A stack of self-attested PDFs is not a supply chain risk programme.
Risk Purview fuses what your suppliers say in their security questionnaire with what their infrastructure actually reveals. The result is an intelligence-driven, portfolio-wide view of third-party risk that updates every week, not every renewal cycle.
Send, verify, track. Questionnaire evidence, external intelligence and ongoing monitoring fused into a single Risk Purview score per supplier.
Send a branded, tokenised security questionnaire to every supplier. No login required, sanitised free-text comments, expiry-gated links.
On-demand external verification of every supplier's attack surface, breach exposure, corporate footprint and domain hygiene, cross-checked against their own answers.
Every supplier is re-scanned weekly and tracked over time. Phronesis, our AI risk advisor, summarises the shape of your whole portfolio in plain English.
Multiple industry-standard intelligence feeds corroborate supplier claims and detect what a self-assessment can't show.
Signals fuse into a composite Risk Purview score (0–100) and are cross-checked against each supplier's questionnaire answers to surface contradictions between what they say and what their infrastructure reveals.
Every supplier is re-scanned weekly. If anything changes for the worse, you'll see one of six alert types on the card.
A fresh weakness has appeared on the supplier's attack surface that wasn't present in the previous scan.
An issue we already knew about has jumped to a higher severity rank, typically from medium to high or critical.
The supplier's external evidence now contradicts something they claimed in their questionnaire answers.
The supplier's composite 0–100 score has fallen by 10 points or more since the last scan.
Credential breach intelligence has flagged new exposures for the supplier's domain since the previous scan.
The supplier's TLS certificate is due to expire in fewer than 30 days, and renewal hasn't been observed yet.
Know who to contact at each supplier before an incident happens — and reach exactly the right ones, fast, when one does.
Request each supplier's own incident-notification process once, and get back a plain-English AI summary of who to call and how — sitting on their card before you ever need it.
When an incident touches part of your supply chain, notify exactly the right suppliers in one deliberate action, then watch acknowledgements roll in.
Compose once. Confirm on purpose. Track every response.
Write the notice, then choose recipients — hand-picked suppliers, an entire tag, or a whole risk tier.
A recipient count, a sample preview, and a typed confirmation stand between you and sending — never an accidental blast.
A rate-limited sweep sends the notices, respecting a daily volume cap so a large broadcast never floods your sending domain.
A unique, no-login link lets each supplier reply — Acknowledge, No impact on us, or Need more information.
Live sent / failed / acknowledged counts, plus a persistent badge on any supplier still waiting to respond.
Questionnaire risk, Risk Purview score, unacknowledged alerts, and a rolling sparkline of the last 12 scans, all on one card.
The questions every buyer asks before signing up.
Includes questionnaire distribution, weekly Risk Purview re-scans, Incident Broadcast, custom questions, and Phronesis AI portfolio analysis.