Rescana
Rescana provides an agentic AI platform for autonomous third-party risk management and external attack surface monitoring, serving large enterprises in banking, telecommunications, real estate, healthcare, and government.
- Company typePrivate
- Founded2017
- HeadquartersTel Aviv-yafo, Israel
- Headcount11–50
- GTM typeB2B
- OfferingSoftware
What Rescana does
Rescana is an Israel-based cybersecurity company, founded in 2017 and headquartered in Rehovot, that provides autonomous third-party risk management (TPRM) and attack surface management software to enterprises in heavily regulated industries. The company's core product is an agentic AI platform composed of four specialized, orchestrated agents — Discovery & Classification, Risk Assessment, Communication & Remediation, and Manager — that automate the full vendor risk lifecycle from identifying vendors across identity platforms, procurement records, IT assets, and OSINT, through risk assessment via documentation and questionnaire analysis, to continuous external attack surface monitoring and remediation. The platform differentiates from traditional questionnaire-based TPRM tools through real-time monitoring (rather than point-in-time assessments), post-engagement monitoring of former vendors, product-level risk assessment, contract compliance analysis, and executive reporting mapped to NIST CSF, ISO 27001, SOC 2, MITRE ATT&CK, and DORA frameworks.
Rescana operates a direct enterprise SaaS model with annual subscriptions priced via custom quotes, targeting security, legal, and risk teams at large organizations in banking, telecommunications, real estate, healthcare, and government. Go-to-market is enterprise field sales with a "Book a Demo" motion, supported by a content marketing engine publishing technical CVE analyses and threat intelligence. The company is founder-owned, operates with 11-50 employees, holds SOC 2 Type II, ISO 27001, and ISO 27018 certifications, and runs on AWS infrastructure with logical tenant isolation. Core technology dependencies include OpenAI for natural language processing and Have I Been Pwned for breach intelligence.
Rescana firmographics
Firmographics- Name
- Rescana
- Legal name
- Rescana Ltd.
- Website
- https://rescana.com
- Company type
- Private
- Founded year
- 2017
- Operating status
- Operating
- Headcount range
- 11–50 employees
- Short description
- Rescana provides an agentic AI platform for autonomous third-party risk management and external attack surface monitoring, serving large enterprises in banking, telecommunications, real estate, healthcare, and government.
- Ownership category
- akta.pro rank
Rescana industry classification
Industry- Product category
- Third-Party Risk Management (TPRM) Software
- NAICS
- Software Publishers (513210)
- SIC
- Services-Prepackaged Software (7372)
- akta.pro primary industry
- Third-Party/Vendor Risk Management (TPRM/VRM) (HDADAIAE)
- akta.pro secondary industry
- IT Governance, Risk & Compliance (IT GRC) Platforms (HDAEALAK)
Keywords
Where Rescana is headquartered
LocationHeadquarters
- HQ city
- Tel Aviv-yafo
- HQ country
- Israel
- HQ region
- Middle East
Offices1 record
Markets served
Rescana business model
Business model- GTM type
- B2B
- Offering type
- Software
- Cost components
- Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations
Revenue model
- Annual Subscription: Rescana operates on an annual subscription model with fees paid in advance. The Terms of Service reference a Price Quote for annual subscription fees, indicating a recurring revenue structure. Payments are made via bank transfer or third-party payment processors, with annual billing cadence.
Pricing tiers
| Model | Billing | Price |
|---|---|---|
| Subscription | Annual | Enterprise annual subscription with custom pricing based on vendor count and features |
Go-to-market motion1 record
Distribution channels1 record
Marketing channels4 records
Rescana product offering
Product offeringCore offering
Rescana sells a SaaS Third-Party Risk Management (TPRM) and Attack Surface Management platform that uses agentic AI to autonomously discover, assess, monitor, and remediate vendor risk across hundreds to thousands of third parties in regulated enterprises. The platform is delivered as a unified subscription product accessed via the web, with capabilities such as contract compliance analysis, trust center data collection, continuous exposure monitoring, post-engagement monitoring, and executive/board reporting built into the core offering rather than sold as separate modules.
Product overview
Rescana is a unified third-party risk management (TPRM) platform that uses agentic AI to automate the full vendor risk lifecycle. The core platform encompasses discovery and classification of vendors, risk assessment through questionnaire analysis and documentation review, continuous exposure monitoring, vendor communication and remediation, and executive/board reporting. The platform is delivered as a SaaS solution and does not consist of separate modular products — all capabilities are integrated within the single platform accessed via the web interface.
Differentiator
Problem solved
Functional benefit
Products and services
- Rescana TPRM Platform
Quantifiable outcome
- Up to 40% faster vendor onboarding
- +4 more outcomes
Companies that use Rescana
Customer profileNamed customers4 records
Segments4 records
Ideal customer profiles4 records
Rescana technology and API
TechnologyTechnology focussed Yes
API detail
- Has API
- No
- API docs
- API detail
Core technology
AI maturity
App detail
AI capability5 records
Feature10 records
Rescana partnerships and signals
Strategic signalPartnerships
Two partnerships are on record, tiered core.
- OpenAIcoreOpenAI provides natural language processing capabilities for Rescana's AI agents. Customer data is processed solely to deliver the service and is never used to train third-party foundation models.
- AWScoreAWS provides cloud computing and storage infrastructure for the Rescana platform, hosted on hardened cloud infrastructure with logical tenant isolation between customers.
Scale indicators5 records
Recent moves4 records
Expansion highlights5 records
Rescana competitors and assessment
Company assessmentDirect peers
- SecurityScorecard: SecurityScorecard is the leading TPRM and cyber risk ratings platform, offering vendor risk assessments and continuous monitoring. It is the most directly comparable competitor to Rescana, serving similar enterprise buyers in regulated industries with overlapping attack surface and TPRM capabilities.
- Bitsight: Bitsight provides third-party cyber risk management and security ratings, focused on continuous monitoring of vendor security posture. Comparable to Rescana's continuous exposure monitoring and attack surface capabilities, targeting enterprise risk and security teams in regulated verticals.
- OneTrust (Third-Party Risk): OneTrust's Third-Party Risk module automates vendor assessments, due diligence, and ongoing monitoring within a broader trust intelligence platform. Directly comparable to Rescana in TPRM functionality for enterprise customers, though bundled within a wider privacy and GRC suite.
- ProcessUnity: ProcessUnity is a dedicated TPRM platform offering vendor onboarding, risk assessments, and continuous monitoring with workflow automation. Closely comparable to Rescana's agentic TPRM lifecycle, particularly in regulated industries such as financial services.
- Prevalent: Prevalent provides third-party risk management including vendor assessments, threat intelligence, and continuous monitoring. Directly comparable to Rescana in TPRM workflows and vendor risk scoring for mid-market and enterprise buyers.
- UpGuard: UpGuard combines vendor risk management with attack surface and data leak detection, providing continuous security ratings. Comparable to Rescana's continuous exposure monitoring and vendor risk scoring across enterprise and mid-market customers.
- RiskRecon (Mastercard): RiskRecon, owned by Mastercard, delivers automated vendor risk assessments and continuous attack surface monitoring. Directly comparable to Rescana in TPRM and external attack surface capabilities, with strong enterprise financial services positioning.
- Black Kite: Black Kite provides third-party cyber risk intelligence with an emphasis on financial impact quantification of vendor risk. Comparable to Rescana's risk scoring and continuous monitoring capabilities, with a distinct focus on standards-based ratings.
Broad incumbents
- ServiceNow Integrated Risk Management: ServiceNow IRM offers vendor risk management embedded within its broader GRC and enterprise workflow platform. A broad incumbent that competes with Rescana by bundling TPRM into enterprise-wide risk and compliance workflows already deployed at large customers.
Emerging players
- Vanta: Vanta automates security compliance and increasingly extends into vendor risk management for fast-growing customers. An emerging player with overlapping TPRM and continuous monitoring capabilities, primarily targeting mid-market rather than the deeply regulated enterprises Rescana prioritizes.
Market position
Strengths5 records
Weaknesses5 records
Competitive moat5 records
Key risks6 records
Key highlights7 records
Customer concentration
Rescana social profiles
Digital presenceRescana compliance and trust
Trust signalCompliance4 records
Rescana financial estimates
Financial estimateRevenue estimate
Valuation estimate
Rescana leadership team
Management profileNumber of profiles
Profiles1 record
Rescana funding detail
Funding detailFunding overview
Funding rounds
Investors
Funding detail is available on the Subscription and Enterprise plan.Contact sales →
Rescana M&A and investment
M&A and investmentM&A
Investments
M&A and investment is available on the Subscription and Enterprise plan.Contact sales →
Frequently asked questions about Rescana
What does Rescana do?
Rescana sells a SaaS Third-Party Risk Management (TPRM) and Attack Surface Management platform that uses agentic AI to autonomously discover, assess, monitor, and remediate vendor risk across hundreds to thousands of third parties in regulated enterprises. The platform is delivered as a unified subscription product accessed via the web, with capabilities such as contract compliance analysis, trust center data collection, continuous exposure monitoring, post-engagement monitoring, and executive/board reporting built into the core offering rather than sold as separate modules.
Is Rescana a public or private company?
Rescana is a private company. It is classified as founder individual operated bootstrapped and is currently operating.
When was Rescana founded?
Rescana was founded in 2017. It employs 11 to 50 people.
Where is Rescana based?
Rescana is headquartered in Tel Aviv-yafo, Israel, in the Middle East region.
How does Rescana make money?
One revenue line is on record: annual Subscription.
Who are Rescana's main competitors?
Direct peers on record are SecurityScorecard, Bitsight, OneTrust (Third-Party Risk), ProcessUnity, Prevalent, UpGuard, RiskRecon (Mastercard) and Black Kite. ServiceNow Integrated Risk Management is listed as a broad incumbent. Vanta is listed as an emerging player.
Does Rescana have an API?
No public API is recorded for Rescana.
What industry is Rescana in?
Rescana's product category is Third-Party Risk Management (TPRM) Software. Its primary akta.pro industry code is HDADAIAE, Third-Party/Vendor Risk Management (TPRM/VRM), with a secondary code of HDAEALAK, IT Governance, Risk & Compliance (IT GRC) Platforms. Its NAICS code is 513210 and its SIC code is 7372.