---
title: ToolRouter — Workflow
description: A multi-tool workflow showing how to combine ToolRouter tools for a complex task.
url: https://toolrouter.com/workflows/third-party-risk-assessment
---
# Third-Party Risk Assessment

Assess third-party vendor security through identity verification, external security probing, attack surface analysis, and breach history.

Third-party vendors often have access to sensitive data or critical systems, making their security posture your security concern. A data breach at a vendor can have the same impact as a breach in your own infrastructure. Effective third-party risk assessment evaluates vendor security from the outside in without requiring privileged access.

This workflow evaluates vendor security by verifying their business identity through domain registration, probing their external security posture for misconfigurations, assessing the breadth of their attack surface, and researching their security incident history. The assessment provides an evidence-based risk score for vendor selection and ongoing monitoring.

**Tools:** security-httpx, pentest, whois-rdap, web-search
**Category:** security

## Steps

### 1. Verify Vendor Identity

Validate the vendor domain registration details to confirm legitimate business identity and registration history.

- **Tool:** whois-rdap
- **Skill:** lookup_domain
- **Input:** Vendor domain to verify registration details.
- **Output:** Domain registration details including registrant organization, registration age, and registrar.

### 2. Assess External Security Posture

Probe the vendor external-facing infrastructure to evaluate their security posture including headers, TLS, and technologies.

- **Tool:** security-httpx
- **Skill:** probe_hosts
- **Input:** Vendor domain and known endpoints to probe.
- **Output:** Security header analysis, TLS configuration, technology stack, and server security assessment.

### 3. Evaluate Attack Surface

Perform reconnaissance on the vendor infrastructure to assess the breadth of their external attack surface.

- **Tool:** pentest
- **Skill:** recon
- **Input:** Vendor domain for attack surface reconnaissance.
- **Output:** Attack surface assessment including exposed services, potential vulnerabilities, and risk indicators.

### 4. Research Security History

Search for past security incidents, data breaches, and security certifications associated with the vendor.

- **Tool:** web-search
- **Skill:** search
- **Input:** Vendor name and domain to search for security incidents and certifications.
- **Output:** Past breach reports, security certifications, compliance attestations, and incident history.

## Benefits

- Verify vendor identity and business legitimacy through registration analysis
- Evaluate external security posture without requiring vendor cooperation
- Assess attack surface breadth as an indicator of security maturity
- Research breach history and security certifications for informed decisions
- Repeatable assessment for ongoing vendor monitoring
