◎
Application inventory
Track SaaS applications, business owners, data sensitivity, and integrations in a single workspace.
Third-party risk intelligence
Assess vendors.
Act on risk.
Bring third-party SaaS assessments, evidence-backed findings, contextual risk scores, and remediation plans into one clear workflow.
Designed for lean security and GRC teams • Product in development
Portfolio overviewConcept preview
Applications48
Critical findings06
Open actions19
Priority findings
Excessive OAuth scopesCritical
Missing MFA enforcementHigh
Unverified vendor controlHigh
Illustrative findings only. Not live scan results.
One connected workflow
From third-party uncertainty to actionable clarity.
Purpose-built for security teams that need defensible risk decisions without adding another spreadsheet-heavy process.
▤
Evidence intelligence
Organize security documents and link findings to their original supporting evidence.
◇
Vulnerability context
Correlate public advisories with actual application context, without mistaking vendor-wide CVEs for confirmed SaaS flaws.
▥
Explainable risk scores
Prioritize findings using severity, exploit signals, exposure, sensitive data, and business criticality.
✓
Remediation plans
Turn reviewed findings into proposed actions, owners, deadlines, and verification steps.
↗
Assessment reporting
Give analysts and executives a clear record of findings, decisions, and outstanding actions.
Simple by design
Four steps to better third-party decisions.
01 / REGISTER
Add your SaaS apps
Capture vendor details, business importance, and data access.
02 / REVIEW
Collect the evidence
Review uploaded security materials and relevant intelligence.
03 / PRIORITIZE
Assess what matters
Separate confirmed findings from potential and unknown risks.
04 / REMEDIATE
Move to action
Approve recommended controls and track closure.
Built for responsible AI
AI assists your analysts. It doesn't replace their judgment.
Vendraxis is being designed around traceable evidence, deterministic risk scoring, and human approval. That means no unexplained black-box severity ratings or unsupported claims that a vendor is vulnerable.
Design principle: Every material risk decision should be explainable, reviewable, and connected to its supporting evidence.
What makes Vendraxis different?
- Application-level context, not just a vendor reputation score
- Explicit labels for confirmed, potential, and unknown risks
- Clear remediation guidance and verification criteria
- Designed for smaller security teams managing growing SaaS portfolios
Proposed pricing
Designed to grow with your SaaS portfolio.
Illustrative early pricing for planning purposes. Final plans and availability will be confirmed at launch.
Starter
$800 / month*
For smaller security teams.
- Up to 25 assessed applications
- Risk scoring and reports
- Remediation tracking
Planned popular tier
Growth
$1,500 / month*
For growing mid-market organizations.
- Up to 100 assessed applications
- AI-assisted remediation drafts
- Expanded workflows and monitoring
Enterprise
Custom
For complex vendor portfolios.
- Higher assessment volumes
- Advanced integrations
- Custom deployment and governance needs
*Illustrative monthly equivalent of proposed annual subscription pricing. No plans are available for self-service purchase yet.
Frequently asked questions
Answers before you assess.
Does Vendraxis scan vendors' private infrastructure?
No. The planned workflow uses public intelligence, provided evidence, and explicitly authorized integrations. It does not perform unauthorized testing of vendor systems.
Can it prove a SaaS application is vulnerable?
Only when sufficient technical evidence supports applicability. A CVE associated with a vendor does not by itself establish that its hosted SaaS application is affected.
Does AI make final risk decisions?
No. The product is designed to use deterministic scoring rules and human approval, with AI helping draft evidence summaries and remediation recommendations.
Is Vendraxis generally available?
Not yet. Vendraxis is an MVP in development. You can request early access or discuss a design-partner pilot.
Become a design partner
Help shape the future of SaaS risk assessment.
We're looking to speak with security and GRC leaders who manage third-party application risk. Tell us about your workflow and we'll discuss pilot opportunities.
Once published on Netlify, requests will be submitted through Netlify Forms. Please do not include confidential security information.