ImmuniWeb TPRM: Revolutionising third-party risk management

14 May 2025

According to the 2025 Data Breach Investigations Report (DBIR) by Verizon, the number of data breaches linked to third parties doubled in a single year, attaining a stunning 30% share of all data breaches that occurred last year.

Modern-day cybercriminals are militarily rational and pragmatic. They continually probe the defense perimeter of their victims to spot the weakest link – including victim’s suppliers, IT vendors, various consultants, law firms and accountants – to steal the data they need. Instead of wasting their time, money and other resources by attacking their well-protected victims directly, cyber gangs simply take what they want from under-protected third parties that have the same data in their possession.

Versions of ISO 27001 and PCI DSS

In response, regulators enact legislation, such as EU DORA or New York DFS Cybersecurity Regulation

In response, regulators enact legislation, such as EU DORA or New York DFS Cybersecurity Regulation, to expressly require covered entities to conduct regular and holistic assessments of their third-party risks and threats.

Pioneering industry standards, including the most recent versions of ISO 27001 and PCI DSS, likewise require organisations to address the full spectrum cyber threats stemming from their third parties.

Key challenge of TPRM solutions

The key challenge is that most TPRM solutions, currently available on the global market, either offer a document-based and questionnaire-based formalistic approach to TPRM or rather provide a quick and superficial assessment of vendor’s external assets for minor misconfigurations.

To address the gap and help companies better fulfil their regulatory duties, ImmuniWeb launches ImmuniWeb® Discovery TPRM, which offers a comprehensive and in-depth overview of the vendors’ cyber risks, threats and incidents.

ImmuniWeb Discovery TPRM reports

Being a separate package of the flagship ImmuniWeb® Discovery, it elegantly complements CTEM

Being a separate package of the flagship ImmuniWeb® Discovery, it elegantly complements the Cyber Threat Exposure Monitoring (CTEM) packages of the vanguard product.

To reduce the noise and save time, ImmuniWeb Discovery TPRM reports only high and critical risks – including vulnerabilities, misconfigurations, data breaches, and security incidents of the vendors – that are relevant to their own cybersecurity and data protection via a simple and centrally manageable dashboard.

Actionable remediation guidelines

All findings are provided with actionable remediation guidelines to ensure that exposed third parties can rapidly mitigate the discovered problems.

Adding a new vendor to the dashboard takes just a few seconds, while a complete scan may last up to 72 hours to ensure a comprehensive and in-depth detection of vendor’s risks and threats, which most other solutions frequently fail to detect due to technical complexity or superficial analysis.

Advanced TRPM solution

All findings are provided with actionable remediation guidelines to ensure that exposed third parties

Dr. Ilia Kolochenko, CEO & Chief Architect at ImmuniWeb, says: “We are delighted to deliver the new product that combines innovation with maturity thanks to over five years of our experience in external attack surface management, Dark Web monitoring and cyber threat intelligence."

"Numerous of our customers and partners have been looking for an advanced TRPM solution on the market – and we finally have exactly what they want."

ImmuniWeb® AI Platform

Kolochenko added: "ImmuniWeb® Discovery TPRM is a perfect enhancement for our award-winning ImmuniWeb® AI Platform, which offers over 20 synergised solutions in a single place. We are truly grateful to our customers and partners from over 50 countries, who continually support our hard work and motivate us to continue the innovation, research and technical excellence."

"The full credit for our unstoppable success goes to the incredible ImmuniWeb team that builds and continually improves our technology on the rapidly growing cybersecurity and compliance market. More exciting things and announcements are coming soon, please stay tuned.”