6clicks
6clicks is an AI-powered Governance, Risk and Compliance (GRC) platform founded in 2019 in Melbourne, Australia, serving government, defense, critical infrastructure, regulators, and complex enterprises — and the advisors and MSPs that support them — across APAC, the Americas, EMEA, and the GCC.
- Company typePrivate
- Founded2019
- HeadquartersMelbourne, Australia
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What 6clicks does
6clicks is an Australian-founded software company that builds an AI-powered Governance, Risk and Compliance (GRC) platform for organizations with complex, regulated, or sovereign data requirements. Founded in Melbourne in 2019 and operating through affiliated contracting entities in Australia, the United States, and the United Kingdom, the company targets government agencies, defense contractors, critical infrastructure operators, regulators, large complex enterprises, and the advisors and managed service providers that serve them. The product is structured as a platform-plus-modules architecture: the 6clicks GRC Core engine and Hub & Spoke multi-tenant architecture sit at the center, surrounded by modules for Cyber GRC, Security Compliance, IT Risk Management, Vendor Risk Management (TPRM), ISMS, Operational Resilience, Enterprise Risk Management, and Responsible AI, all backed by a pre-built Content Library of hundreds of standards and frameworks including ISO 27001, NIST CSF, DORA, SOC 2, CMMC, Essential Eight, and ISO 42001.
The platform's technical differentiation rests on Hailey AI — a GRC-native AI engine introduced at founding in 2019 that combines generative AI, knowledge retrieval over a proprietary evidence-to-control-to-framework-to-risk Knowledge Graph, continuous control monitoring, and Agentic Connectivity via MCP-based workflows that integrate OT environments, legacy systems, and air-gapped networks. Deployment is offered as hyperscaler SaaS, sovereign cloud, self-hosted, or a certified 6clicks GRC Appliance for air-gapped environments. 6clicks monetizes primarily through annual SaaS subscriptions priced on a Spoke-based model (full Spokes starting at approximately $6,000 and scaling with organizational size), with all-inclusive unlimited-user licensing, no implementation fees, and a partner program of 150+ advisors and MSPs that earn 20–30% revenue share and can white-label the platform. Distribution combines direct enterprise field sales targeting CISOs and risk leaders, a global advisor and MSP channel, and self-serve evaluation for smaller prospects, with procurement facilitated by certifications such as IRAP Protected (Australia), DESC CSP (UAE), ISO 27001, and ISO 42001, and by inclusion on the NASPO ValuePoint Cloud Solutions contract in the United States.
6clicks firmographics
Firmographics- Name
- 6clicks
- Legal name
- 6clicks Trading Pty Ltd
- Website
- https://6clicks.com
- Company type
- Private
- Founded year
- 2019
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- 6clicks is an AI-powered Governance, Risk and Compliance (GRC) platform founded in 2019 in Melbourne, Australia, serving government, defense, critical infrastructure, regulators, and complex enterprises — and the advisors and MSPs that support them — across APAC, the Americas, EMEA, and the GCC.
- Ownership category
- akta.pro rank
6clicks industry classification
Industry- Product category
- Governance, Risk, and Compliance (GRC) Software
- NAICS
- Software Publishers (513210), Custom Computer Programming Services (541511), Computer Systems Design and Related Services (54151)
- SIC
- Services-Prepackaged Software (7372), Services-Computer Programming, Data Processing, Etc. (7370)
- akta.pro primary industry
- Compliance, GRC Workflow & Audit Automation Platforms (HDAEAHAL)
- akta.pro secondary industries
- GRC Platforms & Workflow Automation (HDADAIAA), AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA), Risk, Controls & Governance (GRC) Platforms (FSAFAOAG)
Keywords
Where 6clicks is headquartered
LocationHeadquarters
- HQ city
- Melbourne
- HQ country
- Australia
- HQ region
- Oceania
Offices3 records
Markets served
6clicks business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Technology or R&D, Personnel, Marketing or Sales, Operations, Infrastructure
Revenue model
- SaaS Subscription - Spoke-based Licensing: Annual subscription model based on organizational size and number of Spokes required. All-inclusive pricing includes unlimited users, storage, records, and full access to platform functionality. Assessment-only Spokes available in bundles for initial engagements, with seamless upgrade path to full Spokes for ongoing management.
- Partner Revenue Share: Partners (advisors and MSPs) resell or deliver GRC services using the platform, earning revenue share of 20-30% based on partner tier. Partners can white-label the platform and embed their own IP.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | All-inclusive SaaS subscription with unlimited users and features |
| Unit Pricing | Annual | Assessment-only Spokes for initial client engagements |
| Subscription | Annual | Full Spoke for ongoing GRC management |
Go-to-market motion3 records
Distribution channels4 records
Marketing channels7 records
6clicks product offering
Product offeringCore offering
6clicks provides an AI-powered GRC (governance, risk, and compliance) software platform that automates audit, risk, compliance, and third-party risk management workflows. The platform is built around the Hailey AI engine and a GRC Knowledge Graph that maps evidence to controls, controls to frameworks, and frameworks to risk, and it supports deployment via hyperscaler SaaS, sovereign cloud, self-hosted, or a certified air-gapped GRC Appliance. It is sold through annual SaaS subscriptions to enterprises, government, defense, critical infrastructure operators, and to advisors/MSPs who resell and deliver GRC services.
Product overview
6clicks is a unified GRC (Governance, Risk, and Compliance) platform with a platform-plus-modules architecture. The core GRC Core platform powers intelligent risk and compliance management through a Knowledge Graph that connects evidence to controls, controls to frameworks, and frameworks to risk. The platform includes AI-powered Hailey for automation and insights, and offers deployment flexibility through Sovereign Infrastructure options including cloud, on-prem, or air-gapped appliance deployments. Key modules include Cyber GRC, Security Compliance, IT Risk Management, Vendor Risk Management, ISMS, Operational Resilience, Enterprise Risk Management, and Responsible AI. The Hub & Spoke architecture enables multi-entity governance for enterprises, advisors, and MSPs. The Content Library provides pre-built frameworks including ISO 27001, NIST CSF, DORA, SOC 2, CMMC, and ISO 42001.
Differentiator
Problem solved
Functional benefit
Brands
- Hailey AI: AI engine that powers integrated audit, risk, compliance, and TPRM workflows, with knowledge graph that connects evidence, controls, frameworks, and risk.
- Hub & Spoke
- 6clicks GRC Appliance
Products and services
- 6clicks Platform (GRC Core) The central GRC platform and intelligent risk and compliance engine, featuring a GRC Knowledge Graph that connects evidence to controls, controls to frameworks, and frameworks to risk, supporting audit, risk, compliance, and third-party risk management workflows for enterprises, advisors, and MSPs.
- Hailey AI AI engine for GRC automation, delivering audit response generation, compliance mapping, policy gap analysis, control and risk generation, and platform-wide natural language search. Recognized as a 2024 Gartner Cool Vendor in Third-Party Risk Management.
- Cyber GRC
- Security Compliance Compliance management module for security-related frameworks and regulatory requirements.
- IT Risk Management Information technology risk identification, assessment, and management capabilities.
- Vendor Risk Management Third-party risk management (TPRM) module for assessing and monitoring vendor security and compliance risks.
- ISMS Information Security Management System module for implementing and maintaining ISO 27001 and related standards.
- Operational Resilience Business continuity and operational resilience management module.
- Enterprise Risk Management Organizational-level risk management module providing enterprise-wide risk visibility and governance.
- Responsible AI AI governance and compliance management module supporting organizations adopting AI systems, including ISO 42001 and other AI regulatory frameworks.
- 6clicks GRC Appliance Certified hardware appliance for sovereign GRC deployment in air-gapped networks and classified environments where cloud deployment is not an option, targeting government, defense, and critical infrastructure operators.
- Content Library Pre-built library of hundreds of standards, frameworks, control sets, and assessment templates covering ISO 27001, NIST CSF, ASD Essential Eight, DORA, SOC 2, ISM and IRAP, UK Cyber Essentials, PCI DSS, CMMC, and ISO 42001.
Quantifiable outcome
- AI-powered compliance mapping saves MSPs 60% of delivery time
- +2 more outcomes
Companies that use 6clicks
Customer profileNamed customers11 records
Segments6 records
Ideal customer profiles5 records
6clicks technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration2 records
AI capability7 records
Feature7 records
6clicks partnerships and signals
Strategic signalPartnerships
Five partnerships are on record, tiered core, major and strategic.
- NASPO ValuePointcoreAdded to NASPO ValuePoint Cloud Solutions contract in the United States, enabling government agencies to procure 6clicks GRC solutions through established government procurement channels.
- Tata Consultancy Services (TCS)majorGlobal IT services partner offering GRC services to clients using the 6clicks platform. Displayed as customer logo on 6clicks website.
- NTT DatamajorGlobal IT services company partnering with 6clicks to deliver GRC solutions to enterprise clients. Displayed as customer logo on 6clicks website.
- MicrosoftstrategicTechnology partnership for cloud hosting (Microsoft Azure), Power BI connector for reporting, and co-marketing initiatives. Azure provides cloud hosting and infrastructure services for the 6clicks platform.
- ServiceNowstrategicNative integration with ServiceNow CMDB enabling asset-centric approach to risk and compliance management. Allows organizations to leverage existing ServiceNow investments while using 6clicks for GRC.
Scale indicators5 records
Recent moves6 records
Expansion highlights6 records
6clicks competitors and assessment
Company assessmentBroad incumbents
- ServiceNow GRC: ServiceNow's Integrated Risk Management (IRM) module is a leading enterprise GRC platform tightly integrated with its broader workflow suite. 6clicks has a native CMDB integration with ServiceNow and is directly comparable on integrated risk, compliance, and audit workflows.
- NAVEX Global: NAVEX Global is a long-established ethics, compliance, and risk management software provider covering whistleblower, policy management, and GRC. It is a broader incumbent competitor to 6clicks in enterprise ethics and compliance program management.
Direct peers
- RSA Archer: RSA Archer is a long-standing enterprise GRC platform covering operational risk, regulatory compliance, audit, and third-party risk. It is a primary competitor to 6clicks in regulated enterprise and financial services GRC deployments.
- OneTrust: OneTrust is a broad trust intelligence platform spanning privacy, GRC, ethics, and ESG, with strong AI governance and TPRM offerings. It competes directly with 6clicks on enterprise GRC and AI governance, and is named alongside 6clicks in RegTech100 recognition.
- LogicGate Risk Cloud: LogicGate offers a no-code GRC workflow platform for risk, compliance, and third-party risk management, targeting mid-market and enterprise customers. Its workflow automation approach closely parallels 6clicks' Hub & Spoke and Hailey AI-driven compliance mapping.
- AuditBoard: AuditBoard is a leading cloud-based audit, risk, and compliance management platform with strong SOX, operational risk, and IT risk modules. It is a direct peer in enterprise GRC and is frequently evaluated alongside 6clicks for audit and risk consolidation.
- Diligent (Galvanize): Diligent acquired Galvanize to build out its GRC and audit software suite, including ACL for continuous monitoring. It is a leading enterprise GRC competitor to 6clicks, particularly in board governance, audit, and risk analytics.
Emerging players
- Vanta: Vanta automates SOC 2, ISO 27001, and other compliance audits with continuous monitoring for SMB and mid-market. While smaller in scope than 6clicks, it is a fast-growing adjacent player in compliance automation and AI-driven TPRM, both areas where 6clicks competes.
- Drata: Drata is a compliance automation and continuous monitoring platform focused on SOC 2, ISO 27001, and emerging AI frameworks. It competes with 6clicks' Security Compliance and Vendor Risk modules in the mid-market segment and is rapidly expanding upmarket.
- Hyperproof: Hyperproof is a SaaS compliance and risk management platform with strong evidence collection, control mapping, and framework coverage. It directly overlaps with 6clicks' Security Compliance, ISMS, and IT Risk modules, particularly for mid-market enterprise customers.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
6clicks social profiles
Digital presence6clicks compliance and trust
Trust signalCompliance5 records
6clicks financial estimates
Financial estimateRevenue estimate
Valuation estimate
6clicks leadership team
Management profileNumber of profiles
Profiles4 records
6clicks funding detail
Funding detailFunding overview
Funding rounds7 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
6clicks M&A and investment
M&A and investmentM&A1 record
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about 6clicks
What does 6clicks do?
6clicks provides an AI-powered GRC (governance, risk, and compliance) software platform that automates audit, risk, compliance, and third-party risk management workflows. The platform is built around the Hailey AI engine and a GRC Knowledge Graph that maps evidence to controls, controls to frameworks, and frameworks to risk, and it supports deployment via hyperscaler SaaS, sovereign cloud, self-hosted, or a certified air-gapped GRC Appliance. It is sold through annual SaaS subscriptions to enterprises, government, defense, critical infrastructure operators, and to advisors/MSPs who resell and deliver GRC services.
Is 6clicks a public or private company?
6clicks is a private company. It is classified as venture growth investor backed and is currently operating.
When was 6clicks founded?
6clicks was founded in 2019. It employs 51 to 100 people.
Where is 6clicks based?
6clicks is headquartered in Melbourne, Australia, in the Oceania region.
How does 6clicks make money?
Two revenue lines are on record. SaaS Subscription - Spoke-based Licensing is the primary driver. The others are partner Revenue Share.
Who are 6clicks's main competitors?
Broad incumbents on record are ServiceNow GRC and NAVEX Global. Direct peers are RSA Archer, OneTrust, LogicGate Risk Cloud, AuditBoard and Diligent (Galvanize). Emerging players are Vanta, Drata and Hyperproof.
Does 6clicks have an API?
Yes. The Developer API enables the Platform to integrate with other systems or applications. The API supports connecting to OT environments, legacy systems, and air-gapped networks, with MCP-based agent workflows for AI-driven integrations and CLI-based connectivity for restricted environments. The API is used for custom integrations, syncing with enterprise tools like ServiceNow CMDB, and extending platform functionality. Developer documentation is at knowledgebase.6clicks.com.
What industry is 6clicks in?
6clicks's product category is Governance, Risk, and Compliance (GRC) Software. Its primary akta.pro industry code is HDAEAHAL, Compliance, GRC Workflow & Audit Automation Platforms, with a secondary code of HDADAIAA, GRC Platforms & Workflow Automation. Its NAICS code is 513210 and its SIC code is 7372.