Aravo
San Francisco, California, USA
Third-party risk and supplier management platform with a large connector ecosystem.
SaaSISO 27001SOC 2GDPRNIST CSF
Third-Party Risk
Vendor, supplier, and third-party risk assessment and monitoring.
15 platforms. Ordered by name. No paid placement.
BitsightMCP
Boston, Massachusetts, USA
Security ratings and cyber-risk analytics platform positioned for third-party and enterprise cyber risk.
SaaSNIST CSFISO 27001SOC 2
Certa
Palo Alto, California, USA
No-code third-party lifecycle and risk management platform spanning onboarding, risk and ESG.
SaaSISO 27001SOC 2GDPR
ConveyorMCP
San Francisco, USA
AI platform that automates security questionnaires, RFPs, and trust centers for customer security reviews.
SaaSSOC 2ISO 27001GDPRHIPAA
GAN Integrity
Copenhagen, Denmark
Ethics, compliance and third-party risk management platform for anti-corruption and integrity programs.
SaaSFCPAUK Bribery ActGDPR
Panorays
Tel Aviv, Israel
Third-party security risk platform combining external attack-surface scanning with security questionnaires.
SaaSISO 27001SOC 2GDPRNIST CSF
Prevalent
Phoenix, Arizona, USA
Third-party and vendor risk management platform, now part of Mitratech.
SaaSISO 27001SOC 2NIST CSFGDPR
ProcessUnity
Concord, Massachusetts, USA
Third-party risk management platform combined with the CyberGRX risk exchange.
SaaSISO 27001SOC 2NIST CSFGDPR
SafeBaseMCP
San Francisco, USA
Trust center platform for publishing security posture and streamlining vendor security reviews.
SaaSSOC 2ISO 27001GDPRHIPAA
SecurityScorecardMCP
New York, New York, USA
Security ratings platform used for third-party and supply-chain cyber risk management.
SaaSNIST CSFISO 27001SOC 2PCI DSS
Supply WisdomMCP
New York, New York, USA
Real-time third-party and location risk intelligence platform spanning financial, cyber, ESG and operational domains.
SaaSISO 27001NIST CSFGDPR
UpGuard
Mountain View, California, USA
Attack-surface and third-party risk platform combining security ratings with vendor questionnaires.
SaaSISO 27001SOC 2NIST CSFPCI DSS
Vendict
Israel
AI-native platform for automating security questionnaire responses and compliance reviews.
SaaSSOC 2ISO 27001GDPRHIPAA
Venminder
Elizabethtown, Kentucky, USA
Third-party risk management platform with in-house vendor assessment and due-diligence services, now part of Ncontracts.
SaaSFFIECSOC 2GLBAISO 27001
WhisticMCP
Pleasant Grove, Utah, USA
Vendor security assessment and profile-sharing network for third-party risk teams.
SaaSISO 27001SOC 2CAIQNIST CSF