Gregory Rasner
Founder & CEO
Former SVP, Cybersecurity Third-Party Risk at Truist, where he led a team of 20+. Author of four books on third-party and cyber risk. Host of Third Party Threat Hunters. TPRA consultant.
About TPTH™
A third-party risk firm built by people who ran the program.
Third Party Threat Hunting™ was founded in 2023 to give organizations examiner-grade third-party and AI risk work without a big-firm bench. We work in small, senior teams and publish how we do it.
One page on TPTH
What we do, who does it, the founder's background, and the frameworks we assess against — for forwarding to the people who were not on the call.
How we work
Small, senior, evidence-first
01
Senior on every engagement
The person who scopes the work does the work. Associates join for scale, never as a hand-off.
02
Fixed scope, named method
Every engagement runs the Evidence-First method, so clients know what they're buying.
03
We publish our own controls
Our Trust Center lists our policies, sub-processors and open gaps with dates.
Team
People
Vincent Lau
TPTH Founding Associate
A Cyber Risk and Security leader with over 15 years of experience, Vincent has driven enterprise and supply chain risk transformation across the DoD, federal government, and Fortune 500 companies. Driven by a core mission to protect people's lives and livelihoods on the internet, he acts as a true strategic partner who provides tailored services and owns the consequences of his risk decisions.
KC Udoh
TPTH Founding Associate
KC Udoh, CISSP, CRISC, CIPM, helps organizations turn complex cyber risks into clear, actionable priorities. With about 20 years across cybersecurity, technology, risk management and governance, he brings a practical, business-focused view to finding security gaps and strengthening resilience. KC serves on the Board of Trustees of the ISC2 Center for Cyber Safety and Education.
Associates
TPTH is operated by Gregory Rasner, engaging vetted senior practitioners as associates for scale on client work and training delivery. Associates work under TPTH's subcontractor controls — see the Trust Center. The person who scopes your engagement is the person who does it.
Work with TPTH
We engage senior TPRM and AI-risk practitioners as associates on client work and training delivery. Our Founding Associates, Vincent Lau and KC Udoh, joined in October 2026.
Associate enquiries →Credentials & affiliations
Institutional proof
Third Party Risk AssociationConsultant member · Consultant Showcase 2026
TPCRA certificationCo-created with the TPRA
CISSP · CIPM · CCNA · ITILHeld by Gregory Rasner
InsuredCyber · E&O · General liability · Hiscox
PublishedFour books · Wiley and Apress · 2021–2026
RecognitionISSA Security Professional of the Year finalist 2023 · Best of ISC2 Security Congress 2022
TPTH assesses and remediates client programs against the frameworks listed on our services pages. TPTH holds no certifications or attestations of its own — see Trust Center §4. We publish that rather than leave you to discover it.
Speaking
Where you can find us
TPRA Consultant Showcase 2026Right of Boom 2027 · MGM Las VegasISC2 Security CongressThird Party Threat Hunters podcast
“Greg addressed security blind spots in our daily lives that I hadn’t considered… I would hire Greg again for another speaking opportunity and highly recommend him.”
Available for conference sessions, association webinars and private briefings. Speaking inquiries →
Related
Start with something free
Which of your vendors are critical?
The free eight-step vendor checklist: sort your vendors into systemically critical, critical or ordinary.
Get the checklist →Vendor AI risk
The free BEACON™ class: 19 minutes on the six categories of vendor AI risk, with a real case to work through.
Take the free class →Privileged access
The free VAULTS™ training: 31 minutes on privileged access review, with a worked review.
Get the free training →