Sold by: Venminder
Vendor Insights
A centralized location to execute your third-party risk management program. Enables users to store documentation, onboard a vendor, track contracts, manage SLAs, send and manage questionnaires, manage due diligence and oversight, complete risk assessments, create workflows, run reporting and more.
4.7
Overview
Venminder is a recognized leader of third-party risk management. Our platform provides you with all the capabilities to run a successful program that is aligned to today's best practices and enable you to meet strict regulatory guidelines.
The Venminder Third-Party Risk Enterprise Platform provides a centralized location to execute your third-party risk management program. It enables users to store documentation, onboard a vendor, track contracts, manage SLAs and issues, send and manage questionnaires, manage due diligence and oversight, complete risk assessments, create workflows, run reporting and more.
For private offers contact your Venminder sales representative or visit <www.venminder.com/contact/aws-marketplace >
Highlights
- Built for collaboration, there is no limit on the users, vendors or contracts you manage
- Code-free configuration
- Track and schedule reports to have clear visibility for risk-based decisions
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Skip the manual risk assessment. Get verified and regularly updated security info on this product with Vendor Insights.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
Venminder TPR Enterprise | Includes all Enterprise modules (no customization) | $125,000.00 |
Dimensions summary
This listing offers one contract-based pricing option, billed in units. The Venminder TPR Enterprise (Units) dimension includes all Enterprise platform modules with no customization. You buy access to the full set of Enterprise capabilities under a single unit-based structure, rather than choosing among separate tiers or add-on modules on Marketplace. Pricing scales with the number of units you purchase. The platform uses an unlimited model, so you can expand users, vendors, and assets without extra Marketplace charges tied to those counts.
Top-of-mind questions for buyers
The Marketplace lists pricing in units, and the platform uses an unlimited model. You can add users, vendors, and assets without extra charges tied to those counts. Because the table does not specify what a single unit maps to, confirm the exact unit definition with the vendor before purchase.
The dimension includes all Enterprise platform modules with no customization. This covers contract management, standard and advanced risk assessments, questionnaires, oversight management and automation, issue management, SLA management, workflows, onboarding, offboarding, business unit permissions, single sign-on, and API integration options.
No. The platform uses an unlimited model, so you can expand the number of users, vendors, and assets without added Marketplace charges tied to those counts. Cost changes only with the number of units you purchase, not with your growing usage volume.
www.venminder.com+1
Helpful?
Vendor refund policy
See contract
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Pre-sales consulting, online support center with articles and documentation, dedicated Customer Success Manager aws@venminder.com
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By Venminder
By SecurityScorecard
By Vanta
Top
25
In Centralized Risk Management
Top
10
In Procurement & Supply Chain, Legal & Compliance
Top
10
In Centralized Risk Management, Compliance and Auditing, Security
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Vendor Onboarding and Management
Enables vendor onboarding, documentation storage, and centralized management of multiple vendors and contracts without user, vendor, or contract limits
Contract and SLA Tracking
Tracks contracts and manages Service Level Agreements (SLAs) with issue monitoring capabilities
Risk Assessment and Due Diligence
Completes risk assessments, manages due diligence activities, and provides oversight functionality for third-party risk evaluation
Questionnaire and Compliance Management
Sends and manages questionnaires for vendor assessment and compliance data collection
Workflow Automation and Reporting
Creates customizable workflows with code-free configuration and generates scheduled reports for risk-based decision visibility
Continuous Security Monitoring
Monitors 10 risk factor groups continuously across more than 12 million companies using non-intrusive and proprietary data collection methods combined with trusted commercial and open-source threat feeds.
Quantitative Risk Assessment
Delivers quantitative evaluation of cybersecurity posture with an easy-to-understand A to F rating system for rapid vulnerability identification and remediation.
Third-Party Risk Management
Enables objective 360-degree assessment of vendor cybersecurity risks by combining inside-out questionnaire validation with outside-in security ratings to cut through questionnaire noise.
Automated Questionnaire Validation
Supports sending, completing, and auto-validating questionnaires at scale with automatic insight generation into the validity of responses leveraging security ratings data.
Multi-Use Risk Management Framework
Supports enterprise risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight use cases through a single platform.
Compliance Framework Automation
Automates evidence collection and monitoring across 35+ compliance frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, CMMC, CJIS, NIST 800-53/171, and FedRAMP
Cloud Service Integration
Provides deep integrations across 40+ AWS services with real-time visibility into cloud security and compliance posture in AWS-native environments
AI-Powered Task Management
Includes AI Agent functionality for intelligent task management, smart recommendations, audit-ready documentation generation, and real-time responses to audit requirements
Centralized GRC Workflows
Centralizes governance, risk, and compliance workflows including risk management, vendor management, centralized access reviews, and real-time audit trails
Custom Automated Testing
Supports custom automated tests built directly in-platform or via API for self-hosted and custom-built systems
Validated by AWS Marketplace
FedRAMP
GDPR
HIPAA
ISO/IEC 27001
PCI DSS
SOC 2 Type 2
No security profile
No security profile
-
-
-
-
Standard contract
No
No
Customer reviews
Information Technology and Services
Seamless Single Login and User-Friendly Experience
Reviewed on Nov 21, 2025
Review provided by G2
What do you like best about the product?
Single login for all the requests across clients
User-friendly UI and UX
User-friendly UI and UX
What do you dislike about the product?
Lack of automatic information flow in between similar questions
What problems is the product solving and how is that benefiting you?
Single login for all the requests across clients
User-friendly UI and UX
We are able to respond to many (and different) client requests within one platform and it has effectively saved our time with lesser number of clicks, driving 25% more revenue.
User-friendly UI and UX
We are able to respond to many (and different) client requests within one platform and it has effectively saved our time with lesser number of clicks, driving 25% more revenue.
Ginger G.
Smart Notifications Shine, But Reporting and Dashboards Need Improvement
Reviewed on Oct 22, 2025
Review provided by G2
What do you like best about the product?
Intelligence and Contract Email Notifications
What do you dislike about the product?
Reporting
Creating Dashboards is a bit clunky
Creating Dashboards is a bit clunky
What problems is the product solving and how is that benefiting you?
RA’s, SOC Analysis and Contract Management
Hospital & Health Care
A Single Source of Truth for Vendors, Risk, and Compliance
Reviewed on Oct 14, 2025
Review provided by G2
What do you like best about the product?
The best thing i like that it is a single source of truth for all vendors, risk and compliance. This tool had an advantage and capability of removing the panic of audit prep by putting every contract, risk management and document in one place. That is the best thing of this tool so far.
What do you dislike about the product?
There is nothing to be said and disliked about this tool so far as per my experience.
What problems is the product solving and how is that benefiting you?
It is solving massive, decentralized chaos of manual vendor management. Before Venminder, our vendor information was scattered across spreadsheets, individual emails and random folders. This tool helped us to eliminate those inefficiencies.
Banking
Venminder saves me 2 FTE's!!!
Reviewed on May 27, 2025
Review provided by G2
What do you like best about the product?
I outsource all of our SOC 1 and SOC 2 type 2 report analysis to Venminder as well as the financial reviews and the cyber security audits. As a bank with 1.5 billion in assets, we have between the 70-80 different vendors we use at our institution to provide all our services. We average around 30 high risk vendors that require a full risk analysis of their security systems. With many of these vendors providing multiple services, I typically have 50-75 SOC reports, 10 financial reviews and 25-30 cyber reviews. All of these reviews would span over 2-3 months of work and up to 3 employees. But by utilizing the Venminder services, i am able to cut that down to under 1 month of analysis to prepare the annual risk review.
What do you dislike about the product?
We required an IT risk solution to review our physical assets. it was not available at the time we selected the vendor review system so we chose another solution for those services.
What problems is the product solving and how is that benefiting you?
We are able to outsource all of our SOC reviews and financial reviews. They also partner with a 3rd party to help us perform the cyber security reviews on a monthly basis.
Medical Practice
Nice vendor, Risk management tool.
Reviewed on May 19, 2025
Review provided by G2
What do you like best about the product?
you have prefilled customer questionnaires (SIG, CAIG, etc)
What do you dislike about the product?
create and improve notifications and follow-up for sent provider requests
What problems is the product solving and how is that benefiting you?
to have everything in one place