Deepinfo TPRM vs Panorays
Deepinfo TPRM
deepinfo.comPanorays
panorays.comSide by side
| Figure | Deepinfo TPRM | Panorays |
|---|---|---|
| Price from | — | — |
| Free plan | — | — |
| Free trial | — | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| iOS | Yes | — |
| Android | Yes | — |
| API | Yes | Yes |
| Plans published | 1 | 3 |
| Spec score · Third-Party Risk Management Software | 7.5 (#10) | 7.5 (#11) |
| API | Vendor risk scores, finding lists, and portfolio rollups are available through an API for GRC, procurement, and custom dashboard workflows. | Panorays describes a REST API backend and provides API upload as a supplier-management feature. |
| Compliance | Maps third-party findings to PCI DSS 4.0 and 3.2, HIPAA, OWASP Top 10 (2021), CWE, CAPEC, and WASC. | Panorays states it is certified to ISO/IEC 42001:2023 and ISO/IEC 27001:2022 and has completed a SOC 2 Type II review. |
| Integrations | The TPRM page names OneTrust, ServiceNow, and Archer as GRC platforms for exporting risk scores and findings, and also mentions ticketing systems. | The integrations page lists tools including Archer, Jira, ServiceNow, Salesforce, Slack, Splunk, SAP, and Zapier. |
| Purpose | Continuously assesses cybersecurity risk from vendors, suppliers, and partners with access to an organization’s data, systems, or brand. | Panorays provides a third-party cybersecurity solution intended to reduce supply-chain cyber risk and help companies do business securely. |
| Questionnaires | Deepinfo says TPRM augments existing vendor risk programs and does not replace questionnaires or contracts. | Automated questionnaires can be customized to include relevant questions, use built-in templates, or use customer-created templates. |
Plans
Panorays
- AssessmentPriced on request
- InventoryPriced on request
- MonitoringPriced on request
In their own words
Deepinfo TPRM
Deepinfo TPRM has no write-up on Specifiction yet; its figures are above.
Panorays
Panorays provides a third-party cybersecurity platform intended to reduce supply-chain cyber risk and help companies do business securely. It assesses suppliers through customized questionnaires, external attack-surface assessments, inherent risk based on business and technology profiles, and customer risk policies. Ratings combine supplier responses and technical assessments with the customer's security standards and business context. Teams can use built-in questionnaire templates, customize questions or create their own. Continuous monitoring can alert teams to supplier security changes or breaches; dependency mapping covers third-party and nth-party relationships and supports a current supplier inventory. Listed integrations include Archer, Jira, ServiceNow, Salesforce, Slack, Splunk, SAP and Zapier. Panorays also describes a REST API backend and API upload for supplier management. Its security information includes encryption at rest and in transit, TLS 1.2, SAML 2.0, SSO, MFA and role-based API scopes. Panorays states ISO/IEC 42001:2023 and ISO/IEC 27001:2022 certifications and a SOC 2 Type II review. Pricing is on request, customized to risk strategy and assessment needs; a free trial is available.