A dedicated exposure assessment of the technology vendors you choose.
We combine corporate records, official publications, technical sources and jurisdictional context into a report prepared for your organisation.
Three layers, one number for you
What we document about the vendor
Dated, source-backed findings about ownership, jurisdiction, operations, security record, dependencies, finances and regulatory standing. These are the same for every customer.
Your context
Your answers about how you use the vendor change how much each type of finding matters for you. They never remove a finding.
Your priorities
The weights you give to the eight areas decide how much each area counts towards your exposure index.
The result is an exposure index for your organisation only. Another organisation, with a different context and different priorities, would receive a different number for the same vendor.
What you receive
A dedicated report prepared for your organisation, configured by you: your context, the exposure areas you choose and your priorities. It is delivered as a PDF, issued to the ordering organisation only.
- An exposure index for each vendor and for your portfolio
- A timeline of dated, sourced events for each vendor
- Practical questions to raise with each supplier
Kestrel Mobile Security SA
endpoint security · importance: high
Driven mainly by jurisdiction & control, supply chain dependency and operational resilience. Higher means more exposure for you.
1 area at maximum exposure: Jurisdiction & control
- Sanctions exposure0
- Ownership transparency10
- Jurisdiction & control100
- Operational resilience28
- Cyber hygiene14
- Supply chain dependency39
- Financial stability0
- Regulatory alignment11
HQ: Luxembourg · Ultimate owner: Hong Kong · Data: LU · SG · HK
How an assessment is prepared
Context
Start with your shortlist, answer two questions per vendor, select your sector and choose your priorities.
Review & order
Add your organisation name, review your vendors and plan, then place your order. Your PDF is issued to your organisation only.
Sources and evidence
Every finding shows its date and the type of source it comes from. Appendix A of your report lists the sources for each vendor, with a reference number for every finding. Where the public record is limited, the report says so instead of guessing.
Types of sources we use
- Official company registers and filings
- Government and regulator publications
- Sanctions and export-control lists
- Technical databases and advisories
- The vendor's own documents
- Established news reporting
Capabilities
Vendor assessments
A dedicated assessment of each selected vendor, shaped by your organisation's context and priorities.
Sources per finding
Each finding is dated and linked to the sources listed for that vendor in your report.
Report exports
Your assessment is delivered as a PDF and made available in your account, issued to your organisation only.
Where it is used
Procurement
Understand strategic vendor exposure before purchasing critical technology.
Vendor Exposure
Add jurisdictional and ownership intelligence to third-party exposure assessments.
Cybersecurity
Evaluate exposure beyond technical vulnerabilities.
Government & Defence
Assess technology suppliers through jurisdictional, ownership and strategic-exposure lenses.
Critical Infrastructure
Understand dependencies behind technology supporting essential operations.
Investment & Due Diligence
Identify ownership, jurisdictional and operational exposure before strategic decisions.