The Forrester Wave™: Governance, Risk, And Compliance Platforms, Q2 2026
Vendors or products added in this year’s report may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
Vendors or products dropped from one year to the next may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
The Forrester Wave evaluation is an assessment of the top vendors in the market; it doesn't represent the entire vendor landscape. GRC platform customers may be familiar with or considering vendors that were not evaluated in this report. Additional information about this market and notable vendors can be found in the corresponding report: The Governance, Risk, And Compliance Platforms Landscape, Q4 2025.
A: Vendors that met the defined inclusion criteria but declined to participate in or contributed only partially to the evaluation are scored in accordance with Forrester's vendor participation policy and their positioning is published along with those of the participating vendors. Vendors appear or disappear from evaluations based on inclusion criteria including: broad enterprise-level support, substantial revenue (at least $40 million annually from GRC product), global customer base (serving at least three of four global regions with no more than 50% revenue from a single region), and mindshare among Forrester's enterprise clients.