Vendor Directory
Explore third-party risk and vendor due diligence intelligence resources.

BusinessScreen.com
Navigate risks with precision and confidence
Business Screen offers a comprehensive due diligence platform designed to help businesses mitigate risks when onboarding, partnering, or investing in third parties. It provides detailed background checks on companies and their officers, uncovering hidden risks and facilitating informed business decisions. Their platform is built for speed, accuracy, and discretion, allowing users to order detailed reports with minimal information while ensuring subjects are never notified. Business Screen also offers features such as continuous monitoring for new risks and an open API for easy integration into existing systems, making it a valuable tool for organizations needing robust vendor due diligence.

Flexis IT
Your IT, Our Vigilant Watch 24/7
Flexis offers comprehensive 24/7 Network Operation Center (NOC), Security Operations Center (SOC), and help desk services tailored to enhance IT performance. The managed services include continuous monitoring and proactive issue resolution, enabling businesses to focus on growth while ensuring system uptime and security. Flexis's expert team supports cost-effective, scalable solutions with expertise in security protocols and disaster recovery. They provide round-the-clock monitoring and dedicated engineering support to meet each client's unique needs, thus optimizing operational efficiency and customer satisfaction.

FoodLogiQ
Compliance and Safety, Simplified for Food Industry
Trustwell offers the Trustwell Connect platform focused on compliance and food safety for the food industry. The product line covers formulation and labeling, traceability and recall management, and product specification management. Trustwell describes expert solutions in food supply chain management to enhance compliance, quality, recall efficiency, and traceability. The site references FoodLogiQ Product Management and an ingredients database of over 90,000 ingredients to formulate, reformulate, and analyze. Trustwell positions its tools, technology, and team of experts as available to support business needs and invites visitors to contact them for personalized assistance.

RiskRecon by Mastercard
Transforming insights into robust risk defenses
RiskRecon by Mastercard helps organizations manage cyber security risks through actionable insights and threat intelligence combined with third-party risk management solutions. The platform allows you to benchmark against leading TPRM programs and improve risk management decisions. Users can access a 30-day free trial of the RiskRecon portal, which provides risk ratings for up to 50 vendors. This risk ratings solution is designed to enhance your approach to managing cyber risks throughout your supply chain.

Descartes MyCarrierPortal
Secure your supply chain with trusted carriers
Descartes MyCarrierPortal is the number one carrier identity platform designed for secure and efficient carrier onboarding and fraud prevention. It offers smarter carrier onboarding and monitoring, ensuring that your supply chain is safe with reliable carrier partners. The platform features fast onboarding integrated into your existing TMS workflows alongside comprehensive vetting, proactive tools to prevent identity fraud, and automated monitoring to ensure compliance. With Descartes MyCarrierPortal, businesses can secure their logistics and protect against risks associated with unreliable carriers.

Silobreaker
Transforming data into decisive insights
Silobreaker is a powerful intelligence platform designed to transform open source intelligence (OSINT) and dark web data into actionable insights for organizations. By streamlining the intelligence cycle, users can efficiently manage intelligence requirements, collect and analyze large volumes of data, and produce timely reports that empower intelligence-led decision-making. Key features include automated workflows for vulnerability prioritization and third-party risk assessments, ensuring that teams can focus on high-value strategic tasks while gaining vital insights into real-time threats. The platform's integrated tools simplify the production and dissemination of relevant intelligence deliverables across varied use cases.

Nuvo
Transforming onboarding into strategic growth journeys
Nuvo is an intelligent customer onboarding platform designed for businesses seeking to scale profitable trade partnerships. It offers business and principal verifications, along with fraud and credit risk insights, all integrated into a single platform. With capabilities such as built-in validations and automated fraud and credit risk insights, Nuvo helps users confidently extend competitive payment terms. By providing comprehensive and up-to-date credit risk signals, it enables businesses to monitor risk trends and protect cash flow, making the onboarding process efficient for Sales, Finance, and customers alike. Nuvo transforms trade credit management, allowing continuous monitoring of credit risk more effectively than manual systems.

Anvilogic
Transforming SOC operations with intelligent insights
Anvilogic provides an AI-driven Security Operations Center (SOC) platform that unifies detection engineering and triage. It helps SOC teams build, tune, and automate detections across any Security Information and Event Management (SIEM) system or data lake. The platform improves SOC response times and simplifies alert management, offering comprehensive detection insights that facilitate identification and resolution of alert issues. Anvilogic's generative AI capabilities are specifically tailored to enhance visibility and customization for various detection needs, making it a valuable tool for organizations aiming to optimize their security operations.

DLA, LLC
Navigating Compliance with Tailored Precision
DLA LLC is a boutique advisory firm specializing in accounting, internal audit, risk management, and IT advisory services. With decades of experience, they provide tailored solutions to optimize financial and operational processes. Key offerings include third-party risk management (TPRM) services to tackle cybersecurity challenges and enhance compliance. Their commitment to client success drives them to innovate and capitalize on unique business opportunities, supported by a robust understanding of the regulatory landscape. DLA LLC treats clients' businesses like their own, ensuring thorough assistance in navigating complex compliance requirements.

SmartCompliance
Streamline Your Certificate Management Today
SmartCompliance is a cloud-based software for collecting, tracking and monitoring Certificates of Insurance (COIs). The product automates certificate of insurance management and tracking, insurance policy renewals, and certificate/endorsement review workflows. SmartCompliance offers both full-service and self-service options and aims to eliminate error-prone data entry while providing end-to-end compliance visibility. The solution is described as tailored for commercial and insurance professionals, brokers and consultants, and supports a value-added compliance review service for clients. Contact options and sales lines are presented on the site, indicating a demo/contact-led sales motion.

CLDigital
Navigate Risk with Confidence and Clarity
CLDigital offers a comprehensive platform designed to manage risks effectively within organizations. The CLDigital 360 Platform provides actionable intelligence and simplifies the complexities of governance, risk, and compliance (GRC). It features automation capabilities, integrating business logic and enterprise data into an intuitive system. The platform focuses on enhancing vendor risk management and offers robust reporting tools tailored for various business needs. With security embedded throughout its functionalities, CLDigital aims to provide clarity, consistency, and accountability across risk management processes.

Safe Security
Navigate Cyber Risks with Confidence and Clarity
Safe Security specializes in managing both first-party and third-party cyber risks through an integrated AI-driven platform. Their focus is on the lifecycle of Third-Party Risk Management (TPRM), which includes onboarding, due diligence, operational resilience, and continuous monitoring. The platform is trusted by industry leaders and emphasizes regulatory compliance as part of its capabilities. Their recent acquisition of Balbix enhances their offerings, making them a notable player in unified cyber risk and exposure management.

Riskify
Navigate Risk with Precision and Insight
Riskify provides real-time non-financial risk intelligence across ESG, regulatory, cybersecurity, and reputational domains. Utilizing AI, it aggregates signals from proprietary, professional, and public sources to deliver structured, explainable risk data. The platform supports compliance, due diligence, and continuous monitoring workflows, allowing organizations to monitor risks effectively and make informed decisions. Riskify's API offers tailored solutions for monitoring partners, suppliers, and targets, enhancing risk assessment during compliance processes.

Solace Global
Navigate risk with confidence and clarity
Solace Global is a leader in global security and risk management, providing comprehensive solutions for cyber risk management and journey management in high-risk environments. Their offerings include the Solace Cyber real-time risk platform that delivers 360-degree visibility and threat intelligence. With a focus on major corporations, NGOs, and government organizations, Solace Global ensures clients can operate without disruption through strategic security measures and responsive crisis management. Their case studies highlight success in various sectors, including emergency evacuation and special operations. With notable experience in complex geopolitical areas, Solace delivers peace of mind across the globe.

Pivot
Transforming procurement into profit powerhouses
Pivot is presented as a full-suite source-to-pay platform built for fast implementation and adoption. The product centralizes vendor sourcing, enabling users to find and score vendors for fast, secure sourcing and to evaluate vendors before they become liabilities. It centralizes spend requests and manages contracts while automating invoice matching and streamlining approvals. Pivot also promotes secure payments with full traceability and spend control, and increased risk visibility and control through integrated risk data and intelligence. The homepage positions Pivot as a procurement platform 'built to scale profits, not problems' and invites prospects to join live demos. Messaging focuses on feature-level procurement and vendor risk capabilities.

SecureDawn
Speedy Security Solutions, Customized for You
SecureDawn provides a solution for efficiently completing security questionnaires, aimed at helping businesses streamline their sales processes. Choose to use the service in a self-serve manner or as a managed service, which is supported by domestic security professionals. Their managed service can deliver completed questionnaires within 48 hours, significantly reducing completion time. Users can assign questions to team members based on their expertise and provide feedback on completed responses. SecureDawn's system quickly addresses hundreds of questions, while its custom knowledge base ensures no questions go unanswered, facilitating quicker responses to potential customers and improving sales cycle efficiency.

CRIF GULF (Dun & Bradstreet)
Navigate risks, maximize financial confidence
Dun & Bradstreet provides innovative risk management solutions that help companies minimize financial risks associated with credit and business transactions. Their platform offers tools for real-time third-party risk monitoring, allowing businesses to gain insights into customer performance and optimize cash flows. With extensive data and analytics, D&B empowers organizations to evaluate country risks and make informed decisions about partnerships and investments. Their service ensures organizations can confidently navigate risks while enhancing profitability and maintaining a strong business network.

WhoisXML API
Uncover Connections, Secure Your Digital Landscape
WhoisXML API provides current and historical ownership information on domains and IPs, identifying all connections between domains, registrants, registrars, and DNS servers. The platform allows users to monitor suspicious changes to DNS records and provides detailed context on IP addresses, including geolocation, time zone, and ASN details. Its solutions cater to enterprises seeking to deepen their understanding of domain events, especially for risk mitigation and security assessments.

Information Shield Security
Simplify Vendor Risk with Seamless Automation
Information Shield presents a vendor risk management offering described on the site as "Vendor Risk Management Made Easy" that aims to replace large spreadsheets with an automated platform. The company also provides security awareness training (including a new "Acceptable Use of AI" course), assessments, a comprehensive security policy library covering roughly 200 information security topics, and a Virtual CSO one-time free assessment. The site lists compliance solutions for ISO 27002/27001, NIST-CSF, CMMC and HIPAA and invites visitors to request a demo or contact sales. Messaging targets both small organizations and large enterprise and highlights taking training, assessments and reading policy documents.

ALCEA France
Securing Your Operations with Intelligent Solutions
ALCEA - ASSA ABLOY specializes in protecting critical infrastructure with digitalized and integrated security solutions. Their comprehensive portfolio includes versatile access control, intrusion detection, contractor and key management, and video management. With a focus on improving security, safety, operational efficiency, and convenience, ALCEA employs experienced specialists to tailor solutions based on specific needs, local conditions, and regulations. They also provide proactive maintenance and upgrades, ensuring the continuous and secure operation of energy infrastructure and complex supply chains. Their offerings connect secure edge devices with cyber-resilient control systems, meeting modern security challenges.
