Talk to us

Select your region.

Choose where your workspace is hosted.

Africa(opens in a new tab)

Need help? Contact us.

Platform

Cyber Risk Management.

Your exposure and every vendor’s, in one record.

Talk to us Try a free check

DarkRisk measures cyber risk from the outside in: your own attack surface and every vendor’s, dark web and media exposure, questionnaires checked against what a scan can see, and the fourth parties behind them. One record brings the evidence together, then keeps it current.

Third Party Risk Management.How a vendor record comes together.

  1. 01Start

    A name and a domain is enough.

    Add a vendor with its domains, and its IP ranges or ASNs if you know them. The first scan starts straight away, before anyone has sent a questionnaire or chased a reply.

  2. 02Measure

    See the outside.

    Twelve modules look at the vendor's websites, platform, encryption, network, cloud and DNS, across its domains and IP space. The result is a 0 to 100 score, an A to F grade, and the evidence behind every finding.

  3. 03Watch

    Look beyond the stack.

    Dark web intelligence picks up when the vendor, or one of its own suppliers, is claimed as a breach victim, and what was affected. Media monitoring follows its coverage by region, with breach reporting flagged.

  4. 04Ask

    Ask about the inside.

    Questionnaires cover the policies and controls a scan can't see. Answers can be drafted from the vendor's own documents with the source shown, and your team decides what is accepted.

  5. 05Map

    Follow your data.

    Every questionnaire asks who else handles your data. The fourth parties a vendor declares are linked to it, compared across your portfolio, and can be monitored too.

  6. 06Report

    Show what changed.

    Risk changes separate what is new, worsening, returning and resolved, without repeating what hasn't moved. Executive reports turn that into a page a board can act on.

V
Example vendorvendor.exampleapp.vendor.example203.0.113.0/25
First scan running

External posture

--Grade B
  • Application
  • Platform
  • Encryption
  • Network
  • Cloud
  • Domain

Beyond the stack

BreachFourth party claimed as a breach victim, March
Press3 regional mentions this month, 1 breach-related

Questionnaire

Security review 202618 / 24

Suggested Answer drafted from Access policy.pdf, section 4.2

Declared fourth parties

Cloud hosting 3 vendorsEmail deliveryAnalytics

Since the last review

2New
1Worsening
0Returning
5Resolved

Explorethe platform.

Each part of the record has its own page, with something to try on every one.

Three thingswe don’t compromise on.

  1. 01

    Evidence, not opinion.

    Every finding shows what was observed, where and when. Every suggested answer shows the passage it came from. If someone asks why, the answer is already there.

  2. 02

    Continuous, not annual.

    Scheduled scans, breach intelligence and media monitoring keep running between reviews, so a renewal starts from what is true today.

  3. 03

    People decide.

    DarkRisk finds, scores and suggests. Your team accepts, challenges and signs off. Scores come from a defined method, not from a model's opinion.

Questions people ask.

What does DarkRisk monitor?
Twelve modules cover a vendor's external security across its domains, IP ranges and ASNs: applications, platform versions, TLS, network exposure, cloud infrastructure, DNS, email and lookalike domains, plus dark web intelligence on the company and media monitoring of its coverage. Scheduled scans keep the picture current.
How do scans and questionnaires work together?
Scans show what is observable from the outside. Questionnaires cover internal policies and controls, with documents as evidence. Both sit in the same vendor record, so you can see where an answer and an observation disagree.
How is AI used?
AI drafts suggested questionnaire answers from documents you upload and shows the passage each suggestion came from. Nothing is accepted until someone on your team reviews it. Security scores are calculated with a defined methodology, not by AI.
Can we monitor our vendors' suppliers?
Yes. Record the suppliers a vendor has declared, capture ownership and criticality, and turn on monitoring for the ones that matter.
How do we get started?
Tell us about your vendor portfolio and how you assess vendors today. We'll walk you through DarkRisk on vendors you care about.