Third-Party Risk Management Solutions for Compliance Reviews and Ratings

What are Third-Party Risk Management Solutions for Compliance?

The compliance third-party risk management (TPRM) solutions market consists of vendors offering technologies to CCOs, among other senior leaders responsible for TPRM, to manage the risks associated with due diligence and/or ongoing monitoring of third-party vendors, distributors, agents, partners or other parties. Products in this market are often capable of supporting a range of TPRM workflows across multiple risk terrains. Risks specifically addressed may include anti-bribery and anti-corruption (ABAC), anti-money-laundering, data management and supply chain, and business continuity risks among others.

Product Listings

Filter by

Products 1 - 20 of 51

RiskProfiler is a centralized cybersecurity platform that helps organizations manage external risks and protect digital assets effectively. Using AI, machine learning, and proprietary algorithms, RiskProfiler provides unified visibility into external-facing assets like domains, IPs, and DNS records. It prioritizes remediation by categorizing assets based on criticality and analyzing exposures with real-time threat intelligence. Continuous scans identify vulnerabilities, outdated software, shadow IT, and unmanaged assets to strengthen security posture.

The platform includes Dark Web Intelligence to analyze malicious activities on the dark web, monitor sensitive data breaches, address compromised accounts, and uncover counterfeit and unauthorized product listings. Its Physical Threat Intelligence solution provides real-time geographic threat visualization, enabling organizations to proactively assess risks such as natural disasters and social-political issues across business locations.

Show More Details

Exiger is a company that specializes in providing risk and compliance solutions for corporations, government agencies, and banks. The focus is on navigating the complexities related to third-party, supply chain, and customer-related risks. Using its advanced technology, Exiger is prominently involved in areas like ESG, cyber risk, financial crime, third-party, and supply chain management. The company supports numerous organizations worldwide, both from the public and private sector, with its AI technology. Moreover, Exiger places a strong emphasis on promoting safety and transparency in all aspects of business operations.

Show More Details

ProcessUnity is a cloud-based solutions provider helping organizations automate their risk and compliance programs. By offering highly configurable, user-friendly tools, the company aims to drastically reduce manual administrative tasks. As a Software-as-a-Service technology, ProductUnity is designed to deploy quickly with minimal effort from IT resources. The technology aims to deliver faster, improved outcomes with scalability to accommodate the growth of risk governance and compliance programs. The suite of applications provided by ProcessUnity includes Third-Party Risk Management, Cybersecurity Program Management, Policy and Procedure Management, Enterprise Risk Management, Regulatory Compliance Management, and Product and Service Offer Management. The company also emphasizes the importance of creating and nurturing a diverse and inclusive workplace.

Show More Details

OneTrust enables the responsible use of data and AI. The OneTrust Platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle.

Show More Details

HPE Aruba Networking is a provider of edge-to-cloud networking solutions. The company aims to aid businesses in updating their networks and maximizing data utility through the application of AI-based machine learning. This leads to the creation of networks that are simpler, faster, and more automated. Their solutions allow businesses to streamline their operations through improved network infrastructure, enhancing productivity and operational efficiency while providing scalable and secure solutions. AI implementation also equips the company in offering predictive insights and automated problem resolution, further complementing businesses in their digital transformation endeavors.

Show More Details

HackNotice, established in 2018 and based in Austin, TX, is a threat intelligence platform with a focus on human-centric cybersecurity. It utilizes real-time dark web information to offer comprehensive surveillance and notifications relating to threats to first-party domains, business emails of employees, third-party vendors, and end-user accounts. Coupled with an extensive dark web research database, HackNotice strives to enable companies to discover and shield their concealed, human-related threat surfaces.

Show More Details

Cyturus Technologies offers a Compliance and Risk Tracker (CRT) Software as a Service (SaaS) platform. This platform is centered around the need for continuous compliance and risk management in the ever-evolving field of cyber security. The CRT utilizes specific algorithms to calculate a Cybersecurity Maturity Index based on various factors like industry best practices, governance maturity, and effective strategy. The process used involves identifying any current gaps in cyber security measures in place and provides a progressive plan for improvement. This plan is designed uniquely for each organization and is visually displayed that shows ongoing development over time. Cyturus applies a Strategy, Implement, Monitor, and Manage (SIMM) methodology within any regulatory or compliance framework, giving organizations an easy-to-follow structure to build a sustainable cybersecurity program.

Show More Details

LogicGate is a transformative risk management and compliance solution provider committed to helping customers turn risks into strategic advantages. Risk Cloud, its no-code governance, risk, and compliance (GRC) platform, enables proactive risk management and strategic decision making with automated GRC solutions in one integrated platform.

Show More Details

PCI Checklist is a company specializing in ongoing risk evaluation and cybersecurity risk management. Its primary objective is to deliver priority-based remediation planning services. It primarily serves significant financial institutions, among which some are among the top 100 banks worldwide.

Show More Details

NAVEX is a multinational company dedicated to developing risk and compliance software. The company focuses on strengthening risk management procedures in companies spanning various industries. NAVEX provides consolidated solutions that aid businesses in comprehending and supervising their risk, compliance, and ESG programs more efficiently. The firm integrates risk across multiple organizational sectors to enhance awareness, boost operational effectiveness, and support informed decision making. Conventionally, NAVEX aims to develop a technologically advanced platform that empowers businesses to predict and manage risks. They offer solutions for businesses to assess their risk and compliance situation, hence allowing them to govern their Risk Management and Compliance (GRC) programs smoothly and effectively. NAVEX is also devoted to fostering an equitable and inclusive work environment and is invested in safeguarding client interests and conserving finite resources.

Show More Details

SAFE is a unified platform to manage third-party and first-party cyber risk. With over 100+ API integrations available, SAFE’s AI-driven platform ingests data from a company's infrastructure and security tools to provide a real-time view of cyber risk in financial terms and automatically suggest security improvements based on its business impact. SAFE is purpose-built on open standards such as FAIR (FAIR-MAM, FAIR-CAM), MITRE ATT&CK and NIST CSF and delivers transparent and defensible results. SAFE elevates CISOs as indispensable partners to the business by helping to effectively prioritize and manage the cybersecurity risk at pace. SAFE empowers enterprises, boards, regulators and cyber insurance carriers to better understand cyber risk in an aggregated and granular manner.

Show More Details

ServiceNow's cloud‑based platform and solutions help digitize and unify organizations so that they can find smarter, faster, better ways to make work flow. So employees and customers can be more connected, more innovative, and more agile.

Show More Details

Thomson Reuters is a global entity known for delivering news and information-based tools to professionals. It maintains a comprehensive network of journalists and expert editors, helping to keep users informed on global happenings, particularly in the fields of law, regulation, and tax modifications. Recognizing the intricate environments where their users function - mediums like tax, law, compliance, government, media - Thomson Reuters offers assistance to professionals, aiding them to adapt and thrive in the current digital disruption era.

Show More Details

Vanta’s Trust Management Platform simplifies security and compliance processes for organizations of all sizes. Over 10,000 teams rely on Vanta to automate evidence collection for 35+ frameworks, including SOC 2 and ISO 27001, streamline workflows for risk management and vendor assessments, and enhance visibility into their security programs.

By centralizing key security and compliance activities, Vanta enables Security, GRC, and IT professionals to reduce manual effort, improve efficiency, and meet critical requirements with confidence.

Show More Details

Visualping monitors any webpage and alerts you when it is updated. The alert is sent via email or text message but also via any team notification service like MS Teams, Slack and also API or by entering a row in a spreadsheet.

Our AI recognizes when a change is important or trivial and flags this in the email. This allows you to filter and focus only on the most relevant changes.

Our AI also summarizes what has changed since the last time it checked the page so you can save time. Our email notifications attach a screenshot of the page highlighting the change. Our dashboard provides more analysis tools.

Visualping is used to automate monitoring of competitor websites, gain insight into market trends, product launches, pricing strategies, regulatory changes and thousands of other use cases.

Show More Details

3rdRisk is a risk management technology company located in the Amsterdam region, the Netherlands. We provide cutting edge solutions for third-party risk management, internal control and compliance management.

3rdRisk was founded in 2018 after recognising that many existing risk management solutions weren't living up to their potential and lacked the capabilities to address both present and future risks. Our platform functions as a smart ecosystem, continually enhanced by the insights and experiences from our valued clients and partners.

Placing people at the forefront, our approach is both personal and innovative. This commitment allows us to offer a smart, user-friendly platform empowering audit, risk and compliance professionals to confidently navigate today's challenges and anticipate tomorrow's. Proudly serving esteemed clients and partners globally, we're here to redefine risk management.

Be the first to .

6clicks is specialized in enabling and mechanizing risk and compliance programs for businesses. The focus is on aiding organizations to reach regulatory compliance across various standards including ISO 27001, SOC 2, PCI-DSS, HIPAA, NIST, and FedRamp. The service offers control over different elements of compliance process like audit, vendor risk assessment, incident and risk management, and policy frameworks. The use of artificial intelligence to automate manual tasks boosts efficiency in risk and compliance management. Additionally, 6clicks offers a comprehensive content library, allowing businesses to import standards, laws, regulations, or templates. Its compatibility with over 3,000 applications makes it versatile and user-friendly. Serving organizations worldwide, 6clicks, established in 2019, has been instrumental in empowering businesses in managing risk and compliance effectively.

Be the first to .

Founded in 2022, Agnostic Intelligence is an AI-operated B2B SaaS platform that auto-analyses multiple sources and consistently identifies cybersecurity risks in the supply chain. Our advanced solution digitises and automates this process, providing a comprehensive overview of suppliers' risks.

Be the first to .

The main objective of the company is to offer a Cyber Security Threat Management product aiming to provide integrated visibility across multiple threat vectors for any organization. Amid a continually evolving cyber security environment where new threats appear daily, the company is committed to making enterprise-level cyber security technology within every organization's reach.

Be the first to .

Aravo provides intelligent automation solutions aimed at managing third-party risk and resilience. For over two decades, the company's technology and domain expertise has facilitated the acceleration and optimization of third-party management programs for various brands. Aravo's solutions offer usability, agility, and scalability, enabling even complex organizations to keep up with the pace of regulatory changes. As a centralized system for all data related to third-party risk, Aravo provides a comprehensive view of an organization's third-party ecosystem throughout the lifecycle of their relationship. The company's services assist in the management of risk and performance of millions of third parties, suppliers and vendors globally.

Be the first to .