How‑to Guide

Getting started with Vendor Shield

Learn how to sign up, assess vendors with AI, review results, and keep your directory up to date.

1) Register or sign in

It takes less than a minute to get to your dashboard.

  • Click Start Free on the landing page (or the button above).
  • Sign in and you’ll be redirected to your Security Dashboard.
  • From there, begin a new assessment any time.
2) Create and assess a vendor

Use the guided flow to kick off an AI‑powered assessment.

  1. Open Onboard Vendor and enter the vendor’s company name and website.
  2. We run quick pre‑checks (website reachability, SPF/DKIM/DMARC lookup).
  3. Start the automated assessment to gather public security & compliance signals.
Typical run time: 30–90 seconds.
3) During the assessment

The app checks signals and builds a concise risk picture.

  • Compliance signals: ISO 27001, SOC 2, GDPR, PCI DSS, ISO 42001 (AI).
  • Privacy policy discovery & analysis summary.
  • Email security posture (SPF, DKIM, DMARC).
  • Security intelligence: incidents, breaches, vulnerabilities.
  • Overall risk score with low/medium/high level.
  • Notes area for your internal context.
4) Understand the results

What the assessment screen shows you.

Risk score

0–100 with a level badge (Low / Medium / High). Extreme values include quick context.

Compliance tiles

Status badges (e.g., Verified, Claimed, Not Found) plus evidence links when available.

Incidents & vulnerabilities

Track status (Open, Following up, Resolved, etc.) and add follow‑up notes.

Privacy & email security

See privacy highlights and SPF/DKIM/DMARC findings with short guidance.

5) Approve or reject

Finalize the review and keep the record up to date.

Approve
Reject

Approved vendors appear in your directory and dashboard stats. You can revisit results any time from the vendor details page.

Dashboard & directory

Where to find things afterward.

  • Dashboard: overview metrics, pending assessments, recent activity, and AI agent shortcuts.
  • Vendor Directory: searchable list of all vendors with quick status and risk snapshots.
SOC 2 & PCI DSS analyzers

Deep‑dive tools to assist your reviews.

  • Extract observations, CUECs, and compensating controls from reports.
  • Attach structured findings to the related vendor record.
FAQ

Need help? Contact contact@cybrgen.nz