See the risk beyond your own organisation.
Realm continuously monitors the external cyber security posture of the suppliers and third parties your organisation depends on, so you can see changes, potential vulnerabilities and where attention may be required.
Continuous supplier monitoringHuman investigationStart with one critical supplier
Why it matters
Their cyber risk could become your risk.
Your suppliers may hold your data, access your systems, provide critical technology or deliver services you rely on. If one of them is compromised, the consequences may not stop with them.
Questionnaires and periodic assessments still matter, but they only tell you what was true when the assessment happened. A supplier can complete a questionnaire today and have a new vulnerability tomorrow.
What Realm delivers
Their exposure. Your visibility.
01
Continuous supplier monitoring
Realm monitors your selected supplier domains, so you can see changes between formal assessments.
02
External security posture
See what can be observed about each supplier’s cyber security position from outside their organisation.
03
Vulnerability and exposure identification
Surface potential externally observable vulnerabilities, exposures and changes that could indicate increased risk.
04
Supplier comparison
Compare selected suppliers to understand where potential risk may be greater and where attention may be required.
05
Human investigation
Technology identifies signals. ConnectProtect analysts can investigate meaningful findings and explain what they mean.
How it works
From signal to supplier conversation.
01
Monitor
Select the suppliers and third parties that matter to your organisation.
02
Detect
Realm continuously monitors their external cyber security posture for changes and potential exposure.
03
Understand
Review findings and see which suppliers or issues need greater attention.
04
Engage
Use the information for better-informed supplier conversations and your wider third-party risk management process.
Your role and the service boundaries
- You choose which suppliers to monitor and decide how to follow up with them.
- Realm complements your existing due diligence: questionnaires, certifications, contractual controls and audits. It doesn’t replace them.
- Realm can’t guarantee that a supplier is secure. It gives you another source of ongoing visibility to support better third-party risk decisions.
Fit and differentiation
You don’t need to monitor everyone. Start with who matters.
Start with the suppliers whose compromise, disruption or cyber incident could have the greatest impact on your organisation, then build your Realm as your requirements grow.
Prioritise suppliers that
- Hold your data or access your systems
- Provide critical technology or essential services
- Support important business processes
- Could significantly affect your customers
- Could create regulatory or reputational consequences if compromised
Built for everyone responsible for supplier risk
IT & Security
Visibility of cyber risk beyond your own organisation.
Risk & Compliance
Continuous external monitoring within existing TPRM processes.
Procurement
Cyber security information in supplier selection and reviews.
Leadership
Understand risks from the organisations you depend on.
Cyber insurance
Support your wider approach to managing third-party cyber risk.
Related product
Want the same outside-in view of your own organisation? Horizon provides continuous external attack surface management for your business.
Pricing
Your business grows. Your Realm bill doesn’t.
One simple, predictable price per company domain, regardless of company size. No employee bands, no company-size tiers and no usage calculations.
Monitor 10 Suppliers
12-month commitment
£3000 / month
Rolling monthly
£3600 / month
More than 10 suppliers?
Let’s build your Realm
If you need visibility across a larger supplier portfolio,
we’ll build a Realm around your requirements.
Price on application
Their business is part of your business.
Build continuous visibility of the suppliers and third parties your organisation depends on. Start with one critical supplier or build visibility across your wider supply chain.
