Free tool · Vendor / supplier risk
Vendor security scoring
Paste up to 25 supplier or vendor domains and we return a scorecard for each: TLS posture, DMARC enforcement, and DNS health (DNSSEC, registration expiry, blacklist status). Use it as evidence in procurement reviews or to triage which third parties most urgently need a security conversation.
Free batch
up to 10 domains · 3/day
Pro
up to 100 · scheduled re-runs
MSP
up to 500 · saved batches
What this tool checks
For each vendor domain we run the same posture checks our standalone tools run - TLS handshake + cipher posture, DMARC policy strength, DNS health (DNSSEC, CAA, registration expiry, blacklist hits) - and produce a per-vendor letter grade plus a breakdown.
Then we surface the worst-grade and the highest-leverage issue across the batch, so a procurement team can rank the list by "needs a conversation" priority instead of treating every finding equally.
The 25-domain batch limit is a fair-use ceiling for the free tool. Wiredepth MSP ($699/mo, 100 domains) was built for agencies running supplier risk across larger portfolios with scheduled re-scans, alert routing per-client, and co-branded PDF exports.
How to read the results
Worst-grade column sets your triage priority. A vendor with TLS A but DMARC F is not "passing" - they're shipping unauthenticated mail under their domain, which is a phishing-impersonation risk for YOUR users.
Use the batch view as evidence in vendor reviews. Procurement teams have started attaching Wiredepth scorecards to renewal conversations - the data is public, the verdict is portable, and the vendor can verify the same inputs themselves.
One vendor jumping from B to D over time usually means either a cert expiry was missed (TLS regression) or DMARC was relaxed during a delivery troubleshoot (regression to p=none). Wiredepth Pro alerts on the regression rather than waiting for the next manual review.