01
Add your vendor
Create a vendor profile in Veleta, record key details and give your review an owner.
Vendor risk,under control.
Assess third-party vendors, monitor their security posture, and run AI-assisted questionnaires — in one platform built for compliance teams.
No sign-up or credit card required — just your email.
Free 14-day trial · choose your modules and number of people · no card required · no automatic charges.
Viper helps you evaluate third-party vendors and manage risk, Cameleon scans and monitors supplier security posture, and Sigma powers AI-assisted questionnaires and insights.
Supplier evidence, kept together
Bring assessments and supporting material into the vendor review record.
Findings with clear ownership
Assign owners and due dates, then keep remediation visible.
Live module
What Viper can do for you
Move vendor reviews from intake through follow-up, with evidence and decisions kept together.
Vendor register
Keep supplier details, ownership, risk tier and review history in a searchable register.
Risk profiles
Bring assessment responses, findings and available security context into a vendor risk view.
Assessments
Send structured questionnaires and collect responses and supporting evidence.
Findings
Assign owners and due dates, track remediation, and retain evidence with findings.
Vendor portal
Give vendors a place to respond to assessments and submit requested evidence.
Security scans
Review available external security scan signals alongside the vendor’s assessment record.
Benchmarking
Compare vendor risk posture with the internal benchmarks available to your team.
Reporting
Review vendor posture and assemble assessment and finding information for stakeholders.
Live module
What Cameleon can do for you
Monitor supplier-facing domains and keep an intelligible record of the security signals you review.
External domain scans
Run security scans against supplier domains and their publicly visible surface.
Scheduled monitoring
Schedule recurring scans to keep an eye on changes in a supplier’s external posture.
Security scoring
Review a supplier security score and how it changes across scans.
Findings and alerts
Inspect detected issues by severity and review available remediation guidance.
Scan history
Return to previous scans and findings when reviewing a supplier’s security evidence.
Viper integration
Link a security scan to a Viper vendor record to keep technical evidence alongside the vendor review.
Live module
What Sigma can do for you
Build repeatable questionnaires and spend review time on the responses that need attention.
Questionnaire builder
Create structured questionnaires with sections, required fields and branching.
Framework templates
Start from available questionnaire templates and tailor them to your review.
AI answer analysis
Use AI-assisted analysis to surface signals and inconsistencies in responses.
Evidence attachments
Keep supporting documents attached to the questions they help answer.
Answer library
Maintain reusable answers and reference material for future questionnaires.
Multi-recipient dispatch
Send questionnaires to multiple recipients and follow each response’s progress.
Quick questions
Send a focused follow-up question without launching a full questionnaire.
Response insights
Review response progress and aggregated insights across questionnaires.
A clear review path
How it works
Veleta helps teams bring vendor intake, evidence, assessment and decisions into one review process.
02
Request evidence
Send a structured assessment from Veleta and collect the vendor’s answers and supporting material.
03
Review the signals
Review questionnaire responses, available scan context and findings in the vendor’s record.
04
Track the decision
Record the outcome in Veleta and keep follow-up visible with the vendor’s review history.
The Veleta platform
One platform. Six modules — three live today.
Start with the capabilities your team needs today. Additional modules are in development.
Viper
LiveKeep vendor reviews, assessment evidence and follow-up in one workflow.
- Vendor register and risk profiles.
- Structured assessments and evidence.
- Findings with remediation tracking.
- Security scan context and reporting.
Cameleon
LiveSee the external security posture of supplier domains, then follow changes over time.
- External domain security scans.
- Scheduled monitoring.
- Supplier security scores and trends.
- Severity-based findings and alerts.
Sigma
LiveBuild questionnaires, gather responses and review them with AI-assisted analysis.
- Questionnaire builder and templates.
- AI-assisted answer analysis.
- Evidence attachments on questions.
- Response insights and reporting.
Anda
In developmentA dedicated enterprise risk register and treatment workspace.
- Risk registers.
- Treatment plans.
- Ownership and review workflows.
Delta
In developmentA planned workspace for compliance gap analysis and control tracking.
- Framework mapping.
- Control evidence.
- Remediation progress.
Magma
In developmentA planned workspace for coordinating compliance projects and tasks.
- Project planning.
- Task tracking.
- Milestones.
Why Veleta
A review trail your team can stand behind.
For security, compliance and third-party risk teams: bring supplier evidence, findings and review decisions into a traceable workflow—not scattered files and inboxes.
Supplier evidence, not scattered files
Collect assessment responses and supporting documents in the vendor review, so your team can find evidence in context instead of searching across folders and inboxes.
Findings with owners and due dates
Assign a person to each finding, set a due date and keep remediation progress visible to the review team.
Decisions retained for audit
Record the review outcome alongside its evidence and supplier history, giving auditors a clear decision trail to revisit.
One view of third-party risk
Keep supplier details, risk context and review activity together in a searchable vendor record.
Repeatable supplier assessments
Use Sigma questionnaire workflows to gather structured responses and supporting evidence from suppliers.
Relevant to NIS2 and DORA work
Supplier evidence and review decisions can inform your ICT third-party risk documentation. Separately, Veleta’s own controls are mapped to NIS2 and DORA ICT third-party requirements; this is not a compliance guarantee or a mapping of your organisation’s controls.
Useful details
Frequently asked questions
Viper, Cameleon, Sigma are live. Anda, Delta, Magma are in development.
After 14 days, trial access ends. Your account and data remain available. No card is required and there are no automatic charges; a paid subscription is a separate choice.
The shared sandbox is an evaluation workspace with sample data. It currently covers Viper and Sigma; it is not an isolated security-testing tenant.
Veleta is ISO 27001 certified. Its SOC 2 Type II report is available to qualified customers and prospects under NDA, following manual approval. Independent third-party penetration testing every six months. Customer data is stored in the European Union (EU). These facts describe Veleta’s own assurance and data location; they do not guarantee your compliance or map your organisation’s controls. Open Trust Center.
One licence. One module. Clear pricing.
€50 per person, per module every 30 days — or €500 per person, per module every 365 days.
MonthlyAnnual (billed yearly)
Checking purchase availability with Whop…
Live module
Viper
Keep vendor reviews, assessment evidence and follow-up in one workflow.
€50/ person / 30 days
Annual option: €500 per person every 365 days.
- Vendor register and risk profiles.
- Structured assessments and evidence.
- Findings with remediation tracking.
- Security scan context and reporting.
Start free trial
14-day trial, no card or automatic charges
Live module
Cameleon
See the external security posture of supplier domains, then follow changes over time.
€50/ person / 30 days
Annual option: €500 per person every 365 days.
- External domain security scans.
- Scheduled monitoring.
- Supplier security scores and trends.
- Severity-based findings and alerts.
Need more scans? about scan capacity.
Start free trial
14-day trial, no card or automatic charges
Live module
Sigma
Build questionnaires, gather responses and review them with AI-assisted analysis.
€50/ person / 30 days
Annual option: €500 per person every 365 days.
- Questionnaire builder and templates.
- AI-assisted answer analysis.
- Evidence attachments on questions.
- Response insights and reporting.
Start free trial
14-day trial, no card or automatic charges
Want to explore before choosing a plan?
View product demo
No sign-up or credit card required — just your email.
Need two or more modules?
Estimate
Plan a module mix
Checking offer availability. This is a contact-based estimate, not checkout.
Select one or more modules for a reference estimate.
TEAM VELETA
A focused team, built from real-world compliance experience.
Veleta started with two people and more than 20 years of combined experience in security, compliance, audits, and vendor risk.
We had spent years on the other side of the table — running vendor reviews, answering security questionnaires, preparing for audits, and building compliance programs. We started Veleta because we wanted to build the tools we wished we had ourselves.
Today, we are gradually growing our team across Poland and Spain, bringing in people who share the same practical approach to security and compliance.
If you want to talk to the people behind the product, write to us at support@veleta.pro.
Vendor risk, under control
Ready to take control of your vendor risk?
Start with one module in your own workspace, or talk with us about your team’s needs.
No sign-up or credit card required — just your email.
Already a customer? Log in