Deepinfo TPRM

What Deepinfo TPRM is

Deepinfo TPRM continuously assesses cybersecurity risk across vendors, suppliers, partners, and other third parties that can access an organization’s data, systems, or brand. It identifies direct vendors, subprocessors, group companies, and other relationships that questionnaires may miss, then scans third parties across WHOIS, IP-WHOIS, DNS, SSL, ports, HTTP, and web data. Vendor profiles draw on observed assets, exposures, vulnerabilities, certificate state, and leaked credentials. The service assigns security scores, alerts on score changes, and highlights high-risk vendors in portfolio views. Findings map to PCI DSS 4.0 and 3.2, HIPAA, OWASP Top 10 (2021), CWE, CAPEC, and WASC. Reports include vendor profiles, portfolio summaries, score timelines, and compliance evidence packages. Risk scores and findings can be exported to OneTrust, ServiceNow, Archer, and ticketing systems, or accessed through an API. Deepinfo says TPRM supplements vendor risk programs rather than replacing questionnaires or contracts. Pricing is quoted based on monitored scope and selected modules; there is no self-serve trial, though paid pilots run 30–60 days. The companion app is available to Deepinfo customers on iOS and Android.