CyberVadis

CyberVadis operates an online platform designed for assessing and monitoring the cybersecurity performance of third-party vendors and supply chain partners. The platform enables organizations to evaluate suppliers' information security posture through evidence-based assessments, producing scorecards and improvement plans reviewed by CyberVadis' analyst team.

The platform serves two primary user groups: companies seeking to assess their vendors (buyers managing third-party risk), and companies undergoing assessment (suppliers demonstrating their cybersecurity maturity to customers and partners). Assessment results can be used by assessed companies to pursue improvements, such as achieving ISO 27001 certification, and are subject to annual reassessments to maintain cyber maturity over time.

CyberVadis' platform is hosted on Microsoft Azure data centers located within the EU and is itself ISO/IEC 27001:2022 certified. The company applies ISO 27701 as a framework for GDPR compliance, and conducts regular third-party penetration tests and architectural audits. Data uploaded for assessments is kept confidential and is not shared without the document owner's explicit consent.

Target customers include large enterprises managing supply chain risk, as evidenced by use cases from organizations such as Eramet and the Paris Fire Brigade Insurance Company, as well as smaller companies like SaaS startups seeking to demonstrate cybersecurity credibility to their partners and customers.