Panorays
Panorays is a third-party cybersecurity platform intended to help companies reduce supply-chain cyber risk.
What Panorays is
Panorays is a third-party cybersecurity platform intended to help companies reduce supply-chain cyber risk. It evaluates suppliers using customized questionnaires, external attack-surface assessments, inherent risk based on business and technology profiles, and an organization's own risk policies. Its ratings combine supplier responses and technical assessments with the customer's security standards and business context. Continuous monitoring can alert teams to supplier security changes or breaches, while dependency mapping and a third-party inventory provide visibility into suppliers and nth parties. The platform lists integrations with Archer, Jira, ServiceNow, Salesforce, Slack, Splunk, SAP, and Zapier, alongside a REST API and supplier API upload. Security details include encryption in transit and at rest, SAML 2.0, MFA, and role-based API scopes. Panorays states ISO/IEC 42001:2023 and ISO/IEC 27001:2022 certifications and a SOC 2 Type II review. Pricing is customized to assessment needs and is available on request; a free trial is offered.
Good
- Combines questionnaires with attack-surface assessments.
- Continuously monitors suppliers for security changes.
- Maps third-party and nth-party dependencies.
- Offers workflow automation and evidence collection.
- Lists SAML, MFA, and encrypted data handling.
Watch out
- Pricing is customized and available on request.
- Some features vary by evaluation type.
- Security testing findings summaries are available to enterprise customers upon request.
Who it suits
Panorays suits organizations that assess and monitor third-party suppliers as part of supply-chain security work. It is relevant to teams that need customized questionnaires, supplier dependency visibility, or integrations with security and business tools.
Verdict
Panorays combines supplier assessment, monitoring, and dependency visibility, with pricing shaped around an organization's needs. Review which features are included for the selected assessment type before committing.
Plans and prices
From Panorays's own pricing page, checked 5 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Assessment | Priced on request | Pricing customized to strategy and assessment needs · periodic supplier evaluations · Smart Questionnaire Assessment · risk model and remediation features |
| Inventory | Priced on request | Pricing customized to strategy and assessment needs · centralized third-party inventory · some discovery and assessment features partially available |
| Monitoring | Priced on request | Pricing customized to strategy and assessment needs · continuous threat monitoring · fourth-party discovery · remediation workflow automation |
The facts
Each one read from Panorays's own pages, with the date it was checked.
What it does
- Access controls
- The platform supports SAML 2.0, SSO providers, MFA, and role-based API scopes, according to its security page.checked 5 Oct 2026
- API
- Panorays describes a REST API backend and provides API upload as a supplier-management feature.checked 5 Oct 2026
- Compliance
- Panorays states it is certified to ISO/IEC 42001:2023 and ISO/IEC 27001:2022 and has completed a SOC 2 Type II review.checked 5 Oct 2026
- Contextual ratings
- The platform rates suppliers using questionnaire responses, attack-surface assessment, and the customer’s security standards and business context.checked 5 Oct 2026
- Continuous monitoring
- Panorays continuously monitors suppliers and provides alerts about security changes or breaches affecting third parties.checked 5 Oct 2026
- Data protection
- Panorays says it encrypts data at rest and in transit, using TLS 1.2 with strong ciphers for data in transit.checked 5 Oct 2026
- Integrations
- The integrations page lists tools including Archer, Jira, ServiceNow, Salesforce, Slack, Splunk, SAP, and Zapier.checked 5 Oct 2026
- Pricing limits
- Pricing is customized to the customer’s security risk strategy and assessment types; the comparison marks some features as partially available, unavailable, or add-ons depending on evaluation type.checked 5 Oct 2026
- Purpose
- Panorays provides a third-party cybersecurity solution intended to reduce supply-chain cyber risk and help companies do business securely.checked 5 Oct 2026
- Questionnaires
- Automated questionnaires can be customized to include relevant questions, use built-in templates, or use customer-created templates.checked 5 Oct 2026
- Risk assessment
- Its risk assessment combines AI-powered questionnaires, external attack-surface assessments, inherent risk based on business and technology profile, and organizational risk policies.checked 5 Oct 2026
- Security testing
- Panorays says an independent third party conducts annual black-box and white-box penetration tests, with a findings summary available to enterprise customers upon request.checked 5 Oct 2026
- Supply-chain visibility
- The platform describes mapping third-party and nth-party dependencies and maintaining an up-to-date third-party inventory.checked 5 Oct 2026
The company
- Company history
- Panorays’ company page identifies Matan Or-El, Meir Antar, and Demi Ben-Ari as co-founders.checked 5 Oct 2026
- Headquarters
- New York and Israelchecked 28 Sep 2026
Alternatives to Panorays
- 1
UpGuard
Free planAndroidiOSWebAPI8.2From $1,750 a month - 2
Drata
AndroidiOSWebAPI7.2 - 3
Gatekeeper
WebAPI6.7 - 4
RiskWatch Vendor Risk Management
AndroidiOSWebAPI6.6 - 5
RiskXchange
WebAPI6.4From £14,900 a year - 6
Riskonnect
AndroidiOSWebAPI6.3