# RiskBee

> Vendor risk management built for MSSPs, vCISOs, and mid-market security teams. Free for your own vendors.

RiskBee turns third-party risk management into a billable, high-margin service line for MSSPs and vCISOs. Multi-tenant workspaces, AI-powered contract and assessment analysis, continuous monitoring, and fourth-party sub-processor mapping across every client you protect.

## Product & Persona Pages

- [Home](https://riskbee.co/): What RiskBee is and how MSSPs, vCISOs and SMBs use it.
- [For MSSPs](https://riskbee.co/msp): TPRM as a billable, multi-tenant service line for MSSPs.
- [For vCISOs](https://riskbee.co/vciso): TPRM inside the vCISO scope, across every client engagement.
- [For SMBs](https://riskbee.co/smb-vendor-risk-management): Affordable vendor risk management for small and mid-sized businesses.
- [Features](https://riskbee.co/features): Vendors, assessments, questionnaires, contracts, tasks, shadow IT, modern slavery triage, and 4th-party visibility.
- [Security](https://riskbee.co/security): How RiskBee secures workspace and client data.

## Resources

- [Resources hub](https://riskbee.co/resources): Practical vendor risk guides for MSPs, MSSPs and vCISOs.
- [MSP & MSSP vendor risk best practices](https://riskbee.co/resources/msp-mssp-best-practices): A 6-pillar operating model synthesised from CISA, NIST, NCSC, ENISA, CIS Controls, ISO 27001, SOC 2 and DORA.
- [Profitable TPRM-as-a-service practice](https://riskbee.co/resources/profitable-tprm-service): Pricing tiers, scope, margin math and a 90-day launch playbook.
- [MSSP TPRM platform overview](https://riskbee.co/resources/mssp-tprm-platform): Multi-tenant TPRM with shadow IT discovery, AI evidence checks and 4th-party mapping.

## Blog

- [Blog](https://riskbee.co/blog): Field notes on vendor risk, MSSP operations, and building a security programme that survives contact with real clients.
- [MSP vendor assessment guide](https://riskbee.co/blog/msp-vendor-assessment-guide): 10 best practices for MSPs running TPRM across many clients.

## Knowledge Base

- [Knowledge base hub](https://riskbee.co/knowledge-base): How-to guides for running vendor risk management on RiskBee.
- [Onboard a new client](https://riskbee.co/knowledge-base/onboarding-clients): Step-by-step client onboarding wizard.
- [Send a security questionnaire](https://riskbee.co/knowledge-base/sending-security-questionnaires): Build, launch and review vendor questionnaires.
- [Vendor risk and health scoring](https://riskbee.co/knowledge-base/vendor-risk-scoring): How inherent risk and evidence-based health scores roll up into an A-F grade.
- [Multi-tenant MSP workflow](https://riskbee.co/knowledge-base/multi-tenant-msp-workflow): Workspace switching and per-client data scoping.
- [Add a contract](https://riskbee.co/knowledge-base/adding-a-contract): AI extraction and manual entry for vendor contracts.
- [Contract renewals](https://riskbee.co/knowledge-base/contract-renewals): Renewal command center and action workflows.
- [Contract obligations](https://riskbee.co/knowledge-base/contract-obligations): Track ongoing commitments from contracts.
- [Contract spend](https://riskbee.co/knowledge-base/contract-spend): Live spend, renewal cashflow and vendor/contract breakdowns.
- [MSSP TPRM compliance mapping](https://riskbee.co/knowledge-base/mssp-tprm-compliance-mapping): Mapping RiskBee to ISO 27001, SOC 2, DORA, CMMC 2.0 and NIST CSF 2.0.

## Answer Pages

- [What is TPRM?](https://riskbee.co/what-is-tprm): Third-party risk management explained for MSPs, vCISOs and SMBs.
- [Vendor risk assessment template](https://riskbee.co/vendor-risk-assessment-template): A free, practical template for assessing vendors.
- [Best TPRM software for MSPs](https://riskbee.co/best-tprm-software-for-msps): What to look for and how RiskBee compares.

## Company & Legal

- [About](https://riskbee.co/about): Why RiskBee exists and who builds it.
- [Privacy](https://riskbee.co/privacy): How we handle personal and client data.
- [Terms](https://riskbee.co/terms): Terms of service.
- [DPA](https://riskbee.co/dpa): Data processing addendum.
- [Subprocessors](https://riskbee.co/subprocessors): Subprocessors and third-party service providers.
- [Sign up](https://riskbee.co/signup): Start a free RiskBee trial.

For the full content of every page in plain text, see [llms-full.txt](https://riskbee.co/llms-full.txt).