Founded 1999Pure-play VRM/TPRM software

MetricStream

San Jose, California, United States

Low-code/no-code GRC cloud platform with purpose-built Third-Party (and Fourth-Party) Risk Management products: centralizes third-party data, automates risk assessment and due-diligence workflows, and extends monitoring to sub-vendors (fourth parties).

Headquarters
San Jose, California, United States
Founded
1999
Website
www.metricstream.com/products/third-party-management.htm

Notable facts

  • Received a $65M investment from Clearlake Capital Group in 2017, which remains a key institutional investor
  • A global payments-technology customer case study reports third/fourth-party assessment duration cut from 45 days to 10-12 days

Relevant guides

Pricing

Pricing not publicly disclosed on the vendor's site. Typical for B2B VRM/procurement software, which is usually quoted per scope or vendor volume.

Case study

Mastercard built a fourth-party risk monitoring program for its payments ecosystem on the MetricStream platform running on AWS. Read more →

Sources. This profile is compiled from public reference data, WebSearch-verified againstsource 1 · source 2 · source 3. Data as of 2026-07-14. See methodology.

Sourcing software in this category today? We connect risk, compliance, and procurement teams with qualified vendor risk management software vendors.

Request software

Related vendors