Supplier lifecycle
Track contractors, agencies, MSPs, SaaS vendors, and AI tooling providers as supplier profiles with risk tier, scope, owner, and review cadence.
Supply-chain cyber governance
Govern every external AI operator.
OpenSyber turns supplier-risk programs into runtime controls for AI contractors: scoped access, monitored remote sessions, due-diligence evidence, and audit trails for every AI-assisted action.
We do not replace legal review, procurement due diligence, official questionnaires, or formal supplier certification. OpenSyber is the enforcement and evidence layer for contractor access after scope and risk are defined.
Supplier profile
Runtime risk view
- Supplier
- Northwind Dev Studio
- Risk tier
- High - production code
- Due diligence
- Questionnaire reviewed, 3 findings
- Contract window
- 2026-07-01 to 2026-12-31
- Allowed scope
- repo: payments-api, env: staging
- Runtime policy
- Short session, step-up on writes
Questionnaire evidence
Attach due-diligence status, certifications, findings, approvals, and remediation notes to the runtime profile used by workspace policy.
Remote access controls
Constrain where, when, and how external parties reach repos, cloud tools, MCP servers, and AI agents.
Audit-ready exports
Export AI-assisted actions by supplier, quarter, repo, workspace, or policy decision for security and procurement reviews.
Framework mappings
NIST / CISA
C-SCRM program, roles, supplier requirements, continuous monitoring.
ISO 27001
Supplier relationship controls, agreements, cloud service monitoring.
EU DORA
ICT third-party risk, registers, contract oversight, resilience evidence.
UK NCSC
Understand risks, establish control, check arrangements, improve.
Israel INCD
Customer-side supplier lifecycle, questionnaire workflow, remote access oversight.
Lifecycle workflow
- 01Map external party as a supplier profile.
- 02Record due diligence, certifications, questionnaire status, and contract scope.
- 03Launch isolated workspaces with policy defaults derived from risk tier.
- 04Monitor denied actions, drift, approvals, and remote-access sessions.
- 05Export evidence for procurement, CISO review, auditors, or regulators.
Regional localization
OpenSyber מסייע לארגונים ליישם עקרונות של הגנת סייבר בשרשרת האספקה עבור קבלנים וספקי AI: הרשאות מינימליות, גישה מרחוק מנוטרת, תיעוד פעולות, ובקרות זמן ריצה לכל פעולה של סוכן AI.
For Israeli buyers, OpenSyber can be framed as the runtime enforcement and evidence layer for supplier access after customer-side risk classification, questionnaire review, and contract scoping are complete.