Compliance automation platform for SOC 2, CMMC, FedRAMP and NIST
Secureframe automates security compliance evidence and control monitoring, with job posts pointing hard at federal frameworks: CMMC Level 2, FedRAMP 20x support and internal FedRAMP assessments. A Ruby on Rails, Python and Go stack on AWS and Azure, plus RAG and LLM-powered system work, shows AI built into the core product. Sales-led, accelerating hiring alongside agentic go-to-market workflows signals a push to scale revenue into regulated buyers.
Secureframe is a San Francisco-based, privately held company founded in 2020 that builds a security and compliance automation platform. The software connects to cloud and workplace systems to gather audit evidence, monitor controls and produce compliance documentation. It supports frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIST 800-53, NIST 800-171, CMMC and FedRAMP. Customers range from startups and SMBs to defense-sector contractors. The company employs 201-500 people and hires in the United States.
Secureframe builds with Ruby on Rails, TypeScript, Python, Go and Java on PostgreSQL and Elasticsearch, hosted on AWS and Azure, with RAG for AI features. Go-to-market runs on Salesforce, HubSpot, Gong and Apollo.
Yes. Hiring is accelerating and skews toward sales, with engineering as the second focus and additional roles in security, product, design and support, all based in the United States.
Current work includes CMMC Level 2 adoption, enhancing the product for FedRAMP 20x, internal FedRAMP assessments, new compliance offerings, LLM-powered systems and agentic workflows for its go-to-market engine.
Other companies in the same industry, closest in size
Secureframe's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.