Third-Party Risk

CyberGRX provides a comprehensive third-party risk management platform to cost-effectively identify, assess, mitigate and monitor an enterprise's risk exposure across its entire partner ecosystem. Through automation and advanced analytics, the CyberGRX solution enables enterprises to collaboratively mitigate threats presented from their increasing interdependency on vendors, partners and customers.

MetricStream specializes in enterprise and cloud applications for Governance, Risk, Compliance, and Quality Management. MetricStream's applications and solutions improve business performance by strengthening risk management, corporate governance, regulatory compliance, vendor governance, and quality management for users across many industries, including Financial Services, Healthcare, Life Sciences, Energy and Utilities, Food, Retail, CPG, Government, Hi-Tech and Manufacturing. MetricStream is headquartered in Palo Alto, California, maintains operations and research and development (R&D) center in Bangalore, India, and conducts sales and operational support through offices in cities spanning the globe.

SecurityScorecard is an information security company focusing on third party management and IT risk management. SecurityScorecard provides a platform designed to rate cybersecurity postures of corporate entities through the scored analysis of cyber threat intelligence signals.

Panorays automates third party security management. The platform enables companies to easily view, manage and engage on the security posture of their third-parties, vendors, suppliers, and business partners.

Axis Security develops cloud-based cybersecurity technology to secure enterprise applications.

SecureLink specializes in managing secure third-party access and remote support for both enterprise companies and technology providers.On February 23rd, 2022, SecureLink was acquired by Imprivata. Terms of the transaction were not disclosed.

Ncontracts is a provider of risk management software and services to financial institutions.On January 23rd, 2020, Ncontracts was acquired by Gryphon Investors. Terms of the transaction were not disclosed.

ProcessUnity is a provider of cloud-based applications for risk management and service delivery management. The company's software as a service (SaaS) platform gives organizations the control to assess, measure, and mitigate risk and to ensure the optimal performance of key business processes. For public companies and regulated industries, ProcessUnity Risk Suite delivers effective governance and control, vendor risk mitigation, and regulatory compliance. For benefit plan administrators and other financial service firms, ProcessUnity Offer Management controls complex product offerings and strengthens client service experience.

RSA Security manufactures and markets products to protect and manage access to computer-based information resources. It is also a provider of public-key encryption toolkits.

SureCloud provides Governance, Risk and Compliance solutions for enterprises. The company's Integrated Risk Management approach assists with managing basic regulatory compliance drivers, as well as with diagnostic dashboards.