VISO TRUST

Name: VISO TRUST
Brand: VISO TRUST

AI agents for third-party risk. Vendor assessments in minutes, not months.

Est 2016|Valuation $41M|Raised $38M|7 Ref Customers

LinkedIn 13K|Web traffic 2K|FTEs 43|HQ San Francisco, California, US

MarketsVendor Risk Management Cyber Risk Management

Published Oct 13, 2026

01Common complaints

1. If the primary requirement is outside-in cyber ratings at massive scale without vendor cooperation, outside-in rating vendors (e.g., SecurityScorecard, BitSight, Black Kite) may be a more appropriate primary solution. 2. If a broad third-party management suite is required that includes ethics & compliance screening, procurement workflows, and enterprise GRC standardization, a comprehensive GRC suite (e.g., OneTrust) may better meet those needs. 3. If immediate, deep ITSM/ticketing integrations (for example, ServiceNow/Jira) are mandatory and the program cannot tolerate manual remediation steps; current user feedback indicates integration gaps in some workflows. 4. If the vendor ecosystem largely lacks formal artifacts (SOC/ISO/pen tests), the platform will need to rely on questionnaires and self-attestation, which reduces differentiation. 5. If procurement decisions require extensive public review volume as a validation factor; VISO TRUST’s public review footprint is smaller than some larger incumbents. Known limitations from reviews and documentation: - Manual components remain in certain operational flows; customers commonly request ticketing integrations. - Some questionnaire responses rely on vendor self-attestation and are not independently validated via audit artifacts, which affects assurance level. Roadmap indicators: - ISO 27001 certification is reported as in progress with no public target date provided. Scale considerations: - Vendor marketing references to managing high vendor counts exist, but public technical limits (such as API quotas and assessment concurrency) were not documented in the materials reviewed. Buyers should validate scale capabilities contractually.

02Why they buy

Differentiators supported by user feedback and product documentation: - Artifact-first approach: users report that the platform can process and extract relevant information from large volumes of security artifacts. - Reduced vendor burden: the described workflow starts with existing evidence and requests follow-ups only for missing items, which can reduce the number of vendor questions. Claims requiring validation: - High-percentage performance and adoption claims published by the vendor should be validated through pilots, references, and methodology review (for example, claims about time savings, accuracy, and adoption rates). Where competitors may be stronger: - OneTrust: broader third-party lifecycle and compliance toolset - SecurityScorecard: outside-in monitoring and rapid, non-cooperative coverage - SafeBase/Whistic: vendor-side trust centers and sharing can complement buyer-side artifact processing

03Field reports

Review-platform sentiment (G2)

G2 currently shows a small sample of reviews, which limits generalizability. Representative user feedback (paraphrased): - A user in financial services noted that VISO TRUST is effective at processing large volumes of security artifacts and extracting relevant information. - A head of security and compliance reported measurable time savings and a positive customer service experience. Critical feedback (paraphrased): - A reviewer indicated the platform could benefit from integrating additional third-party data sources. - Another reviewer observed a manual component in some processes and requested integration with ticketing tools to improve automation. Interpretation: reviewers cite artifact analysis and time savings as strengths, while requesting broader integrations and wider third-party intelligence.

Employee/culture sentiment (Glassdoor) — indirect but relevant

Employee reviews are not product evaluations but can signal execution risk. Public employee feedback contains a mix of critical and positive entries, including comments about turnover and leadership, as well as more recent positive notes indicating possible improvements.

Caution: these are anonymous, user-generated entries and should be treated as signals to probe during reference checks rather than conclusive evidence.

Community / social (LinkedIn / forums)

This research pass did not find substantive discussion threads on broader community forums specific to VISO TRUST. This is common for niche enterprise tooling adopted through sales-led channels.

Why customers selected the product (evidence from reviews/vendor materials)

Common selection drivers include:

Reduced manual review time for lengthy SOC 2 / ISO documents
Shorter vendor assessment cycle times and reduced vendor fatigue
Centralized vendor evidence management with outputs suitable for audits

Reasons customers might discontinue (inferred from complaints)

Based on limited review data:

Needs for extensive third-party intelligence feeds beyond artifacts and public signals
Requirements for deeper ticketing or ITSM integrations not available or not meeting expectations

Publicly available case studies

In the reviewed materials, vendor-published outcomes and customer quote snippets appear in press releases, but detailed, independently verifiable case studies with full methodology were not located in this research pass. Vendor-published example outcomes (paraphrased): - Materials describe large reductions in staff time spent per vendor relationship in reported scenarios and higher vendor response rates for some customers. Critical evaluation: - These outcomes are plausible for systems that automate artifact extraction, but public materials lack transparent baselines (for example: vendor count, complexity, evidence availability, framework scope) that would allow external validation of effect size. - Prospective buyers should request references and conduct pilots that measure time-to-complete and evidence coverage for their specific vendor mix.

04Best fit

Company sizes: - Mid-sized organizations up to large enterprises that manage hundreds to thousands of vendors. Industries / verticals: - Financial services, insurance, healthcare, technology, and other regulated environments with audit requirements for vendor controls. Roles and personas: - Decision makers: CISO, VP Security, Head of Risk/GRC - Champions/users: TPRM managers, security assurance analysts, GRC analysts - Stakeholders: procurement, legal, compliance, internal audit Qualification criteria (good fit): - Programs that routinely review SOC 2 / ISO / pen test reports and seek to reduce analyst review time - Programs that require auditable evidence trails rather than relying solely on ratings - Organizations seeking continuous monitoring and automated re-assessment triggers Deal disqualifiers (poor fit): - Requirements for extensive prebuilt third-party intelligence feeds, sanctions/adverse media, or enterprise risk management workflows in a single suite - Immediate need for deep ticketing/ITSM integrations without manual steps - A vendor base composed mostly of small suppliers lacking formal artifacts (which forces fallback to questionnaires and self-attestation)

05The pitch

What the product does (core value proposition)

VISO TRUST is a B2B third-party cyber risk management (TPRM) platform that accelerates vendor security due diligence by using AI to extract, classify, and map security controls from vendor artifacts (for example, SOC 2 reports, ISO certificates, policies, pen test reports, and trust portals) and by supplementing those artifacts with open-source and public signals. The product emphasizes using vendor-provided evidence rather than relying primarily on questionnaires, with the objective of reducing iterative vendor exchanges and shortening time to risk decisions. Key characteristics include: - An artifact-first assessment approach (start with documents vendors already have, then request only missing evidence) - Continuous vendor monitoring rather than point-in-time reviews - A workflow combining instant assessments from public data with deeper artifact intelligence assessments when vendors provide private evidence

Target market and market positioning

Primary buyers / users: - CISOs, security assurance, vendor risk / TPRM teams, GRC teams - Mid-market to enterprise organizations with large vendor ecosystems (hundreds to thousands) Positioning themes described in vendor materials and market communications: - Faster assessments compared with manual approaches - Reduced friction in vendor engagement through artifact-first workflows - Outputs intended to support audit and compliance needs

Get a comprehensive analysis of VISO TRUST including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →

Published Oct 13, 2026

01Common complaints

If the primary requirement is outside-in cyber ratings at massive scale without vendor cooperation, outside-in rating vendors (e.g., SecurityScorecard, BitSight, Black Kite) may be a more appropriate primary solution.
If a broad third-party management suite is required that includes ethics & compliance screening, procurement workflows, and enterprise GRC standardization, a comprehensive GRC suite (e.g., OneTrust) may better meet those needs.
If immediate, deep ITSM/ticketing integrations (for example, ServiceNow/Jira) are mandatory and the program cannot tolerate manual remediation steps; current user feedback indicates integration gaps in some workflows.
If the vendor ecosystem largely lacks formal artifacts (SOC/ISO/pen tests), the platform will need to rely on questionnaires and self-attestation, which reduces differentiation.
If procurement decisions require extensive public review volume as a validation factor; VISO TRUST’s public review footprint is smaller than some larger incumbents.

Known limitations from reviews and documentation:

Manual components remain in certain operational flows; customers commonly request ticketing integrations.
Some questionnaire responses rely on vendor self-attestation and are not independently validated via audit artifacts, which affects assurance level.

Roadmap indicators:

ISO 27001 certification is reported as in progress with no public target date provided.

Scale considerations:

Vendor marketing references to managing high vendor counts exist, but public technical limits (such as API quotas and assessment concurrency) were not documented in the materials reviewed. Buyers should validate scale capabilities contractually.

02Why they buy

Differentiators supported by user feedback and product documentation:

Artifact-first approach: users report that the platform can process and extract relevant information from large volumes of security artifacts.
Reduced vendor burden: the described workflow starts with existing evidence and requests follow-ups only for missing items, which can reduce the number of vendor questions.

Claims requiring validation:

High-percentage performance and adoption claims published by the vendor should be validated through pilots, references, and methodology review (for example, claims about time savings, accuracy, and adoption rates).

Where competitors may be stronger:

OneTrust: broader third-party lifecycle and compliance toolset
SecurityScorecard: outside-in monitoring and rapid, non-cooperative coverage
SafeBase/Whistic: vendor-side trust centers and sharing can complement buyer-side artifact processing

03Field reports

Review-platform sentiment (G2)

G2 currently shows a small sample of reviews, which limits generalizability.

Representative user feedback (paraphrased):

A user in financial services noted that VISO TRUST is effective at processing large volumes of security artifacts and extracting relevant information.
A head of security and compliance reported measurable time savings and a positive customer service experience.

Critical feedback (paraphrased):

A reviewer indicated the platform could benefit from integrating additional third-party data sources.
Another reviewer observed a manual component in some processes and requested integration with ticketing tools to improve automation.

Interpretation: reviewers cite artifact analysis and time savings as strengths, while requesting broader integrations and wider third-party intelligence.

Employee/culture sentiment (Glassdoor) — indirect but relevant

Caution: these are anonymous, user-generated entries and should be treated as signals to probe during reference checks rather than conclusive evidence.

Community / social (LinkedIn / forums)

This research pass did not find substantive discussion threads on broader community forums specific to VISO TRUST. This is common for niche enterprise tooling adopted through sales-led channels.

Why customers selected the product (evidence from reviews/vendor materials)

Common selection drivers include:

Reduced manual review time for lengthy SOC 2 / ISO documents
Shorter vendor assessment cycle times and reduced vendor fatigue
Centralized vendor evidence management with outputs suitable for audits

Reasons customers might discontinue (inferred from complaints)

Based on limited review data:

Needs for extensive third-party intelligence feeds beyond artifacts and public signals
Requirements for deeper ticketing or ITSM integrations not available or not meeting expectations

Publicly available case studies

Vendor-published example outcomes (paraphrased):

Materials describe large reductions in staff time spent per vendor relationship in reported scenarios and higher vendor response rates for some customers.

Critical evaluation:

These outcomes are plausible for systems that automate artifact extraction, but public materials lack transparent baselines (for example: vendor count, complexity, evidence availability, framework scope) that would allow external validation of effect size.
Prospective buyers should request references and conduct pilots that measure time-to-complete and evidence coverage for their specific vendor mix.

04Best fit

Company sizes:

Mid-sized organizations up to large enterprises that manage hundreds to thousands of vendors.

Industries / verticals:

Financial services, insurance, healthcare, technology, and other regulated environments with audit requirements for vendor controls.

Roles and personas:

Decision makers: CISO, VP Security, Head of Risk/GRC
Champions/users: TPRM managers, security assurance analysts, GRC analysts
Stakeholders: procurement, legal, compliance, internal audit

Qualification criteria (good fit):

Programs that routinely review SOC 2 / ISO / pen test reports and seek to reduce analyst review time
Programs that require auditable evidence trails rather than relying solely on ratings
Organizations seeking continuous monitoring and automated re-assessment triggers

Deal disqualifiers (poor fit):

Requirements for extensive prebuilt third-party intelligence feeds, sanctions/adverse media, or enterprise risk management workflows in a single suite
Immediate need for deep ticketing/ITSM integrations without manual steps
A vendor base composed mostly of small suppliers lacking formal artifacts (which forces fallback to questionnaires and self-attestation)

05The pitch

What the product does (core value proposition)

Key characteristics include:

An artifact-first assessment approach (start with documents vendors already have, then request only missing evidence)
Continuous vendor monitoring rather than point-in-time reviews
A workflow combining instant assessments from public data with deeper artifact intelligence assessments when vendors provide private evidence

Target market and market positioning

Primary buyers / users:

CISOs, security assurance, vendor risk / TPRM teams, GRC teams
Mid-market to enterprise organizations with large vendor ecosystems (hundreds to thousands)

Positioning themes described in vendor materials and market communications:

Faster assessments compared with manual approaches
Reduced friction in vendor engagement through artifact-first workflows
Outputs intended to support audit and compliance needs

Get a comprehensive analysis of VISO TRUST including market position, competitive landscape, adoption trends, and peer benchmarks.

Download full report →