Third-party & supplier security risk

Know which supplier is your weakest link.

Supply Chain Scorecard lets you run structured, scored security assessments of your vendors and suppliers. Send a link, receive an objective risk rating back — no spreadsheets, no chasing.

Self-service · suppliers respond with no login required · results scored instantly.

Security you can trust Enterprise-grade infrastructure• Encrypted & protected• Confidential by design• UK/EU hosted
The problem

Most serious breaches now arrive through the supply chain.

Attackers target the smaller, less-defended supplier or the managed IT provider, then use that foothold to reach the real prize. Regulators, insurers, and enterprise customers increasingly expect you to demonstrate that you assess the third parties you rely on — yet most vendor assessment is still emailed spreadsheets: inconsistent, unscored, impossible to compare, and out of date the moment they reach an inbox.

How it works

The effort sits with the supplier, not with you.

From adding a supplier to a scored result in four steps.

1

Send the assessment

Add a supplier contact and issue the questionnaire. They receive a secure link with a deadline.

2

They self-assess

No account needed. The supplier answers plain-language questions at their own pace.

3

Reminders & scoring

Automated reminders chase the deadline. On submission, answers are scored instantly.

4

Review & compare

A clear score and risk rating lands in your console — recorded and fully auditable.

Why it holds up

Objective results you can rely on.

Built to be consistent, fair across very different organisations, and effortless to run.

Objective scoring

Every supplier is measured the same way and returns a clear, comparable rating — not a subjective pass or fail.

Fair at every size

Expectations scale automatically to the organisation being assessed, so results stay credible from the smallest supplier to the largest.

Thorough & rigorous

Comprehensive coverage with the areas that matter most weighted accordingly — so real risk is surfaced, not smoothed over.

Deadlines & reminders

Set a completion deadline; the platform sends the chasers for you and tracks who is still outstanding.

White-label for MSPs

Resellers and managed providers can run the entire platform under their own brand for many client organisations.

Secure & private

Enterprise-grade infrastructure, encrypted connections, controlled access, and a full activity trail keep your assessments confidential.

The assessment

A thorough, independent security review

A ready-made questionnaire gives you a clear, objective read on a supplier's security posture — covering every major area of cyber and ICT security, in plain language anyone can answer.

Expectations scale to the size of the organisation and the most important controls carry the most weight, so the result is fair, consistent, and hard to game.

Clear, colour-coded risk ratings:

Strong
Low Risk
Medium
High Risk
Critical
Governance & risk
Access & identity
Data protection
Threat defence
Monitoring & response
Data privacy
Cloud & applications
Supply chain & people
Editions

Priced to match how you work.

From assessing your own vendor base to running the platform for many clients under your own brand.

Starter

For organisations assessing their own suppliers.

  • The ready-made assessment
  • Send, remind & score
  • Clear risk ratings
  • Full audit trail
Get started

Enterprise & MSP

For resellers and managed providers serving many clients.

  • White-label branding
  • Many client organisations
  • Custom domains
  • Priority support
Talk to us

Start assessing your suppliers today.

Set up an account and send your first scored assessment the same day.