RegScale, Inc.

RegScale is a privately held technology company specializing in Continuous Controls Monitoring (CCM) platforms for Governance, Risk, and Compliance (GRC). Founded in 2021, the company aims to revolutionize the compliance industry by transforming manual, reactive GRC processes into automated, real-time systems. Headquartered in Tysons, VA, RegScale's mission is to lead through technology, trust, and foresight, solving critical problems for GRC professionals.

RegScale's core offering is an AI-powered CCM platform designed to streamline and automate compliance. Key products and services include modules for Policy & Compliance (supporting federal, ATO, and commercial needs), DevSecOps/Continuous Compliance Automation, Simplified Risk Management, and Third-Party Risk Management. The platform supports over 60 compliance frameworks and standards, such as NIST (SP 800-53, CSF, 800-171, OSCAL), FedRAMP, CMMC, ISO 27001, HIPAA, GDPR, PCI DSS, NERC CIP, and FSSCC. RegScale primarily serves highly regulated industries, including government agencies, financial services, and high-tech organizations, with expanding reach into the energy and utilities sectors.

Led by Co-founder and CEO Travis Howerton, RegScale has seen significant growth and recognition. In September 2025, the company secured over $30 million in an oversubscribed Series B funding round, led by Washington Harbour Partners, with participation from M12 (Microsoft's Venture Fund), Hitachi Ventures, and Ankona Capital. This funding is intended to accelerate its AI roadmap, known as RegML, and solidify its leadership in the GRC market. RegScale has achieved FedRAMP High Authorization and has been recognized in the 2026 Gartner® Market Guide for DevOps Continuous Compliance Automation Tools, in addition to winning multiple cybersecurity industry awards in 2026. The company is also a key contributor to industry standards, serving as a lead affiliate for the Cyber Risk Institute's OSCAL initiative.