Security-first compliance platform with code scanning, pentesting and vCISO
Oneleet pairs compliance automation for SOC 2, ISO 27001, HIPAA and GDPR with hands-on security services, built on a Go, gRPC, TypeScript and PostgreSQL stack running across AWS, Azure and GCP. Job posts point to a product push on signal quality: a security judgment layer, severity scoring and triage flows aimed at cutting noise in findings. Missing renewals, forecasting and retention processes suggest post-sale operations are lagging product growth.
Oneleet, founded in 2022 and headquartered in Wilmington, DE, sells a cybersecurity and compliance platform to companies that need audit readiness alongside working security controls. The offering spans compliance evidence management, a code security scanner, attack surface discovery, expert-led penetration testing, access reviews, vCISO services, a trust center and coordinated third-party audits. Supported frameworks include SOC 2, ISO 27001, HIPAA, GDPR, EU DORA and CIS IG1. The company has 51–200 employees and hires in the United States, Netherlands and Canada.
Oneleet builds with Go, Python, TypeScript, React, gRPC and PostgreSQL, runs on AWS, Azure and GCP with Kubernetes, Docker and Terraform, and uses HubSpot, BigQuery and Looker Studio for go-to-market data.
Oneleet is building a security judgment layer, severity scoring and triage flows, a new code security suite, and a free tier tied to a Product Hunt launch, plus open source security tooling.
Oneleet is hiring in the United States, Netherlands and Canada, mostly across engineering, marketing and product, with smaller sales and security openings; overall hiring pace is slowing.
Other companies in the same industry, closest in size
Oneleet's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.