- Home
- Risk Intelligence Software
- ThreatWatch
ThreatWatch
What it is
ThreatWatch is a web platform for monitoring vendor risk. It tracks breaches, dark-web exposure, attack-surface vulnerabilities and compliance gaps, then assigns each vendor an A-to-F grade using threat intelligence, security scanning, questionnaire responses and certifications. A free outside-in scan is passive, requires no signup or credit card, and returns a grade in about 30 seconds. Its catalogue contains 280,770 companies, searchable by name, domain or alias. Vendor staff devices are re-checked hourly, and leaked credentials daily. Vulnerability matching is included on every plan, but ThreatWatch confirms a vulnerability only when it can read the exact software version. Alerts can go to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app or a generic webhook. Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR and NIST CSF questionnaires, plus custom frameworks. AI Co-Pilot and Ask AI are available from Professional and above; proposed changes require human approval. A free plan is listed, while paid plan prices are on request.
For and against
For
- Free passive scan needs no signup or credit card.
- Catalogue includes 280,770 companies.
- Risk grades combine intelligence, scans and questionnaires.
- Alerts connect to collaboration and incident tools.
- Vulnerability matching is included on every plan.
Against
- Vulnerability confirmation depends on reading the exact software version.
- AI Co-Pilot and Ask AI start at Professional.
- Paid plan prices are on request.
- Free plan has no breach or dark-web intelligence.
The verdict
ThreatWatch combines vendor monitoring, risk grades and alert delivery, with a passive scan available without signup. Paid plan prices are on request, and vulnerability confirmation depends on readable software versions.
Who it suits
ThreatWatch may suit teams overseeing vendor security and compliance risks. Its catalogue, risk grades and alert integrations may be useful to organisations managing multiple vendors.
Plans and prices
Free
Your own organisation · Weekly rescans · No breach or dark-web intel · No OSINT enrichment
Read 1 Oct 2026 · threat.watch
Enterprise
Enterprise programme · Rescans every 6 hours · Deep attack-surface scan · AI agents
Read 1 Oct 2026 · threat.watch
Enterprise Plus
Multi-entity programme · Rescans every 3 hours · Deep attack-surface scan · AI agents
Read 1 Oct 2026 · threat.watch
Professional
Growing portfolio · Rescans every 12 hours · Breach and dark-web intel · OSINT enrichment
Read 1 Oct 2026 · threat.watch
Starter
Small portfolio · Rescans every 2 days · Breach and dark-web intel · API access
Read 1 Oct 2026 · threat.watch
On the record
- AI approval
- The AI Co-Pilot and Ask AI are available from Professional and above, and proposed changes require human approval.threat.watch · read 1 Oct 2026
- Compliance frameworks
- Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks.threat.watch · read 1 Oct 2026
- Dark-web cadence
- Vendor staff devices are re-checked hourly and leaked credentials are re-checked daily.threat.watch · read 1 Oct 2026
- Import limitation
- Imported vendors are not scanned when the file is uploaded; they wait for the first scan in the plan schedule.threat.watch · read 1 Oct 2026
- Integrations
- Outbound alerts can be delivered to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook.threat.watch · read 1 Oct 2026
- Monitoring
- It monitors vendor breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps.threat.watch · read 1 Oct 2026
- Passive scanning
- The free scan is outside-in and passive, requires no signup or credit card, and returns a grade in about 30 seconds.threat.watch · read 1 Oct 2026
- Product
- ThreatWatch is a third-party risk intelligence platform for continuously monitoring vendors.threat.watch · read 1 Oct 2026
- Risk grade
- Each vendor receives an A-to-F grade built from threat intelligence, security scanning, questionnaire responses, and certifications.threat.watch · read 1 Oct 2026
- Security controls
- Traffic uses TLS with one year of preloaded HSTS, while secrets such as API keys, SSO secrets, and integration credentials are encrypted at field level at rest.threat.watch · read 1 Oct 2026
- Vendor access
- Vendors use a one-time code sent to their email rather than creating an account or password.threat.watch · read 1 Oct 2026
- Vendor catalogue
- The platform includes a catalogue of 280,770 companies searchable by name, domain, or alias.threat.watch · read 1 Oct 2026
- Vulnerability matching
- ThreatWatch confirms vendor vulnerabilities only when it can read the exact software version, and vulnerability matching is included on every plan.threat.watch · read 1 Oct 2026
