Allgress
Procurement partnerAbout
Allgress provides an award-winning, automated Governance, Risk, and Compliance (GRC) platform that modernizes risk management with a strategic, policy-driven approach. The platform streamlines complex GRC processes including policy assessments, compliance management, vendor risk, and vulnerability management, supporting organizations from small hospitals to Fortune 500 enterprises. Allgress also offers managed services and virtual CISO support to help organizations navigate compliance requiremen...
Details
VenSearch Intelligence
Ideal Customer
- Allgress positions itself as a full-featured GRC platform without the cost and complexity of enterprise-grade alternatives, making SMBs and mid-market organizations its primary sweet spot.
- Its partnership with Intellicomply specifically targets small to medium-sized businesses needing rapid risk assessments with fewer resources.
Key Differentiators
- Allgress differentiates on cost simplicity and speed-to-value, claiming customers derive value in days rather than months compared to competing GRC platforms, and marketing itself as a 'full-featured GRC without the cost and complexity.' Its patented Business Risk Intelligence engine powers an 'assess once, use many' cross-compliance mapping approach that supports unlimited regulatory frameworks simultaneously.
- The platform's AI-powered Rixena tool claims to cut regulatory monitoring time by 60–80%, while its ComplianceVision tool uniquely maps an organization's compliance posture across 1,500+ security vendor solutions.
Industries Served
- Allgress primarily serves industries with high compliance and regulatory burdens, with particular strength in healthcare, financial services, retail, energy/oil and gas, high tech, telecom, utilities, and the public sector.
- The company has dedicated FedRAMP compliance tooling for government and federal contractor use cases, and its Rixena regulatory intelligence tool covers frameworks such as HIPAA, NIST, PCI DSS, ISO 27001, GDPR, SOC2, and FedRAMP.
Service Coverage
- Allgress is a US-headquartered SaaS company based in Dublin (formerly Livermore), California, with a primary focus on North American customers but operating globally.
- In February 2021, the company announced the opening of an international office in Bedfordview, Gauteng, South Africa to support customers in the Middle East Africa (MEA) region and establish local partnerships.
Partnerships
- Allgress sells largely through channel resellers, MSPs, and MSSPs under its #poweredbyAllgress partner ecosystem, which includes partners such as Intellicomply.
- Key technology integration partnerships include ServiceNow, Jira, Tenable, Rapid7, Qualys, Nessus, and AWS (including an AWS Marketplace presence and certified compliance platform designation).
Company Size & Ownership
- Allgress was founded around 2006–2008 by Gordon Shevlin, Jeff Bennett, and Raj Raghavan, with co-founders having previously built and sold SiegeWorks and SiegeWorks International to FishNet Security.
- The company is very small, with current employee counts ranging from approximately 15–27 depending on the source, and is estimated to generate approximately $5.5–$5.7 million in annual revenue.
Compliance & Certifications
- Allgress's platform is built to help customers achieve and maintain compliance across a wide range of frameworks including HIPAA, NIST 800-53, PCI DSS, ISO 27001, GDPR, SOC 2, FedRAMP, FISMA, DFARS 171, and Sarbanes-Oxley, among many others.
- The company holds 3 patents related to its Business Risk Intelligence engine.
Compiled from public sources by VenSearch · Last researched October 13, 2026
Offerings
14 offeringsAllgress Platform
The Allgress Platform is an integrated, award-winning GRC platform that uses an 'assess once, use many' approach to streamline compliance across unlimited regulatory frameworks via cross-compliance mapping. It supports API connectivity with over 50 third-party intelligence, data analytics, and content feeds through Allgress Connectors, and is designed for organizations ranging from small hospitals to Fortune 500 enterprises with rapid implementation and intuitive workflows.
AutoAttest
AutoAttest is listed as a distinct solution offering within the Allgress platform. It is presented as a separate product in the solutions navigation menu alongside other compliance and risk management tools.
Automated Vendor Assessment
Automated Vendor Assessment is a solution offered by Allgress for assessing third-party vendors. It is listed as a distinct product in the solutions navigation menu as part of the broader Allgress GRC platform.
Compliance Management
Compliance Management is a dedicated solution within the Allgress platform designed to help organizations manage regulatory compliance requirements. It is listed as a distinct offering in the solutions navigation menu.
Exceptions Management
Exceptions Management is a distinct solution within the Allgress GRC platform. It is listed separately in the solutions navigation menu as part of the platform's suite of risk and compliance tools.
FedRAMP Compliance
FedRAMP Compliance is a dedicated solution within the Allgress platform specifically addressing Federal Risk and Authorization Management Program requirements. It is listed as a distinct offering in the solutions navigation menu.
Incident Management
Incident Management is a distinct solution offered within the Allgress GRC platform. It is listed separately in the solutions navigation menu as part of the platform's comprehensive risk and compliance suite.
Managed Services
Allgress Managed Services provides expert GRC oversight, streamlined processes, and regulatory adherence support, going beyond outsourcing to run business functions end-to-end in partnership with the client's team. The service is designed to reduce risk and help secure organizations by providing expertise, skills, and hands-on management of GRC functions. Allgress also connects organizations with experienced Virtual CISOs through this offering.
Policy Gap Analyzer
Policy Gap Analyzer is a distinct solution within the Allgress platform that simplifies policy assessments by identifying compliance gaps in minutes rather than days. It is listed separately in the solutions navigation menu as part of the platform's suite of GRC tools.
Policy Management
Policy Management is a dedicated solution within the Allgress GRC platform for managing organizational security and compliance policies. It is listed as a distinct offering in the solutions navigation menu.
Risk Register Management
Risk Register Management is a distinct solution within the Allgress platform for tracking and managing organizational risk registers. It is listed separately in the solutions navigation menu as part of the broader GRC suite.
Rixena
Rixena is an AI-powered regulatory change intelligence tool that continuously monitors state and federal regulations, automatically assesses uploaded policies for gaps, and delivers proactive alerts with step-by-step remediation guidance. It supports a wide range of frameworks including HIPAA, NIST, PCI DSS, ISO 27001, GDPR, SOC2, FedRAMP, and many others. The solution claims to cut regulatory monitoring time by 60-80% by automating tracking and policy review workflows.
Third Party Vendor Risk Management
Third Party Vendor Risk Management is a dedicated solution within the Allgress platform for assessing and managing risks associated with third-party vendors. It is listed as a distinct offering in the solutions navigation menu.
Vulnerability Management
Vulnerability Management is a distinct solution within the Allgress GRC platform for identifying and managing security vulnerabilities. It is listed separately in the solutions navigation menu as part of the platform's comprehensive risk and compliance suite.
Considering Allgress?
Our team will work with you to determine if Allgress is the right fit for your organization. From research and assessment through procurement negotiation and ongoing vendor management — we handle the entire process at no cost to you.