Aravo
San Francisco, California, USA
Third-party risk and supplier management platform with a large connector ecosystem.
← All shortlists
Mid-market
Enterprise
Startup
Startup
Startup
Startup
Mid-market
Mid-market
Mid-market
Enterprise
Startup
Startup
Startup
Mid-market
Startup
Best Third-Party Risk platforms
Vendor, supplier, and third-party risk assessment and monitoring.
Catalog last reviewed 2026-08-10. Page copy reviewed 2026-08-10. Next editorial review by 2026-09-10. Alphabetical order, no paid placement. 15 matched live listings.
This shortlist is the live catalog slice for the Third-Party Risk category. Listings appear here only when their primary category matches. Full page-unique intros for remaining categories ship in a later polish pass.
How order works. Matched platforms are the full live catalog slice for this primary category, sorted alphabetically by name. This is not a scored quality ranking. When listing fees open, they are intended to affect publish timing or review-queue position only, not alphabetical order or praise on this page (payments are currently closed). Operator house products are not catalog entries here; they appear only as labeled footer cards. See /transparency.
Category index: /categories/third-party-risk. Parent hub: /best. Full catalog: /directory.
Bitsight
Boston, Massachusetts, USA
Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.
Certa
Palo Alto, California, USA
No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.
Conveyor
San Francisco, USA
AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.
GAN Integrity
Copenhagen, Denmark
Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.
Panorays
Tel Aviv, Israel
Third-party security risk platform combining external attack-surface scanning with security questionnaires.
Prevalent
Phoenix, Arizona, USA
Third-party and vendor risk management platform, now part of Mitratech.
ProcessUnity
Concord, Massachusetts, USA
Third-party risk management platform combined with the CyberGRX risk exchange.
SafeBase
San Francisco, USA
Trust center platform for publishing security posture and streamlining vendor security reviews.
SecurityScorecard
New York, New York, USA
Security ratings platform used for third-party and supply-chain cyber risk management.
Supply Wisdom
New York, New York, USA
Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.
UpGuard
Mountain View, California, USA
Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.
Vendict
Israel
AI-native platform for automating security questionnaire responses and compliance reviews.
Venminder
Elizabethtown, Kentucky, USA
Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.
Whistic
Pleasant Grove, Utah, USA
Vendor security assessment and profile-sharing network for third-party risk teams.