A team built
for the long audit.

The thesis: compliance is real engineering, and the tooling should look like it. Our founders spent a combined eighteen years inside two of the largest GRC platforms on the market and watched them turn into slide-deck factories. Spreadsheets won by being honest. We thought we could do better than spreadsheets.

The category is forty years old. The customers — risk officers, security leaders, internal audit — were not asking for AI summaries or prettier dashboards. They were asking for a control architecture that respects the structure of the work. Frameworks are graphs. Risks are objects with state. Evidence has provenance. None of those facts should be hard to express in software.

So we wrote new software. The first version went into production in early 2024 with three design partners. Today, sixty-two organizations use VigiliaRes — including six globally systemic banks, two federal civilian agencies, and the largest non-profit hospital network in the northeast.

We are not raising a Series B. We are not selling. We are heads-down on the product. We will be here in twenty years.

Patient capital, on purpose.

A $24M Series A led by Catalysis Ventures, with participation from Section 409 Partners and a small group of operator-investors who built and scaled GRC and security companies before us.

Operator angels include the former CISO of a Fortune-50 bank, the head of risk at a tier-1 marketplace, and the engineering lead behind two of the most-deployed GRC platforms in market. Names available under NDA.