Third-party risk management vendors

BitScore Cybertech LLP is a delivery partner for Bitsight security ratings in India.

Bitsight provides a cyber risk intelligence platform.

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

CyberVadis provides a managed service and platform for third-party cyber risk management.

Ethixbase360 sells third-party risk management software and due diligence services.

ProcessUnity provides a software platform for managing third-party and cybersecurity risk.

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

Third-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.

Cortile automates vendor security reviews for healthcare third-party risk teams.

HackRisk monitors external cyber risks for UK SMEs and provides a security score.

Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Manchester-based independent cybersecurity consultancy with over 20 years of experience delivering CREST and CHECK-accredited penetration testing, red teaming, and compliance certification services.

Israeli-headquartered global cybersecurity consultancy with a UK presence, specialising in penetration testing and TIBER-EU red team exercises for Fortune 500 companies.

Alvor provides a security architecture management and compliance platform.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

CRACI provides build-time software supply chain security and SBOM generation for developers.

CybelAngel provides external threat intelligence and attack surface management services to protect enterprise data and assets.

CyberSentien provides a compliance assurance engine that assesses organisations against multiple security and AI governance frameworks.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

Open source intelligence software that collects and analyses online data to detect threats and hidden networks for national security, law enforcement and financial crime teams.

Testing and certification group that helps vehicle makers and suppliers work towards ISO/SAE 21434 compliance.

Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments.

Lumu provides network detection and response to identify and stop cyber threats in real time.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Protos AI provides managed adversary risk intelligence by collecting and analysing threat signals for organisations.

Vanta provides a platform for automating security compliance and risk management.

vCISO Lite sells a subscription platform that helps growing companies handle security compliance and risk.

ZeroRisk provides an agentic platform that automates compliance and vendor risk assessments.

Integrated risk management software for policy, compliance, audit and third-party risk, sold as part of a wider IT and business workflow platform.