Security questionnaire AI agents
Verified listings whose published job is answering or running security questionnaires: Wolfia Questionnaire Agent, Co-Brain Questionnaire Agent, OptiValue questionnaire agents and RiskXchange The Agency, plus Conveyor, SafeBase and Whistic Automation Orchestrator. Trust-center and broader TPRM tools are also compared on the TPRM table. Fields come from the open dataset. This is not a ranking or score.
| Field | |||||||
|---|---|---|---|---|---|---|---|
| Vendor | Wolfia (Wolfia Inc.) | Co-Brain (Co-Brain GmbH) | Optivalue.ai (Optivalue.ai SAS) | RiskXchange | Conveyor | Drata (acquired SafeBase) | Whistic |
| HQ | United States · North America | Germany · Europe | France · Europe | United Kingdom · Europe | United States · North America | United States · North America | United States · North America |
| Primary category | Security | Security | Security | Risk | Security | Security | Risk |
| Also listed in | Security, Compliance, Risk | Security, Compliance, Risk | Security, Risk, Business operations | Risk, Security | Security, Compliance, Business operations | Security, Compliance, Business operations | Risk, Compliance |
| Summary | Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension. | German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval. | French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically. | AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor. | Customer trust platform with ConveyorAI for answering security questionnaires and sharing trust center content. | Trust Center and AI Questionnaire Assistance for customer security reviews, now part of Drata (SafeBase brand being unified into Drata). | Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. |
| Framework tags (Agent Index) | — | — | — | — | SOC 2, ISO 27001 | SOC 2, ISO 27001 | — |
| Frameworks (vendor-claimed) | — | TISAX, ISO 27001, DORA, GDPR | TISAX, ISO 27001 | DORA, NIS2, ISO 27001, APRA CPS 230, NIST CSF, Cyber Essentials Plus, SOC 2 | — | — | — |
| Capabilities / tasks | questionnaire automation, trust center, contract review | questionnaire automation, workflow automation | questionnaire automation, vendor risk, gap analysis | vendor risk, questionnaire automation, risk assessment, remediation, security ratings | questionnaire automation, trust center | trust center, questionnaire automation | vendor risk, questionnaire automation, risk assessment, trust center |
| Pricing (as published) | Not published | Not published | Not published (licence with an included quota of deliverables, by quote) | Platform tiers published: Essentials GBP 14,900/year (50 vendors), Professional GBP 31,500/year (150 vendors), Enterprise from GBP 75,000/year; unlimited seats, no setup fee. The pages don't say which tiers include The Agency. | Published outcome-based pricing on conveyor.com/pricing. | Not verified | Not published |
| Pricing model | quote | quote | quote | published-tiers | published-tiers | quote | quote |
| Primary source | https://wolfia.com/products/questionnaire-automation | https://co-brain.ai/en/questionnaire-agent | https://www.optivalue.ai/en/security-questionnaire-automation/ | https://www.riskxchange.co/agency | https://www.conveyor.com/pricing | https://drata.com/blog/announcing-new-drata-look | https://www.whistic.com/automation-orchestrator |
| Last checked | 2026-10-18 | 2026-10-19 | 2026-10-19 | 2026-10-19 | 2026-10-15 | 2026-10-16 | 2026-10-18 |
| Official site | https://wolfia.com/products/questionnaire-automation | https://co-brain.ai/en/questionnaire-agent | https://www.optivalue.ai/en/security-questionnaire-automation/ | https://www.riskxchange.co/agency | https://www.conveyor.com/ | https://drata.com/safebase | https://www.whistic.com/automation-orchestrator |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.
Use-case comparisons
- TPRM and vendor-risk AI agents — 23 listings (Third-party risk, vendor assessments, security ratings and questionnaire automation)
Related
- Wolfia Questionnaire Agent (security questionnaires and trust center) alternatives
- Co-Brain Questionnaire Agent (security questionnaire automation) alternatives
- Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection) alternatives
- RiskXchange The Agency (32 AI agents for third-party risk) alternatives
- Conveyor alternatives
- SafeBase alternatives
- Whistic Automation Orchestrator (agentic assessments) alternatives
- Best security AI agents