Regscale
Tysons, US · Founded 2021 · Delaware corporation · 102 employees on LinkedIn · 10 known investors
RegScale provides an AI-powered governance, risk, and compliance (GRC) platform that automates compliance workflows and continuous controls monitoring for DevSecOps and cloud-native environments. The platform helps practitioners reduce manual compliance work, accelerate certifications, and integrate with ITIL and DevSecOps workflows.
Founders & leadership
Regscale was founded in 2021 by Travis Howerton and Anil Karmel.
TH
Travis HowertoninCo-Founder & CEOCo-founder and CEO of RegScale, which offers an AI-powered governance, risk, and compliance platform that automates compliance workflows and continuous controls monitoring for DevSecOps and cloud-native environments.
AK
Anil KarmelinCo-FounderA cybersecurity technology executive with over two decades of experience building and exiting companies, focused on product strategy, go-to-market leadership, and enterprise customer relationships. He previously developed Los Alamos National Laboratory's Infrastructure on Demand cloud service broker and co-founded C2 Labs before co-founding RegScale, an AI-powered governance, risk, and compliance platform spun out of C2 Labs.
MN
Michael NeedelinChief Financial Officer
EE
Eric ErstoninChief Revenue Officer (CRO)
Board
MF
Mina FaltasBoard director
AC
JL
Investors · 10
Ankona CapitalSouthern California · $5M – $15M
Hitachi VenturesMunich
M12 (Microsoft's Venture Fund)Seattle · $100K – $10M
SINEWAVE VENTURESMclean · $500K – $25M
Syn Ventures Seed Management LlcWest Palm Beachvia Art Coviello · board
Hitachi, Ltd.reportedTokyo
SYN Venturesreported · 2 sourcesWest Palm Beach
Also in the syndicate · 3
AnkonaM12Washington Harbour Partnerslead
Reported raises · per SEC filings
Form D private placements$43.9M disclosed across 2 rounds · 2022–2025
▶$27.4MraisedSep 2025 · 8 investors · Other TechnologyRule 506(b)
▶$27.4MraisedSep 2025 · 8 investors · Other Technology
Rule 506(b)Officers, directors & promoters on the filing
- Michael NeedelExecutive Officer
- Eric ErstonExecutive Officer, Director
- Travis HowertonExecutive Officer, Director
- Mina FaltasDirector
- Art CovielloDirector
- Offering amount
- $27.4M
- Amount sold
- $27.4M
- First sale
- Aug 2025
- Incorporated
- Corporation, Delaware, 2021
- Federal exemptions
- 06b
▶$16.5MraisedAug 2022 · 12 investors · OtherRule 506(b)
▶$16.5MraisedAug 2022 · 12 investors · Other
Rule 506(b)Officers, directors & promoters on the filing
- Jay LeekDirector
- Anil KarmelExecutive Officer, Director
- Travis HowertonDirector
- Offering amount
- $16.5M
- Amount sold
- $16.5M
- First sale
- Jun 2022
- Incorporated
- Corporation, Delaware, 2021
- Federal exemptions
- 06b
Source: SEC EDGAR Form D. Amounts as filed; amended filings shown once at their latest values.
Competitors · 10
by search overlap
Secureframe342 shared keywordsSecureframe provides a compliance automation platform that helps enterprises maintain security and compliance posture with common controls mapping across multiple frameworks. The platform uses AI and automation to reduce manual compliance work for organizations managing standards like SOC 2, ISO 27001, and HIPAA.
Sprinto320 shared keywordsSprinto is a compliance and governance, risk, and compliance (GRC) platform that automates security compliance across 200+ frameworks such as SOC 2, ISO 27001, HIPAA, GDPR, and PCI DSS. It serves companies from Series A to enterprise, covering compliance, vendor risk, AI governance, and audit preparation through integrations with cloud, identity, HR, and SaaS systems.
Cybersaint291 shared keywordsCyberSaint offers CyberStrong, an AI-native platform that automates cybersecurity control assessments and quantifies cyber risk in financial terms for enterprises. It serves CISOs, executives, and boards by harmonizing compliance frameworks (NIST, CIS, ISO), monitoring controls, and modeling risk using methods like FAIR and NIST 800-30.
Hyperproof228 shared keywordsHyperproof is a governance, risk, and compliance (GRC) platform that automates compliance management and audit workflows for organizations. It serves companies seeking to streamline GRC operations and demonstrate compliance to stakeholders.
Upguard209 shared keywordsUpGuard provides a platform for managing cybersecurity risk, including third-party vendor and supply chain risk assessment. It is aimed at organizations seeking to evaluate and monitor the security posture of their vendors.
MetricStream198 shared keywordsMetricStream provides a cloud-based GRC (governance, risk, and compliance) platform with AI-driven capabilities for risk assessment, compliance management, audit, cyber risk, and resilience. The platform serves risk assessors, compliance leaders, auditors, and cyber risk experts across over 1 million professionals in 35+ countries.
Cynomi190 shared keywordsCynomi offers an AI-driven security program management platform that lets managed service providers and security consultancies run assessments, generate risk registers, remediation roadmaps, policies, and compliance mappings, and manage the full security program lifecycle across their client portfolios. Its "CISO Intelligence" embeds senior security judgment into guided workflows so junior teams can deliver CISO-level program management without a dedicated CISO on each account.
Kiteworks184 shared keywordsKiteworks provides a single-tenant virtual appliance that governs how employees and AI agents access, use, and share sensitive data under unified identity, policy, encryption, and audit controls across channels like email, file sharing, managed file transfer, SFTP, and AI agent access. It targets enterprises with regulatory compliance needs (HIPAA, CMMC, GDPR, PCI-DSS, IRAP, FedRAMP) in the data security and governance category.
Diligent181 shared keywordsDiligent provides governance, risk, compliance and audit software used by board members and organizational leaders to connect insights and drive decision-making across these functions. The platform serves over one million users across more than 700,000 board members and leaders globally.
Vanta181 shared keywordsVanta provides a security and compliance platform that helps companies improve their security posture and demonstrate compliance to auditors. The platform serves enterprise customers across industries seeking to manage security controls, governance, and regulatory compliance.
Companies competing with Regscale for the same Google search keywords, organic and paid, via search-intersection analysis.
Non-dilutive funding · 2 SBIR/STTR awards
Federal grants — no equity taken| Agency | Phase | Year | Amount |
|---|---|---|---|
| U.S. Air ForceAir Force | Phase II | 2022 | $749.6K |
| U.S. Air ForceAir Force | Phase I | 2022 | $49.6K |
Source: SBIR.gov award data (U.S. Small Business Administration). SBIR/STTR awards are competitive federal R&D grants and contracts — non-dilutive capital alongside any venture rounds above.
In the news
Frequently asked questions
- What does Regscale do?
- RegScale provides an AI-powered governance, risk, and compliance (GRC) platform that automates compliance workflows and continuous controls monitoring for DevSecOps and cloud-native environments. The platform helps practitioners reduce manual compliance work, accelerate certifications, and integrate with ITIL and DevSecOps workflows.
- Who founded Regscale?
- Regscale was founded by Travis Howerton, Anil Karmel in 2021.
- Who are Regscale's investors?
- Regscale's investors include Ankona Capital, Hitachi Ventures, M12 (Microsoft's Venture Fund), SINEWAVE VENTURES, Syn Ventures Seed Management Llc, Hitachi, Ltd., SYN Ventures.
- How much funding has Regscale raised?
- Regscale has disclosed $43.9M raised across 2 rounds.
- Where is Regscale headquartered?
- Regscale is headquartered in Tysons, US.