Agent Index by Heritage Services
Submit / Claim
Home / Agents / KaitoSec AI agents (agentic ISMS and GRC platform)

KaitoSec AI agents (agentic ISMS and GRC platform)

Vendor: KaitoSec (KaitoSec GmbH) · HQ: Germany · Category: Compliance · Risk

Last verified · Added · 6 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

KaitoSec is a Berlin-based GRC platform covering information security (ISMS), AI management (AIMS), business continuity (BCMS), data protection, supplier risk and audit on one data model, with framework coverage including ISO 27001, BSI IT-Grundschutz, NIS2, DORA, SOC 2, TISAX, ISO 22301, ISO 42001 and the EU AI Act. Per its AI page, KaitoSec's agents import existing registers and documents, check them against the methodology (for example the six phases of BSI IT-Grundschutz), find gaps and turn them into tasks with an owner and due date; they prepare the risk analysis, statement of applicability and actions from audit reports, propose risk assessments, derive controls from requirements, collect and assign evidence and prepare audit responses. The AI works on the record itself: when something changes (a backup that has now been tested, for example) it reassesses the risk and shows the change for confirmation. KaitoSec says agents prepare and people decide: every suggestion is reasoned and only takes effect after approval. Hosting is in Germany, customer data is not used for model training, the agent keeps the user's permissions, and customers' own AI assistants can read and write registers through an MCP server and API. KaitoSec GmbH also sells ISMS consulting and certification support. Pricing is not published.

Frameworks (vendor-stated)

ISO 27001DORA

Vendor-claimed ISO 27001, BSI IT-Grundschutz, NIS2, DORA, SOC 2, TISAX, ISO 22301, ISO 42001, EU AI Act, GDPR

Pricing (as published)

Not published

Tasks

gap analysiscontrol mappingrisk assessmentevidence collectionpolicy management

Integrations (vendor-listed)

AWSAzureGCPMicrosoft 365 / EntraJira

Names that appeared on the vendor’s integrations page at last check. Missing names are unknown, not “no”. Only some listings have integration data so far.

Sources

  1. kaitosec.app/en/platform/ai-assistant (primary)
  2. kaitosec.app/de/platform/ai-assistant
  3. kaitosec.app/en
  4. kaitosec.app/en/imprint
  5. kaitosec.app/de/terms
  6. kaitosec.app/en/integrations

Last verified 20 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Auditors by framework

Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.

Narrow by region

This listing’s HQ country is Germany. That is a starting point only — choose any published country page.

United States · India · United Kingdom · Japan · Germany (suggested) · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in Germany (32)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Compare KaitoSec AI agents (agentic ISMS and GRC platform) with

Alternatives

  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: ISO 27001, DORA)
  • Egerie Jerry (agentic Cyber GRC platform) — European Cyber GRC platform whose AI agent, Jerry, turns NIS2, ISO 27001 and DORA requirements into measures and tasks, assigns them to owners, follows up delays, collects and checks evidence freshness and escalates only what is blocked. (shared tags: ISO 27001, DORA)
  • Fidureon compliance agents — EU-hosted compliance platform for European companies whose agents read documents and GitHub evidence, watch security advisories, flag gaps and propose actions, with per-agent autonomy set to Propose & Wait, Hybrid or Full. (shared tags: ISO 27001, DORA)
  • Noru Agentic Compliance (GRC agents) — EU-hosted compliance platform where AI agents connected to your systems draft policies, map controls across frameworks, collect evidence daily, flag control drift and draft risk treatments, with every output a draft a human must accept. (shared tags: ISO 27001, DORA)
  • VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) — Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit. (shared tags: ISO 27001, DORA)
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. (shared tags: ISO 27001)

See all KaitoSec AI agents alternatives →

FAQ (from this dataset)

What does KaitoSec AI agents do?

German agentic GRC/ISMS platform whose agents import and map existing registers and documents, check them against the method (e.g. BSI IT-Grundschutz), turn gaps into owned tasks, propose risk ratings and controls, assign evidence, prepare audit answers and reassess risks when a record changes, with no change taking effect without human approval.

How much does KaitoSec AI agents cost?

Not published

Where is KaitoSec (KaitoSec GmbH) headquartered?

Germany

Which frameworks does KaitoSec AI agents support?

Frameworks (vendor-stated): ISO 27001, DORA. Framework tags indicate relevance, not certification.

What are alternatives to KaitoSec AI agents?

See the KaitoSec AI agents alternatives page for category-sharing listings in relevance order, not a ranking. KaitoSec AI agents alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.