Agent Index by Heritage Services
Submit / Claim
Home / Agents / RiskXchange The Agency (32 AI agents for third-party risk)

RiskXchange The Agency (32 AI agents for third-party risk)

Vendor: RiskXchange · HQ: United Kingdom · Category: Risk · Security

Last verified · Added · 4 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

RiskXchange is a London-headquartered TPRM and security-ratings platform. The Agency is its AI agent workforce: five lead agents, each commanding sub-agents. NOVA (AI Vendor Relationship Manager) runs outreach, onboarding, questionnaire collection, follow-up, renewal and offboarding and is the only agent that communicates with vendors; REX (Risk & Breach Intelligence) scans vendors from the outside and owns continuous monitoring, breach detection and material-change alerts; ARIA (Assessment & Risk Intelligence) reads the documents vendors supply, and its findings are reconciled with REX's into one combined view; TARA (Tiering, Assessment & Remediation) analyses regulatory compliance gaps and assigns remediation; VANCE (Vendor Analysis & Compliance Engine) composes the reports. Autonomy is set per supplier: in Manual mode people do the work; in Assisted mode agents prepare every email, score and remediation task and queue it for approval; in Autonomous mode agents run approved workflows without per-action approval and humans are notified. Framework pages cover DORA, NIS2, ISO 27001, APRA CPS 230, NIST CSF, Cyber Essentials Plus and SOC 2. RiskXchange publishes annual platform tiers (see pricing); its pages don't say which tiers include The Agency.

Frameworks (vendor-stated)

DORA

Vendor-claimed DORA, NIS2, ISO 27001, APRA CPS 230, NIST CSF, Cyber Essentials Plus, SOC 2

Pricing (as published)

Platform tiers published: Essentials GBP 14,900/year (50 vendors), Professional GBP 31,500/year (150 vendors), Enterprise from GBP 75,000/year; unlimited seats, no setup fee. The pages don't say which tiers include The Agency.

Tasks

vendor riskquestionnaire automationrisk assessmentremediationsecurity ratings

Sources

  1. riskxchange.co/agency (primary)
  2. riskxchange.co/faq
  3. riskxchange.co/
  4. riskxchange.co/pricing

Last verified 19 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Narrow by region

This listing’s HQ country is United Kingdom. That is a starting point only — choose any published country page.

United States · India · United Kingdom (suggested) · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United Kingdom (60)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare RiskXchange The Agency (32 AI agents for third-party risk) with

Alternatives

  • Covasant TPRM (agentic third-party risk management) — Third-party risk product from Hyderabad-headquartered Covasant. Purpose-built AI agents onboard vendors through due-diligence workflows, chase vendors who are slow to respond, keep watching news, sanctions and financial data, and, when risk thresholds break, open remediation workflows, track vendor responses, escalate unresolved issues and produce DORA, SOX and NIST reporting packages. (shared tags: DORA)
  • Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents) — New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments. (shared tags: DORA)
  • ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill) — Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control. (shared tags: DORA)
  • Rescana autonomous TPRM agents (Discovery & Classification, Risk Assessment, Communication & Remediation and Manager agents) — A third-party risk platform run by a coordinated team of AI agents. They discover and classify vendors from identity, procurement and IT systems, collect and analyse vendor documentation and questionnaires against external attack-surface intelligence, chase vendors for missing evidence and remediation, and orchestrate approvals with humans in control. (shared tags: DORA)
  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: DORA)
  • AIpentix (agentic continuous security testing and agentic red teaming, by Swipergy) — German continuous security-testing platform with an AI agent that signs in to the customer's application on its own, chooses follow-up checks and documents attack paths, with every tool run evidenced. Findings are grouped into remediation actions with owners, deadlines and Jira sync, and retests confirm fixes. Agentic red-team campaigns (recon, access, lateral and report agents led by human red teamers) are also offered for TIBER-EU and DORA TLPT style testing. (shared tags: DORA)

See all RiskXchange The Agency alternatives →

FAQ (from this dataset)

What does RiskXchange The Agency do?

AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor.

How much does RiskXchange The Agency cost?

Platform tiers published: Essentials GBP 14,900/year (50 vendors), Professional GBP 31,500/year (150 vendors), Enterprise from GBP 75,000/year; unlimited seats, no setup fee. The pages don't say which tiers include The Agency.

Where is RiskXchange headquartered?

United Kingdom

Which frameworks does RiskXchange The Agency support?

Frameworks (vendor-stated): DORA. Framework tags indicate relevance, not certification.

What are alternatives to RiskXchange The Agency?

See the RiskXchange The Agency alternatives page for category-sharing listings in relevance order, not a ranking. RiskXchange The Agency alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.