New capabilities accelerate vendor due diligence, reduce manual review time of SOC 2 and other reports, and strengthen continuous monitoring amid rising supply chain threats
Atlanta, GA, January 6, 2026 – FortifyData, a leading cyber risk management platform, today announced significant AI enhancements to its Third-Party Risk Management (TPRM) application, including its AI Auditor that analyzes reports —soft-launched in late Q3 2025—and a preview of AI workflow automation features designed to streamline the vendor lifecycle process.
As organizations increasingly rely on third-party vendors, the attack surface expands dramatically. According to the 2025 Verizon DBIR, “30% of breaches were linked to third-party involvement, twice as much as last year, and driven in part by vulnerability exploitation of all breaches” (up from 15% the prior year). FortifyData’s TPRM application already addresses this growing threat head-on with continuous monitoring powered by direct assessments supplemented with questionnaires, and with new advancements of the AI Auditor and vendor AI workflow automation FortifyData provides comprehensive visibility into vendor cyber risk that takes less time without compromising risk accuracy.
TPRM AI Auditor
The new AI Auditor enables TPRM teams to upload common vendor security reports—such as SOC 2, HECVAT, SIG, or other industry-specific documents—and receive an intelligent audit against selected frameworks (e.g., NIST, ISO 27001, CIS Controls). The AI generates an intuitive dashboard highlighting gaps, control deficiencies, and compliance status, complete with page-specific citations from the original report. This eliminates hours of manual review, allowing teams to evaluate more vendors faster while making more informed risk decisions.
