Supply chain monitoring
Every supplier, scored from the outside: leaked employee credentials, infostealer infections, dark web and ransomware leak-site mentions, exposed infrastructure and weak email security. One grade per vendor, with the evidence to act on it.
Attackers rarely break into a well-defended target. They go through a supplier: a stolen login, a hacked mailbox, or a partner that was already breached.
When a supplier's mailbox is taken over, attackers send real-looking invoices with new bank details to that supplier's clients. This is business email compromise, and it starts with a vendor's leaked password.
Your data sits in their systems. A supplier listed on a ransomware leak site, or with staff in fresh infostealer logs, is a live risk to you, not just to them.
An annual assessment describes a vendor's intentions. Continuous vendor risk monitoring shows what is exposed today, with evidence.
DORA, NIS2, ISO 27001 and cyber insurance questionnaires expect ongoing third-party risk management of critical suppliers, and records to show for it.
One vendor page holds the score, the reasons behind it and the evidence to send to the supplier. Click a check to see it.
Each supplier gets a score from 0 to 100 and a grade from A to F. The score moves as findings open and close, so it is a live measure of vendor risk, not a snapshot from the last review.
Risk highlights lead with what matters most: the vendor named on a ransomware leak site, staff logins in fresh infostealer logs, the dark web risk score, and email hardening gaps that make invoice fraud easier.
The scorecard splits the grade into categories such as dark web intel, breach exposure, attack surface and email and DNS hygiene. The lowest one is the biggest lever to improve the grade, and the top risk contributors show which findings cost the most points.
Every finding has its source, date, severity reason and the affected hosts or accounts. Send the supplier a precise fix request instead of a vague concern, and keep the record for audits and renewals.
DeXpose finds each vendor's subdomains, resolves them to IP addresses, flags what sits behind a CDN and checks TLS certificates, all from the outside. You see how big and how tidy a supplier's footprint is.
Supply chain monitoring uses the full DeXpose collection, refreshed all day. These are the numbers behind it.
Public breaches, ULP dumps, combo lists and infostealer logs, matched to each vendor's domains and apps.
Ransomware leak sites, dark and deep web markets and forums, Telegram and Discord channels where vendor data is sold or discussed.
Subdomains, DNS and mail security records, IP resolution, CDN detection and TLS certificates.
News of incidents, disclosures and regulatory actions at the vendor, lined up with the technical findings.
No agents, no vendor onboarding, no questionnaires to chase.
Enter suppliers by domain or import your third-party list. Group and tag them by criticality, owner or business unit.
Breach data, stealer logs, leak sites, infrastructure and news are collected and matched to every vendor around the clock.
Each vendor gets a grade and a scorecard. New critical or high findings alert you in the dashboard, by email, or in Slack, Teams, Jira and ServiceNow.
Warn finance about a compromised vendor mailbox, send the supplier a precise fix request, limit access while it is fixed, and keep the record.
Short answers on vendor risk monitoring and how DeXpose does it.
It is vendor risk monitoring from the outside. DeXpose watches the companies you depend on for signs they are compromised: leaked staff logins, infostealer infections, ransomware and leak-site mentions, exposed servers and weak email security. You get a risk score for each vendor and the evidence behind it.
A questionnaire is what a vendor says about itself once a year. Monitoring is what is actually exposed today. Most third-party risk management teams use both: the questionnaire for the contract, monitoring for the months in between.
No. Everything comes from external sources: breach data, infostealer logs, dark web and leak sites, DNS, certificates and public infrastructure. Add a vendor by domain and monitoring starts right away.
Yes, and it is one of the most common frauds. When a supplier's mailbox is taken over, attackers send real-looking invoices with new bank details to that supplier's customers. Knowing which vendors have exposed logins lets you warn finance before a payment goes out.
Leak-site listings, new breach records and stealer logs are collected all day. A vendor that shows up on a ransomware leak site or in a fresh stealer log raises a finding and an alert within minutes of collection.
As many as your plan allows, from a few critical suppliers to your whole third-party list. Vendors can be grouped and tagged so procurement, security and compliance each see the ones they own.
Run a free dark web report on any supplier's domain, or book a demo to monitor your whole third-party list.