ZeroRisk - Compliance that forms around you. The agent does the work.

Hey Product Hunt 👋 Lara here, from ZeroRisk. We first launched here as Done-for-You Vendor Risk Management. You sent us your vendor list, we monitored it and kept your paperwork audit-ready. That part works exactly as it did. But customers kept coming back with the rest of their compliance program, the parts vendor monitoring doesn't touch, so we built those too. ZeroRisk is now a full GRC platform. What we've added since Compliance profile. It works out which frameworks actually apply to your business and why: required, recommended or not applicable, with the reasoning written out per row rather than a generic checklist you have to interpret. Asset register. Every dataset, system and business function classified once, mapped to the frameworks it falls under and linked to the vendors that handle it. Your vendor assessments are scoped from here, so you assess the right vendors at the right depth rather than guessing from a list someone typed into a spreadsheet. Readiness agent. Point it at your organization and it pre-fills your SOC 2 or ISO 27001 assessment from your profile and the documents you upload, each answer with a confidence score. You confirm the rest in a short interview instead of staring at a blank questionnaire. Gaps arrive with the control and policy already drafted. Same principle throughout: the agent drafts, you decide. Nothing is marked done without a control, evidence and your signature, because "the AI said so" isn't something an auditor accepts. On pricing We publish ours, from $149 per month, with what's included at each tier laid out on the page. Almost nobody in this category publishes anything at all, and we'd rather be the ones who do. The gap report is free if you want to see what it actually produces. Answer a few questions and the agent maps where you stand on every framework that applies to you. Would love your feedback. I'll be in the comments all day, so ask me anything about how it works.