# CyberGRX

**Canonical:** https://apis.io/providers/cybergrx/  
**Website:** https://www.cybergrx.com/  
**APIs profiled:** 1

CyberGRX is a third-party cyber risk management platform — the Global Risk Exchange (GRX) — that helps organizations assess, monitor, and reduce risk across their vendor and supplier ecosystem. It combines a shared library of standardized vendor risk assessments with analytics for inherent and residual risk, control gaps, and findings. CyberGRX was acquired by ProcessUnity in 2023 and is now delivered as the ProcessUnity Global Risk Exchange. It exposes a versioned REST API (v1, bulk-v1, v2) authenticated with an account API token passed in the Authorization header, including a Bulk API that returns an entire third-party ecosystem — residual risk, control scores, and findings — in a single request, plus first-party Python examples and Go/Splunk connectors.

## Kin Score — 17.8 / 100 (emerging)

Scored 2026-08-30 under rubric 0.17.2. Trend: flat (+0.0 from 17.8).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 0.0 |
| Governance | 0.0 |
| Contract Governance | 0.0 |
| Operational Transparency | 2.6 |
| Developer Ergonomics | 49.4 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 3.4 (human-only)

| Dimension | Value |
|---|---|
| Spec Presence | no |
| Agentic Access | no |
| Reversibility Documented | no |
| MCP Server | no |
| Auth Clarity | bearer |
| Idempotency | no |
| Error Semantics | no |
| OpenAPI Examples | no |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Self-serve signup — onboarding: self-serve, pricing: unknown, trial: no (confidence: medium).

## APIs (1)

- **CyberGRX Global Risk Exchange API** — Versioned REST API for managing third-party cyber risk — search and create third parties, answer inherent-risk scoping questions, apply tags, read inherent and residual risk pro...

## MCP servers (1)

- **CyberGRX MCP Server**

## Security (2)

- **Cybergrx Authentication** — apiKey · 1 scheme
- **Cybergrx Domain Security** — DMARC

## Tags

Company, Cybersecurity, Third-Party Risk, Vendor Risk Management, Risk Management, GRC, Security Assessment

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cybergrx/). Scores are computed from the provider's own public artifacts under a published rubric.