Third-party risk, without the chasing.
Send a security questionnaire your suppliers actually finish - one link, completed in the browser, no account to create. Assura assesses the answers into a clear risk rating with the specific concerns spelled out, and keeps the register current.
A short call about your organisation, then a full demo if it fits - no obligation.
No MFA on admin accounts; shared credentials for the asset library; no offboarding process for leavers.
From "who are they?" to a rating you can defend.
Add the supplier
Name them, note what they handle for you - staff data, production infrastructure, customer records - and they join the register.
Send the link
The supplier gets a security questionnaire that opens in the browser. No portal, no account creation, nothing to install - so it actually gets finished.
They answer, Assura assesses
The moment answers arrive, Assura assesses them into a clear risk rating - with the specific concerns cited from their own responses, not a bare traffic light.
Track and revisit
The register keeps statuses current - awaiting, complete, assessed - and you can re-send when contracts renew or something material changes.
Questionnaires suppliers actually finish.
Third-party risk usually dies at the supplier's side: a portal login they won't create, a spreadsheet they won't open. Assura's questionnaire is one tokenised link that opens in the browser and reads in plain English - the friction is gone, so the answers come back.
- One public link per supplier - no account, no portal, no install
- Plain-English questions a non-security contact can answer
- Status tracked in your register from sent to complete
A rating you can defend.
A traffic light on its own is a guess with a colour. Assura reads the supplier's answers and produces a risk rating with the reasoning attached - which answers drove it, and exactly what concerned us - so when someone asks "why is this vendor high risk?", the answer is written down.
- Risk rating derived from their actual answers, not a checkbox count
- Specific concerns cited - shared credentials, missing MFA, no offboarding
- You review the assessment; your judgement has the final word
A register, not a folder of PDFs.
Supplier assessments are worth little scattered across inboxes. Assura keeps one register - who they are, what they handle, when they were last assessed, and what it found - sitting beside the rest of your risk picture, where it belongs.
- Every supplier's status and rating in one view
- High-risk suppliers stand beside your other risks, not in a silo
- Re-send and re-assess when contracts renew or scope changes
Asked and answered.
Do our suppliers need an Assura account?
No. They get one tokenised link that opens the questionnaire in the browser - nothing to sign up for, nothing to install. That's most of why the answers actually come back.
What do we get back when they finish?
A clear risk rating, the specific concerns that drove it - cited from their own answers - and the full response set to read if you want the detail.
Can we override the rating?
Yes. The assessment is a considered first opinion, not a verdict - review it, adjust it, and your judgement has the final word in the register.
How do we keep supplier assessments current?
The register tracks every supplier's status, and you can re-send the questionnaire whenever a contract renews or something material changes - the new answers are assessed the same way.