Findings (CloudVRM)

Findings offers CloudVRM, a vendor risk management platform that connects directly and securely to a vendor’s cloud environment via encrypted APIs, pulling configuration data on a continuous basis rather than relying on the periodic questionnaires and point-in-time attestations typical of legacy third-party risk management. The platform automatically scans for more than 150 risk indicators — including misconfigurations, compliance drift, and vulnerabilities — and maps findings against more than 15 frameworks including DORA, NIST, and HIPAA to generate audit-ready reports.

Findings markets CloudVRM as adopted by global banks, Ministries of Defence, and critical infrastructure providers, with published customer references from organizations including SDN, FIBI, MalamTeam, and Engine. The company has also extended its coverage to track AI-generated code and productivity-tool exposure risk in vendor environments through its AiVRM offering, addressing a gap most traditional VRM programs don’t yet cover.

Third-party and vendor risk management is a well-established category with entrenched competitors like BitSight, Panorays, and UpGuard. Findings’ differentiation is direct, continuous cloud-API connectivity rather than survey-based assessment, which is a genuine improvement in data freshness, though independent, detailed founding and funding information for the company was not available in the sources reviewed.