Skip to content
SPECIFICTION
Get listed

ThreatWatch

threat.watch

Free plan Web
Visit threat.watch
Spec score 7.1 #12 of 23 in Risk Intelligence Software

What it is

ThreatWatch is a web-based platform for monitoring third-party vendor risk. It tracks breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps, then assigns each vendor an A-to-F grade using threat intelligence, security scanning, questionnaire responses, and certifications. A passive, outside-in free scan requires no signup or credit card and returns a grade in about 30 seconds. The catalogue contains 280,770 companies searchable by name, domain, or alias. Vendor staff devices are re-checked hourly, while leaked credentials are re-checked daily. Vulnerability matching is included on every plan, but ThreatWatch confirms a vulnerability only when it can read the exact software version. Alerts can be sent to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook. Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks. AI Co-Pilot and Ask AI are available from Professional and above; proposed changes require human approval. A free plan is listed, and paid plan prices are on request.

Spec sheet

Product
ThreatWatch is a third-party risk intelligence platform for continuously monitoring vendors.Read 1 Oct 2026 · threat.watch
Integrations
Outbound alerts can be delivered to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook.Read 1 Oct 2026 · threat.watch
AI approval
The AI Co-Pilot and Ask AI are available from Professional and above, and proposed changes require human approval.Read 1 Oct 2026 · threat.watch
Compliance frameworks
Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks.Read 1 Oct 2026 · threat.watch
Dark-web cadence
Vendor staff devices are re-checked hourly and leaked credentials are re-checked daily.Read 1 Oct 2026 · threat.watch
Import limitation
Imported vendors are not scanned when the file is uploaded; they wait for the first scan in the plan schedule.Read 1 Oct 2026 · threat.watch
Monitoring
It monitors vendor breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps.Read 1 Oct 2026 · threat.watch
Passive scanning
The free scan is outside-in and passive, requires no signup or credit card, and returns a grade in about 30 seconds.Read 1 Oct 2026 · threat.watch
Risk grade
Each vendor receives an A-to-F grade built from threat intelligence, security scanning, questionnaire responses, and certifications.Read 1 Oct 2026 · threat.watch
Security controls
Traffic uses TLS with one year of preloaded HSTS, while secrets such as API keys, SSO secrets, and integration credentials are encrypted at field level at rest.Read 1 Oct 2026 · threat.watch
Vendor access
Vendors use a one-time code sent to their email rather than creating an account or password.Read 1 Oct 2026 · threat.watch
Vendor catalogue
The platform includes a catalogue of 280,770 companies searchable by name, domain, or alias.Read 1 Oct 2026 · threat.watch
Vulnerability matching
ThreatWatch confirms vendor vulnerabilities only when it can read the exact software version, and vulnerability matching is included on every plan.Read 1 Oct 2026 · threat.watch

Plans and prices

Free Free Your own organisation · Weekly rescans · No breach or dark-web intel · No OSINT enrichment · No deep attack-surface scan · No AI agents · No SSO · No API · Community support Read 1 Oct 2026 · threat.watch
Enterprise Priced on request Enterprise programme · Rescans every 6 hours · Deep attack-surface scan · AI agents · SAML/OIDC SSO · API access · Custom branding · Dedicated support Read 1 Oct 2026 · threat.watch
Enterprise Plus Priced on request Multi-entity programme · Rescans every 3 hours · Deep attack-surface scan · AI agents · SAML/OIDC SSO · API access · White-label branding · Dedicated support and account manager Read 1 Oct 2026 · threat.watch
Professional Priced on request Growing portfolio · Rescans every 12 hours · Breach and dark-web intel · OSINT enrichment · AI Co-Pilot · Ask AI · SAML/OIDC SSO · API access · Priority support Read 1 Oct 2026 · threat.watch
Starter Priced on request Small portfolio · Rescans every 2 days · Breach and dark-web intel · API access · Email support Read 1 Oct 2026 · threat.watch

Every ThreatWatch plan and price →

Strong points and limits

Strong points

  • Grades vendors from A to F.
  • Free passive scan needs no signup or card.
  • Catalogue searchable across 280,770 companies.
  • Alerts integrate with named services and webhooks.
  • Vulnerability matching is included on every plan.

Limits

  • Free plan has no breach or dark-web intelligence.
  • Free plan rescans weekly.
  • Paid plan prices are on request.
  • Vulnerabilities require an exact readable software version.

Who it suits

ThreatWatch suits organizations that need to monitor vendors for security and compliance risks. Its plans cover portfolios of different sizes, while the free scan offers a way to obtain a vendor grade without signup or a credit card.

Verdict

ThreatWatch combines vendor risk grades with breach, exposure, vulnerability, and compliance monitoring. The free plan is limited in intelligence and scan cadence; paid prices are available on request.

Where Specifiction places it

Alternatives to ThreatWatchAll alternatives →