CATAAM

CATAAM is a unified governance, risk and compliance (GRC) platform for teams that want compliance and real security posture in one place. It automates evidence collection and continuous control monitoring for SOC 2, ISO 27001, HIPAA, PCI-DSS, NIST CSF and ISO 42001, with cross-framework control mapping so one piece of evidence satisfies many controls. Unlike pure compliance-automation tools, CATAAM builds in internal & external attack surface management, breach & attack simulation, vendor risk, and AI-native controls (Prompt Guard for secret-leak prevention, the OKF context engine, and ThreatHunter CVE intelligence). Priced from $1,490/yr, with a 14-day free trial and no credit card required.