Skip to content
SPECIFICTION
Get listed

RiskXchange

riskxchange.co

From £1,241.67/mo Free trial WebAPI
Visit riskxchange.co
Spec score 7.8 #3 of 23 in Third Party & Supplier Risk Management Software

What it is

RiskXchange is a third-party risk management platform that combines external security ratings with vendor evidence and ongoing monitoring. Its outside-in network covers more than five million companies, according to the company. The platform scores risk from 0 to 900 and includes dark-web breach correlation, compliance mapping and remediation tracking. Its Agency comprises five lead agents and 27 specialists for tasks including onboarding vendors, assessing evidence, monitoring, remediation and regulatory reporting. NOVA can contact vendors by email, WhatsApp or in-app chat; customers can pause contact for an individual vendor. Integrations include Jira, ServiceNow, Archer, OneTrust, Slack and Microsoft Teams. Professional and Enterprise include a REST API, and webhooks support event-driven workflows. RiskXchange says it holds ISO 27001 and SOC 2 Type II certifications, with regional hosting in the UK, EU and US and tenant data held in the selected region. Plans start at £14,900/yr; a free SnapShot evaluates one live vendor and provides a posture report within 24 hours.

Spec sheet

Product
RiskXchange is a third-party risk management platform that combines outside-in security posture ratings with vendor-provided evidence and continuous monitoring.Read 8 Oct 2026 · riskxchange.co
Integrations
Out-of-the-box integrations include Jira, ServiceNow, Archer, OneTrust, Slack and Microsoft Teams; custom integrations are available on Enterprise.Read 8 Oct 2026 · riskxchange.co
Headquarters
LondonRead 28 Sep 2026 · riskxchange.co
Founded
2020Read 28 Sep 2026 · riskxchange.co
Company
RiskXchange was founded in 2020 and is headquartered in London, with offices in Dubai and Austin.Read 8 Oct 2026 · riskxchange.co
AI agents
The Agency comprises five lead agents and 27 specialists covering vendor onboarding, evidence assessment, continuous monitoring, remediation and regulatory reporting.Read 8 Oct 2026 · riskxchange.co
API and events
Professional and Enterprise include a REST API, and the platform supports webhooks for event-driven workflows.Read 8 Oct 2026 · riskxchange.co
Compliance frameworks
The platform says it covers DORA, NIS2, ISO 27001, NIST CSF, PCI DSS, APRA CPS 230, ADHICS and GDPR.Read 8 Oct 2026 · riskxchange.co
Core features
The platform offers continuous monitoring, 0–900 risk scoring, dark-web breach correlation, compliance framework mapping and remediation tracking.Read 8 Oct 2026 · riskxchange.co
Data access
The company says its staff access tenant data only through explicit, time-bound, audit-logged support sessions approved by the customer.Read 8 Oct 2026 · riskxchange.co
Data retention
Tenant data is retained for 90 days after termination by default and then permanently deleted with a verifiable destruction record; Enterprise can have custom retention windows.Read 8 Oct 2026 · riskxchange.co
Free evaluation
A free SnapShot runs NOVA, ARIA and REX on one live vendor and provides a posture report within 24 hours, with no procurement commitment.Read 8 Oct 2026 · riskxchange.co
Intended customers
RiskXchange says it is used mostly by regulated mid-market and enterprise organisations, commonly in financial services, insurance, healthcare, technology and retail.Read 8 Oct 2026 · riskxchange.co
Monitoring network
RiskXchange says its outside-in network covers more than five million companies.Read 8 Oct 2026 · riskxchange.co
Security and residency
RiskXchange says it holds ISO 27001 and SOC 2 Type II certifications and hosts regional environments in the UK, EU and US, with tenant data kept in the selected region.Read 8 Oct 2026 · riskxchange.co
Vendor communication
NOVA can contact vendors by email, WhatsApp and in-app chat, and customers can pause it for an individual vendor.Read 8 Oct 2026 · riskxchange.co

Plans and prices

Essentials £14,900 a year £14,900/ year 50 vendors monitored · 25 assessments per year · unlimited user seats Read 8 Oct 2026 · riskxchange.co
Professional £31,500 a year £31,500/ year 150 vendors monitored · 200 assessments per year · unlimited user seats Read 8 Oct 2026 · riskxchange.co
Enterprise £75,000 a year Custom; floor £75,000 / year Unlimited vendors monitored · unlimited assessments · unlimited user seats Read 8 Oct 2026 · riskxchange.co

Every RiskXchange plan and price →

Strong points and limits

Strong points

  • Monitors an outside-in network of over five million companies
  • Risk scores range from 0 to 900
  • Maps DORA, NIS2, ISO 27001 and other frameworks
  • Includes integrations and webhooks
  • Free SnapShot covers one live vendor

Limits

  • No free plan
  • Essentials monitors 50 vendors
  • Enterprise custom integrations only
  • Essentials starts at £14,900/yr

Who it suits

RiskXchange is aimed mostly at regulated mid-market and enterprise organisations, including those in financial services, insurance, healthcare, technology and retail. Its workflow and framework coverage may suit teams coordinating vendor assessments and regulatory reporting.

Verdict

RiskXchange combines vendor evidence with external monitoring, scoring and remediation tools. A free SnapShot offers a way to assess one vendor, while ongoing plans are paid and start at £14,900/yr.

Where Specifiction places it

Alternatives to RiskXchangeAll alternatives →