Vendor Directory
Explore third-party risk and vendor due diligence intelligence resources.

Whistic
Automate assessments, secure your partnerships
Whistic is a comprehensive third-party risk management platform designed for InfoSec teams. It automates vendor assessments and allows businesses to share their security posture efficiently. Whistic's customizable solution enables organizations to manage, publish, and exchange security and compliance information seamlessly. The platform is powered by AI, offering faster assessments and insights, making it a valuable tool for any organization looking to enhance its vendor management and governance practices. It aims to eliminate time-consuming processes, improving the overall vendor assessment experience.

Kodiak Hub
Transforming supplier connections into strategic success
Kodiak Hub offers an end-to-end Supplier Relationship Management (SRM) platform that focuses on strategic procurement. It enables procurement professionals to efficiently manage supplier onboarding, performance monitoring, and risk resilience. The platform features modules for financial assessments, macro risk assessments, sanctions screening, and collaboration improvement actions. It is designed to support global teams throughout the entire Strategic Buyer's journey, enhancing collaboration and innovation with top suppliers, making supply chain management and performance enhancement seamless.

RobobAI
Unlocking Strategic Value Through AI Insights
RobobAI specializes in comprehensive vendor compliance and procurement analytics solutions, leveraging AI to optimize treasury operations and manage supplier risks effectively. Their platform empowers organizations to access a global treasury and procurement knowledge base while providing tailored reporting and analytics services. With capabilities in supplier cost comparisons and market analysis, RobobAI assists businesses in unlocking value and improving strategic decision-making. Their flexible on-demand procurement resources ensure that unique requirements are met on time and within budget, thereby enhancing operational efficiency across various industry sectors.

LEET Security
Trust through rigorous cybersecurity insights
LEET Security provides a unique cybersecurity rating system that helps organizations assess their cybersecurity posture and analyze its evolution. As businesses increasingly outsource services, LEET Security ensures that suppliers meet stringent security assurances to protect information security and privacy. Their methodology is designed for efficiency, allowing organizations to obtain multiple certifications, such as ENS certification and Pinakes rating, in a single process. This rigorous approach allows clients to verify their systems' protection and maintain trust with customers, investors, and regulators.

Eftsure
Guarding Your Payments, Securing Your Trust
Eftsure offers a comprehensive platform designed to enhance B2B payment fraud prevention through robust vendor verification processes. It safeguards approximately $216 billion in payments each year, mitigating risks associated with payment errors and cyber-crime. The platform features automated approvals and centralized reporting, improving internal controls and reducing audit stress. Eftsure is positioned as an essential tool for businesses of all sizes, transforming payment processes and ensuring trustworthy interactions with vendors.

Clearwater
Guarding healthcare with proactive vendor insights
Clearwater offers a comprehensive Vendor Risk Management as a Service solution designed to protect healthcare organizations from third-party risks. Led by cybersecurity and compliance experts, Clearwater provides scalable, actionable, and affordable cyber risk assessments and ongoing monitoring for vendors. Their tech-enabled solution gives up-to-date risk indicators, facilitates peer benchmarking, and establishes detailed remediation plans. With decades of experience in healthcare cybersecurity, Clearwater is dedicated to helping organizations meet compliance challenges, safeguard patient data, and build a resilient cyber posture.

CORL Technologies
Transforming vendor risks into clear solutions
CORL Technologies offers a comprehensive third-party risk management (TPRM) solution tailored for the healthcare industry. By integrating technology with hands-on support, CORL transforms TPRM from chaotic to clear. The platform prioritizes proactive risk management across all stages, from vendor selection to contract renewal. With access to insights on over 80,000 healthcare vendors, CORL enhances cybersecurity and compliance efforts while reducing assessment response costs. The service fosters collaboration between healthcare organizations and their vendors, creating a transparent and trust-centered approach to managing third-party risks.

Decision Focus
Mitigate Risks, Simplify Compliance Effortlessly
Decision Focus offers a comprehensive GRC Software platform focused on risk management and vendor risk assessment. It streamlines and automates processes related to risk management, compliance management, and internal audit. The platform aids businesses in mitigating third-party vendor risks and streamlining the onboarding process. With a no-code solution, it provides an intuitive user experience while ensuring bulletproof security. Decision Focus is dedicated to helping organizations achieve effective governance, risk management, and compliance in a streamlined manner.

Ceeyu
Illuminate Risks, Strengthen Your Supply Chain
Ceeyu's SaaS platform facilitates comprehensive third-party risk management by identifying security risks through automated scans and questionnaire-based assessments. With over 4.86 million risks identified in customer supply chains, it combines digital questionnaires with security scans to provide real-time insights into risks across various domains—including cybersecurity and compliance. Suppliers are empowered with access to their results, enabling proactive risk management. Made in EU, Ceeyu aims to simplify supply chain risk management, ensuring a holistic view of risks in a user-friendly platform.

Forestreet
Navigate Your Supply Landscape with Precision
Forestreet provides global supplier intelligence for procurement and category managers. Its intuitive platform allows mapping, categorizing, and deep analysis of any supply base using natural language queries. By enhancing decision-making processes, Forestreet helps organizations analyze ESG performance and offers insights through its AI-driven tools. The platform significantly reduces research time and provides comprehensive market data for informed decision-making. Users can produce high-quality reports rapidly, ensuring they maintain efficacy in understanding market dynamics and vendor capabilities.

TrustNet Inc. (formerly iTrust)
Navigating Cyber Risks with Precision Insights
iTrust provides a comprehensive Vendor Cybersecurity Risk Rating platform that empowers organizations to assess cybersecurity risks effectively. The platform allows users to track compliance status and monitor expiration dates for key frameworks like PCI, FedRAMP, and HIPAA. It collects detailed compliance data, analyzes vulnerabilities across systems, and provides insights into reputational ratings from industry peers. Additional features include monitoring hacker activities on dark web platforms and measuring patch management rates, ensuring businesses remain proactive in their cybersecurity efforts.

ProcessUnity
Safeguarding data, managing vendor risks seamlessly
ProcessUnity offers a third-party risk management platform that focuses on safeguarding sensitive data. Their solutions are designed to effectively manage vendor risks, reduce assessment workloads, and extend compliance teams' reach to cover 100% of their vendor base. As a recognized leader in third-party risk management (TPRM) platforms by Forrester, ProcessUnity is committed to continuous innovation in risk management technology and best practices, providing a comprehensive platform tailored for vendor due diligence and ongoing assessment.

SecurityPal AI
Transforming Security Assessments with Intelligent Automation
SecurityPal's Assurance Management Platform (AMP) offers comprehensive solutions tailored for modern security, governance, risk management, and go-to-market teams. It automates security questionnaires and vendor risk assessments, ensuring a quick turnaround of just 12 hours while providing expert verification. With over 2 million questions answered through intelligent automation, it stands out as an essential tool for both startups and enterprises seeking to build or enhance their security programs. The platform integrates AI-driven processes to streamline vendor assessment, helping organizations maintain security standards effectively.

Kreller Group
Unveiling Insights, Securing Your Decisions
Kreller Group offers investigative and due diligence services to uncover critical intelligence for businesses. With over 30 years of experience, they provide risk-based OSINT and HUMINT investigations across 500,000+ engagements in more than 230 countries. Their services include comprehensive analysis of government sanctions, watchlists, and open-source intelligence, as well as tailored intelligence acquisition through real human insights and on-the-ground investigations. Kreller Group supports compliance professionals and enterprises in making informed decisions and mitigating risks effectively.

Black Kite
Navigate third-party risk with intelligent clarity
Black Kite is a dedicated cyber risk platform focused on third-party risk management, offering complete visibility into your extended supply chain. The platform leverages AI-powered intelligence to transform risk identification, quantification, and action across your vendor ecosystem. With high-quality intelligence and contextual data, Black Kite provides automated assessments that scale with your needs. It engages with vendors to share findings and facilitate remediation efforts. The platform adapts to your risk maturity and budget, positioning itself as a crucial tool in managing third-party risk effectively.

RSM US LLP
Tailored insights for middle market success
RSM US LLP is a leading provider of assurance, tax, and consulting services tailored for the middle market. With extensive experience advising various service sectors including marketing, environmental, and workforce solutions, RSM strives to enhance client service through customized advice and professionals equipped with the right tools. The firm specializes in evaluating and mitigating risks introduced by vendors, thus strengthening third-party risk management processes, also known as vendor risk management. As a member of RSM International, RSM US offers clients comprehensive support while ensuring accountability and personal service.

Graphite Connect
Transforming supplier connections into strategic advantages
Graphite's supplier relationship management platform offers a centralized solution for managing suppliers effectively. By automating supplier onboarding and compliance checks, it minimizes delays and provides procurement teams with real-time insights into supplier performance. Graphite's embedded risk tools continually monitor critical factors like financial health and regulatory compliance, ensuring teams are proactive in managing relationships. Integrated with various systems, Graphite facilitates a seamless flow of supplier data, enhancing decision-making and collaboration across departments. The platform also leverages AI to streamline routine tasks, thereby accelerating supplier validation and enhancing overall operational efficiency.

Vendor Centric
Maximize value through smarter vendor management
Vendor Centric provides comprehensive vendor management solutions aimed at optimizing operations and enhancing compliance. Specializing in contract lifecycle management (CLM), third-party risk management, and procurement strategies, the company aids organizations in minimizing risk and maximizing value from their vendor relationships. Their approach includes aligning people, processes, and systems to streamline vendor operations, ensuring compliance with regulatory requirements. With a focus on technology services, Vendor Centric modernizes vendor management systems, helping clients adapt to evolving risks while enhancing operational resilience.

HICX
Transforming supplier management into strategic partnerships
HICX.com provides integrated supplier risk management software designed for the world's largest organizations. Their Supplier Management Platform streamlines operations and ensures compliance while reducing the costs associated with managing suppliers. Additionally, their solutions utilize data for personalization and measuring advertising effectiveness, enhancing the overall supplier experience. Organizations can book a demo to explore how HICX can optimize supplier management processes and address compliance needs effectively.

Celerity
Transforming Questionnaire Workflows with AI Precision
Celerity is an AI-native software platform designed to automate the response process for ESG and RFP questionnaires. It aims to revolutionize how corporations and private equity funds manage their questionnaire workflows, offering unmatched speed, precision, and trust in its answers. Celerity's features ensure compliance and facilitate seamless collaboration, enabling users to connect, manage, and analyze their content efficiently. Targeted at demanding corporate clients, Celerity transforms questionnaire handling with its AI-driven solution, making the process both faster and more secure.
