Vendifi Insights

Vendifi Insights: Vendor Security Posture at a Glance Before signing a contract, sharing data, or integrating with a new vendor, assess their external security posture in seconds. Vendifi Insights provides an at-a-glance view of a vendor domain directly in your browser side panel. How it works Browse to a vendor's website and open the Vendifi Insights side panel. The extension identifies the registrable domain, such as vendor.co.uk from app.vendor.co.uk, then retrieves its security posture from the Vendifi API. What gets checked? Email and DNS security, ransomware, password breach and sanctions intelligence, plus a separate hybrid post-quantum TLS check for HTTPS websites. Your overall score Every domain receives an Insight Score from 0-100 and a letter grade, providing a consistent benchmark for vendor security posture. Risk insights explain why each finding may matter, what an attacker could exploit, and which vendor controls to assess during due diligence. Vendifi Insights helps you understand third-party exposure; it does not instruct you how to operate or remediate a vendor's domain. Hybrid post-quantum TLS and harvest-now/decrypt-later Encrypted traffic can be recorded today to try to decrypt it with a future quantum computer. While the side panel is open on an HTTPS website, Vendifi checks its exact hostname using Quantum Hello and explains the observed protection: Supported: Harvest-now/decrypt-later is protected by the observed hybrid key establishment. Not detected: Harvest-now/decrypt-later is not protected by an observed hybrid key establishment. Unknown or unavailable: Protection cannot be assessed. This result applies to the endpoint tested. It does not confirm which encryption your browser connection uses, or the security of stored data, authentication, or other vendor systems. This check is separate from the overall security score. A link opens the full Quantum Hello report for the tested hostname. Why install it Vendor due diligence: Assess potential suppliers, SaaS providers, and partners before onboarding. Procurement support: Give procurement, security, and risk teams consistent signals during evaluation. Fast risk context: Understand likely exposure, attacker paths, and questions to raise with a vendor without leaving the page. No configuration required: Install the extension and browse to any HTTP or HTTPS site. Efficient lookups: Results are cached locally for 15 minutes, so repeat checks are fast without unnecessary API calls. Privacy-first: The extension does not read page content, inject scripts, access cookies, or read your stored browsing history. The registrable domain is sent to Vendifi for scoring. For the separate post-quantum TLS check, the exact HTTPS hostname is sent to Vendifi and forwarded to Quantum Hello. URL paths, queries, fragments, page content, and credentials are not sent. If the check limit is reached, the side panel explains how long to wait before trying again. Who is it for? Vendifi Insights is for security teams, procurement managers, IT leaders, compliance professionals, and anyone making decisions about vendors and third parties. Whether evaluating a new SaaS platform, reviewing a supplier, or checking a vendor during a sales call, it surfaces the security and risk signals that matter.