VendorLens

VendorLens is a web app (with optional Slack/Teams integration) that centralizes third‑party vendor risk management for mid-market companies that are too small for heavyweight GRC suites. It ingests vendor security evidence (SOC 2, ISO 27001, pen test summaries, DPAs), tracks renewal dates, and runs lightweight questionnaires with automated follow-ups. An AI layer extracts key controls, flags gaps (e.g., missing subprocessor lists, weak incident SLAs), and drafts risk summaries your security lead can actually use. The product focuses on speed and clarity: one vendor page shows status, evidence freshness, open issues, and business owner. It also generates audit-ready exports for SOC 2/ISO and procurement. Realistically, this wins only if it’s dead-simple, priced below enterprise suites, and integrates cleanly with procurement and ticketing so it doesn’t become yet another spreadsheet replacement nobody maintains.

← Back to idea list