security-ratings

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

Bitsight Security Ratings for Splunk App provides prebuilt dashboards, modular input collection, lookup-backed enrichment, workflow actions, setup pages, alert actions, additional functionality that is not found in the BitSight Security Ratings UI and documentation views for BitSight data in Splunk.

Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.

CyberVadis — independent third-party profile of a public API surface, by API Evangelist. CyberVadis is a Third-Party Cyber Risk Management (TPCRM) platform that runs evidence-based cybersecurity assessments of vendors and suppliers at scale. Its assessment methodology maps to global frameworks and standards including NIST, ISO 27001, DORA, NIS2 and

BitSight — independent third-party profile of a public API surface, by API Evangelist. Bitsight is a global cyber risk intelligence platform that combines security ratings, external attack surface management (EASM), third-party risk management (TPRM), and cyber threat intelligence (CTI) in a single data model.

UpGuard — independent third-party profile of a public API surface, by API Evangelist. UpGuard is a cybersecurity platform that helps organizations manage and reduce their cyber risk. Its products cover third-party vendor risk management (Vendor Risk), attack surface management and external threat monitoring (Breach Risk), and AI-powered security qu

RiskRecon — independent third-party profile of a public API surface, by API Evangelist. RiskRecon by Mastercard is a third-party and supply-chain cyber risk management platform that continuously assesses, rates, and monitors the cybersecurity posture of an organization and its vendor ecosystem.

Cyberwrite — independent third-party profile of a public API surface, by API Evangelist. Cyberwrite is an AI-powered cyber insurance intelligence platform that turns raw data into explainable, defensible financial decisions for the cyber insurance lifecycle. Founded in 2016 and operating from Tel Aviv and New York, its platform combines the 4SEEN A

SecurityScorecard — independent third-party profile of a public API surface, by API Evangelist. SecurityScorecard is a cybersecurity ratings and third-party risk management platform that continuously rates the security posture of any company from the outside in, producing an A-F security score across ten risk factors.