The Third-Party Risk Management module offers organizations the tools to assess, monitor, and mitigate risks from third-party vendors and internal systems. With features like security ratings, vendor risk intelligence, and breach detection, it ensures a comprehensive view of your risk portfolio. The module includes issue tracking, remediation planning, compliance mapping with 8,300+ misconfiguration checks, and vendor risk questionnaires for detailed assessments. Track your organization's security rating history, compare against peers, and leverage custom rating algorithms for tailored insights. Notifications and company profiles provide actionable updates to ensure security compliance and resilience.
Highlights
Comprehensive risk intelligence with security ratings, vendor risk assessments, issue tracking, and remediation planning.
Advanced compliance mapping with 8,300+ checks, custom rating algorithms, and peer comparisons for actionable insights.
Real-time notifications, vendor questionnaires, and detailed company profile insights to enhance decision-making.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Gain foundational visibility into your brand risk landscape with continuous monitoring for up to 200 vendors. Strengthen protection by identifying and mitigating brand threats, including impersonation, phishing, and other risks.
$36,000.00
Professional Plan
Expand monitoring to 1,000 vendors with advanced risk detection, detailed reporting, and seamless integrations for comprehensive brand protection and threat mitigation.
$54,000.00
Enterprise Plan
Unlimited vendor monitoring with tailored solutions, enterprise-grade risk detection, and dedicated support for comprehensive brand protection in large-scale environments.
You buy this product as a contract, and the three plans work as tiers based on how many vendors you monitor. The Essential Plan covers up to 200 vendors. The Professional Plan raises that limit to 1,000 vendors and adds detailed reporting and integrations. The Enterprise Plan removes the vendor cap for unlimited monitoring and adds dedicated support for large-scale environments. As your vendor count grows, you move up to the plan that matches your monitoring scale and support needs.
Top-of-mind questions for buyers
What counts as one vendor for billing across these plans?
A vendor is one third-party supplier or partner you monitor. The platform continuously discovers each vendor's assets, IPs, and cloud exposures, assigning a security rating per vendor. The Essential Plan counts up to 200 vendors, the Professional Plan up to 1,000, and the Enterprise Plan removes the cap.
What happens if my vendor count grows past my plan's limit?
Each plan sets a vendor monitoring ceiling: 200 for Essential and 1,000 for Professional. To monitor more vendors than your plan allows, you move up to the next tier. The Enterprise Plan removes the cap entirely for unlimited vendor monitoring in large-scale environments.
Do Professional and Enterprise plans add capabilities beyond a higher vendor count?
Yes. Beyond raising the vendor limit, the Professional Plan adds detailed reporting and integrations for threat mitigation. The Enterprise Plan adds tailored solutions and dedicated support for large-scale environments. The Essential Plan covers foundational monitoring, identifying threats like impersonation and phishing.
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Threat Intelligence provides real-time insights into emerging cyber threats, helping organizations detect, analyze, and respond to vulnerabilities, malware, and attacks to enhance their security posture.
Protect your brand reputation with advanced detection and remediation of brand abuse, impersonation, and online threats across social media, surface, deep, and dark web.
Identity Intelligence provides real-time monitoring and analysis of identity-related data to detect fraud, prevent impersonation, and protect individuals and organizations from identity theft and misuse.
Contextual Intelligence That Connects Risk Across the Attack Surface
Reviewed on Apr 30, 2026
Review provided by G2
What do you like best about the product?
RiskProfiler’s biggest strength is contextual intelligence. It does not just list vulnerabilities or vendor risks; it connects EASM findings, CASM exposures, third-party risk, vulnerability intelligence, and CTI to show possible attacker movement and blast radius.
What do you dislike about the product?
I would like more simplified executive summary views for leadership users who do not need the full technical depth available to security analysts.
What problems is the product solving and how is that benefiting you?
RiskProfiler gave our team a more complete view of external risk. We could track exposed assets, cloud weaknesses, vendor posture, CVEs, leaked credentials, and threat actor signals together, which improved prioritization and reduced manual investigation time.
Information Technology and Services
Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization
Reviewed on Feb 23, 2026
Review provided by G2
What do you like best about the product?
Robust correlation of external attack surface assets, supply chain exposures, threat intel (CVEs, IoCs, exploits), and attack path mapping into a single pane of truth. The platform comes with a user-friendly, intuitive dashboard that surfaces external exposures fast, enabling effective prioritization and mitigation of external risks.
What do you dislike about the product?
Initial learning curve on workflows and dashboards; takes time to grasp all capabilities fully.
What problems is the product solving and how is that benefiting you?
Solves fragmented external risk visibility by unifying disparate threat signals and mapping potential attack routes, enabling faster prioritization and response to high-impact exposures.
Information Technology and Services
Extensive, Unified Visibility Across Assets and Ecosystem—Fast
Reviewed on Feb 13, 2026
Review provided by G2
What do you like best about the product?
What stands out most is the extensive and correlated visibility the platform provided us. Within 24 hours, it was surfacing exposures across our first-party assets, partner ecosystem, and brand footprint in one unified intelligence stream that complements our AI-driven security model.
What do you dislike about the product?
Alert tuning is still a bit limited. More granular controls for strategic, scenario-specific alerting would make it stronger.
What problems is the product solving and how is that benefiting you?
We’ve replaced multiple disconnected tools with a single view of ecosystem threats. That consolidation improves our understanding and helps us with more confident, actionable recommendations.
Information Technology and Services
RiskProfiler Unifies Risk Management Fast—with Guided Onboarding and Responsive Support
Reviewed on Feb 06, 2026
Review provided by G2
What do you like best about the product?
RiskProfiler unifies exposure management, vendor risk, brand protection, and intelligence into one platform with guided onboarding and consistently responsive support. The setup takes less than an hour, and the platform started surfacing intel soon after.
What do you dislike about the product?
More flexibility across dashboards, scoring logic, and intelligence filters would improve alignment with SOC playbooks and organization-specific risk tolerances.
What problems is the product solving and how is that benefiting you?
The platform reduces tool sprawl, improves cross-domain visibility, saves operational time, strengthens compliance readiness, and enables faster, more informed security decisions.
Information Technology and Services
Intuitive Dashboard and Outstanding Support Elevate Security Management
Reviewed on Dec 30, 2025
Review provided by G2
What do you like best about the product?
The intuitive dashboard delivers adaptive visibility across external assets, third-party risk, brand abuse, and dark web threats, while the support team responds promptly with professional, detailed guidance that accelerates resolution.
What do you dislike about the product?
Given the platform’s broad coverage, teams with narrow use cases may need time to fully configure and operationalize all modules, though guided onboarding significantly reduces this complexity.
What problems is the product solving and how is that benefiting you?
It eliminates fragmented risk visibility by unifying external, vendor, brand, and dark web threats, helping teams visualize attack paths, detect brand misuse, and prioritize remediation with clear business impact.