Cetbix
Enterprise platform for cybersecurity, risk, compliance, IT and OT governance
About Cetbix
Cetbix is a London-based GRC and information security management system (ISMS) platform that combines compliance automation, risk management, asset inventory, and quality management in one product. It supports 40+ frameworks including ISO 27001, NIS2, DORA, SOC 2, TISAX, GDPR, IATF 16949, and NIST, and adds agentless OT/IT network discovery and a customer-facing Trust Center. Pricing is quote-based and depends on organization size, frameworks, and modules.
Pros & Cons
Pros
- Covers an unusually wide set of frameworks (40+), including niche ones like TISAX, IATF 16949, NIS2, and DORA
- Combines GRC, ISMS, QMS/EHS, asset management, and OT network discovery in one vendor
- Quantitative risk metrics (SLE, ARO, ALE) translate cyber risk into financial impact
- Strong fit for automotive and industrial organizations that need TISAX and OT coverage
- Small number of user reviews on G2 and Capterra are uniformly positive about ease of use and support
Cons
- No published prices; every plan requires contacting sales
- Very small review base (about one G2 review and five Capterra reviews), so independent validation is limited
- Broad product catalog (fleet, LMS, Windows management) can make it hard to tell which modules you need
- Smaller vendor with less ecosystem and integration depth than market leaders like Vanta or Drata
Key Features
Multi-framework compliance automation
Maps controls across 40+ frameworks such as ISO 27001, NIS2, DORA, SOC 2, TISAX, GDPR, IATF 16949, and NIST, with compliance status tracked in real time.
AI-driven ISMS
Runs an ISO 27001 information security management system with continuous monitoring of the security posture, policies, and controls.
Risk assessment and quantification
Qualitative and quantitative risk analysis using Asset Value, SLE, ARO, and ALE metrics, plus cost-benefit analysis and residual risk measurement; supports ISO 31000 and COSO ERM.
Audit automation and evidence
Generates audit-ready reports and collects evidence to keep teams continuously prepared for certification audits.
AI questionnaire automation
Uses AI to complete security questionnaires and due-diligence requests faster and more consistently.
Sentinel agentless network discovery
Discovers and classifies OT and IT assets without agents, with asset inventory, vulnerability identification, and software license management.
Third-party and vendor risk management
Documents vendor risk assessments and supplier information to keep the supply chain secure and compliant.
Trust Center
A secure portal for sharing certifications, policies, audit reports, and due-diligence documents with customers, suppliers, and partners.
QMS, EHS, and document control
Quality management (including IATF 16949), ISO 14001 and ISO 45001 EHS support, and controlled document management in the same platform.
Incident and whistleblowing management
Tracks incidents with full audit trails and supports EU Whistleblowing Directive reporting workflows.
Pricing
- Core ISO 27001 and GRC tools
- Risk assessment
- Policy management
- Audit-ready reporting
- Multi-framework compliance
- Supported or non-supported license options
- Tailored demo and quote
- Full GRC, ISMS, QMS, and OT/IT modules
- Custom quote for multiple frameworks
- Supported or non-supported license options
Best For
ISO 27001 certification
Build and operate an ISMS, run risk assessments, and keep evidence ready for certification and surveillance audits.
TISAX for automotive suppliers
Automate TISAX assessments alongside IATF 16949 quality management for automotive supply chains.
NIS2 and DORA readiness
Map EU regulatory requirements to internal controls and track compliance status across the organization.
OT/IT asset visibility
Use agentless discovery to inventory industrial and IT assets, identify vulnerabilities, and manage software licenses.
Third-party risk and trust sharing
Assess vendors and share security documentation with customers through a Trust Center.
Similar Tools
Fraugster
AI fraud prevention that takes full liability for every transaction
iRely
Enterprise commodity trading and risk management software for physical supply chains
GUARDEAN RiskSuite
Modular platform for automated customer risk management and compliance screening
ProInd Compliance Management
Enterprise compliance and legal management software for regulatory adherence
Adeptiv AI
AI Governance and Risk Management Platform
Ordr
Unrivaled asset intelligence. Automated zero trust.