Tenchi Security offers Zanshin, a Third-Party Security Posture Management solution that continuously monitors and improves the security posture of third-party vendors, reducing vulnerabilities through automated testing and remediation support. This approach addresses the critical risk posed by third-party relationships, enabling organizations to enhance their overall security and compliance without relying solely on traditional audits.
Funding
$10.3M raised to dateRaised to date based on public sources. This may differ from the amount the company actually raised and is based only on what is publicly available on the internet.
BBFounders
Product
Problem
Organizations face increasing cyber risks due to their reliance on third-party vendors, which expands their attack surface and introduces potential vulnerabilities. Traditional methods of managing third-party risk, such as audits and questionnaires, are often insufficient to provide continuous and comprehensive security oversight. This leaves organizations exposed to potential data breaches and compliance violations stemming from their vendors' security weaknesses.
Solution
Tenchi Security's Zanshin is a Third-Party Security Posture Management (3SPM) solution designed to continuously monitor, reduce, and manage third-party cyber risk. Zanshin integrates directly into third-party environments to provide unparalleled observability of their security posture and attack surface. The platform facilitates a cooperative approach to risk management, enabling first-parties to invest in improving the security of their critical vendors. By focusing on remediation and risk reduction, Zanshin helps organizations enforce vendor accountability and maintain a strong security posture across their entire ecosystem.
Target Audience
The primary target audience includes enterprises and organizations that rely on third-party vendors and need a comprehensive solution to manage and reduce the cyber risks associated with those relationships.
Features
- Continuous, fully automated security testing of third-party environments, replacing infrequent audits and questionnaires.
- Integration with third-party systems to provide an inside-out view of their security posture.
- Shared view of risk data and responsibilities between first and third parties.
- Risk Remediation Task Force that works directly with third-parties to guide and enable remediation.
- Metrics on third-party remediation timeliness and security discipline.
- Non-intrusive access and safe security metrics to maintain a third-party friendly environment.