Freedom251 › Third Party & Supplier Risk Management Software
RiskXchange
What RiskXchange is
RiskXchange is a third-party risk management platform that combines outside-in security ratings with evidence supplied by vendors and continuous monitoring. Its features include 0–900 risk scores, dark-web breach correlation, compliance mapping, and remediation tracking; the company says its outside-in network covers more than five million companies. The Agency includes five lead agents and 27 specialists for vendor onboarding, evidence assessment, monitoring, remediation, and regulatory reporting. NOVA can contact vendors by email, WhatsApp, or in-app chat, and can be paused for an individual vendor. Integrations include Jira, ServiceNow, Archer, OneTrust, Slack, and Microsoft Teams. Professional and Enterprise include a REST API, and webhooks support event-driven workflows; custom integrations are available on Enterprise. RiskXchange says it holds ISO 27001 and SOC 2 Type II certifications, and offers UK, EU, and US environments with tenant data kept in the selected region. Essentials costs £14,900 a year; Professional costs £31,500 a year. Enterprise has a listed floor of £75,000 a year, with custom billing.
Who it suits
RiskXchange is aimed mostly at regulated mid-market and enterprise organisations, including those in financial services, insurance, healthcare, technology, and retail. Its vendor limits and assessment allowances vary by plan.
What it does well
- Monitors vendors and tracks remediation continuously.
- Maps multiple compliance frameworks.
- NOVA can contact vendors through three channels.
- Regional environments are available in the UK, EU, and US.
- A free SnapShot evaluates one live vendor.
What to know first
- No free plan is listed.
- Essentials is limited to 50 monitored vendors.
- REST API is included only in Professional and Enterprise.
- Enterprise pricing is custom, with a 75000.00 GBP yearly floor.
Plans
| Plan | Billed and limits | Price |
|---|---|---|
| Essentials | £14,900/ year · 50 vendors monitored · 25 assessments per year · unlimited user seats | £14,900 a year |
| Professional | £31,500/ year · 150 vendors monitored · 200 assessments per year · unlimited user seats | £31,500 a year |
| Enterprise | Custom; floor £75,000 / year · Unlimited vendors monitored · unlimited assessments · unlimited user seats | £75,000 a year |
As riskxchange.co lists them, read 8 Oct 2026. The maker's own page has the final word.
Verdict
RiskXchange brings vendor evidence, outside-in ratings, and continuous monitoring into a third-party risk platform. Its tiered vendor and assessment limits, along with its annual plan costs, are important points to weigh.
Facts from RiskXchange's own pages
- AI agents
- The Agency comprises five lead agents and 27 specialists covering vendor onboarding, evidence assessment, continuous monitoring, remediation and regulatory reporting. · riskxchange.co, 8 Oct 2026
- API and events
- Professional and Enterprise include a REST API, and the platform supports webhooks for event-driven workflows. · riskxchange.co, 8 Oct 2026
- Company
- RiskXchange was founded in 2020 and is headquartered in London, with offices in Dubai and Austin. · riskxchange.co, 8 Oct 2026
- Compliance frameworks
- The platform says it covers DORA, NIS2, ISO 27001, NIST CSF, PCI DSS, APRA CPS 230, ADHICS and GDPR. · riskxchange.co, 8 Oct 2026
- Core features
- The platform offers continuous monitoring, 0–900 risk scoring, dark-web breach correlation, compliance framework mapping and remediation tracking. · riskxchange.co, 8 Oct 2026
- Data access
- The company says its staff access tenant data only through explicit, time-bound, audit-logged support sessions approved by the customer. · riskxchange.co, 8 Oct 2026
- Data retention
- Tenant data is retained for 90 days after termination by default and then permanently deleted with a verifiable destruction record; Enterprise can have custom retention windows. · riskxchange.co, 8 Oct 2026
- Founded
- 2020 · riskxchange.co, 28 Sept 2026
- Free evaluation
- A free SnapShot runs NOVA, ARIA and REX on one live vendor and provides a posture report within 24 hours, with no procurement commitment. · riskxchange.co, 8 Oct 2026
- Headquarters
- London · riskxchange.co, 28 Sept 2026
- Integrations
- Out-of-the-box integrations include Jira, ServiceNow, Archer, OneTrust, Slack and Microsoft Teams; custom integrations are available on Enterprise. · riskxchange.co, 8 Oct 2026
- Intended customers
- RiskXchange says it is used mostly by regulated mid-market and enterprise organisations, commonly in financial services, insurance, healthcare, technology and retail. · riskxchange.co, 8 Oct 2026
- Monitoring network
- RiskXchange says its outside-in network covers more than five million companies. · riskxchange.co, 8 Oct 2026
- Product
- RiskXchange is a third-party risk management platform that combines outside-in security posture ratings with vendor-provided evidence and continuous monitoring. · riskxchange.co, 8 Oct 2026
- Security and residency
- RiskXchange says it holds ISO 27001 and SOC 2 Type II certifications and hosts regional environments in the UK, EU and US, with tenant data kept in the selected region. · riskxchange.co, 8 Oct 2026
- Vendor communication
- NOVA can contact vendors by email, WhatsApp and in-app chat, and customers can pause it for an individual vendor. · riskxchange.co, 8 Oct 2026