ISMS Directory
Actively maintained
≈ 138visits/mo
Little sign of use · estimate, read Oct 16, 2026
- For
- Organizations looking for ISO 27001 or SOC 2 compliance consultants, auditors and service providers.
- Activity
- Actively maintainedsite updated 2 days ago
- Runs as
- API
- Used for
- find ISO 27001 consultants and auditors
- browse verified SOC 2 compliance service providers
- submit a compliance business to the directory
- Used more than 62% of the 365 tools on its shelfINITE Atlas →
- On the web since 2024, older than 61% of its shelfINITE Atlas
- Has an MCP server (1 in the registry)public registry →
- Publishes llms.txt, a file written for AI assistantsismsdirectory.com ↗
- Certifications they stateSOC 2 · ISO 27001 · HIPAA · GDPRprivacy policy ↗
- Privacy policy updated2026-10-17privacy policy ↗
These are ISMS Directory's own statements, read from its pages. We did not audit them. A line that is missing was not found on the pages we read; it does not mean the practice is absent.
- MCP servercom.ismsdirectory/isms-directoryverified in the MCP registry
- Stateanswers, 4 toolschecked 2026-10-18
- Address to connectismsdirectory.com/api/mcp
- OpenAPI spec6 pathsthe spec ↗
- API docsismsdirectory.com/developersthe vendor's page ↗
This card as JSON, for your agent →
Each line is something a program found when it went looking: the registry entry, the server's own answer, a spec that parses. A missing line means we did not find it, not that it does not exist.
Figure and bar: visits/mo, estimate · year: online since
- #1
Vanta
Automates compliance evidence collection and audit preparation across SOC 2, HIPAA, ISO 27001, and other frameworks.
71.1kActiveContact sales - #2
Secureframe
Automates compliance tasks and evidence collection to help organizations meet security standards like SOC 2, ISO 27001, and HIPAA.
43.5kActiveContact sales2020 - #3
Drata
Automates security compliance such as SOC 2 and ISO 27001 by monitoring controls and collecting audit evidence.
35.6kContact sales - #4
XposedOrNotMCP · open
Searches indexed data breach records for an email address or domain and reports which breaches, leaked fields and a risk score appear.
1.3kActiveFrom $9/mo2017 - #5
Bynn Document Fraud Detection SoftwareMCP · sign-in
Analyzes uploaded PDFs and images for forgery, post-signature edits and AI-generated content, returning an authenticity report via dashboard or webhook.
552ActiveFrom $99/mo2003 - #6
Probo
Manages compliance programs and automates evidence collection for security certifications like SOC 2 and ISO 27001.
433ActiveContact sales2024
Not it? Say what you need
betaThree tools from the Atlas for the job you describe, each with what fits and what does not.
No notes yet. What do you use ISMS Directory for?
Sign in to leave a noteWhat is ISMS Directory?
Lists verified ISO 27001 and SOC 2 compliance consultants and auditors, searchable by a query interface or through an API. It is listed in the Atlas under Security.
Who is ISMS Directory for?
Organizations looking for ISO 27001 or SOC 2 compliance consultants, auditors and service providers.
Do people use ISMS Directory?
Little sign of use: ≈ 138 visits/mo · estimate, 2026-10.
Is ISMS Directory still maintained?
Actively maintained: site updated 2 days ago.
Is ISMS Directory safe?
We do not audit vendors. What ISMS Directory publishes, read 2026-10-18: SOC 2, ISO 27001, HIPAA, GDPR stated on its privacy policy.
Is ISMS Directory HIPAA compliant?
ISMS Directory states HIPAA compliance on its privacy policy (2026-10-18). We have not verified it.
What are alternatives to ISMS Directory?
In Security, by use: Vanta, Secureframe, Drata, XposedOrNot, Bynn Document Fraud Detection Software, Probo.
How we read a tool
No votes, no reviews, no vendor claims. Every week a crawler reads each tool's own site and a few public registries, and the words on the card are bands over what it read.
- Use: visits to the site (estimated), installs from npm and PyPI, presence in Chrome's usage report.
- Activity: the newest release on GitHub, npm or PyPI; the newest dated page on the site; open roles on a public jobs board.
- Price: the vendor's own pricing page, read with the date. A figure is printed only when it is on that page.
- The line and the use cases are written by us from the homepage, one tool at a time, and refused when they repeat the vendor's marketing.
How AI assistants read each site — the reading vendors ask us about — is on each tool's own visibility page.
How we read every tool → · By INITE Atlas Desk