Assessors Studio operationalizes CycloneDX Attestations (CDXA): perform assessments, collect evidence, make claims, and issue machine-readable CycloneDX attestations, optionally legally binding for B2B and B2G use cases.

Enterprise AI Third Party Risk Management Platform with 100+ API endpoints, 4 AI Agents, 12 Compliance Frameworks including SOC 2, NIST, ISO 27001, DORA and SIG. Reduces vendor assessment time from 8 hours to 15 minutes.

LT-VRM — a free & open-source Third-Party Risk Management (TPRM) / Vendor Risk Management platform: vendor risk assessments, security questionnaires, 0–1000 risk scoring & ratings, contract management, breach & dark-web monitoring, and a vendor portal. Self-hosted on stock XAMPP (PHP + MySQL). Free for the community by LearnTPRM.com.

AI Governance portfolio case study assessing a high-risk automated loan underwriting system using VerifyWise, EU AI Act, NIST AI RMF, and ISO/IEC 42001 concepts.

Transforming vendor risk management post-breach: from failed checklists to evidence-based assurance.

AI Governance portfolio case study assessing a high-risk automated loan underwriting system using VerifyWise, EU AI Act, NIST AI RMF, and ISO/IEC 42001 concepts.

cans one or more URLs for content categorization using the WhoisXML Website Categorization API.

AI Governance Portfoilio for an Automated Loan Underwring System

Third-party and software supply chain risk assessment of the 2026 open-source compromise wave (Trivy, Bitwarden, Checkmarx → OpenAI/Vercel downstream). Full GRC workflow: methodology, risk register, NIST CSF 2.0 / ISO 27001 / SP 800-161 control mapping, TPRM program response, KRIs, and board briefing. OSFI B-10/B-13 context.

Governance-first security and cost controls. 3 pillars, 220 E-v-O controls. Identity, Supply Chain, FinOps.

Ransomware incident response and enterprise risk assessments aligned with NIST & ISO 27001.

AI-powered procurement and compliance platform that automates vendor risk analysis, contract monitoring, policy validation, and purchase approval workflows using autonomous agents.

Central index for my US-grade GRC, Security Assurance, and TPRM portfolios. Features audit-ready documentation, cross-framework mappings, and evidence-driven vendor risk management.

AI-powered n8n supplier email monitoring workflow that analyzes Gmail messages with Google Gemini, detects sentiment and relationship risk, generates engagement strategies, sends Slack alerts, and logs insights to Google Sheets. Automate supplier communication, vendor risk management, sentiment analysis, and AI email workflows.

A complete third-party vendor risk assessment — from intake through final risk decision — executed against a cloud payroll vendor and rolled up into a companion NIST 800-53 / PCI DSS GRC program.

Al Governance portfolio case study assessing a high-risk automated loan underwriting system using VerifyWise, EU AI Act, NIST RMF, and ISO/IEC 42001 concepts.

Vendor risk assessment of a cloud-based SaaS HR platform evaluated for a financial services firm. Includes risk rating, findings, conditions for approval, and ongoing monitoring recommendations.

Enable organizations to create, manage, and issue CycloneDX machine-readable attestations for structured software transparency and compliance.