CyberVadis
CyberVadis is a Paris-based SaaS company providing an evidence-based Third-Party Cyber Risk Management (TPCRM) platform and managed assessment service, enabling enterprises and their vendors to assess, score, and remediate cybersecurity maturity across 110+ countries.
- Company typePrivate
- Founded2018
- HeadquartersParis, France
- Headcount51–100
- GTM typeB2B
- OfferingSoftware
What CyberVadis does
CyberVadis is a Paris-based SaaS company founded in 2018 that provides a Third-Party Cyber Risk Management (TPCRM) platform combining an evidence-based assessment tool with a managed service for vendor cybersecurity assessments. The core platform runs a '6-eyes' review process in which three in-house analysts validate vendor questionnaire responses and supporting evidence, producing standardized 0-1000 scorecards mapped to NIST, ISO 27001, GDPR, NIS2, DORA, and PCI DSS frameworks. Supplementary modules include External Attack Surface Management (passive scanning across Application, Network, DNS, and Patching), automated certificate detection (ISO 27001, SOC2, TISAX), a Tailored Assessment Questionnaire available in 9 languages, CyberVadis Medals (Platinum/Gold/Silver/Bronze recognition), and Collaborative Improvement Plans with status tracking. The platform enables an 'Assess Once, Share Many' model where a single vendor scorecard can be distributed to unlimited enterprise clients.
The business operates on a quote-based annual subscription model, with no publicly disclosed pricing tiers, and combines SaaS platform access with a fully managed service in which CyberVadis handles vendor onboarding, evidence review, and remediation follow-up via in-house analysts and a dedicated Customer Success Manager. Go-to-market is enterprise sales-led, targeting CISOs, GRC teams, and procurement departments at large organizations, supported by self-serve assessment registration for vendors and API/SSO integration into client procurement workflows. Distribution channels include direct enterprise sales, content marketing (blog, case studies, Trust Center), an annual Secure conference, and ecosystem alliances with CESIN, ECSO, Hexatrust, Campus Cyber, and the German Cyber Security Council.
The company is privately held, having raised a €7 million Series A in May 2023 led by Swedish VC Zobito AB (following an earlier 2018 seed from Partech). It operates from 8+ office locations including France, Poland, Mauritius, the US, Hong Kong, Germany, Canada, the UK, Hungary, Spain, and Taiwan, and reports activity across 110+ countries and 70+ industries. Named enterprise customers include Sanofi, TotalEnergies, AWS, Microsoft, Accenture, Axa, CNP Assurances, Beiersdorf, Arkema, GRDF, Evotec, Eramet, Schmitz Cargobull, BASF, Elkem, and Oxya. The company achieved ISO 27001 certification in 2025 and currently employs 100+ staff.
CyberVadis firmographics
Firmographics- Name
- CyberVadis
- Legal name
- CyberVadis SAS
- Website
- https://cybervadis.com
- Company type
- Private
- Founded year
- 2018
- Operating status
- Operating
- Headcount range
- 51–100 employees
- Short description
- CyberVadis is a Paris-based SaaS company providing an evidence-based Third-Party Cyber Risk Management (TPCRM) platform and managed assessment service, enabling enterprises and their vendors to assess, score, and remediate cybersecurity maturity across 110+ countries.
- Ownership category
- akta.pro rank
CyberVadis industry classification
Industry- Product category
- Third-Party Cyber Risk Management (TPCRM)
- NAICS
- Other Computer Related Services (541519)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
Keywords
Where CyberVadis is headquartered
LocationHeadquarters
- HQ city
- Paris
- HQ country
- France
- HQ region
- Europe
Offices10 records
Markets served
CyberVadis business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Operations, Marketing or Sales, Infrastructure
Revenue model
- SaaS Platform Subscription (TPCRM Program): Quote-based annual subscription providing unlimited vendor portfolio size, unlimited evidence-based assessments, unlimited access to the CyberVadis network of assessments, External Attack Surface Management, Certificate Finder, unlimited platform users, dedicated Customer Success Manager, multilingual onboarding & vendor support, in-house analyst review, SSO & API integration, and self-assessment capabilities. Reassessments within the same subscription year incur an additional one-time fee.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Full TPCRM platform with unlimited assessments, managed service, and dedicated CSM |
Go-to-market motion2 records
Distribution channels3 records
Marketing channels7 records
CyberVadis product offering
Product offeringCore offering
CyberVadis provides a cloud-based Third-Party Cyber Risk Management (TPCRM) SaaS platform that automates evidence-based cybersecurity assessments of vendors and suppliers. It combines the scalable SaaS platform with a managed service where in-house analysts validate vendor evidence through a 6-eyes review process and produce standardized 0-1000 scorecards aligned with international frameworks (NIST, ISO 27001, GDPR, NIS2, DORA). The offering is targeted at enterprises that need to assess and monitor third-party cybersecurity risk across their global vendor portfolios.
Product overview
CyberVadis offers a unified Third-Party Cyber Risk Management (TPCRM) platform combining a SaaS assessment tool with managed services. The core offering consists of an Evidence-Based Assessment Platform that validates vendor cybersecurity through a rigorous 6-eyes analyst review process, complemented by a Managed Service handling vendor onboarding and support. Key modules include: Automated Risk Insights (zero-touch risk assessment with certificate detection and External Attack Surface Management), CyberVadis Medals (Platinum/Gold/Silver/Bronze recognition), Collaborative Improvement Plans with progress tracking, CyberVadis Scorecards (shareable 0-1000 maturity ratings), and Tailored Assessment Questionnaires available in 9 languages. The platform serves both enterprises seeking to assess vendors and suppliers undergoing assessment, enabling the 'Assess Once, Share Many' approach. Founded in 2018 and headquartered in Paris, CyberVadis operates across 8 global locations and serves clients in 110+ countries.
Differentiator
Problem solved
Functional benefit
Products and services
- Evidence-Based Assessment Platform Core SaaS platform providing evidence-based third-party cyber risk assessments. Uses a 6-eyes review process in which three analysts with unique expertise and seniority collaboratively validate vendor questionnaire responses and supporting documentation to deliver reliable, reproducible, and objective scorecards (0-1000) aligned with NIST, ISO 27001, GDPR, NIS2, DORA, and PCI DSS frameworks.
- Managed Service Fully managed service in which CyberVadis handles vendor onboarding, questionnaire management, evidence review, and ongoing supplier follow-up. Includes multilingual support for vendors and a dedicated Customer Success Manager for each client.
- Automated Risk Insights Zero-touch, automated vendor risk assessment providing fast insights on vendor cyber risk exposure. Includes automated certificate detection (ISO 27001, SOC2, TISAX) and External Attack Surface Management for monitoring vendor domains across Application, Network, DNS, and Patching areas.
- Collaborative Improvement Plan Personalized action plans providing vendors with clear guidance on remediation steps. Includes status tracking (to-do, in progress, completed), vendor support, and reassessment recommendations. On average, vendors improve scores by 14% between consecutive assessments.
- CyberVadis Medals Recognition Program Recognition program awarding Platinum (950-1000), Gold (900-949), Silver (800-899), and Bronze (700-799) medals to assessed companies demonstrating strong cybersecurity posture. Companies scoring below 700 can request a CyberVadis Badge.
Quantifiable outcome
- Vendors assessed by CyberVadis improve their scores by 14% on average between two consecutive assessments, demonstrating measurable security improvement.
- +4 more outcomes
Companies that use CyberVadis
Customer profileNamed customers19 records
Segments4 records
Ideal customer profiles1 record
CyberVadis technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- Yes
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability4 records
Feature9 records
CyberVadis partnerships and signals
Strategic signalPartnerships
Six partnerships are on record, tiered minor.
- European Cyber Security Organisation (ECSO)minorCyberVadis is an active member of ECSO, contributing to the European cybersecurity ecosystem. CyberVadis also holds the 'Cybersecurity Made in Europe' label associated with this membership.
- Cyber-Sicherheitsrat Deutschland e.V.minorCyberVadis is an active member of the German Cyber Security Council, contributing to cybersecurity policy and best practice development in Germany.
- Hexatrust (France)minorCyberVadis is an active member of Hexatrust, a French cybersecurity industry group.
- Campus Cyber (France)minorCyberVadis is an Associate Member of Campus Cyber (France), the national cybersecurity hub.
- CESIN (France)minorCyberVadis is an Official Sponsor of CESIN (Club de la Sécurité de l'Information des Grands Comptes). The two organizations co-published a study on French companies' cybersecurity posture in 2025 involving 1,000 firms.
- OmnitechminorOmnitech, a managed service provider, partnered with the Paris Fire Brigade Insurance Company (MSPP) to support their CyberVadis assessment journey, implementing security measures and helping draft policies. CyberVadis is also used internally by Omnitech for its own assessments.
Scale indicators10 records
Recent moves6 records
Expansion highlights6 records
CyberVadis competitors and assessment
Company assessmentDirect peers
- Bitsight: Bitsight provides external cybersecurity ratings and third-party risk management, with continuous monitoring of vendor security posture. It is a direct competitor to CyberVadis, focused on enterprise buyers needing evidence-based vendor assessments, and has built an ecosystem around the Bitsight Trust Manager platform.
- Whistic: Whistic is a vendor security assessment network enabling buyers and sellers to share and consume security documentation through a Trust Catalog. It is comparable to CyberVadis in serving both enterprise buyers and assessed suppliers, with a similar 'assess once, share many' value proposition.
- SecurityScorecard: SecurityScorecard is a leading third-party cyber risk management platform offering external attack surface scanning, vendor risk ratings, and questionnaire automation. It is the most direct head-to-head competitor to CyberVadis in the enterprise TPCRM category, with comparable global enterprise customers and a similar 'scorecard' concept.
- UpGuard: UpGuard offers vendor risk management and attack surface monitoring with automated questionnaires, security ratings, and document analysis. It competes directly with CyberVadis in the enterprise TPRM space, particularly for mid-market and enterprise buyers seeking SaaS-based third-party risk workflows.
- Prevalent: Prevalent delivers third-party risk management combining vendor assessments, threat intelligence, and continuous monitoring. It is a direct competitor to CyberVadis, targeting similar enterprise buyer personas (CISOs, GRC, procurement) with a SaaS platform approach.
- ProcessUnity: ProcessUnity provides a third-party risk management and vendor lifecycle automation platform used by enterprises for due diligence, onboarding, and ongoing monitoring. It is a direct competitor to CyberVadis with a comparable focus on evidence-based assessments and workflow automation for TPCRM programs.
- Black Kite: Black Kite provides external attack surface assessments and third-party risk intelligence using standards-based scoring (FAIR, MITRE ATT&CK). It competes directly with CyberVadis in vendor cyber risk ratings for enterprise buyers, with emphasis on financial quantification of cyber risk.
Emerging players
- Safe Security (SAFE): Safe Security offers a cyber risk quantification platform (SAFE) that maps signals to breach likelihood and financial impact, including third-party risk scoring. It overlaps with CyberVadis on enterprise vendor risk assessment but emphasizes probabilistic financial risk quantification as a differentiator.
Broad incumbents
- RiskRecon (Mastercard): RiskRecon, now part of Mastercard, delivers third-party cyber risk monitoring based on non-intrusive external scans. It is a broader incumbent competing with CyberVadis in enterprise TPRM, leveraging Mastercard's distribution scale and financial services customer base.
- OneTrust (Third-Party Risk): OneTrust is a broad trust intelligence platform with a dedicated Third-Party Risk module offering vendor assessments, automated questionnaires, and risk workflows. It is a broader incumbent than CyberVadis, addressing TPCRM as part of a wider privacy, GRC, and ethics portfolio for large enterprises.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks1 record
Key highlights7 records
Customer concentration
CyberVadis social profiles
Digital presenceCyberVadis compliance and trust
Trust signalCompliance8 records
CyberVadis financial estimates
Financial estimateRevenue estimate
Valuation estimate
CyberVadis leadership team
Management profileNumber of profiles
Profiles2 records
CyberVadis subsidiaries and ownership
Company hierarchySubsidiaries4 records
CyberVadis funding detail
Funding detailFunding overview
Funding rounds2 records
Investors2 records
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
CyberVadis M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about CyberVadis
What does CyberVadis do?
CyberVadis provides a cloud-based Third-Party Cyber Risk Management (TPCRM) SaaS platform that automates evidence-based cybersecurity assessments of vendors and suppliers. It combines the scalable SaaS platform with a managed service where in-house analysts validate vendor evidence through a 6-eyes review process and produce standardized 0-1000 scorecards aligned with international frameworks (NIST, ISO 27001, GDPR, NIS2, DORA). The offering is targeted at enterprises that need to assess and monitor third-party cybersecurity risk across their global vendor portfolios.
Is CyberVadis a public or private company?
CyberVadis is a private company. It is classified as venture growth investor backed and is currently operating.
When was CyberVadis founded?
CyberVadis was founded in 2018. It employs 51 to 100 people.
Where is CyberVadis based?
CyberVadis is headquartered in Paris, France, in the Europe region.
How does CyberVadis make money?
One revenue line is on record: saaS Platform Subscription (TPCRM Program).
Who are CyberVadis's main competitors?
Direct peers on record are Bitsight, Whistic, SecurityScorecard, UpGuard, Prevalent, ProcessUnity and Black Kite. Safe Security (SAFE) is listed as an emerging player. Broad incumbents are RiskRecon (Mastercard) and OneTrust (Third-Party Risk).
Does CyberVadis have an API?
Yes. CyberVadis offers API integration capabilities allowing users to seamlessly integrate the platform into their business processes (e.g., Procurement) and connect with other supply chain and third-party risk management tools. The platform supports SSO (Single Sign-On) integration. Specific API documentation URL, SDK details, and technical specifications are not explicitly provided in the available source content.
What industry is CyberVadis in?
CyberVadis's product category is Third-Party Cyber Risk Management (TPCRM). Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM). Its NAICS code is 541519 and its SIC code is 7372.