vendor-security

Local-first, self-hostable security-questionnaire automation: grounded, cited answers from your own knowledge base. Bring your own model — your data never leaves the host.

Programmatic schema and validator for the CSA CAIQ-Lite vendor security questionnaire. Author, validate, and diff CAIQ responses as code.

A curated list of resources for the answerer's side of security questionnaires — frameworks, response tools, trust centers, templates, and guides for teams that receive a SIG/CAIQ and must answer it.

Five-agent team that answers vendor security questionnaires (CAIQ, SIG, custom Excel) from your actual documentation — cited, audited for overclaims, never fabricated.

Parse SIG/CAIQ/VSA/VSAQ security questionnaires into structured JSON — ingest + framework detection only. No answers, no auto-fill.

Azure AI Foundry + Azure AI Search RAG workflow for answering security questionnaire from synthetic evidence documents, with a second agent validating evidence support.

Synthetic 250-row security questionnaire output showing strict approved-answer reuse: 80 matched, 170 left blank for stale, ambiguous, or unsupported cases.

Security questionnaire copilot that seals every answer to approved evidence.

The vendor’s own record, made reviewable. See what is Documented and what becomes a Question surfaced before the questionnaire.

Automate vendor security questionnaire responses using your private knowledge base with this local-first, self-hosted tool.

Whistic — independent third-party profile of a public API surface, by API Evangelist. Whistic is an AI-driven Third-Party Risk Management (TPRM) platform that helps organizations assess vendor security, monitor third-party risk continuously, and share their own security posture through a Trust Center.