Content Library

Where Tech Meets Ops

Stories from the Front Lines

All Posts Series A Podcast Press Release Case Study Research Report

Small business third-party risk management guide cover, the complete 2026 guide

Coverbase Adds Third-Party Risk Veterans as Enterprise Adoption Accelerates

Brian Shaw and Constantine Malaxos join as enterprise customers expand across financial services, healthcare, and technology. SAN FRANCISCO, Sept. 29, 2026 – Coverbase, AI engineered for third-party risk management (TPRM), today announced that Brian Shaw has joined as GTM Lead and Constantine Malaxos as Head of Alliances. Both bring decades of experience building and selling third-party risk technology to large enterprises.

4 Min Read

What we told the OCC

We filed a comment letter on the proposed interagency TPRM guidance on September 24. It is seven pages and you can read the whole thing here (PDF) . This is the summary, with a bit of why we said what we said.

Research Report16 Min Read

Your System Is a Network of Other Systems

How roughly 700 OpenAI evaluation agents chained a package mirror, a stranger's test app, and 14 leaked tokens into a Hugging Face production compromise, and what that does to vendor trust built on annual attestations.

4 Min Read

The regulators just said the quiet part about TPRM out loud

On September 11 the OCC, Fed, FDIC and NCUA proposed replacement guidance for third-party risk management. The Federal Register version went up September 15 and comments close November 16. Nothing is final. The 2023 guidance is still the one your examiner is carrying. But if you have spent the last three years building a program to the 2023 text, read the preamble of this one, because it is the agencies describing your program back to you and saying they did not mean for it to turn out that way.

Coastal Bank case study: how they made Coverbase the system of record for third-party risk

Case Study3 Min Read

Show Your Work: How Coastal Bank Made AI-Driven Risk Analysis Audit Ready

Coastal Bank made Coverbase its third party risk system of record and passed a live regulatory exam on AI-driven assessments. Read the case study.

Coverbase webinar on continuous monitoring, featuring a medieval castle with drones overhead

WebinarOn-demand webinar

The Future of Third-Party Risk: From Point-in-Time Assessments to Continuous Monitoring

Watch the on-demand conversation on continuous monitoring, better risk signals, and agentic due diligence in TPRM.

Illuminated castle and fortified structures on islands in a dark fantasy landscape

Research Report14 Min Read

Twelve Weeks: From Acquisition to Attack

Two threat actors, two vulnerability classes, one target: what the Abbott incidents reveal about the security gap between acquired and integrated systems.

3 Min Read

Why Vendor Risk Management Doesn't Work the Same Way for Sponsor Banks

Sponsor banks are growing fast, and so is the risk workload that comes with it. In a recent conversation hosted with The BaaS Association, Coverbase's Danny Higdon and FedFis's Tanner Mayo broke down why the standard TPRM playbook falls short for embedded finance, and what's replacing it. Below are the key takeaways, with the full recording embedded at the end.