- Home
- Third-Party Risk Management Software
- Deepinfo TPRM
Deepinfo TPRM
What it is
Deepinfo TPRM continuously assesses cybersecurity risk among vendors, suppliers, partners, and other third parties with access to an organization’s data, systems, or brand. It can discover direct vendors, subprocessors, group companies, and other relationships that questionnaires may not uncover. Monitoring spans WHOIS, IP-WHOIS, DNS, SSL, ports, HTTP, and web data. Vendor profiles draw on observed assets, exposures, vulnerabilities, certificate status, and leaked credentials. The service assigns security scores, alerts on score changes, and highlights high-risk vendors in portfolio views. Findings can be mapped to PCI DSS 4.0 and 3.2, HIPAA, OWASP Top 10 (2021), CWE, CAPEC, and WASC. Reports include vendor profiles, portfolio summaries, score timelines, and compliance evidence packages. Integrations named include OneTrust, ServiceNow, Archer, and ticketing systems; an API provides scores, finding lists, and portfolio rollups. Deepinfo says TPRM adds to vendor risk programs rather than replacing questionnaires or contracts. Pricing is quoted to scope, with no self-serve trial; paid pilots run 30 to 60 days. The companion app is available on iOS and Android to Deepinfo customers.
For and against
For
- Discovers vendor relationships questionnaires may miss
- Continuously monitors multiple external data sources
- Maps findings to named security and compliance frameworks
- Provides configurable alerts and portfolio summaries
- Offers risk data through integrations and an API
Against
- No free plan or self-serve trial
- Pricing is quoted based on scope
- Augments rather than replaces questionnaires or contracts
The verdict
Deepinfo TPRM combines third-party discovery, continuous monitoring, risk scoring, and reporting. It may suit organizations building on an existing vendor risk program, but pricing is scope-based and there is no self-serve trial.
Who it suits
It suits organizations that need ongoing visibility into third-party cybersecurity risk and use GRC, procurement, or custom dashboard workflows. Deepinfo names banks, airlines, telecom operators, defense manufacturers, and public institutions among organizations it serves.
Plans and prices
Deepinfo TPRM
No published price · Scope-based · Paid pilots run 30–60 days
Read 7 Oct 2026 · deepinfo.com
On the record
- API
- Vendor risk scores, finding lists, and portfolio rollups are available through an API for GRC, procurement, and custom dashboard workflows.deepinfo.com · read 7 Oct 2026
- Audience
- Deepinfo says it serves organizations including banks, airlines, telecom operators, defense manufacturers, and public institutions.deepinfo.com · read 7 Oct 2026
- Compliance
- Maps third-party findings to PCI DSS 4.0 and 3.2, HIPAA, OWASP Top 10 (2021), CWE, CAPEC, and WASC.deepinfo.com · read 7 Oct 2026
- Discovery
- Discovers direct vendors, subprocessors, vendor group companies, and other relationships that questionnaires may miss.deepinfo.com · read 7 Oct 2026
- Integrations
- The TPRM page names OneTrust, ServiceNow, and Archer as GRC platforms for exporting risk scores and findings, and also mentions ticketing systems.deepinfo.com · read 7 Oct 2026
- Mobile access
- The companion mobile app includes TPRM and is available for iOS and Android to Deepinfo customers.deepinfo.com · read 7 Oct 2026
- Monitoring
- Continuously scans each third party across WHOIS, IP-WHOIS, DNS, SSL, ports, HTTP, and web data.deepinfo.com · read 7 Oct 2026
- Pricing and trial
- Pricing is quoted to scope; there is no self-serve trial, while paid pilots are offered for 30 to 60 days.deepinfo.com · read 7 Oct 2026
- Purpose
- Continuously assesses cybersecurity risk from vendors, suppliers, and partners with access to an organization’s data, systems, or brand.deepinfo.com · read 7 Oct 2026
- Questionnaires
- Deepinfo says TPRM augments existing vendor risk programs and does not replace questionnaires or contracts.deepinfo.com · read 7 Oct 2026
- Reports and alerts
- Provides per-vendor profiles, portfolio summaries, risk-score timelines, compliance evidence packages, and configurable alerts for vendor changes.deepinfo.com · read 7 Oct 2026
- Risk evidence
- Builds vendor risk profiles from externally observed assets, exposures, vulnerabilities, certificate state, and leaked credentials.deepinfo.com · read 7 Oct 2026
- Risk scoring
- Assigns third parties a security score, with score changes triggering alerts and portfolio views highlighting high-risk vendors.deepinfo.com · read 7 Oct 2026
- Security
- Deepinfo lists GDPR and KVKK as compliant; ISO 27001, ISO 27017, ISO 27018, SOC 2 Type II, HIPAA, and PCI DSS as in progress.deepinfo.com · read 7 Oct 2026
