RegScale wins CyberSecurity Breakthrough award for third consecutive year. AI-powered continuous controls monitoring platform named "Compliance Software Solution Provider of the Year" in 2026 awards program. October 08, 2026 10:30 ET | Source: RegScale TYSONS CORNER, Va., Oct. 08, 2026 (GLOBE NEWSWIRE) - RegScale, the AI-powered continuous controls monitoring (CCM) platform, has been named as "Compliance Software Solution Provider of the Year" in the 10th annual CyberSecurity Breakthrough Awards, marking the company's third consecutive win in the category. Conducted by CyberSecurity Breakthrough, an independent market intelligence organization, the program recognizes the most innovative companies, products, and technologies driving progress in the global information security industry. "RegScale is at the forefront of legacy and modern GRC transformation, bringing the same level of automation and operational visibility to compliance that..." "Organizations need to continuously validate that their controls are working and have the evidence to prove it as technology and regulatory requirements evolve," "That shift is turning continuous assurance into a foundational cybersecurity capability rather than a niche GRC function. We're grateful for the continued..." "RegScale is redefining GRC and security with its automated solutions. Security teams have automated nearly all security operations, from vulnerability..." Built on a Compliance as Code foundation, RegScale enables organizations to automate compliance, continuously validate security controls, and embed governance into everyday security and engineering workflows. The need for this approach is growing as compliance demands continue to strain existing resources and processes. According to RegScale's 2026 State of Continuous Controls Monitoring Report, 88% of organizations spend at least 500 person-hours annually on evidence collection, 72% juggle six or more different compliance frameworks, and 31% still perform framework mapping manually. As software delivery accelerates and regulatory complexity continues to increase, that operating model is no longer sustainable. "Organizations need to continuously validate that their controls are working and have the evidence to prove it as technology and regulatory requirements evolve," said Travis Howerton, co-founder and CEO of RegScale. "That shift is turning continuous assurance into a foundational cybersecurity capability rather than a niche GRC function. We're grateful for the continued recognition as we modernize compliance and build true operational resilience for highly-regulated enterprises." RegScale supports SaaS, on-premises, air-gapped, and hybrid environments across the U.S. federal government, financial services, energy, and other highly regulated industries. The platform continues to expand through its OSCAL-native architecture and AI-powered automation. With RegML, RegScale's proprietary AI engine, organizations can continuously monitor controls, automate evidence collection, and trigger remediation with minimal human intervention. The platform also makes it simple for companies to connect their security, DevOps, and ITIL stack. For a decade, the CyberSecurity Breakthrough Awards have recognized breakthrough solutions and organizations advancing the global cybersecurity industry. The 2026 program received thousands of nominations from companies in more than 20 countries, with this year's winners representing the cutting edge of cybersecurity technology and innovation. "RegScale is redefining GRC and security with its automated solutions. Security teams have automated nearly all security operations, from vulnerability management to threat detection and response. However, GRC has remained largely manual by relying on periodic audits, spreadsheet-driven processes, and point-in-time assessments," said Steve Johansson, managing director, CyberSecurity Breakthrough. "RegScale is at the forefront of legacy and modern GRC transformation, bringing the same level of automation and operational visibility to compliance that organizations already expect across the rest of their security programs." About RegScale RegScale is a Continuous Controls Monitoring (CCM) platform designed to be the operational risk tool for the CISO. Built on a compliance-as-code foundation, RegScale enables extreme automation with an API-first strategy, self-updating paperwork, and powerful AI agents that all but eliminate manual labor and make GRC programs more proactive. Customers save money, accelerate time to market, and reduce risk in their operational environments with RegScale. Heavily regulated organizations, including Fortune 500 enterprises and the federal government, use RegScale and report achieving compliance certifications 90% faster and trimming audit preparation efforts by 60%, strengthening security and reducing costs. Learn more at www.regscale.com. About CyberSecurity Breakthrough Part of Tech Breakthrough, a leading market intelligence and recognition platform for global technology innovation and leadership, the CyberSecurity Breakthrough Awards program is devoted to honoring excellence in information security and cybersecurity technology companies, products and people. The CyberSecurity Breakthrough Awards provide a platform for public recognition around the achievements of breakthrough information security companies and products in categories including Cloud Security, Threat Detection, Risk Management, Fraud Prevention, Mobile Security, Web and Email Security, UTM, Firewall and more. For more information visit CyberSecurityBreakthrough.com. Tech Breakthrough LLC does not endorse any vendor, product or service depicted in our recognition programs, and does not advise technology users to select only those vendors with award designations. Tech Breakthrough LLC recognition consists of the opinions of the Tech Breakthrough LLC organization and should not be construed as statements of fact. Tech Breakthrough LLC disclaims all warranties, expressed or implied, with respect to this recognition program, including any warranties of merchantability or fitness for a particular purpose. Media Contact Sarah Ribacoff for RegScale [email protected]

Redefining compliance, one Excellence Award at a time. September 14, 2026 | By RegScale RegScale has been dedicated to taking the pain out of compliance for over five years. But RegScale know that organizations have been struggling with a growing regulatory burden for many more than that. RegScale understand that manual, documentation-heavy processes incur a tremendous human and business cost. And that there's a better way of doing things, with AI, automation and compliance as code lighting the way. So it's great to see its hard work validated and celebrated by the people who matter most: its customers. At Black Hat USA RegScale were delighted to be named a Cybersecurity Excellence Awards Community Choice Winner in the Continuous Controls Monitoring (CCM) category. It's recognition that its CCM approach is hitting home, and helping customers turn compliance from a cost of doing business into a growth and resilience advantage. The burden is real. Organizations are drowning in compliance. Regulatory mandates continue to grow and evolve. Ephemeral and dynamic cloud environments change faster than anyone can track. Stretched teams cannot hope to keep pace using existing tools and manual processes. Even if there's money to spare, there's not enough talent to sufficiently scale compliance. The burden is real. It costs money, demotivates staff, and impacts resilience. Its CCM report last year found that over half (58%) of respondents spend over 2,000 person-hours every year on evidence collection alone. Some 85% admit to delaying or scaling back important GRC activities due to resource constraints. Compliance also suffers. Over 80% say manual work causes moderate or major delays in meeting regulatory requirements. RegScale often think of manual, point-in-time compliance in terms of pushing a truck up a hill. You expend a great deal of effort to reach the top. Then what happens? Controls drift. New vulnerabilities emerge. People change roles. Pretty soon you find yourself right back at the bottom of the hill. This isn't the way compliance should be. The RegScale way. Its CCM approach is not about getting better at pushing the truck uphill, but levelling out the road. It's about understanding that things change over time, and that compliance should be treated as the foundation of an effective security program, not the finish line. The RegScale way is to empower customers to continuously gather evidence, evaluate controls and remediate failures. That way, they know the state of controls, vulnerabilities, assets, and risks at any given point in time. The audit simply becomes a validation of that knowledge, not a mad scramble for evidence that unearths more problems. Compliance as code is its not-so-secret sauce. Translating compliance requirements into executable rules means they can be managed like software, enabling automated checks and continuous monitoring to drive a virtuous compliance loop. It also means they can be built into CI/CD pipelines to prevent security and risk issues before they appear. AI lights a pathway. AI and automation play a critical role in delivering this value: streamlining workflows, explaining and assessing controls, and generating documentation. Control mapping, built on trusted SCF and CRI profiles, enables a "comply-once-satisfy-many" approach. AI and automation act as a force multiplier, helping teams apply those mappings more efficiently and reducing the burden on customers. Its AI has already helped organizations to benefit from: * A 10x boost in staff productivity * 80% improvement in accuracy * 92% less time to create new programs But RegScale don't stand still. The next evolution of AI is here, with embedded RegML agents designed to take the toil out of compliance. The result is that compliance teams spend less time on paperwork and more time on high-judgement work. Ultimately, that means more resources spent on improving security posture. AI might be accelerating threats and regulatory complexity, but it can also be a big part of the solution. The journey continues. This was the third year in a row RegScale has been privileged to be named a Cybersecurity Excellence Awards winner. It also follows a Gold Award for the Continuous Controls Monitoring category of the 2026 Cybersecurity Excellence Awards, and a Gold, Best of Category for Continuous Controls Monitoring in the 2026 Globee Cybersecurity Awards. But it's not all about industry recognition. Its mission is not just to take the pain out of compliance. It's to reframe GRC completely. The truth is that organizations which rely on periodic assessments will stay reactive, resource-intensive, and increasingly exposed. CCM is a springboard to something better. It helps teams to cut governance debt, accelerate compliance, adopt AI safely, and build true business resilience. To find out how your organization could benefit from this fresh approach to GRC, book a demo today. Ready to get started? Choose the path that is right for you! Skip the line. My organization doesn't have GRC tools yet and I am ready to start automating my compliance with continuous monitoring pipelines now. Supercharge. My organization already has legacy compliance software, but I want to automate many of the manual processes that feed it.