Question 1

What is Cynapze?

Accepted Answer

Cynapze is a third-party risk management platform. It helps organizations monitor, assess, and document the cybersecurity posture of their vendors and suppliers, all from one place.

Question 2

Who is Cynapze built for?

Accepted Answer

Cynapze is built for organizations that need to manage vendor risk at scale, from security teams and risk officers to finance leaders who need visibility without becoming security experts.

Question 3

How is Cynapze different from a spreadsheet or a manual review process?

Accepted Answer

Manual processes go stale the moment they're finished. Cynapze replaces static, point-in-time reviews with continuous monitoring, structured assessments, and a single record of every vendor's risk over time.

Question 4

Do I need a security background to use Cynapze?

Accepted Answer

No. The platform is designed for both technical and non-technical roles, with role-based views that adapt to what each person on your team actually needs to see.

Question 5

Can Cynapze scale with my vendor portfolio as it grows?

Accepted Answer

Yes. Whether you're managing a handful of vendors or several dozen, Cynapze is built to add vendors, assign criticality, and track risk without the process breaking down as your portfolio grows.

Question 6

How long does it take to get started?

Accepted Answer

After creating your account, a guided setup walks you through completing your company profile, inviting team members, and adding your first vendors. Every step can be skipped and resumed later.

Question 7

What do I need to add a vendor?

Accepted Answer

Just the vendor's name and domain to begin monitoring. From there, you can assign criticality, send assessment questionnaires, and build out their full risk profile over time.

Question 8

Can I invite my team to use the platform?

Accepted Answer

Yes. Company admins can invite team members and assign them roles that determine what they can see and do within the platform.

Question 9

What happens after I add a vendor?

Accepted Answer

Once a vendor is added, you can choose to actively manage them, which triggers ongoing monitoring, lets you send assessment questionnaires, and allows you to track remediation plans tied to their risk profile.

Question 10

How do I get help if I run into an issue?

Accepted Answer

A help center with searchable articles and contextual guidance is available directly in the platform, alongside a contact form for direct support requests.

Question 11

What subscription tiers does Cynapze offer?

Accepted Answer

Four tiers: Freemium, Silver, Gold, and Platinum. Each tier increases the number of vendors you can actively manage and the depth and frequency of monitoring data available.

Question 12

How many vendors can I manage on each tier?

Accepted Answer

Freemium does not include active vendor management. Silver supports up to 10 managed vendors, Gold up to 25, and Platinum up to 50.

Question 13

Is there a free trial?

Accepted Answer

Cynapze does not currently offer a time-limited free trial. The Freemium tier lets you explore the platform with a one-time vendor score, without an ongoing subscription.

Question 14

How does billing work?

Accepted Answer

Subscriptions are billed annually. Upgrading to a higher tier takes effect immediately, with the price difference prorated. Downgrading takes effect at the end of your current billing period.

Question 15

Can I cancel my subscription at any time?

Accepted Answer

Subscription cancellation is handled by our support team rather than through self-service. Reach out and we'll take care of it.

Question 16

Does Cynapze help with NIS2 compliance?

Accepted Answer

Yes. Cynapze includes questionnaire templates aligned to NIS2 requirements and gives you the continuous monitoring, documentation, and audit trail needed to demonstrate supplier oversight.

Question 17

Does Cynapze help with DORA compliance?

Accepted Answer

Yes. Cynapze covers the ICT third-party risk management pillar of DORA, with continuous monitoring of ICT providers, structured due diligence, and reporting aligned to DORA's documentation expectations.

Question 18

Does Cynapze cover GDPR requirements?

Accepted Answer

Cynapze helps you monitor and document the security posture of vendors processing personal data on your behalf, supporting the due diligence expectations under Article 28. It is not a full GDPR compliance management tool.

Question 19

Can I generate compliance reports directly from Cynapze?

Accepted Answer

Yes. You can generate reports from your vendor data aligned to the frameworks you work with, ready to share with auditors, regulators, or your own leadership.

Question 20

Does Cynapze automatically map my vendor data to specific regulatory controls?

Accepted Answer

Not automatically. Cynapze gives you the structured data, documentation, and audit trail that support your compliance work, but framework-to-control mapping is not an automated feature in the current version.

Question 21

Where is my data hosted?

Accepted Answer

Your data is hosted on a SecNumCloud sovereign cloud, the qualification issued by ANSSI, the French national cybersecurity agency, with no dependency on US cloud providers. This reflects a deliberate choice to support data sovereignty for European organizations.

Question 22

Is Cynapze built with European compliance standards in mind?

Accepted Answer

Yes. The platform's hosting and infrastructure choices are built around European digital sovereignty principles, reflecting the regulatory environment our customers operate in.

Question 23

Is my company's data isolated from other Cynapze customers?

Accepted Answer

Yes. Cynapze is a multi-tenant platform with strict data isolation between companies. Each organization only has access to its own data and the vendors it manages.

Question 24

Who can see my vendor risk data inside my organization?

Accepted Answer

Access is role-based. Company admins control which roles can see what, including detailed technical findings, so sensitive data stays restricted to the people who need it.

Question 25

Where does Cynapze get its security data from?

Accepted Answer

Cynapze integrates with SecurityScorecard, an established security ratings provider, as its data source. Cynapze adds the layer on top: vendor categorization, risk prioritization, questionnaires, remediation tracking, and reporting.

Todo tu programa de riesgo de terceros, en una sola plataforma.

Un único registro, leído por cada equipo.

Seguridad y TI

Riesgos y cumplimiento

Finanzas y dirección

Proveedores gestionados

Cuatro centros, un registro compartido.

Ve y puntúa a cada proveedor.

Puntuación continua

Consejos

Riesgo de mis proveedores

Mi riesgo sistémico

Cynapze Directory

Actúa sobre lo que importa.

Issues Manager

Inteligencia de ciberamenazas

Planes

Consejos

Evalúa, demuestra y cumple.

Compliance Manager

Evidences Locker

Cuestionarios

Consejos

Informa a cada grupo de interés.

Creado para cada audiencia

Alineado con tus marcos normativos

Resúmenes redactados con ayuda de la IA

Calificaciones de seguridad en las que el mercado ya confía.

Diez factores detrás de cada puntuación.

Una red debajo, y la IA encima.

Inteligencia colectiva

Inteligencia artificial

Cómo avanza un proveedor por Cynapze.

Añadir y descubrir

Monitorizar y evaluar

Priorizar y demostrar

Preguntas frecuentes.

Inteligencia de proveedores para las amenazas que importan