Mitch‑Risk

Appearance

Mitch‑RiskLightweight third party vendor risk management

Build security questionnaires with conditional logic, send them via no-login secure portal links, auto-score responses with configurable RAG thresholds, and map answers to ISO 27001, SOC 2, NIST CSF, and Essential Eight.

Get Started
View on GitHub
Mitch‑Risk

Questionnaire Builder

12 question types with conditional logic — show or hide questions based on previous answers.

Secure Vendor Portal

No-login, opaque token links. Optional password gate. Auto-save progress so vendors never lose work.

Weighted RAG Scoring

Configurable risk weights and thresholds. Auto-score every response, generate findings from gaps.

Compliance Mapping

Map questions to ISO 27001:2022, SOC 2, NIST CSF 2.0, and Essential Eight controls. Track coverage across frameworks.

Vendor Profiles

Tier, data sensitivity, risk owner, certifications, evidence attachments. Track risk posture over time with trend charts.

REST API

Session + API key auth with Bearer tokens, IP allowlisting, and configurable expiry. Interactive Swagger UI at /docs on any running instance.

Role-Based Access Control

Three system roles (Admin, Reviewer, Viewer) plus custom roles with 23 fine-grained resource:action permissions.

Self-Hosted

Docker Compose behind any reverse proxy. Local disk or cloud storage (S3, Azure Blob). Runs anywhere.

Open-source, self-hosted third party vendor risk management.