Vendor-Risk Questionnaire

Answer your buyer's security questionnaire from one run.

AgentSmack already produces an OWASP coverage map, a NIST crosswalk, a signed governance pack, and a Bronze→Platinum certification claim. This is the artifact a CISO's procurement team actually demands: filled-in answers to a standard vendor-security questionnaire (CAIQ / SIG-lite / AI-risk-addendum style), grouped by domain, each cited to the deterministic evidence that backs it — dimension scores, OWASP statuses, NIST functions, certification tier. Two properties make it trustworthy: honest-empty — a control whose contributing surface you never tested is not assessed, never a fabricated yes — and unforgeable — a single disqualifying failure (a proven leak, an unauthorized write/send/spend) forces a gap regardless of every other high score. Then copy the SOC2-style evidence export straight into the buyer's form. It consumes the same already-computed envelopes; it adds no new surface and no new scorecard dimension.

Don't have the envelopes yet? Compose the production scorecard first → then bring its verdict here. Or load a sample to watch the questionnaire fill in with no live infra.