Freedom251 › Third-Party Risk Management Software
FortaRisks Third-Party Risk
What FortaRisks Third-Party Risk is
FortaRisks Third-Party Risk monitors vendor security by comparing questionnaire responses with external scans of vendor attack surfaces and flagging differences between declared and observed posture. Assessments offer 24-, 39-, or 139-question levels across nine domains and 35 control domains, with six optional thematic modules. Answers map to SCF controls, with stated coverage for NIST, ISO 27001, SOC 2, and GDPR. Vendors use a passwordless portal to reuse answers across clients and share versioned evidence without buying a license. Each vendor receives a 0–100 score and A+ to F grade, with more than 500 finding types applied; FortaRisks says the first alert arrives within seven days. Tools include configurable alert policies, remediation deadlines and reminders, bulk import, and five XLSX-exportable registers. An optional read-only OT/ICS scanner supports industrial vendors. The web platform is built and hosted in Canada, and AI enrichment is optional. Pricing starts at $15,000/yr.
Who it suits
It is aimed at regulated sectors and critical infrastructure, including finance, healthcare, manufacturing, energy, public sector, and SaaS organizations. Teams managing vendor questionnaires, evidence, monitoring, and remediation can use it.
What it does well
- Continuous questionnaire and attack-surface checks
- Passwordless vendor portal
- Framework mapping for NIST, ISO 27001, SOC 2, GDPR
- Configurable alerts and remediation requests
- Optional read-only OT/ICS scanning
What to know first
- Pricing starts at $15,000/yr
- No free plan
- Essential excludes questionnaires
- Plan vendor limits range from 10 to unlimited
Limits
Essential supports up to 10 monitored vendors and does not include questionnaires. Advanced supports up to 50 monitored vendors and 25 third-party questionnaires per year; Enterprise allows unlimited monitored vendors and questionnaires.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Advanced | Up to 50 monitored vendors · 25 third-party questionnaires/year · 2 expert workshops/year · priority support | On request |
| Essential | Up to 10 monitored vendors · questionnaires not included · expert workshops on demand | On request |
| Enterprise | Unlimited monitored vendors and questionnaires · 5 expert workshops/year · dedicated CSM · integrations and Risk Engine scoped to environment | On request |
As fortarisks.com lists them, read 4 Oct 2026. The maker's own page has the final word.
Getting started
- Open the FortaRisks platform website
- Select a paid plan based on monitored-vendor needs
- Invite vendors to the passwordless portal using emailed access codes
- Configure questionnaire levels, domains and optional modules
- Set alert policies, remediation deadlines and reminders
- Connect available integration categories for your environment
Verdict
FortaRisks combines questionnaires, external scanning, scoring, evidence sharing, and remediation workflows for third-party risk. Its Canadian hosting and optional AI allow organizations to run core capabilities without AI enrichment.
Questions
How much does FortaRisks cost?
Pricing starts at $15,000/yr. Plan pages list Essential, Advanced and Enterprise, with plan prices not provided.
Is there a free plan?
No. FortaRisks is a paid product.
Which platforms does it support?
The platform is provided on the web.
Can vendors use it without buying a licence?
Yes. Vendors can access a passwordless portal, reuse answers across clients and share a versioned evidence library without purchasing a licence.
Does it use AI?
AI enrichment is optional per workspace. It can assist with questionnaire pre-filling, inconsistency flagging and vendor-file summaries, while core capabilities work without it.
What support comes with the plans?
Advanced and Enterprise include priority support. Enterprise also includes a dedicated customer success manager.
Facts from FortaRisks Third-Party Risk's own pages
- AI option
- AI enrichment is optional per workspace and can assist with questionnaire pre-filling, inconsistency flagging and vendor-file summaries; the page says core capabilities work without it. · fortarisks.com, 4 Oct 2026
- Framework mapping
- Questionnaire answers map to SCF controls, with stated coverage for NIST, ISO 27001, SOC 2 and GDPR. · fortarisks.com, 4 Oct 2026
- Headquarters
- Saint-Augustin-de-Desmaures, Quebec, Canada · fortarisks.com, 28 Sept 2026
- Integrations
- The integrations page lists Microsoft 365 and Azure, ITSM and ticketing, SIEM and SOAR, identity and SSO, cloud and infrastructure, and notifications as integration categories. · fortarisks.com, 4 Oct 2026
- Intended users
- FortaRisks describes its platform as built for regulated sectors and critical infrastructure, and lists finance, healthcare, manufacturing, energy, public sector and SaaS among its sectors. · fortarisks.com, 4 Oct 2026
- OT/ICS
- The native OT/ICS scanner can be included for vendors categorized as industrial and runs read-only with adapted rate limiting. · fortarisks.com, 4 Oct 2026
- Plan limits
- The pricing page lists up to 10 monitored vendors on Essential, up to 50 on Advanced and unlimited monitored vendors on Enterprise. · fortarisks.com, 4 Oct 2026
- Purpose
- FortaRisks continuously cross-checks vendor questionnaires against external scans of vendor attack surfaces and flags divergences between declared and observed posture. · fortarisks.com, 4 Oct 2026
- Questionnaires
- The product offers 24-, 39- and 139-question assessment levels across 9 domains and 35 control domains, plus 6 optional thematic modules. · fortarisks.com, 4 Oct 2026
- Remediation operations
- The product provides 12 configurable alert policies, remediation requests with deadlines and reminders, bulk vendor import and five XLSX-exportable registers. · fortarisks.com, 4 Oct 2026
- Scanning and scoring
- FortaRisks assigns a 0–100 score with A+ to F grades, applies more than 500 finding types per vendor and states that the first alert arrives within 7 days. · fortarisks.com, 4 Oct 2026
- Security and hosting
- FortaRisks says the platform is built and hosted in Canada, and that customer data is not used to train an AI model. · fortarisks.com, 4 Oct 2026
- Support
- FortaRisks says Advanced and Enterprise include priority support, while Enterprise includes a dedicated customer success manager. · fortarisks.com, 4 Oct 2026
- Vendor portal
- Vendors can access a passwordless portal using an emailed code, reuse answers across clients and share a versioned evidence library without buying a licence. · fortarisks.com, 4 Oct 2026
Where FortaRisks Third-Party Risk stands on Freedom251
- Third-Party Risk Management Software#18 of 31