Comparison
PuReAI vs Panorays (2026)
Panorays combines automated security questionnaires with an external footprint view. PuReAI is continuous external intelligence first, with the questionnaire treated as a supplement rather than the spine.
Last reviewed: 2026-09-01
How the two are positioned
The real choice is where your assurance comes from: what a supplier tells you, or what is observable about them every day.
Side by side
| Dimension | PuReAI | Panorays |
|---|---|---|
| Primary signal | Continuous external OSINT across 12 modules per supplier domain. | Automated, AI-assisted security questionnaires combined with an external attack-surface rating. |
| Supplier effort | None - no supplier action needed to produce a score. | Supplier completes and maintains questionnaires; Panorays' AI Smart Match can auto-suggest answers from certifications and attestations. |
| Refresh cadence | Continuous; score history shows degradation between reviews. | Questionnaire cycle plus ongoing external monitoring of the supplier's footprint. |
| Scoring transparency | Weights published and each segment shown separately. | Combines questionnaire responses and external rating into a risk profile; the internal weighting model is not published as an exact formula. |
| Threat intelligence | Ransomware actor activity and ATT&CK TTPs tied to the supplier's sector and stack. | Positioned around third-party risk management workflow rather than actor-centric threat intelligence. |
| Deployment | Cloud or sovereign/on-premise, including air-gapped. | Vendor-hosted SaaS platform. |
| Onboarding time claim | Scoring begins the moment a domain is entered. | Panorays states it can reduce vendor onboarding time significantly through automation of the questionnaire and remediation workflow. |
| Nth-party visibility | Supply-chain module surfaces undeclared dependencies from external evidence. | Full supply chain and Nth-party visibility is a stated capability of the Panorays platform. |
| Primary buyer motion | Free domain report, then a scoped engagement. | Demo-led enterprise sales motion. |
Based on each vendor's publicly documented product information. If something here is out of date, tell us and we will correct it.
A closer look
Overview
PuReAI
PuReAI treats continuous, passive external intelligence as the primary source of truth for third-party risk, rather than relying on what a supplier self-reports. Every supplier in scope is scored using the same twelve OSINT modules and the same published formula used for the customer's own domain, with no onboarding step required from the supplier. Questionnaires still have a role for contractual, organisational and policy questions that cannot be observed externally, but the technical posture assessment does not depend on supplier cooperation or response rates.
Panorays
Panorays is a third-party cyber risk management platform built around automating the security questionnaire process alongside an external attack-surface rating, aiming to give a combined picture of a supplier's posture from what they say and what is externally observable. Panorays' own site describes AI-driven questionnaire automation (including auto-filled answers sourced from a supplier's existing certifications and attestations), remediation workflow, and full supply chain and Nth-party visibility as core capabilities, positioned to reduce onboarding time and manual chasing of supplier responses.
Deployment options
PuReAI
PuReAI can be deployed as a managed cloud service or fully on the customer's own infrastructure, including an air-gapped option, applying the same scoring methodology to both the customer's own domain and every supplier scored, regardless of deployment mode.
Panorays
Panorays is delivered as a vendor-hosted SaaS platform, accessed through its web application by both the assessing organisation and its suppliers who need to complete questionnaires. There is no publicly documented on-premise or air-gapped deployment option on Panorays' site; the questionnaire workflow in particular depends on a shared, vendor-hosted portal that both sides can access.
Scoring transparency
PuReAI
The Company Risk Score formula is published outright: Compromises 0.4, Issues 0.3, Supply Chain 0.2, Exposure 0.1, applied identically to the customer's own domain and to every supplier scored, with each finding traceable to one segment and its underlying evidence.
Panorays
Panorays describes its cyber posture rating as combining non-intrusive external attack-surface evaluation with questionnaire responses to produce a supplier risk profile, contextualised by business impact. Panorays' public materials explain the rating conceptually and describe the categories assessed, but do not publish an exact mathematical formula showing how questionnaire answers and external signals are weighted together into the final score.
Data collection
PuReAI
Collection is passive, external and evidence-preserving across all twelve modules, requiring no supplier cooperation or credentials; a confidence level accompanies each finding, and inferred findings are labelled as such.
Panorays
Panorays collects data through two channels: automated, non-intrusive scanning of a supplier's external attack surface, and structured questionnaire responses (increasingly automated through AI-assisted answer suggestions drawn from a supplier's compliance certifications and attestations) submitted by the supplier itself.
Coverage
PuReAI
Coverage extends to every supplier the customer wants scored, starting from a domain alone, plus supply-chain discovery to surface dependencies that were not explicitly declared by the customer or the supplier.
Panorays
Panorays states its platform provides full supply chain and Nth-party visibility, letting customers manage risk from direct vendors down through their vendors' own suppliers, combined with workflow to onboard, assess and remediate at scale.
Integrations
PuReAI
PuReAI integrates with Splunk, Sentinel, Jira, ServiceNow, Slack, plus webhook and REST API access, in either cloud or on-premise deployment.
Panorays
Panorays publishes integrations aimed at TPRM and GRC workflows, including ticketing and collaboration tools, consumed through its cloud-hosted platform.
Pricing model
PuReAI
A free domain report is available to start; paid engagements are scoped by number of monitored suppliers, domains and deployment mode, without a fixed public price list.
Panorays
Panorays follows a demo-led enterprise sales motion; pricing is not published as a fixed list on its public site and is scoped to the number of vendors managed and questionnaire workflow required.
Support
PuReAI
Analyst-reviewed disputes with a fixed five-business-day resolution window are available on every finding, alongside standard account and technical support.
Panorays
Panorays provides customer support and a resource centre covering questionnaire workflow, remediation guidance and platform usage, consistent with an enterprise TPRM SaaS vendor.
Which one fits your situation
Choose PuReAI when
- — Supplier questionnaire fatigue is real and response rates are poor.
- — You need evidence that is independent of what the supplier claims.
- — Actor and ransomware context matters to your board.
Choose Panorays when
- — Your programme is contractually built on questionnaire attestations.
- — You need workflow for collecting and chasing supplier responses.
Questions we get asked
Does PuReAI replace questionnaires?
It replaces the part of a questionnaire that asks about externally observable posture, which is most of the technical section. Contractual, organisational and policy questions still need an answer from the supplier.
How fast is a supplier scored?
Scoring starts from the supplier's domain alone, with no onboarding required from them.
Can Panorays run without supplier participation?
Panorays' external attack-surface rating does not require supplier participation, but its core questionnaire workflow, described on its own site as a primary product feature, depends on the supplier completing and maintaining responses.
Compare on your own domain
Run a free PuReAI domain report and check it against whatever you use today. The scoring methodology is public.