Phishable is a project that logs misconfigured DNS that can be exploited to conduct phishing attacks & spoof domains. Phishable helps orgs investigate phishing campaigns, gauge third-party risk & mitigate these risks. All orgs on the list are exposed to higher risk of threat actors gaining initial entry to their org, supply chain, and customers.

Enterprise AI Third Party Risk Management Platform with 100+ API endpoints, 4 AI Agents, 12 Compliance Frameworks including SOC 2, NIST, ISO 27001, DORA and SIG. Reduces vendor assessment time from 8 hours to 15 minutes.

Professional Governance, Risk & Compliance Portfolio

Simple CLI script to assist GRC analysts with risk ranking vendors.

Enterprise third-party risk assessment framework covering vendor security evaluation, inherent risk scoring, compliance mapping, and remediation governance.

Third-party vendor risk assessment template with questionnaire, scoring rubric, risk categories, and remediation tracking. For supply chain security and compliance programs.

Spreadsheet-driven vendor risk assessment model — tiers third-party suppliers by risk exposure using a weighted scoring methodology

GRC project analysing risks of AI-driven compliance automation and false assurance in third-party risk management (SOC 2 / ISO 27001)

A comprehensive third-party risk management framework for a global media streaming platform. Focuses on vendor classification, content security, intellectual property protection, and compliance monitoring, delivering risk maps, due diligence checklists, and strategic recommendations

Vendor-agnostic pattern for automating vendor risk governance and translating reassessment cadence into executive oversight.

Auto-generate, distribute, and score vendor risk assessment questionnaires based on vendor service type, data access level, geography, and regulatory exposure.

8 hands-on CompTIA SecurityX labs covering enterprise security architecture, zero trust, IAM, PAM, federation, cryptography, PKI, data protection, vulnerability management, threat modeling, detection engineering, incident response, resilience, GRC, risk, compliance, third-party security, and exam review.

Transforming vendor risk management post-breach: from failed checklists to evidence-based assurance.

Bitsight Security Ratings for Splunk App provides prebuilt dashboards, modular input collection, lookup-backed enrichment, workflow actions, setup pages, alert actions, additional functionality that is not found in the BitSight Security Ratings UI and documentation views for BitSight data in Splunk.

Conducted a proactive DPIA for a Nigerian fintech, identifying high-risk gaps in cross-border transfers and consent management.

Practical playbook for Third-Party Risk Management in healthcare environments.

Discover Nth-party vendor relationships (3rd, 4th, and deeper) for a domain from public signals — DNS, certificate transparency, trust-center subprocessors, web traffic, and more. A fast, offline-capable GRC Engineering CLI in Rust.

Operational AI Governance resources, implementation methodology, practitioner toolkits and decision models built around the OPERA Methodology.

Third-Party Risk Assessment (TPRA) project for a fintech organisation, covering risk identification, control evaluation, residual risk analysis, and vendor decision-making aligned with ISO 27001, NIST, and UK GDPR.

Third-party / supply-chain breach exposure monitor — private register, never uploaded (stdlib)