SecurityPal
SecurityPal provides an AI- and human-expert-driven cybersecurity assurance platform that automates security questionnaires, vendor assessments, trust center management, and GRC workflows for over 1,000 organizations including Fortune 500 and Global 2000 enterprises.
- Company typePrivate
- Founded2020
- HeadquartersSan Francisco, United States
- Headcount101–250
- GTM typeB2B
- OfferingSoftware
What SecurityPal does
SecurityPal is a cybersecurity assurance company founded in March 2020 and headquartered in San Francisco, California. The company has built the Hyper-Supervised Assurance Intelligence (H_SAI) platform, which combines AI with certified human analysts to automate enterprise security reviews including security questionnaires, vendor assessments, trust center management, audit readiness, GRC tasks, DDQs, RFPs, and security redlines. The platform serves more than 1,000 organizations ranging from high-growth startups to publicly traded enterprises, including Fortune 500 and Global 2000 companies such as OpenAI, Figma, MongoDB, Supabase, Plaid, Snap, Grammarly, and Airtable. SecurityPal reports its platform processes over $10 billion in enterprise contract value monthly and has completed more than 3 million security assurance questions to date, claiming 99% accuracy versus 55-62% for standard off-the-shelf LLMs.
The company operates a 24/7 Security Assurance Command Center (SACC) in Kathmandu, Nepal, spanning 35,000 square feet and staffed by 150+ multilingual certified cybersecurity professionals. This global operations hub provides human verification and oversight for AI outputs and supports tiered offerings: Basecamp (self-serve AI), Summit (guided AI with concierge support), and Everest (fully managed service with embedded analysts). The platform architecture includes H_SAI as the core operating system, multi-model routing across OpenAI, Anthropic Claude, and Google Gemini, an AI Ontology that tests outputs against a per-customer 'constitution', Mission Control for request orchestration, and a modular product suite comprising Questionnaire Concierge, Knowledge Library, Trust Center, Vendor Assess (TPRM), vCISO services, SecurityPal Flows for workflow automation, Concierge Agents (specialized AI agents launching from December 2025), and a SecurityPal plugin for Anthropic's Claude Code. The platform integrates with 700+ native tools spanning GRC, CRM, identity, communication, and productivity stacks.
SecurityPal generates revenue through tiered SaaS subscriptions (Basecamp, Summit, Everest), usage-based pricing for Concierge Agents, and embedded professional services. Go-to-market combines direct enterprise field sales targeting Fortune 500/Global 2000, inside sales for mid-market and high-growth SaaS companies, product-led growth via the self-serve Basecamp tier, and thought leadership through the SecurityPal Council (an advisory body with members from OpenAI, MongoDB, Perforce, Snap, and Orum). The company has raised $21 million in a single Series A round in September 2022 led by Craft Ventures, with angel participation from Martin Casado (Andreessen Horowitz), Frederic Kerrest (Okta), Anne Raimondi (Asana), Iman Abuzeid (Incredible Health), and Dev Nag. As of 2025-2026, the company supports 1,000+ organizations, employs approximately 200 people globally, and continues expanding its product surface with agentic AI capabilities and workflow automation.
SecurityPal firmographics
Firmographics- Name
- SecurityPal
- Legal name
- SecurityPal AI Inc.
- Website
- https://securitypalhq.com
- Company type
- Private
- Founded year
- 2020
- Operating status
- Operating
- Headcount range
- 101–250 employees
- Short description
- SecurityPal provides an AI- and human-expert-driven cybersecurity assurance platform that automates security questionnaires, vendor assessments, trust center management, and GRC workflows for over 1,000 organizations including Fortune 500 and Global 2000 enterprises.
- Ownership category
- akta.pro rank
SecurityPal industry classification
Industry- Product category
- Cybersecurity Assurance Platform
- NAICS
- Computer Systems Design and Related Services (5415)
- SIC
- Services-Computer Integrated Systems Design (7373)
- akta.pro primary industry
- Secrets Management & Credential Security (HDADACAH)
- akta.pro secondary industries
- API Security, Auth & Rate Limiting (BPAMAOAF), Secrets Management (Passwords, API Keys, Tokens) (HDADAFAD)
Keywords
Where SecurityPal is headquartered
LocationHeadquarters
- HQ city
- San Francisco
- HQ country
- United States
- HQ region
- North America
Offices3 records
Markets served
SecurityPal business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SaaS Subscription (Tiered): Three-tier pricing model: Basecamp (self-serve AI), Summit (Guided AI with Concierge), Everest (Fully Managed Service). Tiered based on service level and features.
- Usage-Based Pricing: Primary driver for Concierge Agents pricing is usage instead of users. Customers pay for what they use. Each agent completes 10 large projects per month on average with option to scale on demand.
- Professional Services: Embedded senior analyst team with full program ownership, vCISO services, and end-to-end customer assurance and TPRM program management.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Basecamp: Self-Service AI Software Only |
| Hybrid | Annual | Summit: Guided AI with Concierge |
| Hybrid | Multi-year contract | Everest: Fully Managed Service |
| Usage-based | Pay-as-you-go | Concierge Agents Usage-Based Pricing |
Go-to-market motion4 records
Distribution channels4 records
Marketing channels7 records
SecurityPal product offering
Product offeringCore offering
SecurityPal provides an AI-powered cybersecurity assurance management platform that combines its proprietary H_SAI (Hyper-Supervised Assurance Intelligence) engine with a 24/7 Security Assurance Command Center staffed by 150+ certified analysts to complete security questionnaires, vendor risk assessments, trust center documentation, and GRC tasks. The platform is delivered through tiered subscriptions (Basecamp, Summit, Everest), usage-based Concierge Agents, and embedded vCISO services, processing over $10 billion in enterprise contract value monthly and more than 3 million security assurance questions to date.
Product overview
SecurityPal offers a platform-plus-modules architecture centered on its Cybersecurity Assurance Management Platform (CAMP), which combines AI-powered automation with expert human oversight. The core H_SAI (Hyper-Supervised Assurance Intelligence) engine unifies organizational security context with frontier AI models and certified human analysts. The platform's primary modules include: Questionnaire Concierge for rapid security questionnaire completion; Knowledge Library as a centralized source of truth for security controls; Trust Center for self-service security documentation; Vendor Assess (TPRM) for third-party risk management; and Concierge Agents - specialized AI agents that handle security assurance workflows. Additional offerings include vCISO services for embedded security leadership, SecurityPal Flows for workflow automation, and SecurityPal for Claude Code plugin for AI assistant integration. The platform processes over $10 billion in enterprise contract value monthly and has completed over 3 million security assurance questions. The company operates a 24/7 Security Assurance Command Center staffed by 150+ certified analysts to provide human verification of all AI outputs.
Differentiator
Problem solved
Functional benefit
Products and services
- Assurance Management Platform (AMP) End-to-end cybersecurity assurance platform combining AI concierge agents with human review to generate vetted security answers for enterprise sales cycles, including security questionnaires, vendor assessments, trust center management, and GRC tasks. Targeted at Fortune 500, Global 2000, and category-defining enterprises.
- Concierge Agents Specialized AI agents that act as always-on, time-zone agnostic extensions of enterprise security, compliance, and GTM teams, handling core security assurance workflows at machine speed with human oversight for high-risk interpretation. Priced on usage, integrated natively into Slack, Teams, and email.
- Questionnaire Concierge
Quantifiable outcome
- 99% accuracy vs 55-62% for standard AI models (ChatGPT 62%, Claude 60%, Gemini 55%)
- +8 more outcomes
Companies that use SecurityPal
Customer profileNamed customers20 records
Segments4 records
Ideal customer profiles4 records
SecurityPal technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration20 records
AI capability8 records
Feature14 records
SecurityPal partnerships and signals
Strategic signalPartnerships
Twelve partnerships are on record, tiered minor and core.
- Team DayāminorPartnership to fund construction of a primary school in Western Terai region of Nepal. SecurityPal provided $10,000 matching funds. CEO Pukar Hamal is from rural Nepalese village in Western Terai.
- OpenAIcoreMember of SecurityPal Council. Leading AI company collaborating on security assurance best practices and product innovation shaping.
- MongoDBcoreMember of SecurityPal Council. CISO Lena Smart served as Head of Trust at SecurityPal. Deep partnership on knowledge library and assurance profile implementations.
- PerforcecoreLaunched 11 Knowledge Libraries with SecurityPal. Now rolling out Customer Assurance Profile. Active member of SecurityPal Council.
- SnapcoreMember of SecurityPal Council. Enterprise customer using SecurityPal for security assurance.
- OrumcoreMember of SecurityPal Council. Reduced security questionnaire completion time from 4-6 weeks to several days using SecurityPal.
- SupabasecoreReference customer with case study. Partnership saves over 80 hours of manual work per week. Supabase flag taken to summit of Mount Everest to celebrate $500M Series F. $10 billion valuation.
- TavuscoreGenerative video platform using SecurityPal's Assurance Management Platform for enterprise security requirements including biometric data. Case study customer.
- Google CloudcoreBuilt on enterprise-grade Google Cloud architecture with stringent, isolated security controls. Provides infrastructure for SecurityPal's platform.
- OpenAI (LLM Provider)coreDynamically leverages OpenAI's LLMs as part of frontier models. Optimized for accuracy without vendor lock-in.
- Anthropic (Claude)coreDynamically leverages Claude as part of frontier models. Powers H_SAI system for security assurance.
- Google (Gemini)coreDynamically leverages Gemini as part of frontier models. Multi-model routing for optimal accuracy.
Scale indicators17 records
Expansion highlights6 records
SecurityPal competitors and assessment
Company assessmentDirect peers
- Whistic: Whistic offers a proactive vendor security assessment platform with a Trust Catalog and AI-assisted questionnaire workflows. It directly competes with SecurityPal's Trust Center and Vendor Assess (TPRM) products.
- Kintent: Kintent offers a TrustShare platform for automated security questionnaire response, trust portals, and compliance evidence sharing. It is a direct peer to SecurityPal's Trust Center and Knowledge Library products in the questionnaire automation niche.
- Drata: Drata provides continuous compliance automation and security questionnaire response tooling, with a Trust Center and AI-assisted questionnaire completion. It competes head-to-head with SecurityPal in the same buyer segment (security/GRC teams at growth-stage and enterprise SaaS).
- Laika: Laika combines compliance automation with security questionnaire response and a trust center, targeting B2B SaaS companies similar to SecurityPal's Basecamp and Summit tiers. It is a direct peer in the compliance-plus-questionnaire category.
- Vanta: Vanta is a leading trust management platform that automates compliance (SOC 2, ISO 27001, HIPAA) and security questionnaire workflows for B2B SaaS companies. It directly overlaps with SecurityPal's questionnaire automation, TPRM, and Trust Center offerings, serving many of the same high-growth SaaS customers.
- Secureframe: Secureframe automates compliance and security audits with questionnaire and evidence collection features. It serves a similar mid-market and enterprise SaaS customer base and overlaps with SecurityPal's audit readiness, compliance, and questionnaire workflows.
- Conveyor: Conveyor is focused specifically on security questionnaire automation and customer trust, with a Trust Center and AI-powered questionnaire response capabilities. It is the most product-comparable pure-play to SecurityPal's Questionnaire Concierge and Trust Center modules.
Broad incumbents
- OneTrust: OneTrust is a broad trust intelligence platform with deep GRC, privacy, ethics, and security questionnaire/tprm capabilities. It is a much larger incumbent serving Fortune 500 buyers with overlapping but more general-purpose offerings versus SecurityPal's specialized assurance focus.
Emerging players
- Hyperproof: Hyperproof is a compliance operations platform that helps security teams manage controls, evidence, and audits. It has partial overlap with SecurityPal's vendor assessments and audit readiness offerings but is less focused on questionnaire automation.
- Thoropass (formerly Laika's compliance product lineage): Thoropass provides compliance automation and audit support for SOC 2, ISO 27001, and other frameworks, with growing AI questionnaire assistance features. It has partial overlap with SecurityPal's audit readiness and questionnaire modules.
Market position
Strengths4 records
Weaknesses4 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
SecurityPal social profiles
Digital presenceSecurityPal compliance and trust
Trust signalCompliance2 records
SecurityPal financial estimates
Financial estimateRevenue estimate
Valuation estimate
SecurityPal leadership team
Management profileNumber of profiles
Profiles6 records
SecurityPal funding detail
Funding detailFunding overview
Funding rounds2 records
Investors3 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
SecurityPal M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about SecurityPal
What does SecurityPal do?
SecurityPal provides an AI-powered cybersecurity assurance management platform that combines its proprietary H_SAI (Hyper-Supervised Assurance Intelligence) engine with a 24/7 Security Assurance Command Center staffed by 150+ certified analysts to complete security questionnaires, vendor risk assessments, trust center documentation, and GRC tasks. The platform is delivered through tiered subscriptions (Basecamp, Summit, Everest), usage-based Concierge Agents, and embedded vCISO services, processing over $10 billion in enterprise contract value monthly and more than 3 million security assurance questions to date.
Is SecurityPal a public or private company?
SecurityPal is a private company. It is classified as venture growth investor backed and is currently operating.
When was SecurityPal founded?
SecurityPal was founded in 2020. It employs 101 to 250 people.
Where is SecurityPal based?
SecurityPal is headquartered in San Francisco, United States, in the North America region.
How does SecurityPal make money?
Three revenue lines are on record. SaaS Subscription (Tiered) is the primary driver. The others are usage-Based Pricing and professional Services.
Who are SecurityPal's main competitors?
Direct peers on record are Whistic, Kintent, Drata, Laika, Vanta, Secureframe and Conveyor. OneTrust is listed as a broad incumbent. Emerging players are Hyperproof and Thoropass (formerly Laika's compliance product lineage).
Does SecurityPal have an API?
Yes. SecurityPal offers an authenticated API that allows Claude Code CLI to access the SecurityPal Knowledge Library. Developers can use personal access tokens to connect external tools to SecurityPal's knowledge base, enabling AI assistants to answer security questions using content stored in the customer's SecurityPal Knowledge Library. The API supports document management including adding, updating, and removing documents from the Knowledge Library. Developer documentation is at app.securitypalhq.com/settings#api.
What industry is SecurityPal in?
SecurityPal's product category is Cybersecurity Assurance Platform. Its primary akta.pro industry code is HDADACAH, Secrets Management & Credential Security, with a secondary code of BPAMAOAF, API Security, Auth & Rate Limiting. Its NAICS code is 5415 and its SIC code is 7373.