RiskMandateScrut Automation
Based in United States; at Web Summit Lisbon 2026 as a speaker's company. Public facts only, each with its source.
On this page
| What they do | AI compliance automation (GRC) platform: evidence collection, risk assessment and vendor risk management with AI agents, for SOC 2, ISO 27001 and 60+ frameworks. |
| Based in | United States |
| At Web Summit as | a speaker's company |
| Confirmed for 2026 | Yes: Nicholas Muy (CISO) is listed on the LIS26 session page 'The biological bottleneck' |
| Website | scrut.io |
| Filed under | Governance, risk and compliance |
Its flows, and where AI agents are in them
We have not mapped Scrut Automation's flows yet: how work moves through its product, from a request to a result, and at which steps an AI agent acts. We map them only from public pages (its own site and documentation, its talks), each step with its source, and never guess. If you are at Scrut Automation, the quickest way to get this right is to tell us how it works.
Our question for them
As for every company we follow, three questions, not claims. We have not asked Scrut Automation yet. When they answer, it goes here.
- Reach What can their AI agents (or their customers' agents) actually reach?
- Mandate What were they authorised to do?
- Gap Who controls the gap between the two?
Where this comes from
- websummit.com/sessions/lis26/553f8328-1300-406a-887a-b139455238c7/the-, read 2026-11-01 by the team's curator: LIS26 session page (conferenceSlug lis26): 'The biological bottleneck', 12 Nov, Cybersecurity Summit, Stage 8, names Scrut Automation as the speaker's organisation.
- websummit.com/attendees/lis26/056fe625-28f3-4f70-bc2a-a429d44c3361/nic, read 2026-11-01 by the team's curator: LIS26 attendee page: Nicholas Muy, CISO, Scrut Automation; country and industry as listed by Web Summit; public bio.
- www.scrut.io/, read 2026-11-01 by the team's curator: what the company does, from its own site (title and description).
Re-checked by newsroom@web-summit.dinis on 2026-11-05 at 01:50 UTC: the summit's page answered and is still live; the company's website answered and is live.
Taken from the team's company map (data/companies.json on web-summit.sgit.ai), public facts only. The team's own notes on each company (why it matters, whether to meet, who owns it) are not facts about the company and are not published here. Something wrong? Tell us and we correct it on this page, dated.
About PrompTugal.news
PrompTugal.news: Technology and AI, in context. The Web Summit Lisbon 2026 edition. Every fact sourced and dated, for the people who are there. Edited by Dinis Cruz, Indi Gupte and Vicky Wang, made with AI agents. Web Summit is named only to say where we report from. Text CC BY 4.0, code Apache-2.0.
- Why this page exists. We keep a page on every company we follow at the summit, built only from public pages, so that anyone, Scrut Automation included, can see what we know and where it comes from. Nothing on it is an endorsement.
- Independence. Independent. Not affiliated with Web Summit. The team that makes PrompTugal.news also works on RiskMandate, so we are independent of Web Summit, not of RiskMandate. Our disclosure says it in full; please weigh what we say with it in mind.
- Corrections. If something here is wrong or out of date, we correct it on this page, dated. We publish no contact details and nothing about a person that is not already public and professional.
- More. About PrompTugal.news, all the companies, the summit.
The same, as data: companies/scrut-automation.json and its graph, graph/companies/scrut-automation.json (how to read them: the data, as JSON).