Voluntary standardVoluntary standardUS
NIST AI Risk Management Framework
The NIST AI Risk Management Framework (AI RMF 1.0) was published by the U.S. National Institute of Standards and Technology in January 2023, with a Generative AI Profile (NIST-AI-600-1) added in July 2024. It is a voluntary, sector-agnostic framework that organises AI risk management around four functions: Govern, Map, Measure, and Manage. Although adoption is voluntary, the AI RMF is referenced by the U.S. Executive Order on AI, several federal agency directives, and is increasingly cited by procurement teams and insurance carriers as a baseline expectation. NIST also publishes a companion AI RMF Playbook with concrete implementation suggestions and a Crosswalk that maps AI RMF actions to ISO/IEC 42001, ISO/IEC 23894, OECD AI Principles, and EU AI Act provisions.
Jurisdiction
US
Enforcement
January 26, 2023
Maximum penalty
Voluntary framework; no statutory penalties
Key obligations
- 01Govern: establish AI policies, accountabilities, and a risk-tolerance posture that flows from board level through engineering teams.
- 02Map: characterise the AI system's context, intended use, stakeholders, data, and known limitations before deployment.
- 03Measure: select and apply quantitative and qualitative tests for trustworthiness characteristics — validity, reliability, safety, fairness, security & resilience, accountability & transparency, privacy, explainability.
- 04Manage: prioritise, treat, and monitor risks; allocate resources; respond to incidents; and decommission systems that no longer meet the risk threshold.
- 05For generative AI (GenAI Profile): address content provenance, hallucination/confabulation, harmful bias, IP and data integrity, CBRN/cyber misuse, and value-chain integration risks.
- 06Maintain a living risk register and update Map/Measure/Manage outputs at material change events (data drift, model retraining, new use cases).
- 07Treat AI RMF outputs as auditable artifacts even though the framework is voluntary — they are widely accepted as evidence in due diligence and procurement.
Vendors that support NIST AI RMF
Sorted by coverage level. Full coverage shown first.
45 vendors
| Vendor | HQ | Founded | Size | Pricing | Coverage | Last checked |
|---|---|---|---|---|---|---|
| LatticeFlow AI | Zurich, Switzerland | 2020 | 11-50 | No public pricing. Enterprise platform sold via direct sales. Contact sales for demo and pricing. | Full | Sep 21, 2026 |
| Enzai | Belfast, United Kingdom | 2021 | 1-10 | SaaS platform, enterprise subscription. No public pricing listed. Contact sales via enz.ai. | Full | Sep 21, 2026 |
| Collibra AI Governance | New York, United States | 2008 | 1000+ | Enterprise subscription; contact sales for custom quote based on users, assets, modules. | Full | Sep 21, 2026 |
| Monitaur | Boston, United States | 2019 | 11-50 | Enterprise annual subscription; no public pricing listed. Forrester Wave cited 'pricing flexibility and transparency' as a highest-score criterion. Contact sales for quotes. | Full | Sep 21, 2026 |
| Trustible | Arlington, United States | 2023 | 11-50 | Contact sales for enterprise pricing; no public plans listed | Full | Sep 21, 2026 |
| ModelOp | Chicago, United States | 2018 | 11-50 | No public pricing listed; contact sales for enterprise quotes. | Full | Sep 21, 2026 |
| Modulos AI Governance | Zurich, Switzerland | 2018 | 11-50 | Contact for pricing | Comprehensive | Sep 21, 2026 |
| Scrut Automation | Palo Alto, United States | 2021 | 51-200 | Contact for pricing | Comprehensive | Sep 21, 2026 |
| Luminos.Law (ZwillGen AI Division) | Washington, DC, United States | 2019 | 51-200 | Contact for pricing | Comprehensive | Oct 1, 2026 |
| DataRobot | Boston, United States | 2012 | 1000+ | Contact for pricing | Comprehensive | Sep 21, 2026 |
| Secureframe | San Francisco, United States | 2020 | 201-500 | Three plans: Fundamentals (starting at $7,500/year, one compliance framework), Complete (quote only; adds advanced versions of third-party risk, risk management, user access reviews, Trust Center and questionnaire automation, plus SSO/SCIM and custom integrations) and Defense (quote only; CMMC tooling such as SSP and POA&M). Additional workspaces are an add-on. | Comprehensive | Oct 15, 2026 |
| Drata | United States | 2020 | — | GRC plans (Foundation, Advanced, Enterprise) and Assurance plans (Trust Center and questionnaires) are quoted; drata.com shows no prices. Its AWS Marketplace listing charges a $25,000 platform fee for a 100-FTE organization plus $7,500 per framework, for a 12-month contract. | Comprehensive | Oct 15, 2026 |
| Vanta | San Francisco, United States | 2018 | 501-1000 | Four plans: Essentials, Plus, Professional and Enterprise. No prices on vanta.com; its AWS Marketplace listing gives 12-month starting prices for 1-20 employees: Essentials $14,000, Plus $21,500, Professional $23,000. Enterprise is quoted. Third-party risk management is a separate product ($13,600 a year for up to 50 vendors on AWS). | Comprehensive | Oct 15, 2026 |
| Saidot | Helsinki, Finland | 2018 | 11-50 | No public pricing listed; contact sales implied via demos and sign-ups. | Partial | Sep 21, 2026 |
| HiddenLayer | Austin, United States | 2022 | 51-200 | Enterprise-only, contact sales for pricing. No public pricing listed on website. | Partial | Sep 21, 2026 |
| Lakera | Zurich, Switzerland | 2021 | 51-200 | Enterprise-focused SaaS. No public pricing listed. API-based pricing model expected. Contact sales. | Partial | Oct 15, 2026 |
| Fairly AI | Kitchener, Canada | 2020 | 11-50 | On-premises or private-cloud deployments; quote-based. | Partial | Sep 21, 2026 |
| TrojAI | Saint John, Canada | 2019 | 11-50 | Enterprise-only, no public pricing. Contact sales at troj.ai. | Partial | Oct 15, 2026 |
| OneTrust AI Governance | Atlanta, United States | 2016 | 1000+ | Enterprise platform; contact sales for quote, no public pricing listed | Partial | Sep 21, 2026 |
| IBM watsonx.governance | Armonk, United States | — | 1000+ | SaaS: Free trial (Essentials, max 200 resource units, max 3 use cases); Standard plan at USD $0.60 per resource unit (up to 50K records/evaluation, 500 inventories). Software (on-prem) priced by virtual processor core (VPC). | Partial | Sep 21, 2026 |
| ServiceNow AI Control Tower | Santa Clara, United States | 2004 | 1000+ | Contact for pricing | Partial | Sep 21, 2026 |
| Securiti Data Command Center | San Jose, United States | 2018 | 501-1000 | Contact for pricing | Partial | Oct 1, 2026 |
| BigID | New York, United States | 2016 | 501-1000 | Contact for pricing | Partial | Sep 21, 2026 |
| Credo AI | Palo Alto, United States | 2020 | 51-200 | Contact sales for enterprise subscription quote. | Partial | Sep 21, 2026 |
| Holistic AI | London, United Kingdom | 2020 | 51-200 | Enterprise platform; contact sales for quote. | Partial | Sep 21, 2026 |
| ValidMind | Palo Alto, United States | 2022 | 11-50 | Custom pricing plans; contact sales. | Partial | Sep 21, 2026 |
| FairNow | McLean, United States | 2023 | 11-50 | Contact sales for quote; no public pricing listed | Partial | Oct 15, 2026 |
| Lasso Security | Tel Aviv, Israel | 2023 | 11-50 | Enterprise pricing only. Not publicly listed. | Partial | Sep 21, 2026 |
| Cranium | Short Hills, United States | 2023 | 51-200 | Enterprise pricing not publicly listed; annual subscription model referenced in Microsoft Marketplace listing.Microsoft Marketplace | Partial | Sep 21, 2026 |
| Naaia | Louveciennes, France | 2021 | 11-50 | No public pricing tiers; demo and quote requested via website. | Partial | Sep 21, 2026 |
| 2021.AI | Copenhagen, Denmark | 2016 | 51-200 | Pricing is custom and tailored to use case, organization size, deployment model (on-prem or cloud), and selected modules. Contact sales required per their pricing page. | Partial | Sep 21, 2026 |
| QL Security | United Kingdom | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| ComplyAgent | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| SetAIComply | European Union | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Adeptiv AI | India | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Meilynx | United States | — | — | Contact for pricing | Partial | Sep 21, 2026 |
| Hyperproof | Bellevue, United States | 2018 | — | No public prices or plan names on its pricing page; quoted on request. The AI-native third-party risk product includes a baseline of AI credits, with more sold at discounted tiers. | Partial | Oct 15, 2026 |
| Noma Security | New York, United States | 2023 | — | No prices on noma.security. AWS Marketplace lists the Noma Security Platform at $200,000 for a 12-month contract but doesn't say how many units that covers. | Partial | Oct 15, 2026 |
| Sprinto | India | 2020 | — | No public prices. Three plans (Foundation, Growth, Platform) are quoted by sales. Foundation includes 25+ automated frameworks, 20 AI-powered security questionnaires a year and an AI systems inventory. Add-ons include additional frameworks, AI Governance, Enterprise Risk Management, Enterprise Trust Management and Enterprise Vendor Risk Management. | Adjacent | Oct 15, 2026 |
| Fiddler AI | Palo Alto, United States | 2018 | — | Three plans: Free (real-time guardrails for hallucinations, toxicity, PII/PHI, prompt injection and jailbreaks, powered by Fiddler's Centor models); Developer at $0.002 per trace (adds unified observability with tests and experiments for agentic and predictive systems, custom evaluators and bring-your-own judge, role-based access control and SSO; SaaS only); and Enterprise, priced by sales (adds enterprise-grade guardrails and scale, SaaS, VPC or on-premises deployment, and a named customer success manager). The pricing page lists no trace or user limits. | Adjacent | Oct 15, 2026 |
| Scytale | Israel | 2021 | 51-200 | No public prices. Platform packages (Build, Scale, Enterprise), startup bundles (Build Starter, Build DFY, Build Stronger) and consulting packages (LaunchReady, StayReady, ComplianceShield) are all quoted after a demo. | limited | Oct 15, 2026 |
| Cisco AI Defense | San Jose, United States | 1984 | — | No public prices. Cisco's AI Defense offer description (version 2.1, last modified September 23, 2026) names three packages: Advantage, Validation Essentials and Runtime Essentials; the data sheet shows supply chain scanning only in Advantage. Customers buy either per AI application or as committed usage: a prepaid balance drawn down by validation tests (600 in the first block, then 120 per block), runtime guardrails (measured in inspection tokens, in blocks of 1 billion), governed assets (blocks of 50) and endpoint agents. The runtime package assumes an aggregate limit of 10 million queries per AI application per year, and Enhanced Support is included. AWS Marketplace lists "Cisco AI Defense powered by Security Cloud Control" as SaaS with custom pricing by private offer. The Explorer Edition red-teaming tool is offered at no upfront cost. | limited | Oct 15, 2026 |
| F5 AI Guardrails | Seattle, United States | 1996 | — | F5 doesn't publish prices; its AI Guardrails page links to a free trial and a sales contact. AWS Marketplace lists F5 AI Guardrails (a container image for Amazon EKS) with a 12-month "F5 Guardrails AI" dimension at $100,000.00, but the listing says that price is a placeholder and that pricing is configured by F5 as a private offer. AWS Marketplace also lists F5 AI Red Team at $100,000.00 for a 12-month contract on its "Red Team Reports" dimension; the listing says cost scales with the number of report units bought and doesn't say how many reports that price covers. | limited | Oct 15, 2026 |
| Prisma AIRS | Santa Clara, United States | 2005 | — | Bring-your-own-license: AI Runtime Security, AI Supply Chain Security and AI Red Teaming are all funded from a pool of Palo Alto Networks Software NGFW credits, activated with an authcode. API Intercept usage is "priced per billion monthly tokens" (one token is four characters; profiles start at 1 billion tokens and go up in whole billions; the quota resets each calendar month) and requires Strata Cloud Manager Essentials or Pro. AWS Marketplace lists a Prisma AIRS API SaaS contract at $4,353.00 per 12 months for its "Prisma AIRS API Calls" dimension; the listing doesn't say how many calls that covers. Credit rates and prices for AI Red Teaming and Agent Security aren't published. | limited | Oct 15, 2026 |
| WitnessAI | Mountain View, United States | 2023 | — | No prices on witness.ai. Its AWS Marketplace listing gives 12-month prices: WitnessAI for Enterprise at $180 per user (minimum 1,000 users, $180,000), WitnessAI Agentic Visibility at $24 per agent (minimum 2,500 agents, $60,000) and WitnessProtect model protection guardrail at $300,000. | limited | Oct 15, 2026 |
Buyer’s guide
Independent ranking with documented criteria.
See our top picks for NIST AI RMFFrequently asked
In-depth answers about NIST AI RMF.
Compare across industries
See which vendors support NIST AI RMF in your sector.
NIST AI RMF in Defense & National SecurityNIST AI RMF in EducationNIST AI RMF in Employment & HRNIST AI RMF in Energy & UtilitiesNIST AI RMF in Financial ServicesNIST AI RMF in Government & Public SectorNIST AI RMF in HealthcareNIST AI RMF in InsuranceNIST AI RMF in Legal ServicesNIST AI RMF in ManufacturingNIST AI RMF in Media & EntertainmentNIST AI RMF in Retail & E-commerceNIST AI RMF in SaaS & TechnologyNIST AI RMF in Telecommunications
Last reviewed April 28, 2026. Informational summary only — not legal advice. Consult qualified counsel for specific obligations.