Cyber Sierra Agentic GRC Platform

Cyber Sierra was founded in June 2021 by Pramodh Rai and Subhajit Mandal and is operated by Fort One Technologies Pte Ltd, a company incorporated in Singapore. It started by helping businesses obtain cyber insurance and moved into governance, risk and compliance after seeing how much manual work regulated firms spend on audits, vendor reviews and control testing.

The platform provides a team of 13 AI analysts that carry out GRC tasks end to end while staff approve the results. Analysts map regulations and frameworks such as ISO 27001 and PCI DSS to internal policies clause by clause, monitor controls continuously, audit evidence and ITSM tickets, review vendor SOC 2 reports and questionnaires, and run user access reviews. It can be deployed air-gapped, on-premise or in the customer's cloud with the customer's choice of LLM. Clients include banks, insurers, government agencies and conglomerates in ASEAN and Australia.

• Gap assessment analyst: Maps any regulation to internal policies paragraph by paragraph.
• Continuous control monitoring: Detects control breaks as they happen.
• Evidence and ticket auditor: Reviews audit evidence and every ITSM ticket.
• Third-party risk analyst: Assesses vendor evidence and SOC 2 reports and flags gaps.
• User access review: Automates periodic access reviews across subsidiaries.
• Flexible deployment: Air-gapped, on-premise or private cloud with a choice of LLM.

A Vietnamese commercial bank can map new State Bank circulars to its internal policies and track gaps. An insurer can review hundreds of IT vendors before contract renewal. A regional conglomerate can run quarterly user access reviews across subsidiaries in several countries.

Gap assessments that took weeks are compressed into hours by mapping regulations to policies automatically. Every ticket, vendor and control is reviewed instead of a sample, and each decision links back to source evidence. The company reports vendor assessments cut from 60 to 20 hours, access reviews from 20 days to 2 days across 12 countries, and 114,000 USD saved in one year at a Fortune 500 insurer.

Regulators in Southeast Asia are raising expectations on technology risk, outsourcing and third-party oversight, while compliance teams remain small. Vietnamese banks and fintechs face State Bank IT security rules, PCI DSS and the new data protection law at the same time, which favors tools that automate evidence collection and vendor reviews.

Operated by Fort One Technologies Pte Ltd (UEN 202121458N), incorporated in Singapore; the website footer also lists an office at 1 Sutter St, San Francisco. IMDA Accredited from 1 April 2026, AI for Cyber CoE solution provider of CSA Singapore (2026), AI Trailblazer Award from Smart Nation Singapore and Google (2024). ISO 27001 certified; listed on AWS and Azure marketplaces.