Panorays

What the company sells

Panorays sells a platform that detects hidden 3rd to Nth parties, maps their relationships and monitors them for cyber threats. Panorays centralizes a customer's digital supply chain to give nth-level visibility into third-party risk. Panorays assesses vendors using cyber posture ratings, business impact indicators and internal questionnaires. Panorays AI uncovers hidden third-, fourth- and nth-party relationships.

Panorays evaluates risk across four key areas, which include AI-powered questionnaires to capture vendor controls and compliance and external attack surface assessments to detect security gaps. The remaining areas are inherent risk based on each vendor's business and technology profile and the customer's own risk policies. Panorays assesses the cybersecurity posture of each third party by taking into account business criticality, external and internal assessments, and the customer's risk appetite. Panorays tests the security posture of hundreds of assets across third parties' external attack surfaces, highlighting gaps and suggesting remediation steps. Panorays lets customers customize third-party risk assessments with factors such as questionnaire weighting, the impact of critical tests and an adjustable risk rating matrix. Each cyber posture assessment in Panorays is cross-referenced with questionnaire responses and certifications to validate the findings and emphasize any gaps. Panorays assigns a real-time rating to every third-party connection. Panorays AI maps and ranks all 3rd to Nth-party connections based on a customer's evolving Risk DNA.

Panorays monitors the external attack surface and detects vulnerabilities across a customer's digital ecosystem. Panorays continuously monitors third parties' assets and notifies customers of security gaps found in the network, application and human layer. Hundreds of assets are tested for risks such as Dark Web mentions and compromised credentials. Panorays tailors prioritized action plans for each vendor, focusing on the risks that could impact the customer most. Panorays generates remediation tasks automatically from questionnaire responses and external assessments, and customers assign priorities and deadlines. Panorays lets customers collaborate directly with third parties in-platform to mitigate risks and maintain compliance.

Panorays offers automated Nth-Party Discovery to find hidden risks beyond a customer's known suppliers. Supplier AI Risk Detection is a Panorays module that identifies which third parties are using AI through external intelligence, certifications and discovery methods. Panorays labels third parties that use AI at the individual level and provides a dedicated report with a consolidated view. Panorays offers three specialized AI questionnaire templates, designed to assess AI risk at increasing levels of depth. The more advanced Panorays AI templates require direct input from third parties and are aligned with ISO 42001, NIST AI RMF and the EU AI Act. The basic Panorays AI template can be answered using public information with the help of the AI Answer Advisor.

Smart Match combines Panorays' self-hosted AI with Gemini-powered intelligence to deliver fully referenced questionnaire answers. Smart Match references previously answered questions as an internal source and enriches responses with publicly available data. Smart Match uses Gemini to extract verified information from certifications and attestations like SOC 2, DORA and NIS2, or from any uploaded document. Smart Match can automatically fill internal questionnaires. Panorays lets customers invite suppliers to the platform free of charge so that suppliers see the status of their security evaluations. Suppliers respond to the Smart Questionnaire directly on the Panorays platform. Panorays allows customers to message a supplier within the platform. All interaction with suppliers is automatically stored on Panorays for later clarification or auditing.

Panorays lets customers segment suppliers into groups based on business needs and control permissions inside the organization. Based on customer input, Panorays automatically determines the criticality of suppliers to the business and rates them accordingly. Panorays shows when suppliers receive and respond to questionnaires. Panorays grades responses and surfaces missing policies. The Smart Questionnaire includes a dedicated scale for a third party's GDPR readiness. Panorays continuously monitors third parties and reports issues affecting compliance with GDPR, NYDFS, NIST, ISO 27001 and PCI DSS. Panorays lets customers present a full portfolio's security status to a board, including ratings, questionnaire status, geolocation and business impact. Panorays supplier comparison reports compare similar vendors side by side and support selecting vendors for RFPs.

Panorays connects with tools customers already use. Panorays integrates its risk assessments with Archer's systems. Panorays gives customers direct access to their Panorays risk assessments within Salesforce. Panorays incorporates third-party cyber posture and threat intelligence into Splunk. Panorays integrates cyber posture and threat intelligence into Snowflake's AI Data Cloud. Panorays experts work with customers to determine which standards and regulations are relevant for their third parties, and the platform checks that the third parties adhere to them. Panorays operates its TPCRM platform under a formal AI governance framework certified to ISO/IEC 42001.^{[1][3][5][6][7][10][11][12][13][14][15]}

Categories

• Third-party risk and security ratings (primary category)
• Compare Panorays with companies in the same categoryside by side

Headquarters

Not established from our sources

Founded

2016^[2]

Ownership

Not established from our sources

CISO on record

Not yet on our record. Send a verified source

Website

panorays.com

Products and services

Product names as the company writes them; what each does, in our words, from the company's own product pages. Never how well it does it.

• Cybersecurity Posture^[3][6]

  Assesses the cybersecurity posture of each third party.

  Panorays assesses the cybersecurity posture of each third party by taking into account business criticality, external and internal assessments, and the customer's risk appetite. Panorays tests the security posture of hundreds of assets across third parties' external attack surfaces.

• Remediation^[3][6][7]

  Prioritized action plans for each vendor.

  Panorays tailors prioritized action plans for each vendor, focusing on the risks that could impact the customer most. Panorays generates remediation tasks automatically from questionnaire responses and external assessments.

• Supplier AI Risk Detection^[8]

  Identifies which third parties are using AI.

  Supplier AI Risk Detection is a Panorays module that identifies which third parties are using AI through external intelligence, certifications and discovery methods. Panorays offers three specialized AI questionnaire templates, designed to assess AI risk at increasing levels of depth.

Competitors and alternatives

The other companies on our record filed under the same categories, category by category: first those that lead with that category and share more of Panorays's categories, then alphabetical. A list from the record, never a ranking.

• On third-party risk and security ratings, Panorays competes with Bitsight, Black Kite, iCOUNTER, Prevalent, RiskRecon, SecurityScorecard, UpGuard, Whistic, Anecdotes, Apptega and 28 more.

What review platforms show

The headline rating and review count each platform showed in public search results on the day we looked, with the link. We do not read or reproduce the reviews, and a rating is the platform's, not ours.

• G2 · 4.3 out of 5^[4]seen November 10, 2026

References

Every fact above cites one of these by number. Tier A is the company itself, a regulator or a filing; tier B is trade or business press.

1. [1]panorays.comPanorays · panorays.com · published June 22, 2026 · Tier A: the company, a regulator or a filing
2. [2]Forrester names panorays a leader 2024Panorays · panorays.com · published May 27, 2024 · Tier A: the company, a regulator or a filing
3. [3]Third-Party Cyber Risk & Attack Surface Mgmt | PanoraysPanorays · undated page, accessed October 27, 2026 · Tier A: the company, a regulator or a filing
4. [4]Panorays Reviews 2026: Details, Pricing, & Features - G2G2 · undated page, accessed October 27, 2026 · Tier C
5. [5]Supply Chain Risk Management | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
6. [6]Cybersecurity Posture | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
7. [7]Continuous Cyber Security Monitoring | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
8. [8]Third-Party AI Risk Assessment | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
9. [9]Smart Match: AI-Powered Questionnaire Automation | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
10. [10]Communication | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
11. [11]Vendor Portfolio Management | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
12. [12]Regulatory Compliance Monitoring | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
13. [13]Reporting & Dashboards | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
14. [14]Integrations | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing
15. [15]Professional Services | PanoraysPanorays · undated page, accessed November 10, 2026 · Tier A: the company, a regulator or a filing

Last verified November 2, 2026. Our code found the quoted passage behind each fact on its source page when the fact was recorded, and re-checks every record against its sources each month.

Recorded September 27, 2026, expanded November 10, 2026 from the references above.

Work for Panorays? Suggest a correction to a fact on this page (with a source on your own domain), or claim this entry by publishing a small file on your domain.