RiskRecon
AI-powered third-party cyber risk management by Mastercard
About RiskRecon
RiskRecon by Mastercard is a third-party risk management (TPRM) platform that continuously monitors the cybersecurity posture of vendors and partners using open-source intelligence and automated assessments. It provides risk-prioritized action plans custom-tuned to your risk policy, covering over 19 million companies across regulated industries including finance, healthcare, and insurance. RiskRecon combines AI-powered questionnaire capabilities with continuous security ratings and vendor monitoring to replace manual risk assessment processes with actionable, data-driven insights.
Pros & Cons
Pros
- Industry-leading accuracy in asset attribution for reliable risk insights
- Ethical scanning approach using only open-source intelligence with no invasive techniques
- Monitors over 19 million companies across highly regulated industries
- Backed by Mastercard providing strong data resources and credibility
- Free 30-day trial with ratings for up to 50 vendors
Cons
- Custom pricing not publicly disclosed, making cost comparison difficult
- Requires integration with partners like Whistic for optimal assessment workflows
- Asset profiles refresh every two weeks rather than in real time
- Market share declining in the TPRM category according to analyst reports
Key Features
Continuous Vendor Monitoring
Automatically monitors third-party cybersecurity posture with asset profiles refreshed every two weeks using analyst-trained machine learning models
Risk-Prioritized Action Plans
Delivers actionable remediation plans that prioritize findings based on issue severity and asset value, custom-tuned to match your risk policy
AI-Powered Assessments
AI-driven questionnaire functionality that replaces manual vendor assessment processes with automated, data-backed security evaluations
Security Ratings
Comprehensive cybersecurity ratings based on open-source intelligence and proprietary data gathering across the public IT footprint
Asset Discovery & Attribution
Supervised machine learning models identify and attribute company systems accurately, mapping the full digital footprint of monitored organizations
Threat Protection
Proactive multi-risk monitoring with systemic risk assessment capabilities for identifying threats across your vendor ecosystem
ServiceNow Integration
Native integration with ServiceNow for seamless TPRM workflow automation within existing IT service management platforms