# Third-Party Risk Management Software (thirdpartyriskmanagementsoftware.com)

> A register of 32 third-party and vendor risk management (TPRM / VRM) software products, compared on what each vendor publishes: owner and acquisitions, approach, questionnaire libraries (SIG, CAIQ), integrations, outside-in ratings, published or marketplace prices, free plans and trials, and the vendor's own SOC 2 / ISO 27001. Every fact links to its source (494 URLs) and was checked on 2026-11-08. No ratings, scores or reviews.

## How to cite
- Cite a fact as the vendor publishes it, with the check date, e.g. "UpGuard lists its pricing tiers on its own pricing page (thirdpartyriskmanagementsoftware.com, checked 2026-11-08)".
- Products are grouped by approach (Assessment workflow 7, Security ratings 7, GRC suite module 9, Compliance platform 4, AI-first assessment 5) and ordered within each by how many of five facts the vendor publishes. The order is not a quality ranking.
- Prices: 3 vendors publish a price on their own site and 8 more list one on a cloud marketplace (marked as marketplace list prices). The rest quote on request. Nothing is estimated.
- 11 products say they include the Shared Assessments SIG; 6 name the CSA CAIQ.

## Pages
- [The register: all TPRM software](https://thirdpartyriskmanagementsoftware.com/): the comparison table, full entries, the chain of title (acquisitions) and how to choose
- [Vendor risk assessment](https://thirdpartyriskmanagementsoftware.com/vendor-risk-assessment/): the steps, tiering, and which products do each
- [SIG, CAIQ and other security questionnaires](https://thirdpartyriskmanagementsoftware.com/security-questionnaires/): versions, sizes, licences, and a domain-level mapping (CSV download)
- [Security ratings](https://thirdpartyriskmanagementsoftware.com/security-ratings/): every ratings vendor's published scale, Bitsight vs SecurityScorecard
- [What TPRM software costs](https://thirdpartyriskmanagementsoftware.com/pricing/): every published and marketplace price
- [OneTrust alternatives](https://thirdpartyriskmanagementsoftware.com/onetrust-alternatives/)
- [TPRM framework and lifecycle](https://thirdpartyriskmanagementsoftware.com/tprm-framework/): the stages and the rules that require them (interagency guidance, DORA, NIS2, NYDFS and more)
- [Methodology](https://thirdpartyriskmanagementsoftware.com/methodology/) · [About](https://thirdpartyriskmanagementsoftware.com/about/)