Risk Purview fuses what your suppliers say in their security questionnaire with what their infrastructure actually reveals — so you get an intelligence-driven, portfolio-wide view of third-party risk instead of a stack of self-attested PDFs.
Send, verify, track. Supply Chain Risk Manager blends questionnaire evidence, external intelligence and ongoing monitoring into a single Risk Purview score per supplier.
Send a branded, tokenised security questionnaire to every supplier — no login required, sanitised free-text comment fields, expiry-gated links.
On-demand external verification of every supplier's attack surface, breach exposure, corporate footprint and domain hygiene — cross-checked against their own answers.
Every supplier is re-scanned monthly and tracked over time. Phronesis, our AI risk advisor, summarises the shape of your whole portfolio in plain English.
Risk Purview draws on multiple industry-standard intelligence feeds to corroborate supplier claims and detect what a self-assessment can't show.
Signals are fused into a composite Risk Purview score (0–100) and checked against each supplier's questionnaire answers to surface contradictions between what they say and what their infrastructure reveals. Tier 2 subscribers additionally receive active CVE and misconfiguration scanning across the supplier's subdomains and exposed services.
Every supplier in your portfolio is re-scanned automatically on the first of every month. If anything changes for the worse, you’ll see one of six alert types on the card — nothing else to check, nothing else to schedule.
A fresh weakness has appeared on the supplier's attack surface that wasn't present in the previous scan.
An issue we already knew about has jumped to a higher severity rank — typically from medium to high or critical.
The supplier’s external evidence now contradicts something they claimed in their questionnaire answers.
The supplier's composite 0–100 score has fallen by 10 points or more since the last scan.
Credential breach intelligence has flagged new exposures for the supplier's domain since the previous scan.
The supplier’s TLS certificate is due to expire in fewer than 30 days — renewal hasn’t been observed yet.
The portfolio renders one card per supplier with questionnaire risk, Risk Purview score, unacknowledged alerts, and a rolling sparkline of the last 12 scans.
When supplier risk surfaces something that needs a closer look — an acquisition target, or your own SOC — SCH ships two practitioner-grade assessments alongside the core self-assessment bundle. Comparable to a Big 4 engagement, at a fraction of the price.
IASME-aligned cyber due diligence for private equity deal teams — 70 questions across 14 themes, delivered in hours rather than weeks.
Practitioner-led capability review for security leaders — 70 questions across 7 domains, with evidence capture and sector benchmarking.
Every plan includes questionnaire distribution, monthly Risk Purview re-scans, and Phronesis AI portfolio analysis. Choose the tier that fits your supply chain.