HighOct 29
Amadeus reservation breach exposes 92,000 JAL passengers
Why it matters hereYour customers' data can leak through your vendor's vendor. Fourth-party discovery shows who sits behind each supplier.
Breach WatchPlatform / Vendor Risk Hub
Vendor Risk Hub
Score every vendor. In minutes, not weeks.
Enter a vendor's domain and get a live scorecard and an AI-drafted assessment in about 30 minutes, sent through your branded vendor portal. You see where a vendor is weak before you sign, and you know when its answers don't match what the scan finds.
30 minDomain to live scorecard
250–900LiveThreat rating scale
A–FGrade with risk vectors
100%Assessments AI-drafted
What you get
Less chasing. Faster vendor decisions.
30 minOnboard a vendor in minutes
Enter a domain. Get a live scorecard and an assessment ready to send, without manual setup.
AI-draftedStop writing questionnaires by hand
Assessments are written from a one-line description, auto-scored and mapped to your frameworks.
AutoStop chasing vendors
The branded vendor portal sends reminders and tells you the moment a vendor submits.
MismatchCatch answers the scan contradicts
When a vendor's answer disagrees with its scorecard, you get an alert, not a surprise at renewal.
CUECSkip the manual SOC 2 read
Auditor, period, criteria, CUECs and exceptions are pulled out of each vendor's SOC 2 report.
OwnedScores you can defend
LiveThreat scoring runs on Verisq's own stack, not licensed third-party data, with a risk-vector breakdown behind every grade.
This week in the feeds
This week's vendor stories
HighOct 29
Compromised monitoring script drains $2.5M from Polymarket users
Why it matters hereA small SaaS tool with script access to production deserves a Tier 1 score, whatever its contract value.
Breach Watch9.8Oct 28
Brotli flaw in Node.js: about 42,000 of 3 million installs patched
Why it matters hereSBOM ingest matches the CVE to every vendor that ships the component, then routes it to Jira or ServiceNow.
CVE FeedVendor Risk Hub
Add monitoring for the vendors that matter
With the Monitoring package, Verisq re-scores the vendors you choose for new CVEs, breach alerts, certificate expiry and drift, and alerts you when a vendor's answers conflict with what the scan sees. Vendors without monitoring keep their last point-in-time scorecard.
D▼ from CToday
Globex Cloud
Hosting · Tier 1 · 588
C▼ from B2h ago
Northwind Logistics
Logistics · Tier 1 · 671
A→ steadyToday
Example vendors. Threat data is live.Acme Payroll
Payroll · Tier 2 · 861
EXPLOITEDGlobex Cloud runs Cisco Catalyst SD-WAN. CVE-2026-20127 is exploited in the wild.
MISMATCHNorthwind Logistics attested that all certificates are managed. This week's scan found 3 expired.
CERTAcme Payroll: 1 certificate expires in 21 days. No grade change.
VCF
Built on the Verisq Control Framework
QFX questionnaires and scorecards map to VCF, so a vendor’s answers credit the same objectives your auditor tests.
87objectives663mappings339+empty by design
See the coverage mapCapabilities
Vendor Risk Hub capabilities
LiveThreat Scorecards
Outside-in scoring on Verisq's own stack, not licensed third-party data. Add the Monitoring package to keep chosen vendors current.
QFX Assessment Engine
Questionnaires written from a one-line description, auto-scored and mapped to frameworks.
SBOM and Supply Chain
Imports CycloneDX and SPDX, matches CVEs continuously and routes findings to ServiceNow or Jira.
SOC 2 / CUEC Extraction
Pulls auditor, period, criteria, CUECs and exceptions from a vendor's SOC 2 report.
Vendor Portal
Branded portal that reminds vendors automatically and tells you when they submit.
Security Scorecards
250–900 rating, A–F grade and risk-vector breakdown, checked against questionnaire answers.
How it works
From a vendor headline to a decision
01 · Signal
A vendor is in the news
Breach Watch or a KEV match ties an event to a vendor in your portfolio.
Globex Cloud · runs Cisco SD-WAN
02 · Score
The scorecard moves
A re-score updates the grade, and a mismatch alert fires if the vendor's answers disagree.
Score 671 → 588 · D
03 · Act
Reassessment opens
A targeted questionnaire goes out through the portal and the risk lands in the register.
Risk R-114 · owner assigned
Step examples are illustrative.
One platform behind every page
Verisq Control FrameworkCompliance HubVendor Risk HubPrivacyOps HubRiskOps HubData RoomsTrust Center
See it running on today's threats.
A 30-minute walkthrough on your own vendors, your own domain and this week's feed.