CyberVadis

CyberVadis provides a scalable solution for third-party cybersecurity risk management, originating as a development from EcoVadis, a provider of business sustainability ratings. Founded in 2016 and headquartered in Paris, France, the company addresses the time-consuming and inconsistent nature of traditional vendor risk assessments. In May 2023, CyberVadis secured €7 million in a Series A funding round led by Zobito, with participation from Partech and CVC Growth Partners, to expand its team and enhance its platform.

The company's core offering is a Software-as-a-Service (SaaS) platform that automates the cyber risk assessment process for a company's entire supply chain. The business model operates on a fixed annual fee, allowing enterprises to conduct evidence-based assessments of their vendors. A notable aspect of its model is that it may charge a fee to both the client company and the supplier being assessed. This process involves vendors completing a tailored questionnaire and providing evidence, which is then validated by an in-house team of security analysts. The methodology is mapped to major international compliance standards, including NIST, ISO 27001, and GDPR.

Upon completion, both the company and the vendor receive a standardized, shareable scorecard that benchmarks performance and provides a detailed, actionable improvement plan. This enables organizations to monitor vendors, identify those not meeting security requirements, and collaborate on implementing better practices. The platform serves a global client base across more than 70 industries, with assessments conducted in over 110 countries. The CEO of CyberVadis is Edouard Lacarrière, and the CTO is Gauthier Astruc Amato.

Keywords: third-party risk management, supply chain security, vendor risk assessment, cybersecurity ratings, TPRM, cyber risk quantification, evidence-based assessment, security scorecards, compliance management, NIST, ISO 27001, GDPR compliance, automated risk assessment, vendor security validation, cybersecurity platform, Edouard Lacarrière, supply chain cyber risk, third-party security, risk management solutions, vendor due diligence