Live scorecard for any vendor in about 30 minutes, with an AI-drafted assessment sent through your branded vendor portal.
Vendor Risk HubStop building security and compliance one tool at a time.
Vendor risk, privacy, policies, training and compliance evidence on one operating platform. The live threat feed beside this text runs through all of it, so your own scorecard, your vendors' scores and your Trust Center reflect what is happening today.
Today in threats
CVEs published vs. newly exploited
Exploited now
All KEV →- CI10.0Cisco Catalyst SD-WANCVE-2026-20127 · auth bypass
- PH9.8PHPCVE-2026-109618 · RCE
- BR9.8Brotli · Node.jsCVE-2026-111497 · OOB write
Most hit · 30 days
Products →- LI10.0Linux1,051 new · 12 on KEV
- WS9.9Windows Server 20251,050 new · 42 on KEV
- W19.9Windows 11 24H21,020 new · 48 on KEV
How they happened
Latest 21 briefsLatest confirmed
All →- CriticalBinance · $6.3B theftFinTech · stolen credentials
- HighAmadeus · Japan Airlines92,000 passengers · third party
- HighPolymarket · $2.5MVendor script · third party
- HighDHS · 41,000 staffGovernment · personnel data
Third-party dependency was the most common tagged cause in the latest briefs. An annual vendor review would have caught none of them.
Vendor Risk HubWhat regulators acted on
This monthComing up
All →- Nov 25FCC robocall consent ruleUnited States · effective
- Nov 30Temu DSA remediationEuropean Union · deadline
- Jan 1Colorado ADMT ActSB 26-189 · effective
- FinedCNIL · FNAC Darty €7MFrance · cookie tracking
Score any vendor in minutes, not weeks.
Enter a vendor's domain and get a live scorecard, 250 to 900 and graded A to F, from Verisq's own LiveThreat scoring. It runs alongside your questionnaires and flags any answer the scan contradicts, so you know where a vendor is weak before you sign.
Fix the C before renewal, then publish the score on your Trust Center.
Trust CenterFive connected operations. One posture customers can see.
Each hub answers a different question your customers, partners and regulators ask. Where a live signal applies, it feeds the hub directly.
Score every vendor in minutes
Scorecards and AI-drafted assessments for every vendor you depend on. Breach Watch and the CVE Feed show which vendors a new breach or exploited CVE touches.
traced to a third party. Amadeus, Open VSX, Hugging Face and a monitoring vendor this week.
Keep compliance evidence current
Controls, policies, training and the evidence behind them, mapped once and reused across SOC 2, ISO 27001, HIPAA and more.
Vulnerability management evidence is checked against what attackers use now.
Run privacy obligations continuously
Data subject requests, consent, cookie tracking and records of processing, each tracked to its legal deadline.
CNIL fined FNAC Darty €7M for app tracking without consent.
Maintain a living risk posture
A risk register fed by every signal on the platform, with owners, treatment and review dates.
Each one is screened against your register as it lands.
Package diligence when scrutiny arrives
Watermarked, scoped rooms for customer, partner and investor diligence, built from evidence you already keep.
Every document carries its last-verified date. No separate upload step.
All five produce one live Trust Center
Your public proof page. Prospects check your security, privacy and vendor posture for themselves, and each section shows when it was last verified.
The week in breaches and CVEs, by product
Every Friday: the breaches, advisories and newly exploited CVEs that mattered. Free.

