Resources
Notes on cyber and third-party risk.
Practical guides for understanding your vendors, asking better questions and deciding what to do next.
- Getting started4 min readThird-party risk management: a practical guide.Build a TPRM programme with a vendor inventory, security assessments and ongoing third-party monitoring.
- Security ratings4 min readVendor security ratings: what the score tells you.Understand vendor security ratings, review cyber scan findings and track third-party security posture over time.
- Questionnaires4 min readSecurity questionnaires for third-party vendors.Build focused security questionnaires that turn answers into evidence your team can use.
Frequently asked.
What is third-party risk management?
TPRM is how an organisation identifies, assesses and monitors the risks that come from the vendors and suppliers it relies on. DarkRisk supports it with external scans, dark web intelligence, media analysis, questionnaires and ongoing monitoring.
How do I monitor my third-party vendors?
Start with an inventory and confirm each vendor’s domains. Assess external exposure, review questionnaire evidence and schedule follow-up scans. Compare findings over time and give each change an owner. How DarkRisk monitors vendors
What does an external scan cover?
Twelve modules, from application security and TLS to network exposure, DNS, email, breach intelligence and news coverage. Findings and a 0 to 100 score show where to look first. Explore the scan layers
Does our team review AI-assisted answers?
Yes. DarkRisk can draft questionnaire answers from uploaded documents and shows where each one came from. Your team reviews and edits them before they are used.
How is DarkRisk licensed?
On a domain basis. Tell us which domains you need to cover and we’ll put together a proposal. About pricing