Continuous vendor monitoring for the 11 months between assessments.
A vendor questionnaire is accurate the day it is answered. Continuous vendor monitoring watches live external exposure on every vendor and compares it against the posture they reported, so a real change surfaces in days, not at next year's reassessment. Built to close the monitoring gap without adding an alert feed nobody reads.
Monitoring that compares, not just collects.
Continuous external signal collection
Live external exposure scanning runs on every monitored vendor with no vendor-side setup. Signals accumulate on the vendor record itself, next to criticality and assessed posture, not in a separate scoring silo.
- External exposure scanned continuously per vendor
- No agents or vendor-side installation required
- Signals land on the vendor risk record, not a silo
Exposure compared against reported posture
Most monitoring tools tell you a score moved. ThirdSentry compares what a vendor's live exposure shows against what their completed assessment claimed, and flags the moment the two stop agreeing. That comparison is the alert worth waking up for.
- Live exposure reconciled against assessed posture
- Divergence flagged, not just score movement
- Both signals on one vendor data model
Thresholds that control alert noise
Drift only becomes an alert after it crosses a defined threshold and clears severity tiering. Minor movement is recorded silently on the vendor record. Your team sees the changes that warrant action, designed to cut alert volume dramatically compared to raw score feeds.
- Configurable drift thresholds per signal
- Minor drift logged, not alerted
- Alerts reserved for material change
Severity tiering: Minor, Moderate, Severe
Every drift event is tiered Minor, Moderate, or Severe before it reaches a human. Severe events on critical vendors escalate immediately. Moderate events queue for review. The tier, the trigger, and the timestamp are all preserved for audit.
- Three-tier severity model on every drift event
- Business criticality weights the escalation path
- Full event history retained on the vendor record
Baselines reset only on completed assessments
The monitoring baseline resets only when a vendor completes a new assessment, never because a score quietly recovered. A vendor cannot drift, bounce back, and look clean. Discipline like this is what makes the monitoring trail defensible to an examiner.
- Baseline anchored to completed assessments
- Score recovery never erases a drift event
- Every baseline change is audit-logged
Incident to reassessment in one workflow
When monitoring surfaces a Severe event or a security incident, you can trigger a targeted reassessment from the same screen. The event, the reassessment, and the resulting remediation tasks all attach to one vendor record, so the story stays whole.
- Targeted reassessment triggered from a drift event
- Remediation tasks generated on material divergence
- Parent risk record updates automatically
Three steps from setup to value.
Turn monitoring on
Enable continuous monitoring on any vendor in your inventory. External exposure scanning starts immediately, no vendor-side setup, and the first baseline anchors to their most recent completed assessment.
Let thresholds do the filtering
Drift accumulates silently until it crosses your thresholds. Events are tiered Minor, Moderate, or Severe, weighted by business criticality, so the alerts that reach your team are the ones that matter.
Act on divergence, not noise
When live exposure stops matching reported posture, the vendor's risk record updates, a tiered alert fires, and you route remediation or trigger a targeted reassessment from the same record. Built to catch material change in days instead of at the annual review.