If determined ‘in scope’ the platform undertakes an initial risk assessment to determine the inherent risk posed to your organization. Derived from the services provided and the nature of the data they handle on your behalf, risks are then categorized as low, medium, high or critical triggering appropriate scanning and monitoring.

Run passive or active scans to surface new vulnerabilities and data leaks and activate cyber risk questionnaires and collaborative risk assessment where required. Passive scans do not directly interact with target systems but automatically discover new assets related to the target organization and collect information on data leaks, incidents, vulnerabilities, IP address reputation, and abuse reports. Active scans directly interact with the target systems, use proprietary vulnerability scanning tools, and provide insight into the specific details surrounding the identified issue.

Dashboard shows workflow outcomes and provides drill downs for each third-party enabling risk managers to understand vulnerabilities, make informed decisions, and manage cyber risk from initial discovery through mitigation and ongoing assurance.