OneMore Secure
OneMore Secure provides an automated supply chain security platform that combines supplier self-declarations with continuous external attack surface scanning to validate actual cyber exposure. The platform maps domains, subdomains, certificates, and email security without requiring supplier consent, then converts findings into prioritized action items. It is used by over 2,000 organizations across 28 countries and is built to support NIS2, DORA, and GDPR compliance.
- Cybersecurity
- Regulatory & Compliance Technology
- Software Only
Funding
Founders
Founder details are not available yet.
Product
Problem
Supply chain cyberattacks have increased significantly, with 60% of cyber incidents originating from the supplier link. Manual processes using spreadsheets, email surveys, and one-off audits cannot keep up with regulatory demands from NIS2, DORA, and GDPR that require continuous visibility across the entire supplier chain.
Solution
OneMore Secure offers an automated platform that combines supplier self-declarations with continuous external attack surface scanning to validate actual exposure. The platform maps domains, subdomains, certificates, email security, and public data without requiring supplier consent, then performs recurring validations for known vulnerabilities, weak configurations, and exposed services. Observed exposure is correlated, graded by severity, and converted into prioritized actions that can be sent to suppliers. All data is encrypted and stored in Sweden, with suppliers able to share their security results once with multiple customers through a shared digital trust hub.
Target Audience
Primary customers are organizations with hundreds of suppliers that need continuous third-party risk monitoring for regulatory compliance, as well as suppliers that want to prove their cybersecurity capability to multiple customers through a single profile.
Features
- Automated supplier self-declarations covering security culture, information security, IT security, and privacy, with add-ons for NIS2, DORA, AI Act, secure development, and OT security
- Non-intrusive external attack surface management that continuously scans publicly available assets without requiring supplier cooperation
- Recurring validation detecting known vulnerabilities, weak configurations, expiring certificates, and exposed services
- Automated threat and vulnerability analysis that converts findings into prioritized, sendable action items for suppliers
- Revision audits via third-party providers such as PwC when independent confirmation is required
- Built against legal requirements including NIS2 and GDPR, plus frameworks such as NIST, ISO 27001, and CIS18
- Network effect model where suppliers respond once and share results with multiple customers, eliminating duplicate work
- Cloud-native architecture on Microsoft Azure with defense-in-depth security, including TLS encryption, Argon2 password hashing, JWT-based authentication with optional 2FA, and role-based access control