Monitor and follow up with your suppliers using our automated declarations and validation of exposed data (EASM) to ensure compliance with NIS2/Cybersecurity legislation.
The service is used by over 2000 businesses in 28 different countries.
WHY NOW
Supply chain attacks have increased by 100%
Manually checking suppliers is no longer sufficient. Every business needs a faster way to manage risks from third parties.
Attackers in the supply chain
60% of cyber incidents originate from the supplier chain. Suppliers are the new attack surface.
Regulations Force Action
NIS2, DORA, and GDPR require continuous visibility across the entire supply chain, not just an annual report.
No one has time
Spreadsheets, email surveys, and one-off audits require a lot of manual administration.
NEWS
Automated validation of exposed data with suppliers
A declaration describes a supplier's own assertion of their security status. External Attack Surface Management* provides an independent and constantly evolving technical perspective on the actual attack surface. This includes vulnerabilities that would never emerge through a questionnaire. OneMore Secure combines both aspects into a single supplier profile: no separate tools or processes are required.
*Non-intrusive external scanning of publicly available assets. Non-offensive, within the bounds of what is legally permissible and deemed to constitute normal user behaviour.
01 · DISCOVER
Domains, subdomains, certificates, email security and public data are automatically mapped, no effort or consent is required from the provider.
02 · VALIDATE CONTINUOUSLY
Recurring validations look for known vulnerabilities, weak configurations, expiring certificates, and exposed services.
03 · CORRELATE AND ACT
Observed exposure is compiled and analysed. The results are graded based on severity, factored into the risk landscape, and transformed into prioritised actions that can be sent to the supplier.
INSIDE-OUT · DECLARATIONS
Safety culture, information security, IT security, and privacy – along with additions for NIS2, DORA, the AI regulation, secure development, and OT security.
OUTSIDE-IN · EXPOSED DATA
An independent technical image of the supplier's observed exposure which continuously changes and is visible between declaration periods.
PLATFORMS
A digital trust hub — answer once, share with many.
OneMore Secure offers an automated platform that makes it easy for your organisation to gain control over your and your suppliers' cybersecurity for compliance with NIS2/cybersecurity legislation.
The platform replaces manual processes by sending Excel documents back and forth. Everything is encrypted and safe. No one can access the organisation's data unless you grant permission to do so.
Dedicated Network
Easily add your suppliers. They share their results with each customer, which eliminates duplicate work.
Automated Follow-Up
Contact, reminders and recurring follow-ups are handled for you. Your team can focus on risk management, not administration.
Established frameworks
Built and mapped against legal requirements such as NIS2 and GDPR, as well as frameworks like NIST, ISO 27001 and CIS18, etc.
Threat and Vulnerability Analysis
Declarations and findings regarding exposed data are analysed automatically. Actions can be sent to providers.
Review of Revisions
Order audits of suppliers through a third party (PwC) when a declaration requires independent confirmation.
Fast Startup
You don't need to start a new project, no integration or training is required. You will be up and running in minutes, not months.
From manual tracking to continuous monitoring in five steps
STEP 1
Add Suppliers
Add unlimited suppliers and subsidiaries. Invitations and reminders are managed automatically.
STEP 2
Standardised controls
Suppliers complete a digital declaration. If they have already responded for another client, they do not need to answer again and will share their results with you.
STEP 3
Automatic Scanning
Built-in EASM to continuously validate vulnerabilities for each supplier's exposed assets and data.
STEP 4
Analysis and Prioritisation
Declarations and findings are analysed against a threat library and visualised according to criticality.
STEP 5
Continuous Improvement
Track changes over time, send prioritised actions and demonstrate how capacity evolves throughout your business relationship.
BUILT FOR EUROPE
A network effect, accelerated by European regulation.
Third-party risk is one of the fastest-growing threats in cybersecurity, and Europe risks falling behind.
Operational in Sweden. All customer data is stored and processed in Sweden, fully compliant with GDPR and without transfers outside the EU.
Management accountability. Under NIS2 and DORA, management has formal responsibility for third-party risk.
Network economy. Demonstrating basic cybersecurity is your "license to operate" to remain relevant in the market.
TESTEMONIALS
What customers are saying
"With Med OneMore Secure, we quickly got started and gained control without having to launch a large project."
Peder Danesved, CISO, Tranemo Municipality
"OneMore Secure helps us gain better control and automate the follow-up of our suppliers' cyber hygiene."
Engin Micoogullari, CDIO, Trelleborgs Energi
"Now we feel secure in having a systematic approach to follow-up, which will become a part of compliance with NIS2 and the new cybersecurity legislation."
Martin Johannesson, Head of IT, Port of Gothenburg
"We have succeeded in improving our control over our suppliers' IT/Cybersecurity capabilities, which is one of the requirements of the NIS2 directive."
Adam Nygren, IT Operations Manager, Arvid Nordquist
JOIN THE DIGITAL TRUST HUB
Connect to the network.
Whether you are a customer with hundreds of suppliers or a supplier wanting to demonstrate your cybersecurity capabilities, there is a place for you in the network.
FOR CUSTOMERS
Build Resilience
Continuous, comparable results and vulnerability analyses from each supplier.
FOR SUPPLIERS
Respond once, share with many
A company profile that meets every customer evaluation.
FOR GROUPS
Gain control over the group
Gain control over subsidiaries and their supply chains. Everything in one place.
OrganisationNameE-mailMessageI accept the handling of personal dataSend
LET'S TALK
Build resilience against cyber threats with us.
Book a 30-minute consultation. We will review declarations, scanning and the risk landscape together, and show you how you can get started in days, not months.