Folio 5Pricing · checked November 8, 2026
What TPRM software costs, from the vendors’ own price lists
Every price the vendors in the register publish, on their own sites or as a list price on AWS Marketplace, copied exactly and linked. Nothing estimated, nothing from price-report sites.
Only 3 of 32 TPRM products publish a price on their own site, and 8 more list one on AWS Marketplace; 21 list none. The comparable 12-month list prices run from $7,500 to $125,000, for tiers that cover anything from 5 domains to a whole enterprise platform. Compare the unit (vendors, assessments, users) before the total.
Lowest listed 12-month price
Each product’s lowest 12-month list price in US dollars, with what the tier buys. Different units, so read the label before comparing bars.
Sources: each vendor’s pricing page or AWS Marketplace listing (full text below). UpGuard’s figure is our arithmetic: $1,750 a month, billed annually, times 12. Supplier Shield prices in Swiss francs (from CHF 4,290 a year) and Centraleyes on 36-month terms, so they are in the full table, not the chart.
What one vendor costs
Where a tier says how many vendors, domains or assessments it covers, the price per unit. Our arithmetic from the listed figures, at the entry tier; larger tiers usually cost less per vendor.
| Product | Per unit, a year | Basis |
|---|---|---|
| Vanta | $272 | $13,600 a year ÷ 50 vendors |
| UpGuard | $420 | $21,000 a year ÷ 50 vendors |
| Whistic | $620 | $15,500 a year ÷ 25 vendor assessments |
| VISO TRUST | $1,000 | $1,000 per vendor relationship, per year |
| SecurityScorecard | $2,700 | $13,500 a year ÷ 5 domains |
Every published price, in full
Exactly as each vendor writes it, with where it appears and what it covers.
| Product | Where | Covers | The price, as written |
|---|---|---|---|
| VenminderAssessment workflow | AWS Marketplace | The TPRM product | Venminder Third-Party Risk Enterprise Platform (seller: Venminder): Dimension "Venminder TPR Enterprise" - "Includes all Enterprise modules (no customization)" - 12-month contract Cost/12 months $125,000.00; 24-month contract Cost/24 months $120,000.00 ("save up to 52%"); 36-month contract Cost/36 months $115,000.00 ("save up to 69%"). |
| SecurityScorecard | AWS Marketplace | The TPRM product | "SecurityScorecard" listing, 12-month contract (Cost/12 months): SSC Free — "REQUEST QUOTE" — $0.00; SSC Pro — "REQUEST QUOTE" — $0.00; SSC Business — "For vendor management of 5 domains, reporting unlocked" — $13,500.00; SSC Enterprise — "Larger vendor management of 75 domains + onboarding experience" — $155,375.00 |
| UpGuard | Vendor’s own site | The TPRM product | Vendor Risk — Standard: $1,750 /mo, billed annually ("Monitor 50 Vendors"; "Additional Vendors for $79/month"); Professional: Contact sales ("Monitor 150 Vendors"); Corporate: Contact sales ("Monitor 500 Vendors"); Enterprise: Contact sales (Unlimited vendor monitoring slots); Enterprise+: Contact sales ("Monitor Unlimited Vendors"). "Pricing last updated: October 2026" |
| Interos | AWS Marketplace | The TPRM product | 12-month contract: Resilience Platform ("Access to the Resilient Platform") $100,000.00 Cost/12 months |
| Supplier ShieldGRC suite module | Vendor’s own site | The TPRM product | Supplier Shield TPRM starts from CHF 4'290 / yr (Starter). The core of Acuna GRC, the AI-native GRC platform, starts from CHF 6'390 / yr; additional modules are priced separately. Tiers: Starter CHF 4'290 / yr (Up to 1 member); Professional: Contact sales (Up to 5 team members); Enterprise: Custom quote (Up to 10 team members). |
| CentraleyesGRC suite module | AWS Marketplace | The platform the TPRM module is part of | Listing 'Centraleyes GRC' (sold by Centraleyes GRC), 36-month contract: 'Centraleyes GRC Basic' (up to 2 frameworks and 2 named users) $120,000.00; 'Centraleyes GRC Enterprise' (up to 5 frameworks and 4 named users) $180,000.00; 'Centraleyes GRC MSSP' (up to 5 frameworks, 4 named users, up to 3 managed client workspaces) $225,000.00, Cost/36 months. Whole-platform tiers; no separate TPRM dimension. |
| SecureframeCompliance platform | Vendor’s own site | The TPRM product | Fundamentals: "Starting at $7,500/year". Complete (adds "Advanced Third-Party Risk Management"): "Get a quote". |
| SecureframeCompliance platform | AWS Marketplace | The platform the TPRM module is part of | Listing 'Secureframe Automated Security, Privacy & Compliance Platform' (sold by Secureframe), 12-month contract: 'Platform', 'Access the Secureframe Platform up to 100 Employees', $7,500.00; 'First Framework', 'Choice of any Framework', $7,500.00 (Cost/12 months). No separate TPRM dimension; the listing includes 'Vendor access and risk management'. Private offers via marketplace@secureframe.com. |
| VantaCompliance platform | AWS Marketplace | The TPRM product | Listing 'Vanta' (sold by Vanta), 12-month contract: dimension 'Third Party Risk Management (TPRM)', description 'Up to 50 vendors managed per year', $13,600.00 Cost/12 months. Platform packages are separate dimensions (e.g. 'Essentials Package', 'Starting cost for 1-20 employees', $14,000.00). Custom pricing via private offer. |
| VISO TRUSTAI-first assessment | AWS Marketplace | The TPRM product | 12-month contract: Vendor Relationships ("Unique business relationships that are assessed, monitored, and managed.") $1,000.00 Cost/12 months per unit; also offered: "24-month contract - save up to 10%", "36-month contract - save up to 20%" |
| WhisticAI-first assessment | AWS Marketplace | The TPRM product | Listing 'Whistic - Agentic Risk Operations Platform (AI-First TPRM)' (sold by Whistic), 12-month contract, Cost/12 months: 'Whistic Core AI' (25 vendor assessments, 25 AI Assessment Copilot uses, 25 Vendor Insights, 5 Smart Responses, 1 Trust Center; unlimited vendors and users) $15,500.00; 'Whistic Assess AI: Standard' (75 vendor assessments) $31,750.00; 'Whistic Assess AI: Professional' (150) $43,250.00; 'Whistic Assess AI: Premium' (250) $54,750.00; 'Whistic Assess AI: Enterprise' (500) $76,000.00; 'Vendor Monitoring - Standard' $5,500.00; 'Vendor Monitoring - Professional' $8,250.00. A 24-month contract option is also listed. |
| SAFE TPRMAI-first assessment | AWS Marketplace | The TPRM product | 12-month contract: SAFE TPRM Basic ("SAFE TPRM Basic, up to 25 users") $20,000.00 Cost/12 months; Overage cost $1.00/unit; custom pricing via "Request private offer" |
Listings that don’t price the TPRM product
Some vendors list a price on a marketplace for a different product or package. Shown so the figures aren’t mistaken for TPRM prices.
| Product | Listing |
|---|---|
| Prevalent | Prevalent TPRM Platform (seller: Prevalent, Inc.), 12-month contract: Dimension "Third-Party Marketplace" - "Access to the Third-Party Marketplace" - Cost/12 months $349.00. This prices only the supplier-side Third-Party Marketplace (self-assessment sharing), not the buyer TPRM platform. AWS Marketplace |
| Bitsight | Listing is for Bitsight for Security Performance Management (not the TPRM product): 12-month contract, dimension "SPM Enterprise Combined" "per license (includes 20 benchmarking subscriptions)" $138,550.00 Cost/12 months; custom pricing offers available on request AWS Marketplace |
| MetricStream | 'MetricStream ConnectedGRC' (Sold by: MetricStream Inc.), 36-month contract: 'CyberGRC - Prime' (IT Risk Assessments, Reporting, Scoring and Centralized Management) $180,000.00; 'ESGRC - Prime' $180,000.00; 'CyberGRC Workshop' $1.00. No Third-Party Risk Management dimension is listed, so the TPRM product has no public price. AWS Marketplace |
| ServiceNow | Reseller listing, not sold by ServiceNow: 'PROD20917 Bynet ServiceNow Third Party Risk Management' (Sold by: BYNET, delivered as an AMI), 12-month contract, dimension 'transactions', Cost/12 months $480.00; listing note: 'Product pricing is subject to a minimum of all Bynet ServiceNow products ordered in total, of $120,000.' AWS Marketplace |
| Drata | Listing 'Drata Security & Compliance Automation Platform' (sold by Drata), 12-month contract: only dimension is 'Foundation Package for 1-50 FTE Companies', 'List price for 1-50 FTE Company', $15,000.00 Cost/12 months. No Third-Party Risk Management dimension is listed; custom pricing by private offer. AWS Marketplace |
No public price: 21 products
These vendors quote on request. Some describe what the price depends on; the entry says so where they do.
What sets the price
The units the published prices use, from the listings above.
Vendors monitored
Vanta (up to 50 vendors), UpGuard (50 vendors, then a monthly fee per extra vendor), VISO TRUST (per vendor relationship).
Domains or assessments
SecurityScorecard prices by domains under vendor management; Whistic by vendor assessments a year.
Users or seats
SAFE TPRM Basic covers up to 25 users; Supplier Shield’s tiers are capped by team members.
Platform tier
Venminder, Interos and Centraleyes list whole-platform tiers; Secureframe and Centraleyes price the compliance platform the TPRM module sits in.
Free plans and trials
5 products offer buyers something free. Free supplier profiles (for the vendors being assessed) are listed in the entries but not here.
| Product | Offer | As the vendor describes it |
|---|---|---|
| SecurityScorecard | Free trial | "Free forever accounts" include "Scorecard for your own domain", "Questionnaire response", "Pre-built dashboards Basic report creation"; free trial: "Get immediate access to 5 scorecards of your choosing"; after a trial "the account will revert to a free version" |
| UpGuard | 14-day free trial | "a free 14-day trial" (pricing page); Trust Exchange "Free: $0/mo" plan for sharing your own security posture |
| Panorays | Free plan | "Create Your Free Account": "Send up to 5 pre-built questionnaires and view the cyber posture of 5 third-parties." |
| RiskRecon | 30-day free trial | "Get a free 30-day trial of the RiskRecon portal and see the ratings of up to 50 vendors." (includes "A RiskRecon report of your own organization") |
| Vendict | 14-day free trial | "Sign up for a free 14-day trial"; April 2026 limited-time offer of "a complimentary vendor risk assessment for one third-party organization". |
Questions
How much does third-party risk management software cost?
Of the 32 products in this register, 8 list a comparable 12-month price in US dollars, from $7,500 (Secureframe, fundamentals plan) to $125,000 (Venminder). Entry tiers cover tens of vendors; the vendors that list nothing sell enterprise contracts quoted to your vendor count and modules.
Why don’t TPRM vendors publish prices?
Most sell to large organisations on annual contracts priced by the number of third parties, the modules bought and services such as managed assessments, so they quote each deal. In this register 21 of 32 products show no public price at all.
Is an AWS Marketplace price what we would pay?
It is the vendor’s public list price for buying through AWS, which can count against an AWS spending commitment. Vendors also offer private offers on the marketplace and direct contracts, which are often different. Treat a listing as a published starting point, not a quote.
How much does Vanta’s third-party risk management cost?
On AWS Marketplace, Vanta lists its Third Party Risk Management dimension at $13,600 for 12 months, “up to 50 vendors managed per year”, with the platform packages as separate lines. Vanta’s own pricing page shows no figures. Checked November 8, 2026.
Is there free TPRM software?
Not a full program, but 5 products offer buyers a free plan or trial: SecurityScorecard (free trial), UpGuard (14-day free trial), Panorays (free plan), RiskRecon (30-day free trial), Vendict (14-day free trial). Several others let the suppliers being assessed join free.
Want prices for your vendor count?
Tell us how many third parties you manage and what you need checked. We reply with the products that fit and what their public prices say about your size. We only pass your details to a vendor if you ask us to.
Sources for this page
- UpGuard pricing — UpGuard’s published Vendor Risk tiers.
- Secureframe pricing — Secureframe’s published starting price.
- Vanta on AWS Marketplace — Vanta’s TPRM list price.
- Drata on AWS Marketplace — Drata’s only listed package, which has no TPRM line.
- AWS Marketplace: private offers — That marketplace list prices and private offers differ.
- Each vendor’s pricing page and marketplace listing, as linked in the tables — Every figure on this page.
Each product’s own sources are linked from its entry in the register. How products are chosen and ordered, and how to correct an entry: methodology.
Cite this page
Third-Party Risk Management Software. “What third-party risk management software costs.” Updated November 8, 2026. https://thirdpartyriskmanagementsoftware.com/pricing/