Fourth-party and Nth-party risk

Your vendor's vendors are your risk.

We map the whole chain beneath your suppliers — their subprocessors, and theirs, until it terminates — and tell you the day it moves.

Unbounded depth, with cycle detectionDaily checks1113 companies in the public directorySelf-serve only

Depth 1 is where everyone else stops

You know your vendors. You don't know theirs.

Page-diff tools watch one URL. We traverse over a visited set, deduplicate at the entity level, and store depth as the shortest path from your root — so a hyperscaler sitting under three branches appears once, at the depth that matters.

Notion Labs, Inc. · 38 entities within depth 2

−Notion Labs, Inc.communicationsUSd0

Amazon Web Services, Inc.infrastructureUSd1

−Amplitude, Inc.analyticsUSd1

Amplitude Analytics Australia Pty Ltd.customer supportAUd2

Amplitude Analytics G.K.customer supportJPd2

Amplitude Analytics GmbHcustomer supportDEd2

Amplitude Analytics Ltd.customer supportGBd2

Amplitude Analytics Pte. Ltd.customer supportSGd2

Amplitude Analytics SAScustomer supportFRd2

Amplitude Analytics, B.V.customer supportNLd2

Amplitude Canada Limitedcustomer supportCAd2

FiveTran, Inc.data processingUSd2

Google, Inc.infrastructureUSd2

MongoDB, Inc.hostingUSd2

Wiz, Inc.infrastructureUSd2

Anthropic PBCAI and machine learningUSd1

−Cloudflare, Inc.infrastructureUSd1

Atlassian CorporationinfrastructureAUd2

Datadog, Inc.analyticsUSd2

Google CloudinfrastructureUSd2

Google WorkspacecommunicationsUSd2

Salesforce, Inc.marketingUSd2

Zendesk, Inc.customer supportUSd2

−Functional Software, Inc. (Sentry)analyticsUSd1

Functional Software GmbHotherATd2

Mailgun Technologies, Inc.communicationsUSd2

Sentry Software Canada Inc.otherCAd2

Sentry Software Netherlands B.V.otherNLd2

−Intercom, Inc.customer supportUSd1

Stripe, Inc.paymentsUSd2

Twilio Inc.communicationsUSd2

Zenvia Inc.communicationsBRd2

−OpenAI, L.L.C.AI and machine learningUSd1

Microsoft AzureinfrastructureUSd2

TaskUs, Inc.customer supportPHd2

−Segment.io, Inc.analyticsUSd1

Snowflake Inc.analyticsUSd2

Twilio SendGridcommunicationsUSd1

Change intelligence

Typed changes, with the chain that produced them.

Every diff is classified before it reaches you, and cosmetic churn never does.

Change feedPublic, 30 days behind

shopware AGUnited States

shopware AG added Fastly, Inc.shopware AG › Fastly, Inc.

Entity added

2026-09-12 01:16 UTC

shopware AGFrance

shopware AG added Platform.sh SAS (acting under the trade name Upsun)shopware AG › Platform.sh SAS (acting under the trade name Upsun)

Entity added

2026-09-12 01:16 UTC

shopware AGFrance

shopware AG added OVHcloudshopware AG › OVHcloud

Entity added

2026-09-12 01:16 UTC

shopware AGUnited States

shopware AG added Google Cloudshopware AG › Google Cloud

Entity added

2026-09-12 01:16 UTC

shopware AGUnited States

shopware AG added Microsoft Azureshopware AG › Microsoft Azure

Entity added

2026-09-12 01:16 UTC

shopware AGUnited States

shopware AG added Datadog, Inc.shopware AG › Datadog, Inc.

Entity added

2026-09-12 01:16 UTC

shopware AGUnited States

shopware AG added Amazon Web Services, Inc.shopware AG › Amazon Web Services, Inc.

Entity added

2026-09-12 01:16 UTC

Amplitude, Inc.Netherlands

Amplitude, Inc. added Amplitude Analytics, B.V.Amplitude, Inc. › Amplitude Analytics, B.V.

Entity added

2026-09-12 01:16 UTC

Cosmetic churn is dropped first

We hash the disclosed edge set. An unchanged hash ends the work with no event, whatever happened to the copyright year or the nav bar around it.

Every change carries its evidence

The source URL as published, the timestamp we detected it, and the full path from your root. That is what makes it usable in a risk report.

Public history runs a month late

The feed above is the free surface. Watched vendors alert the same day we see the change.

Jobs to be done

Three sentences our customers need to be able to say.

Available now

Tell me when something enters my chain I'd have objected to

Rules match on change type, region, country, category and depth, and dry-run against your current graph before you save them.

Available now

Tell me whether I'm exposed to the provider in today's incident

Reverse lookup over the graph: which of your vendors ultimately depend on a provider, and through which path.

Available now

Give me something I can paste into a risk report

Every change is an exportable artifact: what changed, when we detected it, the source URL, and the full path from your root.

Notice-period scoring and ownership tracking are live. Set the notice a vendor owes you and we flag every change announced with less; a change of owner alerts like any other change.

Pricing

Free to start. €49 or €99 after that.

Plans differ by vendors watched, graph depth, alert channels and seats. Every language, on every plan.

Free

See the shape of your exposure.

€0

1 vendor

Depth 1 only

Alerts by email

1 seat

Public company pages

StandardMost picked

For the practitioner who owns third-party risk.

€49/month

or €490 a year — two months free

Unlimited vendors

Unbounded depth

Alerts by email, Slack and webhook

5 seats

Full rule builder and templates

Daily checks

Pro

For a full inventory, the API and your GRC platform.

€99/month

or €990 a year — two months free

Unlimited vendors

Unbounded depth

Alerts by email, Slack and webhook

15 seats

Concentration reporting

Public API access

GRC connector (Vanta)

Everything in Standard

Start with one vendor. Free, and no card.

Search a company, follow it, and see the chain beneath it. Upgrade when one vendor stops being enough.