Vendor Vertex is a third-party risk management (TPRM) platform that helps you manage third-party risk. You can monitor your vendors, track security scores, send assessments and generate compliance reports.

The free plan lets you create an account and monitor 2 vendors on the watchlist at no cost, including automatic asset discovery and a security scorecard for each vendor.

The free plan is designed to let you experience the full monitoring workflow on 2 vendors. When you need to monitor more, contact us and we'll tailor a plan to your scope.

After creating your account, complete your profile, invite your team and add your first vendor to the watchlist. See the documentation for details.

This website is available in Turkish, English and Arabic. The product interface supports multiple languages, which you can change from your account settings.

The security scorecard is a scoring system that summarizes an organization's security posture based on its external attack surface. Findings across different categories are combined into an overall 0-100 risk score.

Scores are recalculated regularly. When a new finding is detected or an existing one is resolved, the score is updated.

Add a new entry on the vendor watchlist and provide the vendor's domain. The system automatically starts discovering the relevant assets and calculating a score.

The digital footprint covers discovery of an organization's external assets such as domains, IP addresses, certificates and internet-exposed services.

You can send security surveys to vendors using prebuilt templates or by creating your own questions. Responses are tracked centrally and can be attached to a vendor's risk profile.

Common frameworks such as ISO 27001, SOC 2, GDPR and KVKK are supported. You can see the full list on the Compliance page inside the product.

You can connect ticketing systems (such as Jira and ServiceNow), chat, webhooks, on-call tools, and forward events to SIEM, GRC and SOAR platforms.

You can enable two-factor authentication, manage active sessions and use single sign-on (Azure, Google, Okta, Keycloak, SAML). Access is governed by role-based permissions on the principle of least privilege.