GRC Platforms
← All categories

Third-Party Risk

Vendor, supplier, and third-party risk assessment and monitoring.

15 platforms. Ordered by name. No paid placement.

Aravo

San Francisco, California, USA

Mid-market

Third-party risk and supplier management platform with a large connector ecosystem.

Third-Party RiskSaaSISO 27001SOC 2GDPRNIST CSF

Bitsight

Boston, Massachusetts, USA

Enterprise

Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.

Third-Party RiskSaaSNIST CSFISO 27001SOC 2

Certa

Palo Alto, California, USA

Startup

No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.

Third-Party RiskSaaSISO 27001SOC 2GDPR

Conveyor

San Francisco, USA

Startup

AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.

Third-Party RiskSaaSSOC 2ISO 27001GDPRHIPAA

GAN Integrity

Copenhagen, Denmark

Startup

Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.

Third-Party RiskSaaSFCPAUK Bribery ActGDPR

Panorays

Tel Aviv, Israel

Startup

Third-party security risk platform combining external attack-surface scanning with security questionnaires.

Third-Party RiskSaaSISO 27001SOC 2GDPRNIST CSF

Prevalent

Phoenix, Arizona, USA

Mid-market

Third-party and vendor risk management platform, now part of Mitratech.

Third-Party RiskSaaSISO 27001SOC 2NIST CSFGDPR

ProcessUnity

Concord, Massachusetts, USA

Mid-market

Third-party risk management platform combined with the CyberGRX risk exchange.

Third-Party RiskSaaSISO 27001SOC 2NIST CSFGDPR

SafeBase

San Francisco, USA

Mid-market

Trust center platform for publishing security posture and streamlining vendor security reviews.

Third-Party RiskSaaSSOC 2ISO 27001GDPRHIPAA

SecurityScorecard

New York, New York, USA

Enterprise

Security ratings platform used for third-party and supply-chain cyber risk management.

Third-Party RiskSaaSNIST CSFISO 27001SOC 2PCI DSS

Supply Wisdom

New York, New York, USA

Startup

Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.

Third-Party RiskSaaSISO 27001NIST CSFGDPR

UpGuard

Mountain View, California, USA

Startup

Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.

Third-Party RiskSaaSISO 27001SOC 2NIST CSFPCI DSS

Vendict

Israel

Startup

AI-native platform for automating security questionnaire responses and compliance reviews.

Third-Party RiskSaaSSOC 2ISO 27001GDPRHIPAA

Venminder

Elizabethtown, Kentucky, USA

Mid-market

Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.

Third-Party RiskSaaSFFIECSOC 2GLBAISO 27001

Whistic

Pleasant Grove, Utah, USA

Startup

Vendor security assessment and profile-sharing network for third-party risk teams.

Third-Party RiskSaaSISO 27001SOC 2CAIQNIST CSF