CyberVadis

CyberVadis, founded in 2016 and based in Paris, applies a model pioneered in ESG ratings (most notably by its sister company EcoVadis) to cybersecurity: instead of every enterprise sending its suppliers a bespoke security questionnaire, CyberVadis runs a standardized assessment methodology, has evidence reviewed by human analysts rather than relying purely on self-attestation, and produces a reusable scorecard the supplier can share across many customer relationships. That reusability is the core value proposition: a supplier assessed once for one customer does not have to repeat the same questionnaire fatigue for every other enterprise that wants to vet it.

The company has assessed thousands of suppliers across roughly 100 countries and raised approximately EUR 7 million in a 2023 Series A led by Zobito, with continued backing from CVC Growth Partners and Partech, investors who also back EcoVadis, reinforcing the shared-methodology, network-effects thesis behind the business. The model depends on achieving real adoption density: the platform becomes more valuable to both buyers and suppliers as more enterprises rely on the same shared assessments rather than commissioning their own.

For CISOs and procurement risk teams managing large supplier bases, CyberVadis reduces the operational burden of third-party risk assessment at scale, at the cost of somewhat less customization than a bespoke internal questionnaire program would offer. Its differentiation from other TPRM platforms is the analyst-reviewed, standardized-and-shared assessment model rather than a purely self-service automated scoring engine.