Enforcement: your policy says it, now it happens
Release →Every requirement in your approved policies becomes a standard that runs, has an owner and proves it happened, graded against your own numbers.
vCISO Lite · Press & media
The Newsroom
Latest release · Oct 20, 2026
Enforcement: your policy says it, now it happens
Every requirement in your approved policies becomes a standard that runs, has an owner and proves it happened, graded against your own numbers.
Ships alongside rebuilt Connections and Security Scanning. Self-applying fixes on Enterprise.
Boilerplate
vCISO Lite is a compliance and cyber-risk platform for growing companies without a full-time CISO. It generates policies, runs vendor reviews, prices cyber risk in dollars, and produces the board- and buyer-facing deliverables that unblock deals, with an integrity record behind every action. Founded in 2026 by Yolonda Smith.
Founder
Yolonda Smith
Founder & CEO
Twenty years in security leadership. Author of Someone Else's Debt, the QCD framework for M&A cyber diligence.
Full bio · Headshots ↓Brand assets
Logos, marks, color →Screenshots
Product, print-res ↓Fact sheet
Company, products, plans ↓Press releases
The AI Sub-Processor Register shows which AI providers sit under your vendor stack
Release →A citation-anchored, human-confirmed record of what each vendor's AI does with your data, which model providers sit underneath, and what nobody has verified yet.
vCISO Lite opens the Evidence Graph for licensing
Release →The integrity layer under the platform is now a standalone product. Every consequential action becomes a record an auditor, insurer, or acquirer can recompute, without taking our word for it, our model provider's, or our cloud's.
Preflight brings cyber diligence to the shape of a venture deal
Release →Twenty-minute red-flag scans that fit inside a partner meeting, covenants drafted from the findings, and LP-letter reporting across the portfolio.
Trustworthy Autonomy™: agents that run the program, with proof
Release →Autonomous agents for vendor risk, audit prep, and diligence, with cryptographic proof of every action and a trust ladder customers set the pace on.
Partner Program opens with up to 30% recurring margin
Release →A channel program for advisory firms whose clients need software that survives the handoff. Operator-track white-label arrives Q4 2026.
Allotrope puts forward-looking cyber risk on one graph
Release →Vendor-incident exposure, operational resilience, and continuous key risk indicators unified, so a signal in one engine trips decisions in the others.
Quantitative Cyber Diligence prices the Cyber Cost of Deal in 72 hours
Release →Five defensible pillars and one dollar figure, priced against the acquirer's valuation model instead of a red-yellow-green rating.
APRI™ opens 82 MCP tools to any agent
Release →Ask your compliance program anything from Claude, GPT, or your own agent, with provenance and freshness returned alongside every answer.
Diligence Rooms ship the guarantees a general counsel asks for
Release →Independently verifiable deletion certificates, an isolated document viewer, and watermarking that identifies which reader saw a leaked page.
The Investor Portal replaces the midnight Google Drive folder
Release →A scoped, revocable, audited channel for handing security materials to investors, LPs, and lenders. Included on Ultra and Enterprise.
vCISO Lite launches: 80% of a CISO at 5% of the cost
Release →Founder Yolonda Smith launches with a live MVP covering policy generation, audit support, and vendor risk at $299 per month, self-serve.