Security questionnaire AI agents
Quick answer
Security questionnaire AI agents lists 10 verified listings for Inbound security questionnaires, SIG/CAIQ-style responses and questionnaire automation in dataset v0.1.27 (generated 2026-10-27).
Verified listings whose published job is answering or running security questionnaires: Wolfia Questionnaire Agent, Co-Brain Questionnaire Agent, OptiValue questionnaire agents and RiskXchange The Agency, plus Conveyor, SafeBase, Whistic Automation Orchestrator, GetTeddy and VibrantiX.
This is not a ranking or score.
Verified listings whose published job is answering or running security questionnaires: Wolfia Questionnaire Agent, Co-Brain Questionnaire Agent, OptiValue questionnaire agents and RiskXchange The Agency, plus Conveyor, SafeBase, Whistic Automation Orchestrator, GetTeddy and VibrantiX. This update adds VibrantiX Customer Trust Agent. Trust-center and broader TPRM tools are also compared on the TPRM table. Fields come from the open dataset. This is not a ranking or score.
Key facts
From this dataset
- 10 verified listings on this page, with headquarters in 3 HQ regions and 5 countries.
- Dataset version 0.1.27, generated 2026-10-27.
- Inbound security questionnaires, SIG/CAIQ-style responses and questionnaire automation
Cite as: Agent Index by Heritage Services, Security questionnaire AI agents, dataset v0.1.27 (https://theagentindex.io/compare/security-questionnaire-agents/)
FAQ (from this dataset)
What is listed on this use-case table?
Inbound security questionnaires, SIG/CAIQ-style responses and questionnaire automation 10 verified listings from Agent Index dataset v0.1.27.
How many listings are on this page?
10 verified listings in dataset v0.1.27 (2026-10-27).
Which listings are headquartered in India, Asia-Pacific or Australia/NZ?
1 of 10 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).
Is this a ranking?
No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.
| Field |  Wolfia Questionnaire Agent (security questionnaires and trust center) |  Co-Brain Questionnaire Agent (security questionnaire automation) |  Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) |  RiskXchange The Agency (32 AI agents for third-party risk) |  Conveyor |  SafeBase |  Whistic Automation Orchestrator (agentic assessments) |  GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents) |  VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) |  trail Governance Agents (GRC and AI governance agents) |
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Wolfia (Wolfia Inc.) | Co-Brain (Co-Brain GmbH) | Optivalue.ai (Optivalue.ai SAS) | RiskXchange | Conveyor | Drata (acquired SafeBase) | Whistic | GetTeddy (Teddy Technologies GmbH) | VibrantiX (Vibrantix, Inc.) | trail (trail GmbH, part of Collibra since Oct 2026) |
| HQ | United States · North America | Germany · Europe | France · Europe | United Kingdom · Europe | United States · North America | United States · North America | United States · North America | Germany · Europe | Singapore · Asia Pacific | Germany · Europe |
| Primary category | Security | Security | Security | Risk | Security | Security | Risk | Compliance | Compliance | Compliance |
| Also listed in | Security, Compliance, Risk | Security, Compliance, Risk | Security, Risk, Business operations | Risk, Security | Security, Compliance, Business operations | Security, Compliance, Business operations | Risk, Compliance | Compliance | Compliance, Risk | Compliance, Risk |
| Summary | Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. | French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically. | AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor. | Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person. | Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit. | Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written. |
| Frameworks (vendor-stated) | — | DORA | — | DORA | SOC 2, ISO 27001 | SOC 2, ISO 27001 | — | — | ISO 27001, SOC 2, HIPAA, DORA, DPDP | EU AI Act, ISO 42001 |
| Frameworks (vendor-claimed) | — | TISAX, ISO 27001, DORA, GDPR | TISAX, ISO 27001 | DORA, NIS2, ISO 27001, APRA CPS 230, NIST CSF, Cyber Essentials Plus, SOC 2 | — | — | — | ISO 27001, SOC 2, NIS2, TISAX, DORA, CRA, EU AI Act, ISO 42001 | ISO 27001, SOC 2, EU AI Act, ISO 42001, NIST AI RMF, DORA, HIPAA, GDPR, CCPA, DPDP, PDPA, MAS TRM, APRA CPS 234, PCI DSS | EU AI Act, ISO 42001, NIST AI RMF |
| Capabilities / tasks | questionnaire automation, trust center, contract review | questionnaire automation, workflow automation | questionnaire automation, vendor risk, gap analysis | vendor risk, questionnaire automation, risk assessment, remediation, security ratings | questionnaire automation, trust center | trust center, questionnaire automation | vendor risk, questionnaire automation, risk assessment, trust center | gap analysis, evidence collection, policy management, questionnaire automation, contract review, control mapping, audit management | evidence collection, vendor risk, questionnaire automation, policy management, remediation, control mapping | evidence collection, control testing, risk assessment, vendor risk, policy management, gap analysis, questionnaire automation, ai governance, workflow automation |
| Integrations (vendor-listed) | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | Not recorded in this dataset yet | AWS, Azure, GCP, GitHub, GitLab, Okta, Google Workspace, Microsoft 365 / Entra, Jira, Slack | Not recorded in this dataset yet | OneTrust, Collibra, ServiceNow, SAP LeanIX, Jira, Confluence, GitHub, GitLab, SharePoint, Notion, Databricks, MLflow |
| Pricing (as published) | Not published | Not published | Not published (licence with an included quota of deliverables, by quote) | Platform tiers published: Essentials GBP 14,900/year (50 vendors), Professional GBP 31,500/year (150 vendors), Enterprise from GBP 75,000/year; unlimited seats, no setup fee. The pages don't say which tiers include The Agency. | Published outcome-based pricing on conveyor.com/pricing. | Not verified | Not published | Not published | Not published | Not published (demo request on trail-ml.com, checked 2026-10-26) |
| Pricing model | quote | quote | quote | published-tiers | published-tiers | quote | quote | quote | quote | quote |
| Primary source | https://wolfia.com/products/questionnaire-automation | https://co-brain.ai/en/questionnaire-agent | https://www.optivalue.ai/en/security-questionnaire-automation/ | https://www.riskxchange.co/agency | https://www.conveyor.com/pricing | https://drata.com/blog/announcing-new-drata-look | https://www.whistic.com/automation-orchestrator | https://getteddy.ai/agents | https://vibrantix.ai/ | https://www.trail-ml.com/agents |
| Last checked | 2026-10-18 | 2026-10-19 | 2026-10-19 | 2026-10-19 | 2026-10-15 | 2026-10-16 | 2026-10-18 | 2026-10-20 | 2026-10-20 | 2026-10-26 |
| Official site | https://wolfia.com/products/questionnaire-automation | https://co-brain.ai/en/questionnaire-agent | https://www.optivalue.ai/en/security-questionnaire-automation/ | https://www.riskxchange.co/agency | https://www.conveyor.com/ | https://drata.com/safebase | https://www.whistic.com/automation-orchestrator | https://getteddy.ai/ | https://vibrantix.ai/ | https://www.trail-ml.com/agents |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.
Use-case comparisons
- Contract and legal-review AI agents — 33 listings (Contract review, drafting assistance and legal workflow automation)
- TPRM and vendor-risk AI agents — 40 listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
- AI governance agents and platforms — 11 listings (AI inventory, risk assessment, policy and runtime controls for AI systems and agents)
Related
- Wolfia Questionnaire Agent (security questionnaires and trust center) alternatives
- Co-Brain Questionnaire Agent (security questionnaire automation) alternatives
- Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) alternatives
- RiskXchange The Agency (32 AI agents for third-party risk) alternatives
- Conveyor alternatives
- SafeBase alternatives
- Whistic Automation Orchestrator (agentic assessments) alternatives
- GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents) alternatives
- VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) alternatives
- trail Governance Agents (GRC and AI governance agents) alternatives
- Best security AI agents