TPRM Pricing Aligned to Your Needs

We work with you to create a pricing strategy that aligns to your third-party portfolio

Get a Quote


Customized Pricing for Unique Vendor Ecosystems

Third-party cyber risk management isn’t a one size fits all concept, which is why we’ve built an end to end TPCRM solution that is priced based on the size and inherent risk of your third-party ecosystem.

How it Works

We offer third-party cyber risk management as an annual subscription service and your subscription price is based on the number of assessments you order or share.

  1. We use CyberGRX Auto Inherent Risk (AIR) Insights™ to risk rank your portfolio at no cost.
  2. Once we identify your assessment population, we recommend an assessment level for each vendor.
  3. We work with you to understand your goals and timeline and build proposal based on your unique ecosystem and needs.
  4. We apply volume discounts depending on ecosystem size and operational goals
  5. We disperse the cost of validated assessments across the community based on the exchange economy - so all assessments are below cost.

Typical engagements start at $120,000.

This includes validated assessments data, and unlimited access to the CyberGRX Exchange, AIR Insights, and residual risk benchmarking. Organizations also benefit from continuous monitoring, threat intelligence feeds, proprietary analytics, and best-in-class customer service and support.

Without CyberGRX

With CyberGRX

Vendor risk management technology platform


CyberGRX SaaS Exchange

included in annual subscription

Sending and managing Excel-based questionnaires

1 Person = $96,000

Automated data collection and curation

included in annual subscription

Dedicated TPRM analysts


Assessment, validation, and quality assurance via CyberGRX analysts

included in annual subscription

Performing control validation


Shared cost model with CyberGRX’s Exchange

included in annual subscription

total cost


total cost



Ready to Talk Pricing?

Reach out today for a complimentary inherent risk ranking and program proposal