Certifications
Certifications
Features
Features
Integrations
Integrations
Customers
Customers
FAQs
FAQs
Resources
Resources
Blog
Blog
Log in
Log in
Book a demo
EN
ES
EN
ES

Security and compliance resources

Guides, free tools and real projects from the team that runs security and compliance for companies day to day.

Guides
Free PDF
SOC 2 Compliance Checklist
Scope, policies, the nine Common Criteria and the evidence you need, in one checklist.
Download free

All resources

Checklists, tools and references to prepare for certification and audits at your own pace.

Free tools
Free tool
EU AI Act Checker
Find out if the AI Act applies to you, your role, your risk level and your deadlines.
Use the tool
Guides
Free PDF
SOC 2 Compliance Checklist
Scope, policies, the nine Common Criteria and the evidence you need, in one checklist.
Download free
Knowledge base
Open access
Security and compliance glossary
Plain explanations of 37 security and compliance terms, from ISO 27001 and ENS to EDR and SIEM.
Browse terms
Guides
Free PDF
How to choose your security and compliance setup
Five ways to run security and compliance, compared side by side.
Download free

Comparisons

How Qalea compares with other security and compliance platforms: what each one includes and who does the work.

Comparison table of Complaion and Qalea covering expert support, ENS, penetration testing, vulnerability scanning, detection and response, language and frameworks
Comparison
Qalea vs Complaion
Qalea vs Complaion compared: what each platform includes, who does the work, how ENS monitoring and pentesting are covered, and how to switch to Qalea.
Read the comparison
Comparison table of Oneleet and Qalea covering detection and response, penetration testing, ENS, expert support, language and frameworks
Comparison
Qalea vs Oneleet
Qalea vs Oneleet compared: what each platform includes, who does the work, how pentesting and monitoring are covered, and how to move from Oneleet to Qalea.
Read the comparison
Comparison table of Secfix and Qalea covering detection and response, penetration testing, ENS, vulnerabilities, expert support and frameworks
Comparison
Qalea vs Secfix
Qalea vs Secfix compared: what each platform includes, who does the work, how pentesting and monitoring are covered, and how to move from Secfix to Qalea.
Read the comparison
Comparison table of Sprinto and Qalea covering frameworks, ENS, penetration testing, vulnerabilities, devices, detection and expert support
Comparison
Qalea vs Sprinto
Qalea vs Sprinto compared: what each platform includes, who does the work, how pentesting and monitoring are covered, and how to move from Sprinto to Qalea.
Read the comparison
Comparison table of Drata and Qalea covering frameworks, ENS, penetration testing, vulnerabilities, detection and expert support
Comparison
Qalea vs Drata
Qalea vs Drata compared: what each platform includes, who does the work, how pentesting and monitoring are covered, and how to move from Drata to Qalea.
Read the comparison
Comparison table of Vanta and Qalea covering frameworks, ENS, penetration testing, devices, detection and expert support
Comparison
Qalea vs Vanta
Qalea vs Vanta compared: what each platform includes, who does the work, how pentesting and monitoring are covered, and how to move from Vanta to Qalea.
Read the comparison

What our clients say about running security and compliance with us.

Testimonials from the companies we work with.

Qalea manages the security of our company while we focus in our core business. In this way, we are compliant with applicable regulations of our industry without internal resources.
Ignasi Vilasojana
CEO of Worldsensing
So far, Qalea has successfully deployed all the necessary technologies and processes so we are compliant. Without any hidden or extra costs. Qalea did their job, while our tech team didn’t get distracted from their role: building product.
Joaquín M. Fernández
COO of Build38

Latest from the blog

Practical guidance on the frameworks and the threats behind them.

ISO 27001, SOC 2 and TISAX: where they overlap

ISO 27001, SOC 2 and TISAX share much of their control ground but produce a certificate, a report and a label. Where they overlap and what differs.

Third party risk management under DORA and NIS2

What DORA and NIS2 each require for supplier risk management, where ISO 27001 already covers the ground, and how to build one supplier inventory that serves both.

How to write an ISO 27001 Statement of Applicability

What an ISO 27001 Statement of Applicability must contain, how to decide which Annex A controls apply, how to justify exclusions and what auditors test in it.

Read the blog

Empower your security with AI-driven compliance

Book a demo
QaleaHow it worksFrameworksIntegrationsCustomersFAQs
ResourcesBlogGuidesFree toolsGlossary
ComparisonsQalea vs VantaQalea vs DrataQalea vs SprintoQalea vs SecfixQalea vs OneleetQalea vs Complaion
ContactBook a demoLinkedInX (Twitter)YouTube
Subscribe to our newsletter

Updates on compliance frameworks, security practices and new resources.

By subscribing you accept our Privacy Policy. You can unsubscribe at any time.

© 2025 Qalea. All rights reserved
Trust Center
·
Privacy Policy
·
Terms & Conditions
·
Legal  (ES)
Book a Demo

Leave us your data and we will get in contact with you shortly.

Close popup