Home / Compare / TPRM and vendor-risk AI agents

TPRM and vendor-risk AI agents

Name: Agent Index auditors.json
Creator: Heritage Services
License: https://creativecommons.org/licenses/by/4.0/

Quick answer

TPRM and vendor-risk AI agents lists 40 verified listings for Third-party risk, vendor assessments, security ratings and questionnaire automation in dataset v0.1.27 (generated 2026-10-27).

GRC/privacy platforms with documented TPRM agents are listed alongside dedicated TPRM tools.

This is not a ranking or score.

GRC/privacy platforms with documented TPRM agents are listed alongside dedicated TPRM tools. This update adds Covasant TPRM (Hyderabad-headquartered agentic vendor onboarding, monitoring and DORA reporting). Security-questionnaire specialists are also compared on the security-questionnaire table. Fields come from the open dataset. This is not a ranking or score.

Key facts

From this dataset

40 verified listings on this page, with headquarters in 6 HQ regions and 10 countries.
Dataset version 0.1.27, generated 2026-10-27.
Third-party risk, vendor assessments, security ratings and questionnaire automation

Cite as: Agent Index by Heritage Services, TPRM and vendor-risk AI agents, dataset v0.1.27 (https://theagentindex.io/compare/tprm-vendor-risk/)

FAQ (from this dataset)

What is listed on this use-case table?

Third-party risk, vendor assessments, security ratings and questionnaire automation 40 verified listings from Agent Index dataset v0.1.27.

How many listings are on this page?

40 verified listings in dataset v0.1.27 (2026-10-27).

Which listings are headquartered in India, Asia-Pacific or Australia/NZ?

8 of 40 listings on this page publish an HQ in India, Asia-Pacific or Australia/New Zealand: Covasant TPRM (agentic third-party risk management) (India), Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents) (India), Data Adhikaar DPDPA agents (ten-agent compliance fabric) (India), OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI) (India), Procol Supplier Ops Agent (supplier onboarding, due-diligence and compliance, scoring and risk agents) (India), Sprinto (India), UpGuard (Australia), VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents) (Singapore).

Is this a ranking?

No. This is not a ranking or score. Order is mechanical (from dataset fields such as name, framework-tag count or table membership), not a paid placement or quality judgement.

Hide columns to focus the table. The full comparison stays in the HTML.

Field	UpGuard	SecurityScorecard	Whistic Automation Orchestrator (agentic assessments)	Black Kite AI Agent	ProcessUnity TPRM AI Agents (Evidence Evaluator, Assessment Autofill)	SAFE TPRM AI Co-Worker	TrustCloud TrustLens (agentic third-party risk assessments)	osapiens Agent Factory (supplier and supply-chain compliance agents)	Anecdotes Agentic GRC (Agent Library and Agent Studio)	Complyance GRC AI Agents	MineOS Mira AI	Optro (formerly AuditBoard)	Zip risk agents (Risk Orchestration and procurement Superagents)	SureCloud Gracie AI agents (virtual GRC team)	Athereon LAiKA (AI agent for ISMS, risk and questionnaires)	Wolfia Questionnaire Agent (security questionnaires and trust center)	Riskonnect AI Agent Library (Agentforce 360 for Riskonnect)	FlowForma Assure (AI agents for vendor risk assessment)	VISO TRUST AI Agent (agentic third-party risk management)	CleverChain AI agents (VERA autonomous due diligence and LUMA screening)	RiskXchange The Agency (32 AI agents for third-party risk)	Co-Brain Questionnaire Agent (security questionnaire automation)	Optivalue.ai questionnaire agents (security questionnaires, TISAX and third-party collection)	Censinet Risk Assessor Agent (Assessor Agent for Supply Chain and Vendor Risk, Censinet GRC AI)	Rescana autonomous TPRM agents (Discovery & Classification, Risk Assessment, Communication & Remediation and Manager agents)	Procol Supplier Ops Agent (supplier onboarding, due-diligence and compliance, scoring and risk agents)	episki Autonomous GRC (AI Orchestration agents for policies, questionnaires, vendors and evidence)	Drata	LogicGate Risk Cloud	Zania	Mindlapse Ernest (agentic Cyber-GRC: compliance, third-party and risk agents)	Sprinto	Data Adhikaar DPDPA agents (ten-agent compliance fabric)	GetTeddy compliance agents (Certification, Gap Audit, Policy, Evidence, Questionnaire and Contract agents)	Legiscope GDPR AI agents (RoPA, processor/DPA review, DPIA, incident and rights-request workflows)	Crest TPRM AI agents (Vendor Outreach, Questionnaire Intelligence, Continuous Monitoring, Risk-Based Scoring, Finance, Screening and Efficiency agents)	VibrantiX agentic compliance platform (Evidence Review, Vendor Risk Scoring, Risk Detection, Customer Trust, Policy Drafting and Control Remediation agents)	OnFinance AI Maxwell (open-source cybersecurity and compliance agent for Indian BFSI)	Covasant TPRM (agentic third-party risk management)	trail Governance Agents (GRC and AI governance agents)
Vendor	UpGuard	SecurityScorecard	Whistic	Black Kite (NormShield, Inc.)	ProcessUnity	SAFE (SAFE Securities, Inc.)	TrustCloud	osapiens	Anecdotes	Complyance (Securely Technology Limited)	MineOS (Mine)	Optro, Inc. (formerly AuditBoard)	Zip (ZipHQ, Inc.)	SureCloud (SureCloud Limited)	Athereon GRC GmbH	Wolfia (Wolfia Inc.)	Riskonnect	FlowForma	VISO TRUST (a Protecht company; Valente Sherman, Inc.)	CleverChain (CleverChain Ltd)	RiskXchange	Co-Brain (Co-Brain GmbH)	Optivalue.ai (Optivalue.ai SAS)	Censinet	Rescana (Rescana Ltd.)	Procol (Procol Tech Private Limited)	episki (episki, llc)	Drata	LogicGate	Zania Inc.	Mindlapse (Mindlapse SAS)	Sprinto	Data Adhikaar (Qodequay Technologies Pvt. Ltd.)	GetTeddy (Teddy Technologies GmbH)	Legiscope (Legiscope UAB)	Crest (Crest Veda TechWorks Private Limited)	VibrantiX (Vibrantix, Inc.)	OnFinance AI (Mindweave Transformers Private Limited, Bengaluru)	Covasant (Covasant Technologies Private Limited, Hyderabad)	trail (trail GmbH, part of Collibra since Oct 2026)
HQ	Australia · Australia and New Zealand	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	United States · North America	Germany · Europe	Israel · Middle East	United Kingdom · Europe	Israel · Middle East	United States · North America	United States · North America	United Kingdom · Europe	Germany · Europe	United States · North America	United States · North America	Ireland · Europe	United States · North America	United Kingdom · Europe	United Kingdom · Europe	Germany · Europe	France · Europe	United States · North America	Israel · Middle East	India · India	United States · North America	United States · North America	United States · North America	United States · North America	France · Europe	India · India	India · India	Germany · Europe	Lithuania · Europe	India · India	Singapore · Asia Pacific	India · India	India · India	Germany · Europe
Primary category	Risk	Risk	Risk	Risk	Risk	Risk	Risk	Risk	Compliance	Compliance	Compliance	Compliance	Risk	Compliance	Compliance	Security	Risk	Risk	Risk	Risk	Risk	Security	Security	Risk	Risk	Risk	Compliance	Compliance	Risk	Compliance	Compliance	Compliance	Risk	Compliance	Risk	Risk	Compliance	Compliance	Risk	Compliance
Also listed in	Risk, Security	Risk, Security	Risk, Compliance	Risk, Security	Risk, Compliance	Risk, Security	Risk, Compliance	Risk, Compliance	Compliance, Risk	Compliance, Risk	Compliance, Risk, Privacy	Compliance, Risk	Risk, Business operations	Compliance, Risk	Compliance, Risk	Security, Compliance, Risk	Risk, Compliance	Risk, Security	Risk, Security	Risk	Risk, Security	Security, Compliance, Risk	Security, Risk, Business operations	Risk	Risk, Security	Risk, Business operations	Compliance, Risk	Compliance, Risk	Risk, Compliance	Compliance, Risk, Security	Compliance, Risk	Compliance	Risk, Compliance, Privacy	Compliance	Risk, Compliance, Privacy	Risk, Compliance	Compliance, Risk	Compliance, Security	Risk, Compliance	Compliance, Risk
Summary	Cyber risk and third-party risk management platform with published CRPM pricing page.	Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.	Agentic vendor-assessment workflow in which four agents (Initiator, Collector, Analyst, Reporter) start assessments, gather evidence, produce cited findings and route an executive summary for human approval.	Third-party cyber risk agent made of sub-agents (Assessment, Incident Response, Threat Actor Intelligence, Investigation, Prioritization, Procurement) that assess vendors, investigate exposures, trigger rescans and draft outreach.	Team of risk-informed AI agents for each stage of the third-party risk lifecycle, covering intake checks, evidence review, issues management and executive reporting, with the customer's team in control.	Agentic third-party risk management: a swarm of 100+ specialised agents runs the vendor lifecycle from intake and due diligence through remediation, continuous monitoring and offboarding.	Agentic third-party cyber risk assessments that scope each vendor by inherent risk, analyse outside-in ratings, inside-out control evidence and vendor artifacts, and produce cited risk summaries with continuous drift monitoring.	Agent layer across the osapiens HUB that runs supplier onboarding, record validation, questionnaire pre-fill, supplier case management and risk-trend analysis for supply-chain due diligence (LkSG, CSDDD, EUDR and more), within customer-set guardrails.	Enterprise GRC platform with built-in agents for evidence analysis, control assessment, risk enrichment and findings extraction, plus an Agent Studio for custom GRC agents and agentic TPRM.	Enterprise GRC platform with a fleet of task-specific AI agents for evidence review, control advice and remediation, policy drafting, risk treatment planning, vendor questionnaire review and risk scoring, and customer security questionnaires.	Autonomous AI agents for privacy, vendor risk and AI governance: discovery, DSR fulfilment, cross-border transfer checks, assessment autofill and AI-agent posture profiles.	AI-powered GRC Intelligence Platform (formerly AuditBoard) with domain-trained agents for audit testing, compliance, third-party risk and AI governance.	Procurement-embedded third-party risk agents that screen and score vendors, fast-track low-risk ones, route high-risk ones for deeper review, analyse surveys and documents for key risks, and schedule re-assessments by risk tier.	Persona-based GRC agents in the SureCloud platform that run continuous risk, compliance, third-party and audit work on schedule or trigger, chaining reusable no-code Skills, with human approval gates and separate logging of AI and human actions.	German, EU-hosted AI agent in the Athereon GRC platform that identifies risks, captures assets, maps gaps against NIS2/ISO 27001/DORA/TISAX/CRA, and sends and fills security questionnaires, asking for approval before it changes anything.	Security-questionnaire agent that drafts every answer with a citation from the company's own corpus, routes ungrounded questions to the owning expert, returns the file in its original format, and fills portal-only questionnaires via a Chrome extension.	Library of prebuilt risk and GRC agents on Salesforce Agentforce inside Riskonnect: risk-register signal, risk builder, regulatory mapping, policy impact and horizon-monitoring agents, plus claims and incident intake/audit agents.	Evidence-first vendor security assessment where AI agents read SOC 2 reports, ISO certificates, pen tests and questionnaires, validate controls, score risk with cited reasoning, auto-approve low-risk vendors and route high-risk ones to analysts with follow-up questions framed.	TPRM agent that launches due diligence as soon as a vendor is added, requests and renews SOC 2, ISO and pen-test artifacts, sends focused follow-ups, monitors breach advisories and drafts impact reports, escalating only exceptions to the team.	KYB, KYC, AML and third-party due-diligence platform where the VERA agent runs end-to-end investigations (ownership chain, business activity, sanctions and adverse media) into a cited, policy-mapped report, and LUMA handles AML screening and ongoing monitoring, with analysts approving high-risk decisions.	AI workforce of five lead agents and 27 specialists that runs third-party risk end to end: vendor outreach, onboarding and questionnaire chasing, document assessment, outside-in breach and score monitoring, regulatory gap analysis and remediation, and regulator-ready reporting, with Manual, Assisted or Autonomous mode set per vendor.	German agent that completes incoming security questionnaires (vendor assessments, TISAX, ISO 27001, DORA) in Excel, PDF, Word or vendor portals from the customer's policies, certificates and past answers, with a source citation on every answer, consistent answers to re-worded questions, expert routing and team approval.	French platform whose agents answer incoming security questionnaires, TISAX catalogues, DDQs and tenders from the customer's own evidence with document, page and version on every answer, score and gap-check the result and draft missing documents with the team before named sign-off, while its Reach product sends questionnaires to suppliers and chases non-responders automatically.	Healthcare third-party risk agent in Censinet RiskOps that reviews vendor questionnaire responses and supporting documents (such as SOC 2 and penetration-test reports), captures integration details from requests, identifies findings and drafts assessment reports and corrective action plans for the risk assessor to validate.	A third-party risk platform run by a coordinated team of AI agents. They discover and classify vendors from identity, procurement and IT systems, collect and analyse vendor documentation and questionnaires against external attack-surface intelligence, chase vendors for missing evidence and remediation, and orchestrate approvals with humans in control.	A coordinated set of procurement-side AI agents that run supplier onboarding from invite to approval. They validate tax IDs, licences and certificates, run continuous AML, sanctions and debarment screening, track contract expiry and compliance deviations with audit trails, and score suppliers on cost, quality, delivery and compliance.	A GRC platform built around agents that draft policies, answer inbound security questionnaires, review vendors' SOC 2 and CAIQ responses, map controls, assess risks and write deterministic evidence-collection recipes. Every plan, step-run and sensitive action goes through human approvals and safety floors. Pricing is published.	Compliance and trust management platform with AI-assisted evidence collection, continuous control monitoring, and multi-framework programs.	AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity.	Agentic AI platform for enterprise GRC that executes third-party risk, controls testing, evidence collection, questionnaires and gap analyses with explainability.	French agentic Cyber-GRC operating system whose Ernest engine runs separate planner, collector, adjudicator and writer agents to verify every governance claim (from policies, control owners or vendors) against evidence, connector signals and a cyber knowledge graph, returning sourced verdicts with confidence that are re-checked continuously and accepted or rejected by a human.	Autonomous Trust Platform with governed AI agents that detect change across systems, vendors, access and AI use, then refresh evidence, run vendor due diligence, prepare audits and close control gaps, with humans approving material decisions.	India DPDP Act compliance platform run by ten scoped agents for data discovery and RoPA, consent, data principal rights requests, breach response, DPIAs, regulatory intelligence, policy drafting, processor risk and audit evidence, with human approval gates for Board notifications, policy publication and severity downgrades.	Berlin agentic compliance platform in which six AI agents run recurring ISO 27001, SOC 2, NIS2, TISAX and DORA work on a schedule: planning a first certification, weekly gap audits against connected systems, drafting policies, collecting evidence, drafting security-questionnaire answers and checking vendor contracts and DPAs, with every result logged and approved by a person.	Vilnius-registered 'agentic compliance' GDPR platform whose AI agents write and keep the Article 30 register current as the business changes, find and assess every processor's DPA against Article 28, prepare DPIAs, draft breach-notification decisions and turn data-subject requests into deadline-tracked case records, routing judgement calls to the privacy team.	New Delhi-headquartered third-party risk platform with seven agents marked Live: an outreach agent that autonomously sends and follows up vendor emails and voice reminders and escalates non-response, a questionnaire agent that distributes, chases and analyses vendor questionnaires, plus continuous adverse-media/watchlist monitoring, risk-based scoring, financial analysis, screening and efficiency agents that auto-approve low-risk vendors and trigger re-assessments.	Singapore-headquartered agentic compliance platform whose named agents review uploaded evidence against framework controls and flag gaps, score vendors from 12+ external sources without questionnaires, scan cloud posture and auto-escalate critical findings to the risk register, draft answers to customer security questionnaires (SIG, CAIQ, custom) from live policies, draft policies, and generate fixes for failed controls and mark them ready for re-audit.	Free, self-hosted, open-source (AGPL-3.0) agent from India's OnFinance AI for banks, brokers, NBFCs, AMCs, insurers and fintechs. It runs 26 workflows of specialist agents that keep a company's regulatory profile current, probe repositories, infrastructure and vendors for gaps against SEBI, RBI, IRDAI, CERT-In and DPDP controls, and write findings (each citing a specific clause), remediation plans and audit reports into a validated, append-only ledger for human review.	Third-party risk product from Hyderabad-headquartered Covasant. Purpose-built AI agents onboard vendors through due-diligence workflows, chase vendors who are slow to respond, keep watching news, sanctions and financial data, and, when risk thresholds break, open remediation workflows, track vendor responses, escalate unresolved issues and produce DORA, SOX and NIST reporting packages.	Munich-based trail's Governance Agents run GRC busywork in the background: they read your project files and sources to collect and link evidence, assess controls, classify systems, run risk and vendor assessments and draft policies, proposing changes that a human approves before anything is written.
Frameworks (vendor-stated)	SOC 2, ISO 27001, TX-RAMP	SOC 2, ISO 27001	—	—	DORA	—	—	—	FedRAMP, ISO 27001, HIPAA	SOC 2, ISO 27001, HIPAA, CMMC	—	SOC 2, ISO 27001, TX-RAMP	—	ISO 27001, SOC 2	ISO 27001	—	—	—	—	—	DORA	DORA	—	—	DORA	—	—	SOC 2, ISO 27001, HIPAA, FedRAMP, CMMC	SOC 2, ISO 27001, HIPAA	SOC 2, ISO 27001, HIPAA	DORA	SOC 2, ISO 27001, HIPAA	DPDP	—	—	DORA, DPDP	ISO 27001, SOC 2, HIPAA, DORA, DPDP	CERT-In, DPDP	DORA	EU AI Act, ISO 42001
FedRAMP (Marketplace, listing scope)	—	—	—	—	—	—	—	—	Anecdotes · FedRAMP Authorized · FR2620235600 · 20x Moderate · authorized 2026-06-23	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	—	Drata Trust Management Platform · FedRAMP Authorized · FR2600167032 · 20x Low · authorized 2025-12-05	—	—	—	—	—	—	—	—	—	—	—	—
Frameworks (vendor-claimed)	—	—	—	—	DORA, APRA, LkSG, PRA SS2/21	—	—	LkSG, CSDDD, EUDR, EU Forced Labour Regulation, CSRD	FedRAMP, ISO 27001, HIPAA, NIST, NIS2	SOC 2, ISO 27001, HIPAA, PCI DSS, NIST CSF 2.0, CMMC	GDPR, CCPA/CPRA, EU AI Act, LGPD, PIPL	SOX, SOC 2, ISO 27001, NIST	—	—	—	—	—	ISO 27001, SOC 2, NIST CSF 2.0, NIS2, Cyber Essentials	—	ISO 27001	DORA, NIS2, ISO 27001, APRA CPS 230, NIST CSF, Cyber Essentials Plus, SOC 2	TISAX, ISO 27001, DORA, GDPR	TISAX, ISO 27001	—	NIST CSF, ISO 27001, SOC 2, MITRE ATT&CK, DORA	—	SOC 2, ISO 27001, PCI DSS, CMMC, HIPAA, ISO 42001, NIST AI RMF, EU AI Act	SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, NIST, CMMC, EU Cyber Resilience Act, AIUC-1	SOC 2, ISO 27001, NIST, HIPAA	SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, ISO 42001, NIST CSF	NIS2, DORA, EU Cyber Resilience Act, EU AI Act	SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, ISO 42001	DPDP Act 2023	ISO 27001, SOC 2, NIS2, TISAX, DORA, CRA, EU AI Act, ISO 42001	GDPR, CCPA	DORA, NIS2, MAS, RBI, DPDP, CSDDD	ISO 27001, SOC 2, EU AI Act, ISO 42001, NIST AI RMF, DORA, HIPAA, GDPR, CCPA, DPDP, PDPA, MAS TRM, APRA CPS 234, PCI DSS	—	DORA, SOX, NIST, SOC 2, GDPR	EU AI Act, ISO 42001, NIST AI RMF
Capabilities / tasks	vendor risk, attack surface, security ratings	vendor risk, security ratings, questionnaire automation, remediation	vendor risk, questionnaire automation, risk assessment, trust center	vendor risk, security ratings, risk prioritization, incident response, questionnaire automation	vendor risk, risk assessment, evidence collection, questionnaire automation	vendor risk, risk assessment, questionnaire automation, remediation	vendor risk, risk assessment, questionnaire automation	vendor risk, risk assessment, questionnaire automation, workflow automation	evidence collection, control monitoring, risk management, vendor risk, audit management	evidence collection, control monitoring, policy management, risk management, vendor risk, questionnaire automation	privacy management, dsr automation, data discovery, vendor risk, ai governance	grc intelligence, risk management, control testing, audit management, vendor risk, ai governance	vendor risk, risk assessment, workflow automation	workflow automation, risk assessment, vendor risk, evidence collection, audit management, contract review	gap analysis, risk assessment, questionnaire automation, vendor risk, workflow automation	questionnaire automation, trust center, contract review	risk management, control mapping, policy management, workflow automation, risk assessment	vendor risk, questionnaire automation, risk assessment, workflow automation	vendor risk, questionnaire automation, risk assessment, workflow automation	kyc, aml, case investigation, vendor risk, risk assessment	vendor risk, questionnaire automation, risk assessment, remediation, security ratings	questionnaire automation, workflow automation	questionnaire automation, vendor risk, gap analysis	vendor risk, risk assessment, questionnaire automation, evidence collection	vendor risk, risk assessment, questionnaire automation, attack surface, remediation, contract review	vendor risk, risk assessment, process automation, workflow automation	policy management, questionnaire automation, vendor risk, evidence collection, control mapping, risk assessment, trust center	evidence collection, control monitoring, questionnaire automation, vendor risk, trust center	risk management, compliance workflows, vendor risk, ai governance	vendor risk, controls testing, evidence collection, questionnaire automation, gap analysis	control monitoring, evidence collection, control mapping, vendor risk, risk assessment	evidence collection, control monitoring, policy management, vendor risk, questionnaire automation, trust center, audit management, ai governance	privacy management, consent, dsr automation, data discovery, vendor risk, evidence collection	gap analysis, evidence collection, policy management, questionnaire automation, contract review, control mapping, audit management	privacy management, dsr automation, vendor risk, contract review, risk assessment, incident response	vendor risk, questionnaire automation, risk assessment, workflow automation	evidence collection, vendor risk, questionnaire automation, policy management, remediation, control mapping	compliance posture, control monitoring, evidence collection, vendor risk, remediation, audit management	vendor risk, risk assessment, evidence collection, remediation, workflow automation	evidence collection, control testing, risk assessment, vendor risk, policy management, gap analysis, questionnaire automation, ai governance, workflow automation
Integrations (vendor-listed)	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	AWS, Azure, GCP, GitHub, Microsoft 365 / Entra	AWS, Azure, GCP, GitHub, GitLab, Okta, Google Workspace, Microsoft 365 / Entra, Jira, Slack	Not recorded in this dataset yet	Jira, Slack	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	AWS, Azure	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	AWS, Azure, Microsoft 365 / Entra	Not recorded in this dataset yet	AWS, Azure, GCP, GitHub, GitLab, Okta, Google Workspace, Microsoft 365 / Entra, Jira, Slack	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	Not recorded in this dataset yet	OneTrust, Collibra, ServiceNow, SAP LeanIX, Jira, Confluence, GitHub, GitLab, SharePoint, Notion, Databricks, MLflow
Pricing (as published)	Published on upguard.com/pricing (CRPM platform tiers; verify current figures).	Not verified	Not published	Not published	Not published	Not published	Not published	Not published	Not published	Not published	Not published	Not verified	Not published	Not published	Not published	Not published	Not published	Not published	Not published	Not published (usage-based with annual minimum commitment; tiered annual licence for policy automation; no list price)	Platform tiers published: Essentials GBP 14,900/year (50 vendors), Professional GBP 31,500/year (150 vendors), Enterprise from GBP 75,000/year; unlimited seats, no setup fee. The pages don't say which tiers include The Agency.	Not published	Not published (licence with an included quota of deliverables, by quote)	Not published	Not published	Not published	Published on episki.com/pricing: Compliance Platform $7,500/year (required base); modules Risk Management +$4,800/year, Third-Party Risk Management +$6,000/year, Trust +$7,200/year, AI Governance +$6,000/year; EU/Canada data residency +$6,000/year; shared AI token pool with overage at $0.50 per 1K tokens. Users, frameworks and vendors unlimited.	Quote-based. AWS Marketplace Foundation Package listed at $15,000/year for 1–50 employees (third-party census of marketplace listing). Drata says Agentic TPRM is not priced by vendor count: every vendor gets a free inherent-risk assessment and customers pay only when a vendor needs a full security review (amounts not published).	Quote-based. AI Skills are included with every Risk Cloud subscription; GRC Agents are an optional paid add-on priced at a flat fee per year based on organisation size, with a fair-usage limit on yearly agent executions (amounts not published).	Not verified	Not published	AWS Marketplace: Starter Platform $7,500/year (up to 100 employees) plus first compliance framework from $2,000/year (combined entry often cited as $9,500/year).	Starter from Rs 15,000/month (up to 100K data principals); Growth from Rs 75,000/month (up to 5M data principals, all ten agents); Enterprise custom (Rs 5 lakh+/month). Prices exclude GST; 14-day trial.	Not published	Essentiel €1,500/year; Pro €2,500/year (expert AI agents, DPIA); Business €4,000/year; Premium €6,000/year; Enterprise from €12,000/year (all excl. VAT, 12-month commitment, token allowance per plan)	Not published (platform-only, managed-service and one-time report models)	Not published	Free and open source (AGPL-3.0, github.com/OnFinance/Maxwell); you pay only for your own AI model usage. OnFinance's separate ComplianceOS platform pricing is not part of this listing.	Not published	Not published (demo request on trail-ml.com, checked 2026-10-26)
Pricing model	published-tiers	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	quote	published-tiers	quote	quote	quote	quote	quote	published-tiers	annual-contract	quote	quote	quote	annual-contract	published-tiers	quote	published-tiers	quote	quote	freemium	quote	quote
Primary source	https://www.upguard.com/pricing	https://securityscorecard.com/	https://www.whistic.com/automation-orchestrator	https://blackkite.com/ai	https://www.processunity.com/tprm-ai-agents/	https://safe.security/third-party-risk-management/	https://www.trustcloud.ai/trustlens/	https://www.osapiens.com/en/platform/agent-factory	https://www.anecdotes.ai/agent-library	https://www.complyance.com/ai-agents/evidence-review	https://www.mineos.ai/mira-ai	https://www.prnewswire.com/news-releases/optro-launches-domain-trained-agents-for-audit-compliance-third-party-risk-and-ai-governance-302907924.html	https://zip.com/products/risk-orchestration	https://www.surecloud.com/gracie/ai-skills-and-agents	https://www.athereon.de/en/product/ai	https://wolfia.com/products/questionnaire-automation	https://riskonnect.com/agentforce-for-riskonnect-ai-agent-library/	https://www.flowforma.com/flowassure	https://visotrust.com/platform/agentic-tprm/	https://www.cleverchain.ai/	https://www.riskxchange.co/agency	https://co-brain.ai/en/questionnaire-agent	https://www.optivalue.ai/en/security-questionnaire-automation/	https://www.censinet.com/blog/censinet-unveils-censinet-grc-ai-tm-vision-and-delivers-major-platform-innovations-for-healthcare-risk-management-at-vive-2026	https://www.rescana.com/	https://www.procol.ai/ai-supplier-management/	https://episki.com/product/ai	https://drata.com/	https://www.logicgate.com/	https://zania.ai/	https://www.mindlapse.ai/platform/ernest/	https://sprinto.com/	https://dapro.in/agents	https://getteddy.ai/agents	https://www.legiscope.com/	https://crest.digital/tprm/intelligence/agentic-ai/	https://vibrantix.ai/	https://github.com/OnFinance/Maxwell	https://www.covasant.com/products/tprm	https://www.trail-ml.com/agents
Last checked	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-19	2026-10-18	2026-10-18	2026-10-18	2026-10-20	2026-10-20	2026-10-19	2026-10-20	2026-10-20	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-18	2026-10-19	2026-10-18	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-19	2026-10-21	2026-10-21	2026-10-15	2026-10-19	2026-10-20	2026-10-19	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-20	2026-10-21	2026-10-26
Official site	https://www.upguard.com/	https://securityscorecard.com/	https://www.whistic.com/automation-orchestrator	https://blackkite.com/ai	https://www.processunity.com/tprm-ai-agents/	https://safe.security/third-party-risk-management/	https://www.trustcloud.ai/trustlens/	https://www.osapiens.com/en/platform/agent-factory	https://www.anecdotes.ai/agent-library	https://www.complyance.com/ai-agents/evidence-review	https://www.mineos.ai/mira-ai	https://optro.ai/	https://zip.com/products/risk-orchestration	https://www.surecloud.com/gracie/ai-skills-and-agents	https://www.athereon.de/en/product/ai	https://wolfia.com/products/questionnaire-automation	https://riskonnect.com/agentforce-for-riskonnect-ai-agent-library/	https://www.flowforma.com/flowassure	https://visotrust.com/platform/agentic-tprm/	https://www.cleverchain.ai/	https://www.riskxchange.co/agency	https://co-brain.ai/en/questionnaire-agent	https://www.optivalue.ai/en/security-questionnaire-automation/	https://censinet.com/capabilities/third-party-risk	https://www.rescana.com/	https://www.procol.ai/ai-supplier-management/	https://episki.com/product/ai	https://drata.com/	https://www.logicgate.com/	https://zania.ai/	https://www.mindlapse.ai/platform/ernest/	https://sprinto.com/	https://dapro.in/agents	https://getteddy.ai/	https://www.legiscope.com/	https://crest.digital/tprm/	https://vibrantix.ai/	https://github.com/OnFinance/Maxwell	https://www.covasant.com/products/tprm	https://www.trail-ml.com/agents

Side-by-side data is generated from the open dataset. “Vendor-claimed” frameworks are as marketed by each vendor and not verified by Agent Index; framework tags indicate relevance, not certification. Request current quotes from each vendor before buying. This page does not rank or score vendors. Sponsored comparisons, if any, will be labelled.

Use-case comparisons

AML and transaction-monitoring AI agents — 57 listings (Anti-money-laundering, transaction monitoring and financial-crime investigation)
KYC and identity AI agents — 48 listings (Know-your-customer, identity verification and onboarding)
Contract and legal-review AI agents — 33 listings (Contract review, drafting assistance and legal workflow automation)
Privacy operations AI agents — 15 listings (Privacy programme operations, DSRs, consent, data discovery and privacy assessments)
US public-sector and FedRAMP AI agents — 25 listings (US government, FedRAMP and public-sector compliance or security operations)
AI governance agents and platforms — 11 listings (AI inventory, risk assessment, policy and runtime controls for AI systems and agents)
Security questionnaire AI agents — 10 listings (Inbound security questionnaires, SIG/CAIQ-style responses and questionnaire automation)
Procurement and autonomous-sourcing AI agents — 21 listings (Intake-to-award procurement, autonomous sourcing, supplier operations and procurement orchestration)