Deepinfo TPRM review
A ratings-led TPRM tool for continuous vendor discovery, scoring, evidence, and alerts.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Deepinfo TPRM is a third-party risk management product for security, procurement, and risk teams overseeing vendors, suppliers, and partners. Its approach centers on continuous external observation rather than point-in-time questionnaires. The product discovers third parties through vendor inventories, infrastructure signals, scripts, certificates, and DNS records, then assesses exposed assets and vulnerabilities. Per-vendor assessments include severity classifications and attached evidence, while automated scoring covers both individual vendors and the wider portfolio.
Its strongest fit is continuous monitoring backed by external signals. Seven-layer scanning spans Whois, IP-Whois, DNS, SSL, ports, HTTP, and web data, giving teams a structured view of observable vendor risk. Findings can be mapped to PCI DSS, HIPAA, OWASP, CWE, CAPEC, and WASC. Portfolio dashboards support categorization, filtering, and trend views, while alerts and workflow routing can respond to score changes and findings. Integrations include Splunk, Microsoft Sentinel, IBM QRadar, Elastic Security, Sumo Logic, Cortex XSOAR, Jira, ServiceNow, PagerDuty, Slack, Microsoft Teams, and Tenable.
Deepinfo TPRM is a strong choice for organizations that prioritize externally observed evidence, continuous ratings, compliance mapping, and integration with established security operations workflows. According to the vendor’s pricing model, access is contact-sales and scope-based; the free threat exposure report is a snapshot rather than an unlimited TPRM plan. Teams that need a questionnaire library for supplier self-assessments should look elsewhere, as should buyers seeking AI features within the stated product scope. The product is better suited to externally driven monitoring than to a questionnaire-led assessment program.
Deepinfo TPRM pros and cons
- Where it wins
- Seven-layer scanning covers DNS, SSL, ports, HTTP, and web data.
- Evidence-backed vendor and portfolio risk scoring supports ongoing review.
- Broad security, workflow, cloud, and identity platform integrations.
- Where it doesn't
- No questionnaire library for supplier self-assessments.
- No AI features are included in the stated product scope.
- Pricing is quote-only and there is no free TPRM plan.
Deepinfo TPRM fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update