Panorays pricing per vendor, the band cliff at 100 vendors, and Panorays competitors priced

The short answer: Panorays charges per vendor, separately for monitoring and for assessment. The only public price list, filed by a reseller on the UK government's G-Cloud 15 framework in January 2026, starts at 800 pounds per vendor for monitoring and 500 pounds per vendor for assessment for programs under 100 vendors, and falls to 300 and 200 pounds above 5,000. US buyers recorded on Vendr pay a median of $21,700 a year. The detail that matters most is the band structure: on list price, 100 vendors cost less than 99.

Every figure here comes from that price list, from Panorays competitors' own published prices or marketplace listings, or from contracts reported by buyers on Vendr, read on 5 October 2026. If you are choosing between Panorays and a workflow platform, the head-to-head is in OneTrust vs Panorays pricing. This page is about what Panorays itself costs at your vendor count, and how its rivals price the same job.

Panorays pricing per vendor, from the published price list

A third tier, inventory evaluation, records a vendor without scanning or questioning it. It starts at 500 vendors and costs 10 pounds each up to 1,499, then 7, 6 and finally 5 pounds above 100,000. The document is filed by Bright Cyber as service 807526254071940 and does not state the billing period, so treat the rates as per vendor per subscription year and confirm that line on your own quote. Prices are in pounds because the framework is British. A US order is quoted in dollars, but the structure is the same product.

The band cliff, and why 100 vendors cost less than 99

The table reads as volume pricing: the band you land in sets the rate for every vendor in the package. If that is how your quote is built, the totals jump down at each threshold instead of rising smoothly.

The practical rule falls straight out of the arithmetic. For monitoring and assessment together, any program between 85 and 99 vendors pays less by committing to 100 (85 vendors at 1,300 pounds is 110,500 pounds, against 110,000 for 100). For monitoring alone the crossover is 88 vendors, for assessment alone 80. At the next threshold the effect is larger: from 728 vendors, buying the 1,000 band with both evaluations is cheaper than staying in Premium, and the gap at 999 is almost 300,000 pounds.

Bring this to the negotiation. A sales team will happily quote 90 vendors at Basic. Ask for the Premium rate at your real count, or for the 100-vendor package with the spare ten slots as headroom for next year's onboarding.

What buyers actually pay for Panorays

Vendr's record, read on 5 October 2026, shows a median Panorays contract of $21,700 a year, with recorded deals from $12,000 to $34,900. Even the top of that range buys fewer than 50 vendors on monitoring alone at the list rate. Two readings fit: most buyers monitor and assess a short list of critical suppliers rather than the whole register, and private deals land well under list.

One caution about the same page. Vendr's written commentary claims small deployments of 50 to 150 vendors run $30,000 to $70,000 a year, which its own recorded range does not support. Quote the recorded numbers and ignore the prose. The same mismatch has turned up on Vendr's pages for other compliance vendors, so it is a habit of the site, not a Panorays quirk.

Panorays competitors and what they publish

UpGuard's published plan is the cleanest anchor in this market. $21,000 a year for 50 vendors works out to $420 per vendor, while each vendor beyond 50 costs $948 a year. Note the direction: extra vendors cost more than the bundled ones, the opposite of Panorays' bands. A program that expects to grow past 50 within the year should price the next UpGuard plan rather than the add-on rate.

SecurityScorecard and Bitsight sell ratings first and vendor workflow second, and their enterprise list prices are built for large estates. Their Vendr medians, both near $23,600, sit close to Panorays' median, which says the typical mid-market deal in this category lands around $20,000 to $25,000 whatever the vendor's list says. OneTrust is a different shape again, a workflow over a register priced on admin users; how its six metering units work is on OneTrust pricing.

Questions to settle on a Panorays quote

• Which band, and is it volume or graduated? Ask whether the band rate applies to every vendor or only to vendors above the threshold. The cliff above only exists under volume pricing.
• The billing period. The published list does not say whether the rate is annual. Get "per vendor per year" written next to every line.
• The counting rule. Does a vendor you offboard mid-term free its slot? Can you swap one monitored vendor for another without a new charge?
• Monitoring versus assessment. Many programs need questionnaires for all critical suppliers but continuous monitoring for only the top tier. Buying both for everyone is the most expensive line on the list.
• Growth headroom. Price next year's vendor count now, especially if it crosses 100 or 1,000.

What a third-party risk tool will not track for you

Panorays and its competitors tell you how risky each vendor is. They do not tell you which rules require the program, or when those rules change. A US bank's vendor program answers to the June 2023 interagency guidance on third-party relationships from the Federal Reserve, FDIC and OCC. A New York insurer or lender has to keep a third-party service provider security policy under 23 NYCRR 500.11. A healthcare company needs a business associate agreement with every vendor that touches protected health information. And the paperwork side of vendor onboarding, such as keeping certificate of insurance tracking current for every supplier, is its own task again.

That obligations layer is what ComplianceOfficer does. Run the scan at the top of this page for your sector and it returns the register of rules your vendor program has to satisfy, then watches it daily and drafts the policy update when one moves, for $149 a month. How it fits next to a scoring tool is on vendor risk management software, and if you are comparing broader platforms, see the OneTrust competitors page.

Frequently asked questions

How much does Panorays cost?

Panorays publishes no price on its own site, but a reseller price list on the UK G-Cloud 15 framework (filed 30 January 2026) lists monitoring at 800 pounds per vendor and assessment at 500 pounds per vendor in the Basic band of 1 to 99 vendors, falling to 300 and 200 pounds above 5,000 vendors. Recorded US contracts on Vendr have a $21,700 median, read 5 October 2026.

Is Panorays priced per vendor?

Yes. The published price list charges per vendor, separately for each kind of evaluation: monitoring (the outside-in cyber posture), assessment (the questionnaire) and a light inventory record from 500 vendors up. The per-vendor rate falls as you move into a larger band, so the vendor count you commit to sets the price of every vendor in it.

Who are Panorays' main competitors?

UpGuard, SecurityScorecard and Bitsight on the security ratings side, and OneTrust, Prevalent and ProcessUnity on the workflow side. UpGuard publishes the clearest price: Vendor Risk Standard at $1,750 a month billed annually for 50 vendors, plus $79 a month per extra vendor. SecurityScorecard and Bitsight list enterprise packages on AWS Marketplace at $141,250 and $138,550 a year.

Is Panorays cheaper than UpGuard?

At 50 vendors on list price, no. UpGuard Standard is $21,000 a year for 50 monitored vendors, while Panorays monitoring at the Basic list rate is 40,000 pounds for the same 50. Recorded deals narrow the gap: the Panorays median contract is $21,700. The real difference is depth, because Panorays assessments and monitoring are bought vendor by vendor.

Does Panorays require a minimum number of vendors?

The monitoring and assessment bands start at one vendor. Only the inventory evaluation tier has a floor, starting at 500 vendors. That makes Panorays workable for a company that wants deep coverage of a dozen critical suppliers without paying for a full inventory module.

What does third-party risk software not cover?

It scores vendors, but it does not tell you which regulations require the program or when those rules change. US banks answer to the 2023 interagency third-party guidance, New York licensees to 23 NYCRR 500.11, and healthcare entities to HIPAA business associate rules. Tracking those obligations, and the policy updates they force, is a separate job.