tprm
(6)
Black Kite
Black Kite is a Boston-based cybersecurity company that rates and monitors the cyber risk posed by an organization's third-party vendors and supply chain. Built from a hacker's perspective, its platform combines non-intrusive external assessments, ransomware-likelihood scoring, standards-based compliance mapping, and Open FAIR financial-impact modeling so risk teams can see, quantify, and act on the exposure hiding inside their vendor ecosystem.
Lema AI
Lema AI is a New York-based cybersecurity startup building an agentic AI platform for third-party risk management (TPRM). Founded by three veterans of Israel's Unit 8200, Lema replaces static vendor questionnaires and check-the-box compliance with continuous, behavior-based analysis that maps how vendors actually operate inside an enterprise - tracking data access, permission changes and 'risk drift' to surface real attack paths. The company emerged from stealth in February 2026 with roughly $24M in total funding, including a $17.5M Series A led by Team8.
Rescana
Rescana is a cybersecurity company that builds autonomous, AI-agent-driven third-party risk management (TPRM) and external attack surface management software. Its platform discovers, classifies, assesses, monitors, and helps remediate risk across a company's vendor ecosystem - including vendors with no web presence - using agentic AI and open-source intelligence (OSINT). Founded by Guy Halfon and based between New York and Tel Aviv, Rescana targets regulated, vendor-heavy industries such as banking, telecom, healthcare, real estate and government, promising vendor-risk oversight that scales without a proportional increase in security headcount.
Supply Wisdom
Supply Wisdom is a New York-based SaaS company that delivers real-time, continuous third-party and location risk intelligence. Its platform monitors suppliers and business locations across seven risk domains - financial, cyber, operational, compliance, ESG/sustainability, nth-party, and location - tracking 350+ risk metrics and pushing early-warning alerts so enterprises can act before a disruption hits. Its clients are Fortune 100 and Global 2000 firms in financial services, insurance, healthcare, and technology.
Aravo Solutions
Aravo Solutions is a San Francisco-based enterprise SaaS company that builds cloud software for third-party risk, governance, and compliance. Its Intelligence First Platform - now wrapped with an AI agent layer called Aravo AI - helps Fortune 500 companies manage vendors, suppliers, and partners across 154 countries and 36 languages.
Safe Security
Safe Security is a Palo Alto-based cybersecurity company building an Agentic AI-native platform for cyber risk quantification (CRQ), third-party risk management (TPRM) and continuous threat exposure management (CTEM). Founded in 2012 in India as Lucideus, it now translates security posture into dollars-and-cents risk for enterprises like Google, Chevron, T-Mobile, Fidelity and IHG, and is pursuing what its founders call 'CyberAGI'.