Know the risk before you sign.

Pick your vendor category → get a sourced risk profile in seconds.

4 Data sources

12 Vendor categories

2025-01-15 Latest retrieval

For a business your size, expected annual loss: $$7,950
Typical contract clause to add: Vendor must maintain PCI DSS Level 1 certification and provide annual SOC 2 Type II report
Red flag: if vendor doesn't offer real-time transaction monitoring with instant freeze capability

How It's Calculated

All Categories at a Glance

Category	Incident Rate ↓	Median Loss ⇅	Recovery % ⇅	Freeze Days ⇅
Payment Processor	18.7%	$42,500	23%	31
Payroll Provider	12.4%	$28,900	31%	22
HR/PEO	11.1%	$35,600	27%	27
Accounting Software	9.8%	$19,200	38%	18
Logistics/Fulfillment	9.2%	$15,800	34%	24
IT/Managed Services †	8.5%	$31,800	41%	19
SaaS/Software	7.8%	$11,200	48%	12
Banking/Fintech	7.2%	$52,300	45%	14
Marketing Agency †	6.3%	$12,400	52%	11
Consulting/Freelance †	5.9%	$18,700	42%	20
Insurance Broker †	5.1%	$24,600	58%	16
Legal/Compliance †	4.7%	$87,500	18%	45

Know the risk before you sign.

Risk Profile