Acting on Supply Chain Exposures
Take action on exposed identity data within your third-party ecosystem
👇INVESTIGATE EXPOSURES FROM SUPPLY CHAIN THREAT PROTECTION
When Supply Chain Threat Protection identities an organization with known exposures, use Cybercrime Investigations to dig deeper into that company's domain and understand what identity exposures could mean for your organization. Note: Access to this workflow requires an active SpyCloud Investigations license.
Supply Chain Threat Protection ➜ Cybercrime Investigations
From a partner’s Company Detail page in Supply Chain, select Investigate to jump into Investigations with key fields already filled out. You'll see a pre-populated Domain + selected company's domain.
👇INVESTIGATE AT THE COMPANY DOMAIN LEVEL
What to do in SpyCloud Investigations
Once you’re in SpyCloud Investigations, you can:
- Review identity exposures tied to the partner’s domain
- Assess potential downstream risk to your organization
- Decide whether additional monitoring or remediation is needed
Send identity threat data to your TPRM platform
Bring SpyCloud’s identity exposure data into the third-party risk management (TPRM) platform your team already uses, so you can prioritize vendor risk without adding another manual workflow.
Through SpyCloud Connect, SpyCloud can deliver updated Identity Threat Index values directly to supported TPRM platforms, starting with Optro.
What we send
For each monitored company, SpyCloud sends:
- Identity Threat Index – SpyCloud’s overall view of the company’s identity threat exposure
- Malware Index – Exposure from infostealer-infected devices
- Phish Index – Exposure from successful phishing
- Breach Index – Exposure from confirmed third-party breaches
- Combolist Index – Exposure from recycled credentials found in criminal markets
How it works
Every day, as SpyCloud’s view of a monitored company updates, refreshed index values are delivered via webhook through SpyCloud Connect into your TPRM platform. This gives vendor risk teams current, evidence-based identity threat signals alongside the other information they already use to assess and manage third-party risk.
TPRM platform ➜ Optro
With the Optro integration, SpyCloud Identity Threat Index data flows directly into Optro, giving teams another layer of context for prioritizing and managing vendor risk without leaving their existing workflow.
Updated 13 days ago