tprm

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

A complete third-party vendor security risk-assessment framework — questionnaire, live scoring engine, and worked vendor assessments with approve/conditions/reject recommendations. Two-axis inherent×control residual-risk model mapped to NIST 800-161, ISO 27001 & SOC 2.

Third Party Risk Managment and GRC Suite that is php based.

Open-source AI agent for vendor privacy risk assessment. Scores vendors across 8 GDPR/CCPA dimensions using a published, enforcement-grounded rubric. Works with Claude, GPT-4o, Gemini, Mistral, or fully local with Ollama. Free forever.

Core GRC from your terminal: third-party risk, privacy policies, cookie consent, privacy rights and website accessibility tools, using your existing Core GRC permissions. More information is available at core-grc.com

AI-powered TPRM assistant that analyzes SOC2 reports, vendor questionnaires, and security evidence to identify potential cybersecurity risks, governance gaps, and compliance concerns. Generates structured audit-style findings, severity ratings, and actionable recommendations.

Claude plugin for Bitsight Security Ratings — a zero-dependency MCP server wrapping the Bitsight REST API as 15 read-only tools, plus 16 skills that turn ratings into board packs, vendor decisions, remediation roadmaps, audit evidence and Indian regulatory incident notifications.

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Top Third Party Risk Exchange 🌟 Star if you like it! 🌟

AI-native Third-Party Risk Management platform — automate vendor security questionnaires, evidence review, and continuous monitoring with policy-as-code.

Análise tática de TPRM e GRC em licitações públicas, cruzando a Lei 14.133/21 com o framework NIST SP 800-161. Projeto prático gerado com IA (NotebookLM) | Desafio DIO.

Open-source toolkit for assessing and governing third-party AI, from enterprise vendors to frontier model providers. ISO 42001, EU AI Act, NIST AI RMF, NIS2, DORA.

Multi-agent third-party risk review on Google Gemini 2.5 Flash — vendor onboarding & M&A due-diligence in under 90 seconds. lablab.ai Transforming Enterprise Through AI submission (Track 2).

Cybersecurity Risk & GRC Analyst | IT Risk | TPRM | Security Compliance | IAM | ISO 27001 | NIST CSF | SOC 2 | ServiceNow | Splunk | PMP

AI-driven TPRM agent for banks, assessing ICT vendor reliability through financial insights to enhance Operational Resilience.

Offline assessment workbook and open control catalog for the Central Bank of Kuwait Cyber and Operational Resilience Framework (CORF)

TPRM portfolio focused on US privacy & cloud vendor risk: minimization, retention/deletion, DSAR readiness, subprocessors, evidence-backed decisions.

Engagement-level third-party risk tiering with reviewer override and tier-based follow-up questionnaires. Next.js + Supabase.

Python-based Third-Party Risk Management (TPRM) tool featuring an automated vendor scoring engine, relational SQL audit database, and GRC policy frameworks.

A showcase of hands-on cybersecurity, risk management, and compliance projects. Demonstrating practical expertise in Framework Auditing (NIST, ISO 27001, SOC 2), Threat & Vulnerability Analysis, Incident Response, and Security Controls Implementation. Designed for recruiters and hiring teams evaluating technical skill and governance proficiency.