Third-party risk management vendors in the United States

Bitsight provides a cyber risk intelligence platform.

Black Kite provides an AI-native third-party cyber risk management platform for monitoring and assessing vendor risks.

ProcessUnity provides a software platform for managing third-party and cybersecurity risk.

RiskRecon provides cybersecurity ratings and assessments to help organisations manage third-party and supply chain risk.

UpGuard provides a platform for managing cyber risk across vendors, attack surface, and workforce.

Third-party risk management software with outsourced vendor control assessments, continuous vendor risk monitoring and managed services, now part of Ncontracts.

Whistic provides a platform for assessing, monitoring, and sharing vendor security and compliance information.

Cortile automates vendor security reviews for healthcare third-party risk teams.

Third-party management and tech risk and compliance software, alongside privacy automation, consent management and AI governance tools.

Third-party cyber risk management platform with vendor security questionnaires, external attack surface ratings, continuous monitoring and remediation workflows for suppliers.

SecurityScorecard provides a platform for managing third-party and supply chain cyber risk.

Integrated risk management software covering enterprise and operational risk, IT and security risk, compliance, audit, third-party governance and operational resilience.

Risk intelligence platform that gathers multilingual online data and uses AI agents for threat, identity and vendor risk investigations by government and enterprise.

Drata provides a platform that automates security compliance, risk management and trust assurance for companies.

Risk data and analytics provider whose ThreatMetrix, Emailage and InstantID products detect fraud and verify digital identities for banks, insurers and governments.

Lumu provides network detection and response to identify and stop cyber threats in real time.

GRC software covering IT and cyber risk, IT and cyber compliance, vendor and third-party risk, enterprise risk, regulatory compliance, internal audit and resilience.

NetRise analyses compiled software to create an inventory of components and identify supply chain risks.

Audit, risk and compliance software, formerly AuditBoard, with controls management, cyber risk management, third-party risk, regulatory compliance and AI governance products.

Vanta provides a platform for automating security compliance and risk management.

vCISO Lite sells a subscription platform that helps growing companies handle security compliance and risk.

Integrated risk management software for policy, compliance, audit and third-party risk, sold as part of a wider IT and business workflow platform.