CyberVadis
Paris third-party cyber risk assessment platform, "Cybersecurity Made in Europe" certified
Quick Overview
| Company | CyberVadis |
|---|---|
| Category | Vendor & Third-Party Risk Management |
| Headquarters | Paris, France |
| Founded | 2018 |
| EU Presence | EU (France) |
| Open Source | No; closed-source SaaS |
| Compliance | Assessments mapped to NIST, ISO 27001 and GDPR; "Cybersecurity Made in Europe" certified |
| Pricing | Not published; sales-led quote |
| Free Option | Not stated by the vendor |
| Replaces | Manual vendor security questionnaires, point-in-time penetration test reports used as a substitute for continuous assessment |
Detailed Review
CyberVadis, founded in Paris in 2018, is the one tool in this category built specifically around third-party cybersecurity risk rather than supply chain or ESG risk, which makes it the closest European match to US names like BitSight and SecurityScorecard — though its assessment model differs from theirs.
Rather than passive, outside-in security ratings scraped from public internet signals, CyberVadis runs AI-drafted questionnaires validated by an in-house team of security analysts, tailored to each vendor's business and technology profile, and benchmarked against NIST, ISO 27001 and GDPR.
The company is active across 110-plus countries from eight offices, employs more than 100 people, and holds the "Cybersecurity Made in Europe" certification, alongside membership in European cybersecurity bodies ECSO, Hexatrust and CESIN — a set of European-specific credentials that the larger US ratings vendors in this category cannot claim.
Pricing is not published; CyberVadis sells through a sales conversation like the rest of this category. The expert-validated, questionnaire-led model is more labor-intensive to scale than a purely automated outside-in rating, which is the trade-off for the higher accuracy that human validation is meant to buy; a buyer wanting instant, automated scoring across a very large vendor list without validation overhead may find a passive ratings model faster to deploy at scale.
What CyberVadis does well
- Assessments validated by an in-house team of security analysts rather than purely automated scoring
- Tailored questionnaires benchmarked against NIST, ISO 27001 and GDPR
- Holds the "Cybersecurity Made in Europe" certification and sits within European cybersecurity industry bodies (ECSO, Hexatrust, CESIN)
- Active in 110+ countries despite being a smaller, more specialised vendor than the big US ratings platforms
Where CyberVadis falls short
- No published pricing; every buyer needs a sales conversation before seeing a number
- Expert-validated questionnaires are more labor-intensive to scale across a very large vendor list than a purely automated rating
- Narrower scope than this page's ESG-focused tools: cybersecurity only, not supply chain disruption or human rights due diligence
Standout feature. Human-validated assessments rather than a purely automated outside-in score, plus the "Cybersecurity Made in Europe" certification, a credential none of the larger US cyber ratings vendors hold.
Pros and Cons
Pros
- Assessments validated by an in-house team of security analysts rather than purely automated scoring
- Tailored questionnaires benchmarked against NIST, ISO 27001 and GDPR
- Holds the "Cybersecurity Made in Europe" certification and sits within European cybersecurity industry bodies (ECSO, Hexatrust, CESIN)
- Active in 110+ countries despite being a smaller, more specialised vendor than the big US ratings platforms
Cons
- No published pricing; every buyer needs a sales conversation before seeing a number
- Expert-validated questionnaires are more labor-intensive to scale across a very large vendor list than a purely automated rating
- Narrower scope than this page's ESG-focused tools: cybersecurity only, not supply chain disruption or human rights due diligence
Alternatives to CyberVadis
Frequently Asked Questions
What is CyberVadis?
CyberVadis is a French automated third-party cybersecurity risk assessment platform, using AI-drafted questionnaires validated by an in-house team of security analysts, benchmarked against NIST, ISO 27001 and GDPR.
Where is CyberVadis based?
CyberVadis is headquartered in Paris, France, which places it under EU (France) law. It was founded in 2018.
What does CyberVadis cost?
CyberVadis does not publish pricing on its website. It is sold through a sales conversation, which is standard for this category.
Who is CyberVadis best for?
Security and procurement teams whose main third-party concern is cybersecurity posture rather than ESG or supply chain disruption.
Is CyberVadis a good alternative to BitSight or SecurityScorecard?
CyberVadis is built as a European alternative to US-based cyber risk rating platforms like BitSight and SecurityScorecard, though its expert-validated questionnaire model differs from their passive outside-in ratings. Check the review above for where it genuinely differs before switching.
How does CyberVadis compare to other Vendor & Third-Party Risk Management tools?
CyberVadis is one of several European vendor and third-party risk management tools covered on this site. See the full Vendor & Third-Party Risk Management category page for how it ranks against its closest European competitors.