Panorays
Panorays is a New York-based, AI-native third-party cyber risk management (TPCRM) platform serving enterprise and mid-market customers with continuous attack surface monitoring, automated security questionnaires, and dynamic Risk DNA-based risk ratings.
- Company typePrivate
- Founded2016
- HeadquartersNew York, United States
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What Panorays does
Panorays is a New York-based, private cybersecurity software company founded in 2016 that sells an AI-powered third-party cyber risk management (TPCRM) platform to enterprise and mid-market customers. The platform unifies external attack surface monitoring, AI-driven security questionnaires, continuous threat monitoring, and automated remediation into a single workflow organized around the proprietary Risk DNA dynamic risk-rating engine, which filters findings through each customer's business criticality and risk appetite. Supporting modules include Smart Inventory, Trust Center, Regulatory Compliance, Reporting & Dashboards, and a Professional Services layer, with verticalized solutions for financial services, healthcare, and technology organizations and dedicated tooling for DORA compliance and M&A cyber due diligence.
The business operates on a subscription model with quote-based enterprise pricing structured around three bundles introduced in 2025 (Third-Party Cyber Risk Management, Trust & Exposure Management, and Data OEM Partnerships), complemented by a freemium Free Account tier that drives product-led growth at the low end. Go-to-market combines direct enterprise field sales with self-serve PLG and a deep integration ecosystem spanning 30+ GRC, ITSM, SIEM/SOAR, ERP, CRM, BI, and CLM platforms. Panorays is led by co-founders Demi Ben-Ari (CTO) and Matan Or-El (CEO), has 51-100 employees, reported $13.1M ARR as of 2025, has raised approximately $62M in venture funding (most recently a $42M Series B led by Greenfield Partners in September 2021), and was named a Leader in the Forrester Wave: Cybersecurity Risk Ratings Platforms, Q2 2026.
Panorays firmographics
Firmographics- Name
- Panorays
- Legal name
- Panorays
- Website
- https://panorays.com
- Company type
- Private
- Founded year
- 2016
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- Panorays is a New York-based, AI-native third-party cyber risk management (TPCRM) platform serving enterprise and mid-market customers with continuous attack surface monitoring, automated security questionnaires, and dynamic Risk DNA-based risk ratings.
- Ownership category
- akta.pro rank
Panorays industry classification
Industry- Product category
- Third-Party Cyber Risk Management Software
- NAICS
- Software Publishers (513210), Computer Systems Design and Related Services (5415)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Model Governance, Risk & Compliance (GRC) Platforms (HDAAAKAA)
- akta.pro secondary industries
- Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies) (HDAEANAE), AI Governance, Risk & Compliance (GRC) Platforms (HDAAAMAA), Threat Intelligence Platforms (TIP) (HDADAGAD)
Keywords
Where Panorays is headquartered
LocationHeadquarters
- HQ city
- New York
- HQ country
- United States
- HQ region
- North America
Offices1 record
Markets served
Panorays business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Marketing or Sales, Operations, Infrastructure
Revenue model
- Subscription-based TPCRM Platform: Flexible subscription-based pricing model for third-party cyber risk management platform with plans tailored to organization's TPCRM strategy and assessment types required.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Third-Party Cyber Risk Management - Core TPCRM platform |
| Subscription | Annual | Trust & Exposure Management - Security posture showcase |
| Subscription | Annual | Data OEM Partnerships - Cyber posture data licensing |
| Freemium | Monthly | Free Account - Limited self-serve option |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels6 records
Panorays product offering
Product offeringCore offering
Panorays provides AI-powered third-party cyber risk management software that automates discovery, assessment, monitoring, and remediation of third-party cybersecurity risks across the vendor lifecycle. Its platform combines automated security questionnaires, continuous external attack surface monitoring, real-time threat intelligence, and dynamic risk rating via the proprietary Risk DNA engine to help organizations manage third-party risk and regulatory compliance.
Product overview
Panorays is a unified third-party cybersecurity risk management (TPCRM) platform that combines multiple modules within a single integrated architecture. The core platform is anchored by the Risk DNA dynamic risk rating engine and encompasses three functional layers: Assessment (Risk DNA Cybersecurity Posture, External Attack Surface Management, Cybersecurity Questionnaires/Smart Questionnaires), Engagement (Communication, Remediation), and Monitoring (Continuous Cybersecurity Monitoring, Reporting & Dashboards, Regulatory Compliance, Portfolio Management). Supporting modules include Inventory (centralized vendor repository), Trust Center (shareable security profile), and Professional Services. These are organized into named solution areas covering Third-Party Cyber Risk Management, Supply Chain Risk Management, Enterprise Security Risk Management, Mergers & Acquisitions, Evaluating Subsidiaries, Executive-Level Reporting, DORA Compliance, and Autonomous TPCRM (Smart Match). Industry-specific solutions address Financial Services, Healthcare, and Technology sectors. The platform is powered by native AI for automation, continuous monitoring, predictive analytics, and generative AI-driven questionnaire auto-fill.
Differentiator
Problem solved
Functional benefit
Brands
- Risk DNA: A proprietary AI-driven cyber risk rating system that provides personalized, context-based risk assessments for third-party relationships.
- Smart Questionnaire
Products and services
- Panorays TPCRM Platform End-to-end third-party cyber risk management platform powered by native AI that unifies security questionnaires, external attack surface assessments, continuous monitoring, and automated remediation workflows across the entire vendor lifecycle, sold to enterprise security and risk teams.
- Risk DNA
Quantifiable outcome
- 99.8% risk rating accuracy
- +6 more outcomes
Companies that use Panorays
Customer profileNamed customers12 records
Segments6 records
Ideal customer profiles6 records
Panorays technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
Integration30 records
AI capability8 records
Feature7 records
Panorays partnerships and signals
Strategic signalScale indicators9 records
Recent moves6 records
Expansion highlights6 records
Panorays competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: SecurityScorecard is the largest pure-play security ratings and TPCRM vendor, directly competing with Panorays on continuous external attack surface monitoring, vendor questionnaires, and cyber risk ratings.
- Bitsight: Bitsight is a leading cybersecurity ratings and TPRM platform that competes directly with Panorays on third-party risk ratings, attack surface monitoring, and enterprise TPCRM workflows.
- Black Kite: Black Kite is a direct TPCRM competitor offering external attack surface scanning, ransomware susceptibility scoring, and vendor risk assessments, targeting the same regulated enterprise buyers as Panorays.
- UpGuard: UpGuard provides third-party risk management and attack surface monitoring with automated questionnaires and continuous vendor monitoring, competing head-to-head with Panorays in mid-market and enterprise TPCRM.
- ProcessUnity: ProcessUnity offers a TPRM platform focused on vendor onboarding, due diligence workflows, and continuous monitoring, directly competing with Panorays in regulated industries and financial services.
- Prevalent: Prevalent provides third-party risk management combining vendor assessments, threat intelligence, and continuous monitoring, with a similar customer profile in financial services to Panorays.
Broad incumbents
- OneTrust: OneTrust is a broad privacy, governance, and trust intelligence platform that includes third-party risk management as part of a wider GRC portfolio, competing with Panorays on enterprise TPRM but covering far more adjacent use cases.
- Diligent (Galvanize/ACL): Diligent's Galvanize GRC suite includes integrated third-party risk management capabilities, overlapping with Panorays in enterprise GRC buyers and competing on consolidated risk platforms.
- ServiceNow Integrated Risk Management: ServiceNow's IRM and TPRM modules compete with Panorays by offering third-party risk workflows natively embedded within a dominant enterprise workflow platform, leveraging existing customer relationships.
Emerging players
- Whistic: Whistic offers a vendor security assessment platform with proactive vendor sharing and Trust Catalog capabilities, overlapping with Panorays' Trust Center and questionnaire automation features.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat4 records
Key risks5 records
Key highlights7 records
Customer concentration
Panorays social profiles
Digital presencePanorays compliance and trust
Trust signalCompliance13 records
Panorays financial estimates
Financial estimateRevenue estimate
Valuation estimate
Panorays leadership team
Management profileNumber of profiles
Profiles8 records
Panorays funding detail
Funding detailFunding overview
Funding rounds3 records
Investors8 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Panorays M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Panorays
What does Panorays do?
Panorays provides AI-powered third-party cyber risk management software that automates discovery, assessment, monitoring, and remediation of third-party cybersecurity risks across the vendor lifecycle. Its platform combines automated security questionnaires, continuous external attack surface monitoring, real-time threat intelligence, and dynamic risk rating via the proprietary Risk DNA engine to help organizations manage third-party risk and regulatory compliance.
Is Panorays a public or private company?
Panorays is a private company. It is classified as venture growth investor backed and is currently operating.
When was Panorays founded?
Panorays was founded in 2016. It employs 51 to 100 people.
Where is Panorays based?
Panorays is headquartered in New York, United States, in the North America region.
How does Panorays make money?
One revenue line is on record: subscription-based TPCRM Platform.
Who are Panorays's main competitors?
Direct peers on record are SecurityScorecard, Bitsight, Black Kite, UpGuard, ProcessUnity and Prevalent. Broad incumbents are OneTrust, Diligent (Galvanize/ACL) and ServiceNow Integrated Risk Management. Whistic is listed as an emerging player.
Does Panorays have an API?
Yes. Panorays offers API-based integrations with enterprise tools across GRC, procurement, ERP, CRM, ITSM, SIEM/SOAR, and business intelligence categories. The platform supports API upload for vendor inventory management and webhook-based alert integrations with tools such as Slack, Splunk, QRadar, and Snowflake for real-time third-party threat intelligence. Specific API documentation URL, auth method, rate limits, and versioning are not explicitly stated in available sources.
What industry is Panorays in?
Panorays's product category is Third-Party Cyber Risk Management Software. Its primary akta.pro industry code is HDAAAKAA, Model Governance, Risk & Compliance (GRC) Platforms, with a secondary code of HDAEANAE, Enterprise AI Governance, Risk & Compliance Platforms (Model Risk, Audit, Policies). Its NAICS code is 513210 and its SIC code is 7372.