Our infrastructure is very complex, it includes also hybrid cloud across several Cloud Providers, Do I need a permission to run Discovery on third-parties?

No, we use only OSINT discovery and non-intrusive security testing methodologies that normally do not require a pre-authorization from the targeted company, differently from penetration testing for example. Therefore, we can use Discovery to scorecard your suppliers or vendors for third-party risk management purposes.