Real data, not screenshots.
Connect Microsoft Azure, Entra ID and Microsoft 365, sign in with your identity provider, choose your AI provider, enrich vendors from authoritative sources and connect your own tools through webhooks and the API.
Microsoft Azure
Cloud resource discovery into the asset inventory and role-assignment enrichment.
Microsoft Entra ID
Users, groups, service principals, app registrations and managed identities for NHI governance and Policy-as-Code.
Microsoft 365
Read-only datasets for Policy-as-Code checks, with licence and permission status reported honestly.
Single sign-on
Active Directory (LDAPS/StartTLS), AWS Managed Microsoft AD, Microsoft Entra ID, OpenID Connect and SAML 2.0.
AI providers
Anthropic, Claude on Microsoft Foundry, OpenAI and Google Gemini, with per-feature models and zero data retention.
Microsoft Teams
Notifications to a Teams channel alongside In-App and Email.
ITSM tools
Connect market-leading ITSM tools, such as ServiceNow and Jira Service Management, through signed webhooks and the token-based API.
Webhooks
Signed, metadata-only HTTPS events for your SIEM or ITSM tool, with retries and a delivery log.
Service accounts & API
OAuth 2.0 client credentials and 60-minute tokens for system-to-system access.
CryptoVantis
Certificate and cryptography findings reported straight into RiskVantis, de-duplicated by reference.
NVD & CISA KEV
CVE details and known-exploited status for the Intel Feed and Remediation Assistant.
endoflife.date
End-of-life and end-of-support dates for technology in your estate.
SEC EDGAR & XBRL
Full-text filings search and structured financial metrics for US-listed vendors.
CourtListener
US federal court dockets naming your third parties.
GLEIF
Legal-entity resolution for third parties via LEI, jurisdiction and hierarchy.
Australian Business Register & ASIC
Australian business and company registers for vendor resolution.
CanLII
Canadian case-law catalogue and citation lookup.
URLhaus, ThreatFox & AlienVault OTX
Malicious URL and indicator feeds for vendor cyber exposure.
MISP & TAXII 2.1
Connect your own MISP instance or TAXII 2.1 server.
AustLII
Australian court and tribunal decisions ingested from their AustLII URL or file; details extracted with verified quotes and validated by a person.
SEBI
SEBI orders and disclosures about listed vendors ingested from their official URL or PDF, with verified quotes and local OCR for scanned files.
Official document import
Other regulator and court documents (for example RBI, MCA, NCLT, e-Courts) ingested by URL or file, with verified quotes and local OCR.
SSH & WinRM
Agentless configuration assessment of Linux and Windows hosts.
CSV, Excel & JSON
Imports for risks, assets, question banks, controls and frameworks; CSV, Excel and PDF exports.
Notifications, digests, @mentions, evidence and assessment links, and approvals after sign-in.
Product names are trademarks of their respective owners and are used for identification only.
See RiskVantis in action.
Book a 30-minute walkthrough tailored to your frameworks, vendors and team.