Explore TPRM service provider resources, including tools and documents to enhance your risk management strategy. Access helpful links and information from various providers. Vendor-Provided Resources Here you can find links to resources supplied by TPRA Vendor Members (TPRM Service Providers). Some of these resources require you to input information to obtain the document. Note: TPRA does not support one particular service provider over another, nor do we benefit from providing you the links below. Read and implement at your own risk. If you are a TPRA Vendor Member and have a resource or link you would like to see added to this page, please submit through our Vendor Submissions form , or send it to Meghan Schrader at meghan.schrader@tprassociation.org for review. Filter by Resource Type Blog Checklist Company Information Datasheet Framework Guide Guidebook Infographic Magazine Newsletter Other Playbook Podcast Presentation Report Research State of the Industry Survey Results Template Tool Toolkit Video Whitepaper eBook Aravo Blog When Friction Becomes Risk: Why UX Is Your Strongest TPRM Control September 4, 2026 View Resource Aravo Blog Managing Upstream Exposure: What a Food Recall Teaches Us About Nth-Party Risk August 24, 2026 View Resource Black Kite Podcast, Blog Mythos Hype Check: TPRM Paradigm Shift or Big Nothing Burger? August 4, 2026 When a frontier AI model threatens to reshape the threat landscape, you do not stick to the editorial calendar. In the latest episode of the Third Party podcast, Jeffrey Wheatman , Bob Maley , and Ferhat Dikbiyik called an audible, pulling Black Kite CTO Candan Bolukbas into an off-cycle remote recording to answer the question every TPCRM practitioner is asking right now. Is Mythos a paradigm shift? Or is it a big nothing burger? The answer is neither. And understanding why that framing is wrong is exactly where the real work starts. View Resource Aravo Blog The Future of Third-Party Risk Management Is Human-Centered July 27, 2026 View Resource Aravo Blog Beyond Compliance: How Aravo Helps Financial Institutions Manage Third-Party Risk July 27, 2026 View Resource Aravo Blog Why Pharma Needs an Intelligence-First Approach to Third-Party Risk July 27, 2026 View Resource Tenchi Security Podcast Alice in Supply Chains – the monthly podcast by Tenchi Security July 17, 2026 Alice in Supply Chains is the podcast companion to our monthly newsletter, bringing expert commentary and in-depth analysis on the latest developments in third-party cyber risk management (TPCRM). Hosted by Tenchi Security's CTO and Co-Founder, Alexandre Sieira, and The Defender's Initiative Principal Researcher, Adrian Sanabria, each episode explores the biggest stories shaping the TPCRM landscape, helping security, risk, procurement, and compliance professionals stay informed and ahead of emerging challenges. View Resource Center for Financial Professionals (CeFPro) Magazine Connect Magazine - July Edition 2026 (July 24, 2026) July 17, 2026 Connect Magazine July Edition 2026 explores how financial institutions are responding to a rapidly evolving risk landscape defined by technological disruption, geopolitical uncertainty, growing third-party dependencies, and increasing pressure to make faster, better-informed decisions. This issue examines the challenges of managing risk in a world where traditional frameworks are being tested by AI adoption, complex supply chains, shifting regulatory expectations, and changing workforce dynamics. From third-party risk and treasury strategy to investigative compliance, risk culture, and emerging AI governance challenges, the edition highlights the need for greater visibility, accountability, and resilience across the enterprise. With expert contributions spanning operational resilience, AI risk, treasury and liquidity management, compliance governance, risk culture, and career development, this edition underscores the importance of adaptive leadership, continuous monitoring, and integrated risk thinking as organizations navigate an increasingly interconnected operating environment in 2026. View Resource Center for Financial Professionals (CeFPro) Magazine Connect Magazine - June Edition 2026 (June 25, 2026) July 17, 2026 Connect Magazine June Edition 2026 explores how financial institutions are navigating an increasingly interconnected risk environment shaped by geopolitical instability, AI acceleration, third-party dependencies, and shifting regulatory expectations. This issue examines how traditional risk frameworks are struggling to adapt as operational, technological, and systemic risks converge across the financial ecosystem. From third-party concentration risk and AI governance to ESG implementation, capital model validation, and geopolitical disruption, the edition highlights the growing importance of resilience, strategic adaptability, and integrated risk oversight. With expert contributions spanning operational resilience, third-party risk management, model risk, AI governance, ESG reporting, and leadership decision-making, this edition underscores the need for proactive risk culture, ecosystem visibility, and stronger governance as institutions navigate complexity and uncertainty in 2026. View Resource Center for Financial Professionals (CeFPro) Magazine Connect Magazine - May Edition 2026 (May 26, 2026) July 17, 2026 Connect Magazine May Edition 2026 explores how financial institutions are redefining resilience in a world where risk is increasingly visible, interconnected, and shaped by rapid technological and geopolitical change. This issue examines the shift from traditional risk measurement toward real-world adaptability – from managing model risk in the age of AI and strengthening governance frameworks to responding to geopolitical disruption and evolving regulatory pressures. It highlights how AI, model risk, resilience, and treasury considerations are converging, requiring institutions to move beyond static frameworks toward dynamic, decision-led risk management. With expert contributions spanning AI fluency, model risk transformation, geopolitical risk, regulatory change, and leadership decision-making, this edition underscores the need for stronger judgment, interdisciplinary collaboration, and proactive risk culture as firms navigate uncertainty and complexity in 2026. View Resource Center for Financial Professionals (CeFPro) Magazine Connect Magazine - April Edition 2026 (April 24, 2026) July 17, 2026 Connect Magazine April Edition 2026 explores how financial institutions are moving from risk frameworks to real-world execution across AI, operational resilience, and evolving regulatory expectations. This issue examines the practical challenges of embedding effective controls - from strengthening RCSAs and managing non-financial risk to governing AI models and adapting to faster-moving liquidity dynamics. It highlights how model risk, operational risk, and treasury considerations are increasingly interconnected in day-to-day decision-making. With expert contributions spanning AI validation, RCSA transformation, liquidity risk, regulatory implementation, and risk careers, this edition underscores the need for actionable insight, stronger governance, and integrated risk thinking as firms navigate an increasingly complex operating environment in 2026. View Resource Center for Financial Professionals (CeFPro) Magazine Connect Magazine - March Edition 2026 (March 25, 2026) July 17, 2026 Connect Magazine March Edition 2026 explores how financial institutions are navigating political volatility, digital money innovation, regulatory recalibration, and shifting liquidity dynamics. This issue examines the widening gap between traditional banking assumptions and real-world balance sheet behavior, highlighting how interest rate risk, liquidity stress, credit deterioration, and funding instability are increasingly interacting at speed. With expert contributions spanning central bank independence, stablecoin liquidity, AI validation, regulatory reform, and structural balance sheet stress, this edition highlights the need for anticipatory governance, embedded liquidity discipline, and integrated risk oversight as the industry moves further into 2026. View Resource LOAD MORE

The Third Party Risk Association (TPRA) invites you to attend our upcoming Consultant Showcases, which provide an opportunity for TPRM practitioners to connect with TPRM consultants in a virtual, low-pressure format. During these interactive sessions, consultants will deliver 30-minute presentations, providing an overview of their services and offerings to help you address the complex challenges of third party risk management programs. Consultant Showcase The Third Party Risk Association (TPRA) invites you to attend our upcoming Consultant Showcases , which provide an opportunity for TPRM practitioners to connect with TPRM consultants in a virtual, low-pressure format. During these interactive sessions, consultants will deliver 30-minute presentations , providing an overview of their services and offerings to help you address the complex challenges of third party risk management programs. Register Raffle Prizes Look Books Agenda These virtual events allow practitioners to: Gain insights into the latest TPRM techniques. Connect directly with leading consultants to ask questions. Compare consultants and companies to determine the best fit for their organization. Don't miss this opportunity to connect, collaborate, and learn. New consultants present each quarter, so we encourage you to register for as many Showcases as you're able! Register for Upcoming Showcases New consultants present each quarter, so we encourage you to register for as many showcases as you're able! September 23, 2026 9:00 AM – 12:00 PM CT Consultant Showcase Read All NOTE: TPRM Consultants and their employees, affiliates, parent companies, etc. NOT participating in a presentation are not allowed to register based on conflict of interest. Raffle Prizes for this Quarter Opt-in to providing sponsors with your contact information during registration for the chance to win one of these awesome prizes! Raffle Prize Prize Image Organization Value Description $100 Amazon Gift Card TPRA $100 Drawn at end of event $100 Amazon Gift Card TPRA $100 Drawn at end of event HydroJug Water Bottle TPRA $40 Drawn at end of event UGG Euphoria Throw Blanket 50 x 70 TPRA $55 Drawn at end of event Titelist Pro V1 Golf Balls TPRA $60 Drawn at end of event Coming Soon Showcase Agenda Showcase times are subject to change depending on the number of presentations per session. All times are in Central Time. Date: September 23, 2026 Time: 8:55 – 9:00 AM CT Join us for opening remarks and pertinent information on the Showcase format. Read More Date: September 23, 2026 Time: 9:00 – 9:30 AM CT RSM’s purpose is to deliver the power of being understood to our clients, colleagues and communities through world-class audit, tax and consulting services focused on middle market businesses. Read More Date: September 23, 2026 Time: 9:35 – 10:05 AM CST HITRUST, the leader in cybersecurity assurance used in risk management and compliance, offers certification programs for the application and validation of security, privacy, and AI controls. Read More Date: September 23, 2026 Time: 10:10 – 10:40 AM CST Vendor Centric is a vendor and third-party risk management consultancy, specializing in helping organizations maintain modern, scalable and value creating operations. Read More Date: September 23, 2026 Time: 10:45 – 11:15 AM CST We help regulated and high risk organizations build practical, resilient and regulator-ready Third-Party Risk Management programmes. Read More Date: September 23, 2026 Time: 11:20 – 11:50 AM CST Third Party Threat Hunting LLC (TPTH) was founded by Gregory Rasner, the leading author of third-party risk books and one of the leaders in the field of TPRM and cybersecurity. Read More Date: September 23, 2026 Time: 12:00 – 12:30 PM CT Next Peak is a premier third-party risk and resilience consultancy that provides deep strategic advisory and operational services. Read More Date: September 23, 2026 Time: 12:35 – 1:05 PM CT Risk Tide Solutions trains every level of the third-party risk ecosystem: the business lines engaging vendors, the teams running the program, and the leaders answering for it. Read More Date: September 23, 2026 Time: 1:10 – 1:15 PM CST Closing & Raffle Prizes! Before we close out the day, names for raffle prizes will be drawn for those who opted in to providing sponsors with their contact information! Read More

Vendor & Third Party Risk USA In Strategic Partnership Between CeFPro and the TPRA October 14 – 15, 2026 | Fort Worth, Texas REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER AGENDA Why Attend? Attending the Vendor & Third Party Risk Conference provides a valuable opportunity to explore how organisations are responding to an increasingly complex third-party risk landscape across sectors. From cloud concentration and ‘too critical to exit’ vendors to fourth- and nth-party exposure across global supply chains, the event will examine how risk leaders are strengthening operational resilience and preparing for real disruption scenarios. The agenda will also explore how organisations are scaling TPRM programmes through technology, including AI, automation, predictive analytics, and continuous monitoring, while navigating evolving regulatory expectations and cybersecurity requirements. Register your interest to be the first to see the agenda when it launches, or secure your place today at the lowest pre-agenda ticket price. Topics & Tracks Operational Risk & Resilience From cloud concentration to failure scenarios, incident response and fourth & nth party risk in complex supply chains. Innovation & Automation Explore how organizations are using AI & automation, predictive analytics & risk forecasting, and continuous monitoring to strengthen and scale TPRM programs. Regulation & Standards Understand the evolving regulatory expectations across US regulators and global jurisdictions, including cybersecurity requirements, audit readiness, and demonstrating effective third-party risk controls while balancing innovation with compliance. Tickets & Pricing Single Ticket $999 per person For individual TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Group Ticket $799.20 per person For teams of 5 or more TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Vendor Ticket $1699 per person For those representing information or service providers* *Vendor, platform or tool provider, consultant, TPRM services, etc. Register ⭐ TPRA Members are eligible for 15% off ! Find the code below or email info@tprassociation.org ! TPRA Practitioner Member Discount TPRA Practitioner Members can use the code below to get 15% off their tickets to this event. If you cannot see the code below, please check that you are logged into your account. If you experience any issues, please email us at info@tprassociation.org . Log In to View Thank you to our sponsors! Lead Sponsor Lead Sponsor Knowledge Sponsor Knowledge Sponsor Knowledge Sponsor Knowledge Sponsor Co-Sponsor Co-Sponsor Co-Sponsor Co-Sponsor Associate Sponsor This event is brought to you by the Third Party Risk Association (TPRA) and the Center for Financial Professions (CeFPro) as part of our strategic partnership, bringing together practitioners and industry experts to share practical insights and real-world experiences. + REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER SUBSCRIBE TO UPDATES

Vendor & Third Party Risk Europe In Strategic Partnership Between CeFPro and the TPRA November 10 – 11, 2026 | London REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER AGENDA Why Attend? Explore how organizations across sectors are responding to an increasingly complex third-party risk landscape, from cloud concentration and critical vendors to extended supply chain exposure. This event is brought to you by TPRA in partnership with the Center for Financial Professionals (CeFPro) . Are you ready to strengthen resilience in the face of disruption? Register your interest to be the first to see the agenda when it launches, or secure your place today at the lowest pre-agenda ticket price. Topics & Tracks Operational Risk & Resilience Third‑Party Risk at Scale (From Spreadsheets to Systems) Dependency & Concentration Risk Critical Supplier Resilience Operational Scenario Testing Cyber Resilience Across Ecosystems Global Supply Chain Governance Innovation & Automation Scaling TPRM with AI Automated Due Diligence & Monitoring End‑to‑End TPRM Automation Human Oversight & Decision Ownership AI‑Enabled Supplier Risk Digital TPRM Ecosystems Regulation & Standards From Regulation to Execution Operationalising Compliance Third‑Party Due Diligence & Assurance Regulatory Reporting & Transparency Data Protection & Incident Readiness Navigating Global Regulatory Complexity Preparing for Future Regulation Tickets & Pricing Single Ticket £799 per person For individual TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Group Ticket £639.20 per person For teams of 5 or more TPRM practitioners* *those who assess, monitor, mitigate, etc., third party risk within their own organizations Register Vendor Ticket £1499 per person For those representing information or service providers* *Vendor, platform or tool provider, consultant, TPRM services, etc. Register ⭐ TPRA Members are eligible for 15% off ! Find the code below or email info@tprassociation.org ! TPRA Practitioner Member Discount TPRA Practitioner Members can use the code below to get 15% off their tickets to this event. If you cannot see the code below, please check that you are logged into your account. If you experience any issues, please email us at info@tprassociation.org . Log In to View Thank you to our sponsors! Co-Sponsor Knowledge Sponsor Knowledge Sponsor Co-Sponsor Associate Sponsor Luncheon Luncheon This event is brought to you by the Third Party Risk Association (TPRA) and the Center for Financial Professions (CeFPro) as part of our strategic partnership, bringing together practitioners and industry experts to share practical insights and real-world experiences. + REGISTER NOW BECOME A SPONSOR BECOME A SPEAKER SUBSCRIBE TO UPDATES

Explore TPRA’s TPRM Consultant Membership plans designed for independent consultants and boutique firms offering third party risk advisory services. Consultant Catalyst Plans Target Audience: Single, Independent Consultants or Boutique Advisory Firms specializing in third party risk management services, including but not limited to TPRM program implementation, tool implementation, and/or staff augmentation. INQUIRE ABOUT MEMBERSHIP About This Membership Plan The Consultant Catalyst Plan is a tailored membership option designed specifically for independent consultants and boutique advisory firms that specialize in third party risk management. Recognizing that these high-expertise professionals often operate with limited marketing resources, TPRA has created an accessible, affordable pathway into its practitioner-driven ecosystem. Through this membership, consultants gain the opportunity to build visibility, credibility, and relevance in a highly targeted community of TPRM professionals. This plan provides structured, ethical exposure to the TPRA network, including guidance on lead generation strategies that respect practitioner boundaries while helping consultants showcase their expertise. Members are encouraged to engage directly in community discussions, contribute thought leadership, and demonstrate their unique value through active participation. While TPRA does not guarantee leads, the Consultant Catalyst Plan creates the foundation for long-term relationship-building, increased brand recognition, and a stronger position in the TPRM space. Key Objectives 1 Provide affordable entry to the TPRA ecosystem. 2 Offer guided lead generation strategies (without violating practitioner privacy). 3 Enable visibility and credibility for consultants. 4 Encourage active participation to demonstrate value. INQUIRE ABOUT MEMBERSHIP Key Benefits Explore a brief overview of the benefits included in our Consultant Catalyst Plan. Exclusive Access to Practitioner-Focused Events Gain invitations to all TPRA Practitioner meetings, including Industry Roundtables and Insight Work Groups. Participate as a panelist or presenter once a year and engage in collaborative development of TPRA tools and guidance—all in a no-solicitation environment that fosters trust and expertise. Lead Generation & Networking Tools Participate in bi-annual Consultant Connector Events with interested practitioners. Plus, use the TPRA's “Lead Generation Blueprint” Toolkit to guide compliant, value-driven outreach based on best practices. Strategic Visibility & Promotion Opportunities Showcase your expertise through a curated TPRA Consultant Directory Profile, a LinkedIn spotlight post, Consultant Corner blogs, and the opportunity to be featured in TPRA’s quarterly newsletter. Position your firm as a recognized thought leader within the third party risk community. Business Growth & Peer Exchange Forums Join quarterly Consultant Roundtables—exclusive, TPRA-moderated sessions where you’ll share challenges, trends, and business growth strategies with fellow consulting peers in a supportive and strategic environment. Co-Hosted Event Collaboration TPRA will partner with your organization to co-host webinars, LinkedIn Live sessions, and/or podcasts. Leverage TPRA’s promotion while leading discussions that highlight your niche knowledge and solutions in front of a relevant and engaged audience. Recognition, Resources & Professional Development Apply for the TPRM Innovator Award, access discounts on certifications for consultant teams, and post jobs on TPRA’s career board. Contribute educational content, share surveys, and participate in our Women in TPRM Program. Consultant Catalyst Members Inquire About Membership Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Follow on LinkedIn > Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

TPRM Service Provider start-ups are invited to join the TPRA as Incubator Members! Apply now! TPRA Incubator Program Welcome to the TPRA Incubator Program, created to be a catalyst for transformative innovation in third party risk management (TPRM) Read More Inquire About Membership About Mission Empower and accelerate the success of innovative third party risk management startups through a comprehensive incubator program. We strive to foster a collaborative ecosystem that provides mentorship, resources, and networking opportunities, enabling startups to navigate challenges, develop cutting-edge solutions, and establish a robust presence in the evolving landscape of risk management. Vision To be a catalyst for transformative innovation in third party risk management, fostering a dynamic ecosystem where startups thrive in pioneering solutions that redefine industry standards. We aspire to build a global community of resilient and adaptive risk management leaders who contribute to a secure and trustworthy business environment. Through our incubator program, we envision a future where emerging startups play a pivotal role in shaping the evolution of risk management practices, driving sustainability, and ensuring resilience in an ever-changing landscape. Transforming the Industry Together Incubator Participants Who Can Participate Inquire About Membership Innovative Third Party Risk Management Startups Only start-up organizations within the Third Party Risk Management space Start-up must be five years old or less and/or within the pre-seed, seed, or early stage (Series A and Series B) Start-ups must not bring in more than $500,000 of revenue annually from product/service offerings Must complete an application and potentially an interview Must provide evidence of the revenue the organization generates from products/services within their last and/or current financial year TPRA retains the right to deny any organization and/or individual entry into the Incubator Program for any reason Goals & Activities The goals and activities of the Incubator Program are to assist with removing roadblocks within the community to allow for better communication, tighten feedback loops to ensure community needs are addressed, and to be a catalyst for innovation within the community. The program will also allow for a common lexicon when speaking about TPRM programs and the value they bring to organizations. Below are the goals and activities related to the TPRA’s Innovator Program: 1 TPRA Vendor Membership Receive “Incubator Status” Vendor Membership based on the Program Tier structure below. Would receive all of the benefits of an “Advocate” Member. Benefits include: Orientation & On-boarding Three website accounts Quarterly updates Invitations to practitioner meetings Website Access Service Provider Profile LinkedIn Welcome Message Share your resources, events, surveys, & job openings with TPRA members Newsletter Spotlight & Links to Blogs Write blogs for TPRA 3 Access to Resources Share TPRA resources, webinars, and training opportunities. TPRA will create a website to share external resources for Incubator Program members only (to include company names and URLs for investment firms, other incubator programs, and other start-up accelerators). 5 Training & Skill Development Incubator participants may attend TPRA webinars, events, and activities on the website to enhance TPRM skill development. 7 Lead Generation Opportunities TPRA to provide incubator participants with discounts on conference sponsorships and demo opportunities. Sponsorships come with opt-in lists. TPRA to create a site for Practitioners to submit RFPs for TPRM tools and for incubator participants (as well as TPRA Vendor Members) to respond to them. 9 Feedback & Improvement of Incubator Program From time to time, participants will receive surveys that request feedback on the Incubator Program. Responses will be used to continually enhance the program. 2 Start-Up Advisory Council Set up regular 1:1 meetings (most likely quarterly) with select practitioners (based on industry and company size) to provide program participants with feedback on their products/services. This can also assist with the incubator program participant figuring out their product market fit, target market, and product/service pitch. Can also assist with the participant better understanding if they are addressing their market’s TPRM pain points. TPRA to create a site for Practitioners to note TPRM pain points and/or note request for innovation. (Note: Can have the community vote on what they would like to see the most.) Incubator Participants would be able to access this list. 4 Network Opportunities TPRA will create network opportunities to introduce incubator program participants other program participants, practitioners, and other service providers. 6 Brand Awareness TPRA to note the incubator participant’s organization on the TPRA website (within Service Provider Profile), highlight the organization on LinkedIn, and note the organization as a spotlight within one of the TPRA’s quarterly newsletters. 8 Collaboration on Additional Resources In collaboration with TPRA, may participate in educational trainings, research, & content creation (such as blog posts, whitepapers, & videos). Inquire About Membership Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Follow on LinkedIn > Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

Leverage this list of third party risk management service providers in various categories to find the right vendor for your needs. TPRM Tools At the Third Party Risk Association, we know that finding the right vendor for your needs can be a challenge. Often, organizations may not even be aware of the potential vendors in the space. We're aiming to compile an exhaustive list of TPRM vendors across various categories to make your life a little easier. This list of TPRM Vendors is not affiliated with the TPRA, and the TPRA does not receive any monetary gain from listing them below. If you are a TPRM Vendor and would like to be included in the list below, please email Heather Kadavy at heather.kadavy@tprassociation.org . Filter by Tool Category Filter by TPRA Membership Status Filter by Organization Name Number found: 168 Search Clear Filters CATEGORY ORGANIZATION TPRA MEMBER URL TPRM Platform Aravo Yes https://www.aravo.com Risk Ratings/Intelligence Bitsight Yes https://www.bitsight.com GRC Platform Mitratech Prevalent Yes https://mitratech.com/ TPRM Platform ProcessUnity Yes https://www.processunity.com Risk Ratings/Intelligence RiskRecon by Mastercard Yes https://www.riskrecon.com Risk Ratings/Intelligence Supply Wisdom Yes https://www.supplywisdom.com/ Risk Ratings/Intelligence Black Kite Yes https://blackkite.com/ TPRM Platform Certa Yes https://certa.ai TPRM Platform SecurityScorecard Yes https://www.securityscorecard.io TPRM Services S&P Global Market Intelligence Yes https://www.spglobal.com/marketintelligence/en/mi/products/ky3p.html TPRM Platform Aprovall Yes https://www.aprovall.com/en/ TPRM Platform BlueVoyant Yes https://www.bluevoyant.com/ GRC Platform Drata Yes https://drata.com/ TPRM Services HITRUST Yes https://hitrustalliance.net/ Risk Ratings/Intelligence Interos Yes https://www.interos.ai/ TPRM Platform Lema Yes https://www.lema.ai/ Risk Ratings/Intelligence NetRise, Inc. Yes https://www.netrise.io/ TPRM Platform OneTrust Yes https://www.onetrust.com Risk Ratings/Intelligence PromptArmor Yes https://www.promptarmor.com TPRM Platform Safe Security Yes https://safe.security/ TPRM Platform Sayari Yes https://sayari.com/ GRC Platform Tandem Yes https://tandem.app/ TPRM Platform Tenchi Security Yes https://www.tenchisecurity.com/en TPRM Platform Vanta Yes https://vanta.com Risk Ratings/Intelligence Veridion Yes https://veridion.com/ TPRM Services Next Peak Yes https://nextpeak.net/ TPRM Services RSM US Yes https://rsmus.com/ TPRM Services Risk Tide Solutions Yes https://www.risktide.com/ TPRM Services Third Party Threat Hunting LLC Yes https://thirdpartythreathunting.com/ TPRM Services Vendor Centric Yes https://www.vendorcentric.com TPRM Services Ventara Risk Solutions Yes https://www.ventararisksolutions.com/ TPRM Platform Anqa Yes https://www.anqa.ai/ TPRM Services CRFQ Yes https://www.crfqnow.com/ Risk Ratings/Intelligence Continuity Strength Yes https://continuitystrength.com/corporate-support TPRM Platform Coverbase Yes https://coverbase.ai/ Risk Ratings/Intelligence CyberCert Yes https://cybercert.ai TPRM Platform DocuBark Yes https://docubark.com/ TPRM Platform Fabrik Yes https://www.thetrustfabrik.com/ Third Party Assurance FusionAIrre Yes https://www.fusionairre.ai/ TPRM Platform HERO Yes https://herosecurity.ai TPRM Platform Locktivity Yes https://www.locktivity.com/ TPRM Platform Portend AI Yes https://portend.ai/ TPRM Integration Tool PsyberCog Labs Yes https://www.psybercog.com TPRM Platform SecureOS Yes https://www.secureos.co/ TPRM Services Securis360 Inc. Yes https://securis360.com TPRM Platform Shift Security Yes https://www.shift.security/ TPRM Platform Tekrisq Yes https://tekrisq.com/home TPRM Platform ThirdOrbit Yes https://thirdorbit.io TPRM Services Center for Financial Professionals (CeFPro) Yes https://cefpro.com/ Research & Educational Community Cloud Security Alliance (CSA) Yes https://cloudsecurityalliance.org/ TPRM Services Cyber Future Foundation Yes https://cyberfuturefoundation.org/ TPRM Services DRI International Yes https://www.tprassociation.org/vendor-profiles/dri-international Research & Educational Community FAIR Institute Yes https://www.fairinstitute.org Research & Educational Community Fintech Training Center Yes https://fintechtrainingcenter.com/ Research & Educational Community Global Resilience Federation (GRF) Yes https://www.grf.org/ TPRM Services Secure Controls Framework (SCF) Yes https://securecontrolsframework.com/ GRC Platform 360Factors Inc No https://www.360factors.com TPRM Services AML RightSource No http://www.amlrightsource.com GRC Platform Acuity Risk Management No http://acuityrm.com GRC Platform Archer Integrated Risk Management No https://www.archerirm.com/third-party-governance Risk Ratings/Intelligence Argos Risk No https://argosrisk.com TPRM Platform Atlas Systems No https://www.atlassystems.com/solutions/third-party-risk-management TPRM Services BDO USA No https://www.bdo.com Risk Ratings/Intelligence Blackwired Pte Ltd No https://www.blackwired.com TPRM Platform Blue Umbrella No http://www.blueumbrella.com TPRM Services BraunWeiss Inc. No https://www.braunweiss.net/ Risk Ratings/Intelligence BreachSiren No https://breachsiren.com TPRM Services Cadre No https://www.cadre.net TPRM Services CastleHill Risk No https://www.castlehillrisk.com TPRM Platform Censinet No https://www.censinet.com TPRM Services Certificial, Inc. No http://www.certificial.com TPRM Platform Clarity360 (Kroll) No https://www.krollclarity.com/ TPRM Services ComplyScore No https://www.complyscore.com TPRM Services Continuity Solutions No https://www.continuitysolutions.org/ TPRM Services Copeland BUHL No https://www.copelandbuhl.com/ GRC Platform CoreStream No http://corestreamplatform.com TPRM Platform Crossword Cybersecurity No https://www.crosswordcybersecurity.com/ TPRM Services Crowe No https://www.crowe.com/services/consulting/third-party-risk-management TPRM Platform CyberGRX (now ProcessUnity) No https://www.cybergrx.com Risk Ratings/Intelligence Cyberwrite No https://www.cyberwrite.com/ TPRM Platform DSALTA No https://www.dsalta.com/ GRC Platform DVV Solutions TPRM No https://www.dvvs.co.uk Risk Ratings/Intelligence Dark Sky Technology, Inc. No http://www.darkskytechnology.com TPRM Services Defentrix No https://www.defentrix.com/ GRC Platform Diligent No https://www.diligent.com/ TPRM Services Dixon Hughes Goodman No https://www.dhg.com/services/advisory TPRM Platform DoubleCheck Software No http://www.doublechecksoftware.com Risk Ratings/Intelligence Dun & Bradstreet No https://www.dnb.com/solutions/manage-supplier-risk.html Research & Educational Community Dynamic Standards International (DSI) No https://dsi.org/about GRC Platform Ethico No http://www.ethico.com TPRM Platform EthixBase360 (formerly EthixBase) No https://ethixbase360.com/ TPRM Services Evident ID No https://www.evidentid.com TPRM Platform Exiger No https://www.exiger.com/ TPRM Platform Findings No https://findings.co/ TPRM Platform FlowForma No http://www.flowforma.com/flowassure Risk Ratings/Intelligence FortifyData No http://www.fortifydata.com TPRM Platform Fortress No https://fortress.ai/ Risk Ratings/Intelligence GRMS | Global Risk Management Solutions No http://www.GlobalRMS.com/Difference TPRM Platform Gatekeeper No https://www.gatekeeperhq.com TPRM Services Grant Thorton No https://www.grantthornton.com/services/advisory-services/cybersecurity-and-privacy/third-party-risk TPRM Platform GraphiteConnect No https://www.graphiteconnect.com/ TPRM Services GuidePoint Security No http://www.guidepointsecurity.com TPRM Platform Halo Ai No https://gohalo.ai/ TPRM Platform Hellios Information No https://hellios.com/ TPRM Platform Hyperproof No https://hyperproof.io/product/third-party-risk-management/ Risk Ratings/Intelligence ISS Corporate Solutions No https://www.isscorporatesolutions.com/solutions/security-suite/ TPRM Services ITPN No http://www.ITPeopleNetwork.com Risk Ratings/Intelligence Ionix previously Cyberpion No https://www.ionix.io/ Risk Ratings/Intelligence KHARON No https://www.kharon.com/ TPRM Platform Kobalt Labs No https://www.kobaltlabs.com/ GRC Platform LogicGate No https://www.logicgate.com/solutions/third-party-risk-management/ TPRM Platform LogicManager No https://www.logicmanager.com/ TPRM Platform Magnitude No https://magnitude.ai/ GRC Platform MetricStream No https://www.metricstream.com TPRM Platform MyRiskShield No https://www.myriskshield.com/ GRC Platform Navex No https://www.navex.com/en-us/products/navex-irm-integrated-risk-management/third-party-risk-management/ TPRM Platform Ncontracts No https://www.ncontracts.com/ Risk Ratings/Intelligence Nova Technology Limited No https://nova-doc.com/ GRC Platform Onspring No https://onspring.com/solutions/governance-risk-compliance/third-party-risk-management/ GRC Platform OpenPages GRC by IBM No https://www.ibm.com/products/openpages-with-watson?utm_content=SRCWW&p1=Search&p4=43700070084211913&p5=p&gclid=f61d865decc71a305683e4bf26ab6b2c&gclsrc=3p.ds GRC Platform Optro (pka Auditboard) No https://optro.ai/ Risk Ratings/Intelligence Orpheus Cyber No https://www.orpheus-cyber.com Risk Ratings/Intelligence Owlin No http://www.owlin.com TPRM Services PRAXIS Technology Escrow, LLC No https://praxisescrow.com GRC Platform PROXORA No https://www.proxora.com/en/ Risk Ratings/Intelligence Panorays No https://www.panorays.com TPRM Platform Perimeter (formally ProcessBolt) No https://perimeter.net/ TPRM Platform Protecht No https://www.protechtgroup.com/en-us/ Risk Ratings/Intelligence RapidRatings No https://www.rapidratings.com/ GRC Platform Reasonable Risk No https://www.reasonablerisk.com/ Risk Ratings/Intelligence Recorded Future No https://www.recordedfuture.com TPRM Platform Resilinc No http://www.resilinc.ai TPRM Platform Risk Ledger No https://riskledger.com/ TPRM Platform Risk Ledger No https://riskledger.com/ GRC Platform RiskOptics formerly Reciprocity No https://reciprocity.com/ GRC Platform SAI 360 GRC No https://www.sai360.com/ GRC Platform SAP Risk Management No https://www.sap.com/products/financial-management/risk-management.html TPRM Services Schneider Downs No https://www.schneiderdowns.com/third-party-risk-management TPRM Services SecureCrest No https://www.securecrest.com Risk Ratings/Intelligence Semantic Visions No https://www.semantic-visions.com/ Risk Ratings/Intelligence Sentrisk No https://www.marshmclennan.com/sentrisk.html GRC Platform ServiceNow GRC No https://www.servicenow.com/products/governance-risk-and-compliance.html TPRM Services Sidekick Security No https://sidekicksecurity.io/third-party-risk-management/ TPRM Platform Smarsh (formerly Privva) No https://www.smarsh.com/platform/cybersecurity-risk-management/vendor-risk-management TPRM Services Source Callé No https://www.sourcecalle.com TPRM Platform Sphera (formerly RiskMethods) No https://sphera.com/supply-chain-risk-management/ GRC Platform Standard Fusion No https://www.standardfusion.com/ TPRM Platform Start No https://www.startvrm.com/ TPRM Platform TDI No https://tdinternational.com/ Risk Ratings/Intelligence TRaiCE No https://www.traice.io TPRM Services TUV OpenSky No https://www.tuvopensky.com Risk Ratings/Intelligence The Smart Cube, a WNS company No https://www.thesmartcube.com/solutions/procurement-supply-chain/supplier-risk-intelligence/ TPRM Platform ThirdPartyTrust (a Bitsight company) No https://www.thirdpartytrust.com TPRM Platform Trust Your Supplier No https://trustyoursupplier.com/ TPRM Platform TrustExchange No https://www.trustexchange.com TPRM Services Truvo Cyber No http://truvocyber.com GRC Platform TutelaSolutions No https://www.tutela-solutions.com/ Risk Ratings/Intelligence UpGuard No https://www.upguard.com/ TPRM Platform VISO TRUST No https://www.visotrust.com TPRM Services VIVIDedge No https://www.vivid-edge.com/ TPRM Platform Velocity (Stern Security) No https://www.velocitysec.com/ Risk Ratings/Intelligence Vendict No https://www.vendict.com/ TPRM Platform Vendict No https://vendict.com/ TPRM Platform VendorRisk No https://www.vendorrisk.com TPRM Platform Vendorly No https://www.vendorly.com/ TPRM Platform Whistic No https://www.whistic.com TPRM Platform myCYPR No https://www.mycypr.com/ TPRM Services Continuiti Solutions No https://continuitisolutions.com/

Learn about TPRA's available Vendor Member plans, the benefits included in each one, and how to join! TPRA Vendor Membership Becoming a TPRA Vendor Member isn't just about gaining leads and promoting your organization, it's about helping to further the industry of Third Party Risk Management (TPRM) by becoming an integral part of a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. INQUIRE ABOUT MEMBERSHIP This page is specific to Vendor Membership, but TPRA offers three types of membership to TPRM Service Providers depending on their needs, maturity, and/or revenue. A brief overview of each option can be found below, with links to explore further. Vendor Membership For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Learn More Consultant Catalyst For single Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services, typically with limited marketing budgets but high expertise. Learn More Incubator Program For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Learn More Vendor Member Benefits Connect with Targeted Audience Build relationships with third party risk professionals across industries through direct engagement opportunities, collaborative forums, and curated networking channels. Access Member-Only Insights Stay ahead of industry trends and challenges with exclusive access to community-driven insights, resources, and discussions. Highlight Your Solutions Showcase your tools, services, and innovations to the TPRM community through exclusive presentation and visibility opportunities designed to spark meaningful connections. Share Your Expertise Contribute your knowledge and thought leadership to the broader community through educational content and resource-sharing opportunities. Strengthen Your Brand Presence Enhance your brand recognition across TPRA platforms and communication channels through welcome features, spotlight opportunities, and tailored visibility touchpoints. Promote Events & Opportunities Expand your reach by promoting your relevant events, job openings, and initiatives directly to the TPRA practitioner network. Our Members Why Join? As a TPRA Vendor Member, you are recognized as an organization that believes in the mission of furthering the Third Party Risk Management profession through knowledge sharing and networking . Working together with Practitioners, you are an integral part of building a community that establishes TPRM guidance, resources, and tools, and works to promote the value that TPRM professionals add to their organizations. While the Third Party Risk Association is vendor-agnostic, we absolutely recognize the value our Vendor Members create not only in our profession, but also in the organizations our practitioners represent as well. Vendor Members are invited to leverage the Third Party Risk Association as a platform for increased brand recognition within our industry – we’ll support you with priority sponsorship opportunities , expedited customer support , and our partnership in providing you a voice within the larger TPRM community. Our membership and leadership can also serve as a resource offering unique insights into practitioner pain points and domain-specific challenges to inform your product offerings and prioritize your roadmaps. As we continue to grow, adding to our ever-evolving community of verified TPRM practitioners, the Third Party Risk Association will continue consulting our Vendor Membership for guidance on industry trends , emerging risks , and enhanced program automation effort s. The TPRA looks forward to working with you on furthering the profession of Third Party Risk Management together! INQUIRE ABOUT MEMBERSHIP Ready to Join? If you are looking to move forward with Vendor Membership, complete this form to begin the process! Our team will reach out soon with plan and pricing options. Contact Heather directly using the contact info below. Heather Kadavy Senior Membership Success Coordinator heather.kadavy@tprassociation.org Vendor Membership Inquiry Complete this form if you are interested in one of TPRA's Service Provider Membership options (Vendor Membership, Incubator Program, Consultant Catalyst). Our team will reach out to you as soon as possible with further details on plan benefits and pricing. First name* Last name* Job Title* Organization* Email* Phone Which membership option are you interested in? Vendor Membership – For established TPRM Service Provider organizations (TPRM Platform, GRC Platform, Risk Rating/Intelligence Tool, TPRM Services, etc.). Incubator Program – For Start-Up TPRM Service Provider Organizations looking to gain insight, support, and promotion. Consultant Catalyst – For single, Independent Consultants or Boutique Advisory Firms specializing in third-party risk management services. Other Anything else we should know? Submit

SecurityScorecard is a leading cybersecurity ratings platform that provides continuous risk monitoring, intelligence, and third-party risk management solutions to help organizations assess and improve the security posture of their vendors and supply chains. < Back Security Scorecard Wednesday, October 21, 2026 12:00 - 12:25 PM CT TPRM Platform Globe Mail Search Search Search About SecurityScorecard SecurityScorecard is the global leader in cybersecurity ratings and continuous risk monitoring, helping organizations around the world strengthen their security posture and mitigate risk. Our platform provides a comprehensive, real-time view of the cybersecurity health of an organization and its vendors by leveraging 10 key risk factors, including IP reputation, endpoint security, and application security. With over 12 million companies continuously monitored, SecurityScorecard enables organizations to gain critical insights into their attack surface, prioritize vulnerabilities, and take proactive measures to improve their defenses. Tools, Products, and Services Our platform offers a suite of tools and services designed to simplify and enhance cybersecurity management. Security Ratings, our flagship product, delivers actionable intelligence and visibility into third-party ecosystems to reduce the likelihood of breaches and ensure compliance with industry standards. Our Third-Party Risk Management (TPRM) capabilities streamline vendor assessments, reduce questionnaire workloads by 83%, and provide continuous monitoring to mitigate supply chain risks. Additionally, MAX, our managed detection and response (MDR) service, operationalizes supply chain risk management by identifying and remediating vulnerabilities in real-time, while our professional services such as Penetration Testing and Incident Response Tabletop Exercises help validate security measures and prepare for cyber threats. Designed for seamless integration, SecurityScorecard supports over 100 marketplace integrations, enabling businesses to embed our data into existing workflows and compliance tools. Whether for enterprise cyber risk management, regulatory compliance, or board-level reporting, SecurityScorecard empowers organizations to make smarter, data-driven decisions and build a stronger, more resilient cybersecurity strategy. Presenter(s) Previous Next

ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. < Back ProcessUnity Wednesday, October 21, 2026 11:30 – 11:55 AM CT TPRM Platform Globe Mail Search Search Search ProcessUnity Third-Party Risk Management protects companies and their brands by reducing risk from third parties, vendors and suppliers. TPRM expands the scope of risk management to encompass any external party that could pose a risk to an organization, including vendors, contractors, partners and suppliers. With a single, configurable platform, ProcessUnity helps organizations manage the increasing complexity of supply chains and third-party relationships with tools to identify and assess the risks associated with each external party, monitor third-party performance and ensure external control effectiveness. Our software platform empowers you to proactively manage third-party risks and protect your organization from potential cyber threats and business disruptions. ProcessUnity is used by the world’s leading financial service firms and commercial enterprises. The company is headquartered outside Boston, Massachusetts. For more information, visit http://www.processunity.com . Presenter(s) Brad McAdams Director, Risk Solutions Brad McAdams has spent his entire career focused on Third-Party Risk Management, and the wider Cyber and GRC Market. Starting first as a practitioner in the consulting world, before switching over to the software side more than a decade ago. Brad has had the opportunity to be based both in North America as well as Europe. Previous Next

TPRM is Complex. Simplify it with Mitratech. < Back Mitratech Wednesday, October 21, 2026 1:30 – 1:55 PM CT TPRM Platform Globe Mail Search Search Search Third-party risk management (TPRM) is the process of identifying, assessing, and mitigating the risks associated with engaging external third parties such as vendors, suppliers, contractors, and business partners. It involves thorough due diligence to address potential risks that could affect an organization’s operations, financial health, cybersecurity, legal standing, or ability to serve its customers. These risks may encompass cybersecurity incidents, supply chain disruptions, labor shortages, financial instability, political factors, and regional conflicts. It’s a lot to keep track of. That’s why Mitratech TPRM enables organizations to proactively manage risks and plan responses rather than reacting to issues as they arise, ensuring business continuity and protecting key stakeholders. Presenter(s) Previous Next

Join us for opening remarks and pertinent information on the Showcase format. Opening Remarks Website Email LinkedIn Video Fact Sheet The Third Party Risk Association (TPRA) was created out of a necessity to build a community of like-minded third party risk professionals to allow for the sharing of best practices, exchanging of ideas, and influencing of an industry. Our founders are practitioners who built their own third party risk programs within their respective organizations and were looking for a vendor-agnostic community that could help them elevate their programs. When they couldn't find one, they created one . What started as a roundtable between colleagues has turned into a community of thousands of practitioners and TPRM service providers worldwide , all working towards the same goal: sharing knowledge and furthering the industry of TPRM. Presenter(s)