v3ndor.io
Free tools
Free tools
Free tools for vendor risk teams.
Three self-service tools you can use right now — score a vendor, check your own SOC 2 readiness, or build the questionnaire worth sending. No account, and nothing you enter leaves your browser.
The tools
Vendor Risk Score Calculator
Answer six questions — one for each weighted scoring domain: business impact, data sensitivity, security posture, compliance posture, contract exposure, and monitoring signals.
You get: A 0-100 risk score, its tier from Low to Critical, the drivers behind the number, a confidence rating, and a recommended action.
Open the tool →
SOC 2 Readiness Checker
Answer eight questions mapped to the SOC 2 Security common criteria — policies, risk assessment, access, change management, monitoring, incident response, vendor management, and evidence.
You get: A 0-100 readiness score, a stage from Not started to Audit-ready, your largest gaps, what you already have in place, and a next step. It is an indicative self-assessment, not an audit.
Open the tool →
Vendor Questionnaire Generator
Describe the vendor — criticality, data access, hosting, whether they hold a current SOC 2 or ISO 27001, whether sub-processors are involved, and whether GDPR applies.
You get: A grouped question set with the reason for each question, the questions a current SOC 2 or ISO 27001 already answers listed separately instead of asked, a count of the ones needing evidence, and a plain-text copy of the whole thing.
Open the tool →
What these tools do and don't do
All three run entirely in your browser. Your answers stay in the page — they are not stored, and they are not sent anywhere. There is no sign-up, and no email is required to see a result.
All three are rules-based and deterministic: the same answers always produce the same result, and each page shows the version of the model behind it plus the reasoning for what it told you.
None of them is an audit, a certification, or legal advice. They are a defensible starting point you can take into a review — the platform itself does the same work against real evidence, on a whole vendor portfolio, over time.
One vendor at a time is a spreadsheet. A portfolio isn't.
These tools answer a question about one vendor, once. The platform keeps the answer current across every vendor you have — with real evidence, renewal dates, and monitoring signals attached.