Supply Chain & Third-Party Risk

SolarWinds, Log4Shell, MOVEit, XZ Utils. Supply chain attacks now account for nearly half of all breaches and the trend is accelerating. Most organizations have no systematic visibility into the cybersecurity posture of their vendors, the components in their software, or the cascading risk those relationships represent. Mjolnir helps Canadian organizations build supply chain risk management programs that scale.

Vendor & Third-Party Risk Assessment

Structured assessments of your most critical vendors aligned to recognized frameworks.

• Tiered vendor inventory and criticality scoring
• Security questionnaires aligned to SOC 2, ISO 27001, NIST CSF, and CSA STAR
• Documentation review of SOC 2 reports, penetration test summaries, and certifications
• On-site or virtual technical due diligence for critical vendors
• Risk acceptance, treatment, and contractual remediation tracking

Software Bill of Materials & Dependency Risk

You cannot secure what you do not know you depend on. We help you build SBOM visibility and act on it.

• SBOM generation and ingestion for first-party and third-party software
• Software composition analysis (SCA) for known vulnerabilities in dependencies
• License compliance and provenance verification
• Continuous monitoring for new vulnerabilities affecting your dependency graph

Continuous Monitoring & Incident Coordination

Vendor risk does not stop after onboarding. We help you maintain visibility throughout the lifecycle.

• Continuous external attack surface monitoring of critical vendors
• Threat intelligence feeds tracking ransomware and breach disclosures affecting your suppliers
• Vendor incident notification and coordinated response procedures
• Annual or event-driven re-assessment for highest-tier vendors