Noevika for Teams
Continuous third-party breach monitoring
Upload your vendor list once. When any of them is named in a breach, ransomware claim or regulator filing, your whole security or GRC team knows within hours — and at the end of the month you hand your auditor a report that shows what was monitored, what was found, and what was quiet.
Not sure yet? Run a free Vendor Exposure Report — paste 20 vendors, see the last 90 days, no account needed.
The public record, feeds, widget and personal watchlists stay free. Team plans are priced per monitored vendor and client organisation — tell us your size and we'll send a quote the same day.
Free
For individual analysts, researchers and anyone who wants to follow the record.
$0 forever
- · Full public record, feeds, widget and API reads
- · Digest, personal watchlist and instant alerts
- · Personal vendor list (up to 25) with a monthly PDF report
- · API keys and the MCP connector
Teams
Design partnersFor security and GRC teams, MSPs, vCISO firms and compliance consultancies monitoring vendors for a company or for clients.
Ask for a quote priced per monitored vendor
- · Everything in Free
- · One shared vendor list and watchlist, 500 vendors and 25 seats included
- · Team alerts: every member by email, plus your Slack or Teams channel
- · Monthly report prepared for the team, PDF and CSV, with negative evidence
- · Roles, bound invitations, audit log with CSV export
- · A named support contact; our DPA applies to every team; SSO (SAML) and an SLA on request
What's included
| Feature | Free | Teams |
|---|---|---|
| Public incident record, organisation timelines, threat actors, trends | ||
| Atom feeds, embeddable widget, JSON API reads | ||
| Daily or weekly email digest by sector | ||
| Personal watchlist with instant alerts | ||
| Vendor monitoring | Personal list | One shared list for the whole team |
| Vendors monitored | Up to 25 | 500 included — more on request |
| Seats | 1 | 25 included — more on request |
| Roles (owner, admin, member) and invitations bound to the invitee's address | — | |
| Instant alerts when a vendor is named in a breach, ransomware claim or regulator filing | Email, personal Slack/Teams | Every member by email + the team's Slack/Teams channel |
| Monthly vendor report (PDF and CSV) | Emailed to you on the 1st | Prepared for the team; any member can download it |
| Vendors with no incidents listed as negative evidence | ||
| Customer-visible audit log (who added which vendor, when) with CSV export | — | |
| One-click move of a personal vendor list into the team | — | |
| API keys, Python and TypeScript SDKs, MCP connector for AI assistants | ||
| Google / Microsoft sign-in; one-time email codes; no passwords | ||
| Support | Community (GitHub) | Email, with a named contact |
| Pilot for MSPs, vCISO firms and consultancies (many client portfolios) | — | On request |
Where the data comes from
Public, citable sources only. Every item links to its original publisher — a state attorney general, HHS, the SEC, CISA, a vendor advisory or a named news outlet — and ransomware claims are labelled as claims. Nothing from leak sites is ever stored.
Where it fits in your compliance program
Continuous monitoring between questionnaire cycles — the ongoing evidence that SOC 2 CC9.2, ISO 27001 A.5.19–5.22, HIPAA business-associate oversight, DORA Article 28 and NIS2 Article 21 all expect. The monthly report and audit log are what you hand an auditor.
Security of the service
- · No passwords — one-time codes or Google / Microsoft sign-in
- · Personal data encrypted at rest; API keys and invite tokens stored hashed
- · Hosted on AWS and Cloudflare; code is open source
- · Security page with subprocessors and questionnaire answers · DPA applies to every team, signed copies on request
Running a pilot?
We are onboarding a small number of design partners — security teams, MSPs and GRC consultancies — who get the Teams plan free for six months in exchange for a short weekly call and a case study. Send your vendor count and we'll set you up the same day.
hello@noevika.com