What Riscosity is
Tracking third party data flows is a hot topic in security right now - most companies are tracking via OAuth or API flows. Riscosity is cutting through that to the sources of truth, namely the code and network layers. They scan your code for third party data flows, and then validate at runtime by proxying your egress. The vendor site is www.riscosity.com. This profile is an entry in the oneNorma directory, not a vendor landing page.
What Riscosity covers
Riscosity is in the catalog for these capabilities. Catalog tags: Hands-on and Best for Enterprise.
How to evaluate Riscosity in a security program
Use Riscosity as a stack candidate, not as diligence evidence. The oneNorma score for Riscosity is 4/10 (percentile 15). A dashboard does not replace a pentest or a control mapped to Law 21.663 or ISO 27001. Compare this profile with what www.riscosity.com publishes. Contrast it with pentesting and Security Cloud & Compliance.
