AboutWhat's newContact & demo
AI & IntelligenceAvailable now

Does this affect us? Know in minutes.

When a vendor is breached or a vulnerability goes public, the Intelligence Center traces it through your dependency map, covering vendors, sub-processors, assets, services, risks and controls. It tells you what is affected, how surely and what to do next.

Illustration with sample data

Overview

What Intelligence Center & Blast Radius does

Every external event is classified into one of 12 event classes and placed on a dependency map RiskVantis builds from your own records. The map covers vendors and their sub-processors, assets and their relationships, business services, cloud providers, risks, processing activities and controls, and it is drawn for each viewer with that viewer's own access. Impact is decided by rules as Confirmed, Likely, Potential, No known or Unknown, with the reason and the relationship path for every affected item.

Priority is scored out of 100 and every point is explained. Decision rules recommend the next step, such as a vendor reassessment, a fourth-party impact review, a PIA review, a risk reassessment or a control review. Each action runs through the owning module with its own permissions. For jurisdictions without an API, you can import an official document. AI extracts the details, and each one must be backed by a word-for-word quote that a person validates.

Abstract cybersecurity lighting on circuitry
Capabilities

Key capabilities

01

Does this affect us?

Confirmed, Likely, Potential, No known or Unknown impact, each with its reason.

02

Blast radius

Every affected vendor, fourth party, asset, service, risk and control, with the path that links it.

03

Explained priority

A 0–100 priority built from named factors, every point accounted for.

04

Supply-chain view

Single points of failure, provider concentration and systemic dependencies.

05

Recommended actions

Vendor reassessment, evidence request, PIA or risk reassessment proposals, remediation tasks, through each module's own rules.

06

Official document import

Regulator and court documents by URL or file, with quotes verified and scanned pages read by local OCR.

Benefits

The business case.

Efficiency, multi-framework alignment, reduced complexity and streamlined processes: what Intelligence Center & Blast Radius changes for your programme.

Risk reduction
Hours → minutes

Time to impact

Know which vendors, assets and risks an incident touches without a war-room spreadsheet.

Visibility & decision-making
Explained

Every verdict and point

Impact and priority are rules you can read, not a black-box score.

Achieving compliance
Supply-chain duty

Fourth-party visibility

Supports NIS2 and ISO 27001 supply-chain expectations with evidence of what was assessed.

Potential savings
>70%

Less triage effort

Classification, mapping and prioritisation are automatic; people decide the actions.

Efficiency figures compare the effort of each workflow cycle in RiskVantis with the same work done manually or in a traditional GRC tool. Your result depends on your starting point; we will model it with you in a demo.

How it works

From setup to outcome.

Ingest

Events arrive from the Intel Feed, vendor research or official documents.

Trace

The dependency map finds every affected record you can see.

Prioritise

Rules decide impact and an explained priority.

Act

Raise the recommended actions through the owning modules.

Framework alignment

Supports your obligations.

Intelligence Center & Blast Radius contributes evidence and coverage to these frameworks and regulations.

NIS2 (Art. 21 supply chain)ISO/IEC 27001:2022 (A.5.7, A.5.19–A.5.22)NIST CSF 2.0 (GV.SC, ID.RA)APRA CPS 234

All supported frameworks

FAQ

Common questions.

Does an event change my risks or vendors automatically?

No. Nothing rescores a risk, changes a vendor's tier or status, or approves anything. Actions are recommendations that a person raises through the owning module.

Is my data sent to an AI to decide impact?

No. Impact, priority and recommendations come from rules. AI is used only to extract details from official documents, with every detail backed by a verified quote.

What if a source isn't connected?

It shows NOT CONFIGURED. RiskVantis never simulates a source or presents it as live.

See Intelligence Center & Blast Radius in action.

Book a 30-minute walkthrough tailored to your frameworks, vendors and team.