GDPR, PCI-DSS, and ISO 42001 compliance frameworks.",
          "source_url": "https://www.delve.co/product/company/enterprise"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 90,
        "shipping_volume": 84,
        "raw_change_count": 46
      }
    },
    {
      "id": "019f2960-4405-7025-b1eb-20a34fef5035",
      "name": "Drata",
      "domain": "drata.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Top promo banner swapped from AI Agent Governance early-access pitch to The State of GRC in the Age of AI report.",
          "source_url": "https://drata.com"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Replaced featured resource card: 'The Modern Enterprise GRC Buyer's Handbook' swapped for 'State of GRC in the Age of AI'.",
          "source_url": "https://drata.com/solutions/size/enterprise"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 10,
        "shipping_volume": 10,
        "raw_change_count": 2
      }
    },
    {
      "id": "019f2961-9b17-7007-9cf4-4d417d05578c",
      "name": "Hicomply",
      "domain": "hicomply.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Hicomply Demo form stripped of contact fields; only Company headcount and referral source remain.",
          "source_url": "https://www.hicomply.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added United States regional site with country selector and /en-us localized page paths.",
          "source_url": "https://www.hicomply.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Page localization changed from United Kingdom to United States; 1 related product and capability change reinforced the same United Kingdom signal.",
          "source_url": "https://www.hicomply.com"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 16,
        "shipping_volume": 19,
        "raw_change_count": 5
      }
    },
    {
      "id": "019f2960-53e5-702c-a014-fda2324442f8",
      "name": "Hyperproof",
      "domain": "hyperproof.io",
      "slug": "hyperproof",
      "url": "https://competitortracker.io/companies/hyperproof/",
      "data_url": "https://competitortracker.io/data/companies/hyperproof.json",
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Hyperproof added product screenshot showing the \"Standardize your risk intake\" interface.",
          "source_url": "https://hyperproof.io/product/risk-management/"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Policy Management as a standalone product module with a dedicated page.",
          "source_url": "https://hyperproof.io"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Launched a dedicated Audit Management product page (previously linked to the Compliance product page).",
          "source_url": "https://hyperproof.io"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 53,
        "shipping_volume": 78,
        "raw_change_count": 39
      }
    },
    {
      "id": "019f2961-f115-702e-9b4f-b94d5e7380f8",
      "name": "Kertos",
      "domain": "kertos.io",
      "slug": "kertos",
      "url": "https://competitortracker.io/companies/kertos/",
      "data_url": "https://competitortracker.io/data/companies/kertos.json",
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Refreshed integration partner showcase, adding Hive, Okta, Rippling, Workday, UKG Pro, Zelt, and other logos.",
          "source_url": "https://www.kertos.io/en/frameworks/tisax"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Privacy Management, Information Security, and AI Governance compliance platform modules.",
          "source_url": "https://www.kertos.io/en/solutions/fintech"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Kertos removed DORA from supported regulations.",
          "source_url": "https://www.kertos.io/en/frameworks/gdpr"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 81,
        "shipping_volume": 87,
        "raw_change_count": 52
      }
    },
    {
      "id": "019f2961-bd6a-702f-a96b-8976c5bb451d",
      "name": "Orbiq",
      "domain": "orbiqhq.com",
      "slug": "orbiq",
      "url": "https://competitortracker.io/companies/orbiq/",
      "data_url": "https://competitortracker.io/data/companies/orbiq.json",
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Orbiq Rebranded page as B2B SaaS compliance hub; updated title and description; added GDPR Article Cluster link table; condensed Articles 28 and 32.",
          "source_url": "https://www.orbiqhq.com/eu-regulations/gdpr-article-28-32-33-34"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added AI Search, Vendor Assurance, and Slack Integration as platform modules.",
          "source_url": "https://www.orbiqhq.com"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Removed Trust Center detail blocks: Branded Public Profile, Restricted Evaluation Space, and NDA-protected Deep Dive.",
          "source_url": "https://www.orbiqhq.com"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 39,
        "shipping_volume": 38,
        "raw_change_count": 7
      }
    },
    {
      "id": "019f2961-e099-7001-a609-48335819d174",
      "name": "Regscale",
      "domain": "regscale.com",
      "slug": "regscale",
      "url": "https://competitortracker.io/companies/regscale/",
      "data_url": "https://competitortracker.io/data/companies/regscale.json",
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Regscale replaced homepage statistics with updated framework count and FedRAMP 20x package timeline claims.",
          "source_url": "https://www.regscale.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Government Contractors industry vertical to Solutions mega-menu with dedicated page; 3 related product and capability changes reinforced the same Added Government Contractors signal.",
          "source_url": "https://www.regscale.com/product-policy-and-compliance/"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Compliance profiles expanded from 7 to 83, adding CCF V4 frameworks and High, Low, and Moderate impact-level filters.",
          "source_url": "https://regscale.com/compliance-catalogs-and-profiles/"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 61,
        "shipping_volume": 75,
        "raw_change_count": 34
      }
    },
    {
      "id": "019f2960-9797-7000-98c1-bf5cd7c9a395",
      "name": "Scrut",
      "domain": "scrut.io",
      "slug": "scrut",
      "url": "https://competitortracker.io/companies/scrut/",
      "data_url": "https://competitortracker.io/data/companies/scrut.json",
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Scrut Startup offering messaging shifted from speed-to-compliance to continuous audit-readiness.",
          "source_url": "https://www.scrut.io"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Introduced AI-native architecture featuring a common data layer, reinforcement learning, cross-domain intelligence, and an open MCP server.",
          "source_url": "https://www.scrut.io"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Scrut Increased supported frameworks from 60+ to 70+.",
          "source_url": "https://www.scrut.io"
        }
      ],
      "movement": {
        "quadrant": "shipping_steadily",
        "novelty": 35,
        "shipping_volume": 50,
        "raw_change_count": 15
      }
    },
    {
      "id": "019f2960-bb5f-703b-b48b-c9b5a7d005db",
      "name": "Scytale",
      "domain": "scytale.ai",
      "slug": "scytale",
      "url": "https://competitortracker.io/companies/scytale/",
      "data_url": "https://competitortracker.io/data/companies/scytale.json",
      "changes": [
        {
          "code": "IA",
          "category": "Integrations and APIs",
          "description": "Scytale added Azure Monitor, GCP Cloud Logging, GCP Cloud Monitoring, GCP Security Command Center, Azure Databases for MySQL Flexible Server, Azure Resource Manager, and NinjaOne integrations.",
          "source_url": "https://scytale.ai/integrations/"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added AI governance, People compliance, executive insights, and Regulatory Radar as platform capabilities.",
          "source_url": "https://scytale.ai/all-features/"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added CMMC framework support and expanded framework coverage from 40+ to 60+ security, privacy, and AI frameworks.",
          "source_url": "https://scytale.ai"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 61,
        "shipping_volume": 53,
        "raw_change_count": 15
      }
    },
    {
      "id": "019f2960-cef4-7001-9d43-52f477778e28",
      "name": "Secureframe",
      "domain": "secureframe.com",
      "slug": "secureframe",
      "url": "https://competitortracker.io/companies/secureframe/",
      "data_url": "https://competitortracker.io/data/companies/secureframe.json",
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Secureframe added Germany, Spain, and France locale options linking to localized pricing pages.",
          "source_url": "https://secureframe.com/pricing"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Secureframe added User Access Reviews and Auditor Module.",
          "source_url": "https://secureframe.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Replaced C3PAO Partner Network feature with Real-time SPRS Scoring and redirected Expert Support and Assessment-Ready Package toward self-assessment and SPRS submission.",
          "source_url": "https://secureframe.com/cmmc"
        }
      ],
      "movement": {
        "quadrant": "shipping_steadily",
        "novelty": 19,
        "shipping_volume": 68,
        "raw_change_count": 37
      }
    },
    {
      "id": "019f2960-e19f-703a-bb2a-4c7a4297dff1",
      "name": "Sprinto",
      "domain": "sprinto.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Homepage hero and value proposition rewritten as 'world's first Autonomous Trust Platform' with trust-stage journey and competitive comparison messaging.",
          "source_url": "https://sprinto.com"
        }
      ],
      "movement": {
        "quadrant": "slow_burn",
        "novelty": 84,
        "shipping_volume": 16,
        "raw_change_count": 3
      }
    },
    {
      "id": "019f2960-f2b4-701a-9cc6-8ee77e2ad3cb",
      "name": "Strikegraph",
      "domain": "strikegraph.com",
      "slug": "strike-graph",
      "url": "https://competitortracker.io/companies/strike-graph/",
      "data_url": "https://competitortracker.io/data/companies/strike-graph.json",
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Trust Center feature to the platform's Product menu; 1 related product and capability change reinforced the same Added Trust Center signal.",
          "source_url": "https://www.strikegraph.com/measure/security-certifications"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Moved 'System Security Plan (SSP)' to 'Pen testing' section in product navigation.",
          "source_url": "https://www.strikegraph.com/action-items"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Replaced inline lead-capture forms and email fields with button-only CTAs for demos and downloads.",
          "source_url": "https://www.strikegraph.com/built-for-ai"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 13,
        "shipping_volume": 35,
        "raw_change_count": 7
      }
    },
    {
      "id": "019f2961-04a7-702e-9261-9583802f8d07",
      "name": "Thoropass",
      "domain": "thoropass.com",
      "slug": "thoropass",
      "url": "https://competitortracker.io/companies/thoropass/",
      "data_url": "https://competitortracker.io/data/companies/thoropass.json",
      "changes": [
        {
          "code": "IA",
          "category": "Integrations and APIs",
          "description": "Thoropass added ADP integrations, clarifying ecosystem fit for buyers evaluating workflow coverage.",
          "source_url": "https://thoropass.com/platform/integrations"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Thoropass added Vulnerability Scanning to product offerings.",
          "source_url": "https://thoropass.com/platform/access-reviews"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Sam Li (CEO & Co-founder) and Austin Ogilvie (Executive Chairperson & Co-founder) to leadership team.",
          "source_url": "https://thoropass.com/startups"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 65,
        "shipping_volume": 56,
        "raw_change_count": 20
      }
    },
    {
      "id": "019f2961-1554-7037-be07-121d009f3cc6",
      "name": "Trustcloud",
      "domain": "trustcloud.ai",
      "slug": "trustcloud",
      "url": "https://competitortracker.io/companies/trustcloud/",
      "data_url": "https://competitortracker.io/data/companies/trustcloud.json",
      "changes": [
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Trustcloud added 'hallucination-free' accuracy claim to the Security Assurance Platform description.",
          "source_url": "https://www.trustcloud.ai"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Enhanced TrustLens with agentic third-party cyber assessments using outside-in security signals and inside-out control assurance.",
          "source_url": "https://www.trustcloud.ai"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Added top banner citing IDC analyst recognition of Application Assurance as a GRC advancement.",
          "source_url": "https://www.trustcloud.ai"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 24,
        "shipping_volume": 41,
        "raw_change_count": 9
      }
    },
    {
      "id": "019f2961-2ba7-7035-997e-20b5c166d2e9",
      "name": "Trustero",
      "domain": "trustero.com",
      "slug": null,
      "url": null,
      "data_url": null,
      "changes": [
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Trustero added RCSA automation solution for risk and controls self-assessment programs.",
          "source_url": "https://www.trustero.com"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added modules: Evidence Management, Continuous Control Monitoring, Policy and Control Assessment, TI Playbooks, Requests, Reports and Dashboards, and Trust Portal.",
          "source_url": "https://www.trustero.com"
        },
        {
          "code": "MP",
          "category": "Messaging and positioning",
          "description": "Product messaging pivoted from standalone AI tools (AI Suite, Control Assurance) to an agent-driven functional architecture.",
          "source_url": "https://www.trustero.com"
        }
      ],
      "movement": {
        "quadrant": "lying_low",
        "novelty": 44,
        "shipping_volume": 22,
        "raw_change_count": 6
      }
    },
    {
      "id": "019f2961-4fec-7014-b53b-230fcfdf5273",
      "name": "Vanta",
      "domain": "vanta.com",
      "slug": "vanta",
      "url": "https://competitortracker.io/companies/vanta/",
      "data_url": "https://competitortracker.io/data/companies/vanta.json",
      "changes": [
        {
          "code": "PP",
          "category": "Pricing and packaging",
          "description": "Vanta removed inline demo request form from 'Request a demo to get started' section.",
          "source_url": "https://www.vanta.com/products/grc"
        },
        {
          "code": "PF",
          "category": "Product and capability",
          "description": "Added Customer Commitments product to track and manage commitments.",
          "source_url": "https://www.vanta.com"
        },
        {
          "code": "SC",
          "category": "Security, compliance and access",
          "description": "Vanta Framework overlap stats changed: HIPAA 65%→40%, GDPR 40%→35%.",
          "source_url": "https://www.vanta.com/products/soc-2"
        }
      ],
      "movement": {
        "quadrant": "making_moves",
        "novelty": 75,
        "shipping_volume": 62,
        "raw_change_count": 29
      }
    }
  ],
  "quiet_companies": [
    {
      "id": "019f2961-cdbe-7007-bd44-47cad27efd9e",
      "name": "Isms.",
      "domain": "isms.online",
      "slug": "isms-online",
      "url": "https://competitortracker.io/companies/isms-online/",
      "data_url": "https://competitortracker.io/data/companies/isms-online.json"
    },
    {
      "id": "019f2961-61df-700b-8fe8-b448d95ad2f9",
      "name": "Oneleet",
      "domain": "oneleet.com",
      "slug": null,
      "url": null,
      "data_url": null
    }
  ],
  "scoring": {
    "version": "v3-independent-novelty-density",
    "quadrants": {
      "top_left": "Shipping steadily",
      "top_right": "Making moves",
      "bottom_left": "Lying low",
      "bottom_right": "Slow burn"
    },
    "notes": "Scores are deterministic rank-normalized coordinates from quarter-window API changes. Shipping volume measures activity volume, source diversity, signal diversity, and materiality. Novelty is intentionally independent from volume: strategic/newness signal density, launch language, high-novelty signal mix, and materiality are dampened by raw change volume so routine high-volume movers can land in Shipping Steadily and selective strategic launches can land in Slow Burn. LLMs do not choose coordinates. V2 renders points in density-aware, spatially balanced highlight batches capped at 20 companies every three seconds; dense maps split into smaller batches when needed for readability."
  }
}
