CheckFix

0 reviews

CheckFix ist eine automatisierte externe Sicherheitsbewertung. Ausgehend von einer Domain ermittelt CheckFix die von außen erreichbare Angriffsfläche und prüft fünf Bereiche – E-Mail-Sicherheit (SPF/DKIM/DMARC), TLS/SSL, bekannte Schwachstellen (CVEs), Security Headers und offene Internet-Schnittstellen. Das Ergebnis ist ein A–F-Rating je Kategorie plus eine priorisierte ToDo-Liste zur Behebung. Die Prüfung erfolgt nicht-invasiv, orientiert an NIST SP 800-115. Entwickelt von secinto.

CheckFix Risk Manager

0 reviews

CheckFix Risk Manager is a third-party risk management (TPRM) platform for companies that need to know how secure their suppliers really are. It combines an automated external security assessment of every supplier with digital compliance questionnaires, all in one dashboard. Most supplier assessments today still run on spreadsheets and self-declarations. A supplier ticks "yes, we have a patch process", and nobody checks. Risk Manager adds the technical view. For every supplier you add, CheckFix runs a 15-step external analysis covering mail security, TLS, known vulnerabilities (CVEs), security headers and exposed internet-facing services. Each supplier gets an A–F rating, overall and per category. Your risk dashboard shows where your supply chain is weak before an auditor or an attacker finds out. Questionnaires and evidence You can use our standard questionnaires or build your own. Suppliers fill them in directly in their dashboard, attach documents and submit. The answers are scored in a structured way. All communication between you and your suppliers runs through the platform, so you don't have to chase replies across email threads. Two ways to work with suppliers With PartnerCheck, suppliers see their rating and security report free of charge. If they want the full remediation list, they buy CheckFix themselves. PartnerFix goes further. You cover the cost, and every supplier gets the complete to-do list with technical instructions, plus a recheck after remediation. The only thing left for the supplier is to fix what was found. That gives you full control over critical and regulated supply chains, independent of supplier budgets. Audit Mode for suppliers Suppliers can generate an audit-ready document straight from the dashboard. It includes a management response to open findings, documented risk acceptance and an action plan with deadlines. You get evidence you can put in front of an auditor. The supplier doesn't have to produce it from scratch. Built for regulation Risk Manager supports supply chain requirements under NIS2, DORA, ISO 27001 and TISAX. It also maps to the DIN SPEC 27076 / BSI Cyber-Risiko-Check. API keys are available, so you can pull supplier ratings and assessment results into your GRC tool or other systems. One of our first customers already assesses more than 600 suppliers with it. Who it's for Risk Manager is built for CISOs, compliance and risk managers, KRITIS operators, and groups managing subsidiaries. It fits any company that has to prove control over its supply chain. Pricing is transparent and scales with the number of suppliers, starting at 25. It's developed by secinto in Austria, with all data hosted in the EU.