CYKHUB covers the entire third-party risk lifecycle, from vendor security ratings to audit, with the rigor of a GRC platform and none of the overhead.
30% of breaches now involve a third party. That's double last year.
Verizon Data Breach Investigations Report 2025
CYKHUB manages the entire vendor lifecycle in a single platform.
Your vendor data is centralized, tracked over time and actionable, so you can run a complete TPRM program without juggling a dozen disconnected tools.
The resultA mature, audit-ready TPRM program you can actually sustain.
CYKHUB plugs into your existing workflows. No lengthy implementation, no process overhaul.
Upload an export from Excel, a CSV file or your ERP.
Based on system access, sensitive data, operational dependencies, hosting and managed services.
Security questionnaires, evidence collection and external attack surface analysis.
Centralize findings, action plans and deadlines in a single dashboard.
CYKHUB ships with leading security frameworks and regulations out of the box. Whether you answer to auditors, regulators or enterprise customers, you never start from a blank page: structure, evidence collection and audit prep are already in place.
Spreadsheets are simple and free. Until a vendor becomes a real problem.
| Criterion | Spreadsheets | CYKHUBRecommended |
|---|---|---|
| Reliability | One typo can drop a critical vendor off your radar. | Automated scoring with always-current data. |
| Scale | Breaks down beyond a few dozen vendors. | Scales from dozens to thousands of vendors, with no manual chasing. |
| Evidence & audit | No change history, so you can't prove compliance. | Full audit trail and audit-ready exports. |
| Monitoring | None. You find out about incidents months too late. | Continuous monitoring with real-time alerts. |
CYKHUB is built by Cykrony, a cybersecurity firm whose CISOs work hands-on with mid-market companies on governance, security operations and compliance. We built the platform we wanted to use ourselves.
Only pay for what you use: vendors assessed, campaigns launched and modules activated. Pricing scales with the maturity of your TPRM program.
| Credit | What it includes | Price per unit (excl. tax) |
|---|---|---|
| Security rating | Automated rating of a vendor's security posture | €400 |
| Security questionnaire | Standardized assessment campaign (ISO 27001, NIS2, DORA, TISAX) | €950 |
| Risk assessment | Formal risk analysis based on EBIOS RM or ISO 27005 | €3,500 |
Third-party risk management (TPRM) is the practice of identifying, assessing and monitoring the security risks posed by vendors and partners that have access to your data or systems. Frameworks like ISO 27001 and regulations like NIS2 and DORA now make it a requirement, not just a best practice.
No. CYKHUB is designed to be run by your own team, with no deep security expertise required. Cykrony's experts are available to review questionnaires or support you during audits.
ISO 27001, NIS2, DORA, EBIOS RM, ISO 27005 and TISAX are built in. CYKHUB structures evidence collection and audit prep for each one, whether you're directly subject to EU regulations or selling to companies that are.
Import your vendor list (Excel, CSV or ERP export) and have your first scope up and running within days. No lengthy implementation or process overhaul required.
In the EU. All hosting and data remain in Europe, which supports your GDPR and data residency requirements.
It's usage-based: you pay for vendors assessed, campaigns launched and modules activated. Pricing scales with the maturity of your program.
EU-hosted · ISO 27001, NIS2 & DORA built in · No credit card required