RegScale

RegScale

Travis Howerton and Anil Karmel founded RegScale in McLean, Virginia after becoming exhausted by manual GRC processes. Howerton, a security and compliance veteran, has served as CEO since inception. The firm’s headquarters are in McLean, with an R&D office in Knoxville, Tennessee. RegScale sells a cloud-native Continuous Controls Monitoring (CCM) platform that embeds compliance checks directly into digital workflows. The platform automates evidence collection, control assessments, and remediation across 60+ frameworks including FedRAMP, NIST 800-53, PCI DSS, CMMC, NYDFS, and DORA. It integrates with security scanners, cloud hyperscalers, DevSecOps tooling, and ITIL systems. Named customers include DC.gov and CALIBRE Systems. The company serves organizations in North America and Europe. The company grew revenue threefold in 2024 as the CCM category gained traction (Altss estimate). RegScale’s team numbers at least 20 professionals, including a CRO, CFO, CPO, CISO, VP of Engineering, and a Federal GM. Security executive Roland Cloutier serves as a strategic advisor. RegScale maintains an office in Knoxville, Tennessee for its R&D operations. RegScale’s structural differentiator lies in its patent-pending Time Travel system, which records every change to every record across its lifecycle, enabling point-in-time compliance snapshots and audit readiness. This approach, combined with compliance-as-code integration into CI/CD pipelines, distinguishes it from legacy GRC tools that produce static paperwork.