Back to Directory
Oneleet logo

Oneleet

Oneleet is a security-first compliance platform that bundles compliance automation with in-house penetration testing, code scanning, attack surface management, and a vCISO to get startups SOC 2-ready with genuine security rather than checkbox compliance. Founded in 2022, it raised a $33M Series A led by Dawn Capital in October 2025 and reports 1,000+ teams using it to pass audits.

4.2/5(138 reviews)startup-complianceCustom quote (pricing depends on factors specific to each company; no published tiers)

Our verdict

Last verified Aug 25, 2026

Differentiated bundle of genuine pen testing, code scanning, a vCISO, and compliance automation, now well capitalized ($33M Series A, Oct 2025) with a 4.9/5 across 138 G2 reviews; held below the top tier by fully opaque pricing and a smaller integration catalog.

4.9(138)
G2
Rating
4.2/5
138 reviews
Users
0
Verified users
Starting at
Custom quote (pricing depends on factors specific to each company; no published tiers)
custom annual quote bundling platform, vCISO, pen test, and audit coordination
Category
startup-compliance
Market segment

Key Features

In-house penetration testing as a service (OSCP/OSCE/OSWE testers, retesting included)
Code security scanning, attack surface management, and dark-web monitoring
Dedicated vCISO who designs the program and manages auditor comms
Continuous control monitoring with AI evidence review
AI scoping from company profile and tech stack, AI questionnaire answering
12+ frameworks: SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, HITRUST, DORA, FedRAMP, ISO 42001

Pros & cons

Pros

  • Bundles real penetration testing and a vCISO, not just evidence collection
  • $33M Series A (Dawn Capital, Oct 2025) with backing from Y Combinator and Frank Slootman
  • 4.9/5 across 138 G2 reviews
  • 1,000+ teams trust it to pass audits

Cons

  • No published pricing at all; quote-only
  • Smaller named integration catalog than category leaders
  • Audits are performed by partnered independent auditors, so the audit is a separate relationship

Detailed Information

No information available for Inventory Tracking Methods.

Best For

Startups that want real security plus SOC 2, not compliance theaterTeams that want penetration testing and a vCISO bundled inBuyers who prefer a single quote covering platform, testing, and audit

Not ideal for

Buyers wanting fully published, self-serve pricingLarge enterprises needing the broadest framework catalog

Integrations

AWS
Google Cloud
GitHub

Frequently Asked Questions

Quick Navigation

0 verified users

Get a Free Demo of Oneleet

Fill out the form below and we'll connect you with the right solution provider. 100% free, no obligation.

What happens next? We'll match you with up to 3 qualified vendors who will reach out to provide custom quotes and demos. No spam, no obligation.

By submitting this form, you agree to be contacted by solution providers. We respect your privacy.

Additional Information

Category
startup-compliance
Price Range
Custom quote (no published pricing)
Pricing Model
custom annual quote bundling platform, vCISO, pen test, and audit coordination

Company

Founded
2022
Headquarters
Amsterdam, Netherlands (US office: Wilmington, Delaware)