Whistic’s third-party risk management platform is a customizable solution with straightforward pricing.

Request Pricing

Choose Your Just-Right TPRM Solution

The Whistic Platform provides a scalable, adaptable TPRM solution for risk management and InfoSec teams. Our pricing model gives you the flexibility to customize a package to suit your unique needs.

Whistic Core

I want to: Automate manual tasks in the assessment process and meet my compliance requirements.

Vendors	Unlimited
Users	Unlimited
Assessments	25
Smart Responses	5
Assessment Copilot Uses	5
Vendor Insights Uses	5
Trust Centers	1

Whistic Assess

Standard Features

50+ Standardized Frameworks
Access to the Whistic Trust Catalog
Vendor Review Workflow
Automated Re-assessments
Automated Notifications
Vendor Risk Scoring
Bulk Questionnaire Requests
Slack Integration
Vendor Knowledge Base
And More!

Plus, Whistic AI Copilot Capabilities:

SOC 2 Summarization
Vendor Summaries
Vendor Insights

Whistic Trust Center

Standard Features

Publish to the Trust Catalog
Public Link Sharing
Standard NDA
Auto Expiration
Slack and DocuSign Integrations
AI-Powered Smart Response
Knowledge Base
And More!

Assess +

I want to: Enable a comprehensive TPRM program, streamlining workflows for vendor onboarding, assessment, and ongoing risk management.

Whistic Professional offers all the features of Whistic Core, plus:

Custom questionnaire builder + logic
Pre-questionnaire workflows
Intake forms
125 additional assessments

Trust +

I want to: Respond to high volumes of assessment requests and questionnaires automatically

Whistic Trust Center Pro delivers all the assessment capability of Whistic Core, plus specialized tools for assessment response, including:

AI-powered Smart Response with Knowledge Base
AI-powered Vendor Insights
Full access to premium frameworks
Additional, customizable Trust Center Profiles

Request Pricing

Feature Overview

Build the right combination of capabilities for your TPRM needs with these features for vendors and assessors:

Trust Catalog

This on-demand exchange brings buyers and sellers together to streamline the assessment process. Vendors can proactively publish their Whistic Trust Center, and buyers can search from a catalog of thousands of vendors by control or requirement—and use that information to begin a zero-touch assessment.

Knowledge Base

This document repository becomes your single source of truth for security documentation. Populate with pre-approved security documentation to empower self-service assessment responses without taking on risk, or enable AI to draw automated responses directly from your Knowledge Base.

Smart Response

This AI-powered tool allows vendors to automate the assessment response process by running incoming questionnaires against InfoSec-approved documentation in your Knowledge Base, so you can respond to requests in minutes.

SOC 2 Summarization

Use Whistic AI to generate a summary of a SOC 2 audit report catered to your controls without manually searching through hundreds of pages of documentation.

Vendor Insights

Send bulk queries to your entire vendor inventory (or a specified subset of your vendors) without hunting vendor-by-vendor for security insights.

Vendor Summary

View the overall state of a third party’s security posture and identify risks with your control framework instantly without digging through mountains of security docs or waiting for a questionnaire response.

Whistic Implementation and Support

Our best-in-class support team is with you from step one to ensure you see value fast and get the most out of the Whistic Platform.

Implementation

Dedicated Implementation Manager
System Administrator and end-user training
Configuration working sessions
Integration consulting
Custom questionnaire (1 < 100 questions) includes logic configuration (initial draft + 3 revisions)

Technical Support

Self-serve knowledge base + video library
Email support (4 hr. SLA response)
Live chat (15 min. SLA Response 9am - 5pm MST, Mon-Fri)

Customer Success

Dedicated Customer Success Manager
Ongoing best practices collaboration

Packages and Pricing FAQs

Is it possible to add additional Trust Centers and additional assessments to my package?

Yes! Your business may sell multiple product lines or service customers with unique security requirements. We understand the need to customize your Trust Center accordingly. Similarly, we understand you may need to assess more vendors than your initial package, so these can be added, as well.

I’m a large vendor with high volumes of incoming questionnaire requests; is it possible to purchase additional Smart Responses to automate the process?

Yes, you can purchase additional Smart Responses in increments of 50.

I have specific security requirements for different vendor types; is it possible to build customized questionnaires for these unique vendors?

Yes. Our Whistic Core package comes standard with 50+ standard questionnaires and frameworks, but you can add custom-questionnaire builder capabilities and premium frameworks as needed.

How is an “assessment” defined as it pertains to Whistic pricing?

An Assessment begins when the field “Assessment Status” changes from “Initial Assessment” to “In Progress”. During this time, users can send as many questionnaires or assess as many documents as needed to complete the Assessment.

How are uses of Whistic’s AI Assessment Copilot capabilities defined?

One license of AI Assessment Copilot comes with three capabilities: SOC 2 Summary, Vendor Summary, and Vendor Insights. You may perform one or more of these actions for each Assessment. At the end of each assessment, your number of remaining Copilot Licenses will be reduced by one.

Full Pricing Inquiry

Whistic’s customized approach to pricing is designed to meet your specific needs. For a detailed look at the plan or package that’s best for you, please contact us.