Systematically Reduce Your Third-Party Cyber Risk

Third-parties and external vendors expand your attack surface and introduce uncontrollable risks to your security posture. Zanshin is the only solution that systematically reduces third-party and N^th-party risk.

Why Zanshin

Refocus risk management efforts from the pre-contractual phase to monitoring throughout the entire contract lifecycle.

It’s a scary time to trust third-party vendors. It’s difficult to hold third-parties accountable to good security practices, processes, and posture and current solutions do not give enough insight for teams to do so.

Continuous

Continuous monitoring (daily outside-in and inside-out testing) allows first-parties to enforce a secure posture year round, rather than trusting point-in-time audits.

Cooperative

Proactive collaboration between first and third-parties allow for an aligned goal of reaching a more secure supply chain.

Comprehensive

Real visibility and wide coverage (endpoints, IAM, PaaS, etc) is how a first-party can truly understand the risk they adopt when working with a third-party.

The Promise

Third-parties actually enjoy working with Tenchi, allowing for immediate and proactive cooperation with their first-parties

Non-intrusive Access and Data Masking: Zanshin only reports back security results so that first-parties are not liable for private third-party data.

Third-Parties Love Tenchi: Our Risk Remediation team works directly with third-parties to remediate vulnerabilities.

First-Party Investment: Because of Zanshin’s unique licensing model, third parties are able to “opt in” to a first-party investing in improving their security posture.

Trusted by enterprise first-parties

Real Visibility

Get real and continuous visibility into third-party security posture

Move past questionnaires and compliance for third-party cyber risk management. Actually measure and manage the security posture of critical third-parties with full buy-in from both sides.

Get a Demo

Learn about Third-Party Cyber Risk Management

Industry-leading vulnerability checks

Zanshin is powered by expert security research operationalized into thousands of vulnerability checks. Quickly identify real security issues in third-party security posture across all the organizations you follow.

Manage security posture across all third-parties

Zanshin runs fully automated daily tests across third-parties' cloud, endpoints, identity, and SaaS and reports back security metadata so security teams can actually measure and manage in a privacy-first way.

Send security questionnaires, get immediate answers

We respect that security questionnaires will always be a part of the procurement process. Send an unlimited amount of security questionnaires and get answers to all standard questions faster than ever.

Continuously monitor security posture

No more self-attestation and point-in-time evidence to convince first-parties of a third-party's security posture. Measure, manage, and mitigate with real data from the source.

Tangibly reduce third-party risk

Third-parties meet with our team at Tenchi to review open alerts and get expert remediation guidance so that they can actually fix their issues.

"Zanshin has been an important ally in increasing visibility into the risks present in our partners' security infrastructure. With this support, we have been able to act more proactively in mitigation, reducing exposure to potential compromises of sensitive information.

Furthermore, the solution has contributed to strengthening our relationships with our partners and increasing the resilience of our ecosystem as a whole."

Ricardo Redenschi

Head of Cyber Security and Data Protection

The official stock exchange and primary financial market infrastructure company of Brazil.

"The continuous management of our digital attack surface is an essential pillar of our cybersecurity strategy. With Zanshin’s support, we have significantly expanded our visibility into cyber risks associated with third parties, group companies, and other monitored assets, thereby strengthening decision-making and the protection of our business.

Today, we have daily visibility into these risks, which has contributed to a reduction of more than 90% in identified vulnerabilities. This evolution reinforces the value of a continuous approach to cyber risk management, promoting greater maturity, collaboration, and protection throughout the Bradesco ecosystem."

Cristiano Adjuto

CISO

One of the largest financial and banking institutions in Brazil and Latin America.

"Our journey with Tenchi began in 2021 when we launched a Zanshin pilot project with some of our third-party partners. Since then, we have built a very close partnership with Tenchi, which has consistently evolved and helped us transform how we view the security of our partner chain. The solution has brought not only new monitoring capabilities and a more realistic view of third-party security posture, complementing traditional due diligence methods, but has also helped foster a new culture on the subject.

This transformation goes beyond the BTG Pactual Group and contributes to a broader movement of security evolution in the Brazilian financial ecosystem. Throughout this journey, several partners have already benefited from the results generated by the solution. Today, Zanshin is an important tool for us and continues to play a relevant role in the evolution of security in our third-party ecosystem."

Felipe Fernandes

Security Office

Founded in 1983, it is the largest investment bank in Latin America, with offices across the continent, in the US and in Europe.