The Forrester Wave™: Cybersecurity Risk Ratings Platforms, Q2 2024
Vendors or products added in this year’s report may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
No vendors were added in this report.
Vendors or products dropped from one year to the next may indicate a change in the market, change in evaluation criteria, or change of focus by the vendor.
No vendors were dropped in this report.
The CRR market is slowly transitioning from 'help me understand' toward 'help me do more.' The majority of CRR customers today use these platforms to enhance their third-party cyber risk assessment and monitoring capabilities. Technical challenges still exist, but vendors are reorienting the ways they deliver, investing more in technical accuracy and efficiency and expanding their services and support to meet more relevant security and third-party risk management (TPRM) demands.
A: Vendors marked as nonparticipating vendors in the Forrester Wave graphic met our defined inclusion criteria but declined to participate in or contributed only partially to the evaluation. We score these vendors in accordance with our vendor participation policy and publish their positioning along with those of the participating vendors.