TPRM and vendor-risk AI agents
Five verified listings whose published job is third-party / vendor risk: UpGuard, SecurityScorecard, Whistic Automation Orchestrator, Black Kite AI Agent and ProcessUnity TPRM AI Agents. Fields come from the open dataset. This is not a ranking or score.
| Field |  UpGuard |  SecurityScorecard |  Whistic Automation Orchestrator (agentic assessments) |  Black Kite AI Agent |  ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) |
|---|---|---|---|---|---|
| Vendor | UpGuard | SecurityScorecard | Whistic | Black Kite (NormShield, Inc.) | ProcessUnity |
| HQ | Australia · Australia and New Zealand | United States · North America | United States · North America | United States · North America | United States · North America |
| Primary category | Risk | Risk | Risk | Risk | Risk |
| Also listed in | Risk, Security | Risk, Security | Risk, Compliance | Risk, Security | Risk, Compliance |
| Summary | Cyber risk and third-party risk management platform with published CRPM pricing page. | Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation. | Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval. | Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach. | Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. |
| Framework tags (Agent Index) | SOC 2, ISO 27001 | SOC 2, ISO 27001 | — | — | — |
| Frameworks (vendor-claimed) | — | — | — | — | DORA, APRA, LkSG, PRA SS2/21 |
| Capabilities / tasks | vendor risk, attack surface, security ratings | vendor risk, security ratings, questionnaire automation, remediation | vendor risk, questionnaire automation, risk assessment, trust center | vendor risk, security ratings, risk prioritization, incident response, questionnaire automation | vendor risk, risk assessment, evidence collection, questionnaire automation |
| Pricing (as published) | Published on upguard.com/pricing (CRPM platform tiers; verify current figures). | Not verified | Not published | Not published | Not published |
| Pricing model | published-tiers | quote | quote | quote | quote |
| Primary source | https://www.upguard.com/pricing | https://securityscorecard.com/ | https://www.whistic.com/automation-orchestrator | https://blackkite.com/ai | https://www.processunity.com/tprm-ai-agents/ |
| Last checked | 2026-10-15 | 2026-10-16 | 2026-10-18 | 2026-10-18 | 2026-10-18 |
| Official site | https://www.upguard.com/ | https://securityscorecard.com/ | https://www.whistic.com/automation-orchestrator | https://blackkite.com/ai | https://www.processunity.com/tprm-ai-agents/ |
Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.