Skip to main content
    About LearnTPRM™

    One of the World's Leading Platforms for TPRM Learning

    LearnTPRM is not a single certification. It is the largest free Third-Party Risk Management learning ecosystem on the internet: rigorous free certifications, an open-source TPRM platform, a 100-report breach intelligence library, gamified training, an AI mock interview, a TPRM mock exam, a jobs portal, a public certificate registry, and a continuously expanding knowledge hub.

    Our Mission

    We did not build another certificate. We built the world's most complete free home for Third-Party Risk Management learning.

    Accessible

    Every resource is free forever. No paywalls, no subscriptions, no hidden tiers.

    Rigorous

    Exams, case studies, and tools designed for working professionals, not for clicks.

    Comprehensive

    Learn, practise, certify, build a program, and find a job in one place.

    What LearnTPRM Offers Today

    The full LearnTPRM ecosystem at a glance. Each pillar links directly to the resource.

    Free TPRM Certifications

    Free Third-Party Risk Management Certification (Beginner + Professional)

    Two rigorous, timed exams with instant verifiable digital certificates. No fees, no subscriptions, no prerequisites.

    LT-VRM — Free Open-Source TPRM Platform

    Free open-source Third-Party Risk Management software (MIT-licensed, self-hosted)

    A full vendor-risk lifecycle tool: onboarding, assessments, breach and dark-web signals, digital footprint scanning, 0–1000 risk score, contracts, remediation. Install on XAMPP in five minutes.

    Free TPRM Practice Labs

    Free scenario-based TPRM labs with a verifiable Lab Certification

    Scenario-based labs that put you inside a live third-party engagement as the analyst on the file. The Beginner Lab runs an Acme Cloud payroll review across seven lifecycle stages and 70 drag-and-drop decisions, reshuffled every attempt so nothing can be memorised. Finish it and you earn a verifiable Lab Certification. A Professional Lab covering an advanced vendor crisis is coming soon.

    TPRM Templates, Checklists & Questionnaires

    One of the largest free libraries of TPRM templates, checklists and questionnaires

    38 free templates, checklists and questionnaires covering the full vendor lifecycle in Excel - discovery, onboarding, due diligence, risk assessment, continuous monitoring and offboarding - plus the standard questionnaire frameworks (SIG, SIG Lite, SIG Core, CAIQ, CAIQ Lite, HECVAT, VSA) and an AI vendor assessment questionnaire. No signup, no email wall.

    Breach Intelligence Library

    100 third-party breach case studies with verified public sources and TPRM lessons

    The internet's largest curated library of third-party breach case studies. Filter by category, year, or vendor type. Every report is grounded in verified public reporting.

    Learn-TPRM Games

    Gamified TPRM training: vendor quiz, risk sort, due diligence, monitoring builder, offboarding simulator

    Five interactive games that teach TPRM the way professionals actually use it: tiering, due diligence, monitoring design, and offboarding under pressure.

    AI TPRM Mock Interview

    TPRM interview preparation with AI-driven mock interviews

    Rehearse real TPRM, vendor risk, and GRC interview questions with instant feedback. Built for candidates targeting analyst through manager roles.

    TPRM Mock Exam

    Free TPRM practice exam and mock test for certification preparation

    A timed practice environment with realistic questions, explanations, and adaptive difficulty so you walk into the real exam ready.

    TPRM Jobs Portal

    TPRM jobs board: vendor risk, supply chain risk, GRC, third-party risk management roles

    A focused jobs board for Third-Party Risk Management, Vendor Risk, Supply Chain Risk, and GRC positions. Free for candidates, with verified recruiter postings.

    Hall of Fame + Verifiable Certificates

    Global TPRM leaderboard and public certificate verification portal

    Top scorers are recognised on the global Hall of Fame. Every certificate carries a unique ID and a public verification URL employers can check in one click.

    Plus a growing TPRM Knowledge Hub of long-form articles across the site, and the deep-dive TPRM Blog.

    Our Approach — Rigor the Market Notices

    LearnTPRM's philosophy is unapologetically rigorous. We reward genuine mastery, not memorisation. Our certifications measure what real TPRM work actually demands:

    Technical knowledge

    Frameworks, regulations, and the mechanics of vendor risk.

    Risk judgment

    Reading ambiguous situations the way senior analysts do.

    Real-world decision making

    Trade-offs across cost, time, control coverage, and business context.

    Performance under pressure

    15 seconds per question. No going back. No second chances.

    Pass Rate

    ~6%

    of candidates pass the Professional certification.

    Pass Rate

    ~34%

    of candidates pass the Beginner certification.

    These numbers are not meant to intimidate. They prove that, in a world of shortcuts and AI-assisted exams, a LearnTPRM credential still means something to employers, recruiters, and auditors.

    Why We Do It

    Eliminate certification fatigue

    Remove the financial barrier without lowering the bar.

    Build one trusted TPRM home

    A single place where every TPRM resource lives: learn, practise, certify, work.

    Advance the profession

    Produce practitioners who can apply judgment, not just recall definitions.

    Who LearnTPRM Is For

    Career starters

    Breaking into vendor risk, GRC, or cyber from adjacent roles.

    Working TPRM analysts and managers

    Sharpening judgment and credentialing real expertise.

    GRC and InfoSec teams

    Upskilling the whole team on a shared, rigorous baseline.

    Recruiters and hiring managers

    Sourcing candidates with verifiable, comparable TPRM skill.

    Students and educators

    A free, structured TPRM curriculum that maps to real jobs.

    Frequently Asked Questions

    What is LearnTPRM?

    LearnTPRM is the world's largest free Third-Party Risk Management learning ecosystem. It includes two rigorous free certifications, an open-source TPRM platform (LT-VRM), a 100-report breach intelligence library, five gamified learning modules, free scenario-based practice labs, an AI mock interview, a TPRM mock exam, a TPRM jobs portal, a global Hall of Fame leaderboard, and a continuously expanding TPRM knowledge hub.

    Is LearnTPRM only a certification platform?

    No. The certifications are one pillar. LearnTPRM also publishes the open-source LT-VRM TPRM software, runs the Breach Intelligence Library of 100 third-party breach case studies, hosts five gamified training modules, runs free scenario-based TPRM practice labs that issue verifiable lab certifications, offers an AI-powered mock interview and a TPRM mock exam, operates a TPRM jobs portal, and maintains a public certificate verification registry.

    Is everything on LearnTPRM really free?

    Yes. Every certification, every case study, every game, every practice lab, the mock interview, the mock exam, the jobs board for candidates, and the LT-VRM platform itself are free. There are no subscriptions and no paywalled tiers.

    How rigorous is the LearnTPRM certification?

    Approximately six percent of candidates pass the Professional exam and around thirty-four percent pass the Beginner exam. Each question has a 15-second limit, with no option to go back. The exams test technical knowledge, risk judgment, and decision making, not memorisation.

    Does LearnTPRM offer a free TPRM tool I can install?

    Yes. LT-VRM is a free, MIT-licensed, open-source Third-Party Risk Management platform that you can self-host on stock XAMPP in about five minutes. It covers vendor onboarding, assessments, breach and dark-web signals, digital footprint scanning, a 0–1000 risk score, contracts, and offboarding.

    Where can I read real third-party breach case studies?

    In the LearnTPRM Breach Intelligence Library, a curated collection of 100 third-party breach case studies, each grounded in verified public reporting and translated into practical TPRM lessons.

    Does LearnTPRM have a jobs board?

    Yes. The TPRM Jobs Portal lists Third-Party Risk Management, Vendor Risk, Supply Chain Risk, and GRC roles. It is free for candidates and uses verified recruiter postings.

    How do employers verify a LearnTPRM certificate?

    Every LearnTPRM certificate carries a unique ID and a public verification URL. Employers can confirm authenticity in one click from the public verification portal at learntprm.com/verify.

    Start Your TPRM Journey

    Take the exam. Install the platform. Read the case studies. Practise the interview. Find the job. Everything you need to grow in Third-Party Risk Management lives here, and it is free forever.

    Our Sponsors

    Proudly Sponsored by Safe Security

    LearnTPRM is a free platform because sponsors believe in free TPRM education. Safe Security, the leader in Autonomous Cyber Risk Management, is our founding sponsor. Their support keeps every certification, case study, template, game and job listing free for the global TPRM community.

    Safe Security logo - founding sponsor of LearnTPRM.com

    Founding Sponsor

    Safe Security

    Safe Security is redefining Third-Party Risk Management with the SAFE TPRM AI Co-Worker a 100% autonomous TPRM platform powered by a swarm of 100+ specialized AI agents.

    TPRM Blog

    Latest writing from the LearnTPRM editorial team

    The TPRM Blog is where our analysts publish breach intelligence, regulatory updates, and practical vendor risk playbooks. These articles power the learning hub you see here.

    Visit blog.learntprm.com
    Safe Security - founding sponsor of LearnTPRM.comFounding Sponsor
    For CISOs, TPRM leads and vendor risk program owners

    Autonomous TPRM. 90% less manual effort.

    The platform behind free TPRM education

    Everything on LearnTPRM is free because Safe Security sponsors it. Their product is the SAFE TPRM AI Co-Worker: agentic AI that runs the third-party lifecycle end to end, from intake through continuous monitoring to audit-ready offboarding.

    This is for you if you own a third-party risk program - roughly 100+ vendors, quarterly reassessments, DORA / NIS2 / OCC pressure and no new headcount coming. The link opens Safe Security's platform page, not a gated form.

    Trusted by 10% of the Fortune 500.

    Zero-touch due diligenceContinuous monitoring across 5 dimensionsAI-powered risk scoring workflows
    • Instant inherent risk against a database of 60M+ enterprises.
    • Zero-touch due diligence, autonomous remediation and continuous monitoring.
    • Fourth-party discovery, concentration risk and board-ready reporting.
    Evaluate SAFE for my organization

    For security and risk leaders assessing a TPRM platform. Opens safe.security in a new tab.

    25+

    AI agents

    90%

    Less manual effort

    None

    Additional headcount

    200+

    Organizations globally

    End to end

    Intake to offboarding

    Ready to Prove You're a TPRM Warrior?

    Most people talk about risk management. Few can prove their expertise under pressure.

    Start Your Free Certification