# SecurityScorecard Reviews
**Vendor:** SecurityScorecard  
**Category:** [Vendor Security and Privacy Assessment Software](https://www.g2.com/categories/vendor-security-and-privacy-assessment)  
**Average Rating:** 4.3/5.0  
**Total Reviews:** 91
## About SecurityScorecard
Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics &amp; Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard&#39;s technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes.



## SecurityScorecard Pros & Cons
**What users like:**

- Users value the **depth and ease of use** of SecurityScorecard, appreciating its comprehensive features and excellent customer service. (23 reviews)
- Users appreciate the **ease of use** of SecurityScorecard, facilitating straightforward reporting and strategic decision-making. (16 reviews)
- Users commend the **unmatched customer support** of SecurityScorecard for promptly addressing concerns and enhancing user experience. (9 reviews)
- Users value the **insightful reports** from SecurityScorecard, aiding in customer preparation against potential attacks. (9 reviews)
- Users value the **intuitive interface** of SecurityScorecard, appreciating its simplicity and ease of use for all stakeholders. (7 reviews)
- Security Management (7 reviews)
- Comprehensive View (6 reviews)
- Dashboard Usability (6 reviews)
- Features (6 reviews)
- Risk Management (6 reviews)

**What users dislike:**

- Users find the **limited reporting capabilities** of SecurityScorecard inadequate for detailed presentations and audits. (4 reviews)
- Users face discrepancies with **scoring issues** , including false positives and lack of aggregate scoring across the enterprise. (4 reviews)
- Users note that there is significant **improvement needed** in SecurityScorecard&#39;s automated reporting and false positive occurrences. (3 reviews)
- Users note **inefficient risk management** due to false positives and subjective scoring without solid evidence to support decisions. (3 reviews)
- Users face **integration issues** as the system struggles with legacy systems and lacks automatic subdomain detection. (3 reviews)
- Users face a **lack of clarity** regarding score changes and find the interface less intuitive, complicating their experience. (3 reviews)
- Poor Reporting (3 reviews)
- Vendor Management (3 reviews)
- Information Overload (2 reviews)
- Learning Difficulty (2 reviews)

## SecurityScorecard Reviews
  ### 1. External Vulnerability Management External Attack Surface

**Rating:** 5.0/5.0 stars

**Reviewed by:** Chris L. | Cloud Security Engineer, Information Technology and Services, Enterprise (> 1000 emp.)

**Reviewed Date:** August 14, 2025

**What do you like best about SecurityScorecard?**

tHIS TOO IS A SIMPLE man when it comes to ease of use and an insane one for the depth. I rely on it daily for our public security posture and the MS Power BI integration (thru API's) allows simple dashboarding. This is another huge one, the amount of features dark web monitoring, IP reputation checks etc really does save us hours and hours compared to doing it all manually. Unmatchable customer service, every concern is catered in hours.

**What do you dislike about SecurityScorecard?**

The initial integration work was a bit hard because of some legacy systems we have here, but their team really helped us. The only issue is that it doesn't detect all the subdomains (so you must type them manually).

**What problems is SecurityScorecard solving and how is that benefiting you?**

It identified seen assets, but right now blind spots or new asset categories such as old test envs. It has greatly reduced our attack surface, and helps us out a lot in negotiations when it comes to cyber insurance.

  ### 2. Essential for Third-Party Risk Management

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tim U. | Cyber Security / Automation Expert, Computer & Network Security, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 14, 2025

**What do you like best about SecurityScorecard?**

Connecting our score to the fullest third-party security risk exposure view One of the things that I found most amazing was just how much you can see about a vendors security posture and not get bogged down in the weeds of all the technical analysis. Streamline the risk categorization (DNS Health, Patching cadence etc) for better focus and correct prioritization of remediation efforts. We got help and updates so you can be timely.

**What do you dislike about SecurityScorecard?**

The issue is… as positive as those scores are, we do still occasionally see some false positives related to the baked-in risk of vendors with whom we have no leverage. Once we had dialed in some compliance settings to better meet our own Risk Profiles, it was fairly straightforward to set up. As such — if reporting can be made any more flexible (which would cover the last gap), it will already be extremely similar to how we segment workflow.

**What problems is SecurityScorecard solving and how is that benefiting you?**

For vendor risk assessments, the utility use 60% time savings over manual due diligence. Yet, to keep their defenses up they can set up automatic alerts for when ratings drop and address vulnerabilities head-on so changes are made before things become dire. It is already quite critical for the compliance reporting and C-Level Risk visibility.

  ### 3. "Comprehensive Cybersecurity Insights with Room for Improvement"

**Rating:** 5.0/5.0 stars

**Reviewed by:** Cristian C. | Administrador, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 08, 2025

**What do you like best about SecurityScorecard?**

SecurityScorecard provides a comprehensive view of your organization's cybersecurity posture and the security ratings of your third-party vendors, giving you the tools to manage and improve security risks effectively.

**What do you dislike about SecurityScorecard?**

While SecurityScorecard offers a lot of useful data, some users find the interface slightly overwhelming, especially if they are not very familiar with cybersecurity metrics.

**What problems is SecurityScorecard solving and how is that benefiting you?**

One issue is that the service might sometimes be too focused on broad metrics rather than providing highly detailed information. This forces me to look at other sources for deeper analysis, which can be time-consuming. However, it benefits me by keeping my focus on high-level security trends and identifying partners' general risk profiles quickly.

  ### 4. Security Scorecard as TPRM

**Rating:** 2.5/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** August 14, 2025

**What do you like best about SecurityScorecard?**

the security scorecard was Budget Friendly (Moderate Budget Friendly) , Dashboards were good , good correlation with CVE

**What do you dislike about SecurityScorecard?**

Not having any Customer support, Not doing Constant Scans  , Real time scanning was not available,

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Card was doing very well in managing the Vendor Risks , So  it benefiting us to understand that how much access or how we can have a controlled environment that our vendor risk does not affect security of our organization, Moreover the Security Card was monitoring the External attack surface of Our Organization but withstanding it was not much accurate still at one point of time it helps us to understand the Attack surface and According to Attack surface we were able to monitor our Outer facing environment, while working on the Security Scorecard it helps us understanding that this Vulnerability can impact how much to the score of the Organization and also in maintaining best score by giving remediation practices to us

  ### 5. Industry Benchmarking at Its Best

**Rating:** 5.0/5.0 stars

**Reviewed by:** Brad H. | Chief Technology Officer, Information Technology and Services, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 16, 2025

**What do you like best about SecurityScorecard?**

It is very rare a platform can benchmark our security posture against our peers. It was extremely easy to implement and we were up and running in less than days. Completely game changing features like monitors for compromised credentials and DNS health checking. Proactive: Support will frequently suggest optimizations

**What do you dislike about SecurityScorecard?**

Sometimes scores will vary because of things like CDN outages which may cause unnecessary alerts. Another option would be a “pause monitoring” feature for maintenance windows.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Our boardroom discussions have changed, and executives now hold leaders accountable when scores dip. The platform also allowed us to discover a cloud storage bucket misconfiguration before it could be exploited.

  ### 6. The Gold Standard for Security Ratings

**Rating:** 5.0/5.0 stars

**Reviewed by:** David Q. | Security Industry Advisor, Information Technology and Services, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 16, 2025

**What do you like best about SecurityScorecard?**

Its interface is deceptively simple with incredible functionality. I've rolled this out in three organizations, and EVERY time, it's found THE critical gaps (e.g.- expired SSL certificates). Daily use: it is my first dashboard check in the morning. PowerPoint Integration : Easily share insights with my leadership via PowerPoint.

**What do you dislike about SecurityScorecard?**

The very first setup had to do small adjustments not to score non-critical assets. It would help to have an onboarding wizard for this.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It has also done away with self-assessment “security theater.” We are now trusted by our clients when it comes to rating and sales cycles within IT security has been reduced by 30%.

  ### 7. Security Scorecard TPRM

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 24, 2025

**What do you like best about SecurityScorecard?**

What I truly value about Security Scorecard is its comprehensive approach to vendor risk management, specifically how it excels in identifying risk factors, conducting thorough assessments, enabling continuous monitoring, and facilitating effective management of those risks.

**What do you dislike about SecurityScorecard?**

SecurityScorecard, in my opinion, is an exceptionally well-conceived solution for third-party risk management. The truth is, it causes me practically no bother at all, which speaks volumes about its great effectiveness and intuitive design. I believe they've successfully developed a tool that significantly simplifies such a critical aspect as cybersecurity with external vendors, fully meeting expectations and facilitating efficient risk management.

**What problems is SecurityScorecard solving and how is that benefiting you?**

The fundamental challenge that Security Scorecard effectively addresses is the lack of unified vendor risk management, coupled with the critical need for greater visibility into the technological security posture and proactive threat intelligence regarding third-party vendors. In today's interconnected digital landscape, organizations are increasingly reliant on a vast ecosystem of third-party providers, each representing a potential entry point for cyberattacks. Security Scorecard steps in to bridge this gap, transforming a chaotic and opaque process into a structured, insightful, and actionable one.

  ### 8. Objective Metrics for Security Posture

**Rating:** 5.0/5.0 stars

**Reviewed by:** Thomas B. | Information Technology COO, Information Technology and Services, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 15, 2025

**What do you like best about SecurityScorecard?**

Since SecurityScorecard does not utilize any such data, the vendor ratings are impartial. The customers think of it as a no-brainer with one neutral benchmark. Understanding customer service & user-friendliness of platform (even for non-technical stakeholders).

**What do you dislike about SecurityScorecard?**

Ratings sometimes are unfairly strong about subjects a business cannot control (e.g. shared hosting providers) — More filters in data can be helpful

**What problems is SecurityScorecard solving and how is that benefiting you?**

It allows advisors to be more objective when discussing risk with clients by presenting hard data points on top of the perception. The audit process is faster, and the reliability and confidence of stakeholders are higher than they were prior to them.

  ### 9. Cybersecurity Analyst

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 09, 2025

**What do you like best about SecurityScorecard?**

Support from team. I like the likelihoods reports to help us help our customers prepare for possible attacks.

**What do you dislike about SecurityScorecard?**

There is nothing I dislike about Security Scorecard.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Scorecard is assisting me with ensuring I advise our customers of any possible vulnerabilities or breaches that could potentially impact their foot print.

  ### 10. Excellent site analysis tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Edwin F. | Jefe de redes y ciberseguridad, Enterprise (> 1000 emp.)

**Reviewed Date:** April 01, 2025

**What do you like best about SecurityScorecard?**

You don't need to feed it anything, it starts looking for all the DNS of sites it relates to by itself, it is very easy to use and its implementation is natural, it is a tool for daily use.

**What do you dislike about SecurityScorecard?**

That sometimes you don't know why you are held responsible for some vulnerabilities that don't belong to your infrastructure, however, they are immediately removed when you let them know.

**What problems is SecurityScorecard solving and how is that benefiting you?**

SecurityScorecard comes to solve the problems of vulnerability breaches identified on the main sites of a domain. In my case, it helps me detect the vulnerabilities I have and gives me visibility to address them. Additionally, it helps me check if the actions I applied covered the vulnerability.

  ### 11. A Powerful Tool for Cyber Risk Management

**Rating:** 4.5/5.0 stars

**Reviewed by:** Vishal  G. | Cyber security, Enterprise (> 1000 emp.)

**Reviewed Date:** April 03, 2025

**What do you like best about SecurityScorecard?**

It is a game-changer in security risk . It's easy-to-understand rating system simplifies security data, making it simply to assess cyber risks. It is the best tool for the checking and improving score. it lists all the problem which causes the low and score and helps to increase the score.

**What do you dislike about SecurityScorecard?**

You could be blamed for security holes that aren't even in your machine.
and Keeping us best in the industry to increase the score.

**What problems is SecurityScorecard solving and how is that benefiting you?**

SecurityScorecard comes to solve the problems of vulnerability breaches identified in the main sites of a domain, in my case it helps me detect the vulnerabilities I have and gives me visibility to the address.

  ### 12. A must-have with some quirks

**Rating:** 3.5/5.0 stars

**Reviewed by:** Md Limon H. | Executive Director, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 04, 2025

**What do you like best about SecurityScorecard?**

The ability to monitor our entire digital footprint and get actionable insights is unbeatable. The team’s willingness to let us test new features is a big plus too.

**What do you dislike about SecurityScorecard?**

The dashboard can lag, and I’ve had to refresh it more than once to see updated scores. It’s a small annoyance but noticeable.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It’s tackling our need for continuous security oversight, which has reduced our risk exposure and improved our internal processes.

  ### 13. A solid tool for external security insights

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer & Network Security | Mid-Market (51-1000 emp.)

**Reviewed Date:** April 07, 2025

**What do you like best about SecurityScorecard?**

SecurityScorecard offers us an external perspective of our security vulnerabilities, which helps us prioritize solutions that could otherwise go undiscovered. It’s like having a continual audit from a hacker’s viewpoint, and that’s helped us detect and solve flaws before they become huge problems.

**What do you dislike about SecurityScorecard?**

The possibilities for integration are somewhat limited. We use a number of different security technologies; it would be wonderful if SecurityScorecard could automatically link with them to streamline some of our processes. Right now, it seems a little compartmentalized.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It’s providing us a complete perspective of our third-party risks, which has helped our vendor screening process significantly.

  ### 14. SecurityScorecard is a must for prevent breach and improve cyber hygiene across the supply chain

**Rating:** 4.5/5.0 stars

**Reviewed by:** Prateek R. | Penetration tester, Small-Business (50 or fewer emp.)

**Reviewed Date:** April 01, 2025

**What do you like best about SecurityScorecard?**

early breach detection and improved security posture

**What do you dislike about SecurityScorecard?**

Vulnerability list could have been better .

**What problems is SecurityScorecard solving and how is that benefiting you?**

early breach detection . Giving insight about the security posture

  ### 15. Good, but could use better reporting features

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Consumer Goods | Mid-Market (51-1000 emp.)

**Reviewed Date:** March 31, 2025

**What do you like best about SecurityScorecard?**

The security assessments are obvious and actionable. I especially enjoy the way the platform breaks down ratings by category, such as network security or application security, which makes it easier to target areas for development.

**What do you dislike about SecurityScorecard?**

The reporting feature seems a little simple. While the dashboards are useful for day-to-day monitoring, developing bespoke reports for executive presentations or audits needs more flexibility than what’s presently supplied.

**What problems is SecurityScorecard solving and how is that benefiting you?**

We utilize SecurityScorecard to assess our security performance against industry peers. This has been very motivating for our team and has helped us gain extra money for security efforts by displaying concrete results.

  ### 16. Best tool for security score for Website

**Rating:** 5.0/5.0 stars

**Reviewed by:** Arun K. | Security Engineer, Mid-Market (51-1000 emp.)

**Reviewed Date:** April 01, 2025

**What do you like best about SecurityScorecard?**

It is the best tool for the checking and improving score. it lists all the problem which causes the low and score and helps to increase the score

**What do you dislike about SecurityScorecard?**

it should have the implemented steps to increase the score .

**What problems is SecurityScorecard solving and how is that benefiting you?**

Keeping us best in the industry to increase the score.

  ### 17. Comprehensive Security Monitoring Made Easy

**Rating:** 3.5/5.0 stars

**Reviewed by:** Priyanka P. | Technical Consultant, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 16, 2024

**What do you like best about SecurityScorecard?**

SecurityScorecard provides a user-friendly platform that offers valuable insights into our cybersecurity posture. The ability to monitor our own and third-party vendors' security ratings helps us proactively address potential risks

**What do you dislike about SecurityScorecard?**

While SecurityScorecard provides valuable insights, some of the alerts can be too frequent or lack specificity, leading to alert fatigue. Additionally, the pricing structure may not be cost-effective for smaller organizations with tight budgets

**What problems is SecurityScorecard solving and how is that benefiting you?**

SecurityScorecard helps us manage third-party risks by providing visibility into the security posture of our vendors. This proactive monitoring allows us to identify and address potential risks before they become critical issues, thereby strengthening our overall cybersecurity strategy. Additionally, the platform supports compliance efforts by offering insights and reports that align with various regulatory standards

  ### 18. Easy to use and navigate, it's simplicity makes it a good product

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.)

**Reviewed Date:** April 24, 2024

**What do you like best about SecurityScorecard?**

It's easy of use is what makes it good. You can have it deployed and running in no time, as it is hosted. There are many times where your scorecard will already to be ready t go. I have only run into 1-2 times where Security Scorecard did not have a website in its database, and I had to wait for them to go out and fetch it.

**What do you dislike about SecurityScorecard?**

Could use better inegrations with other systems.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It gives us an outside view of what the internet sees, allowing us to better identify any security issues we might have.

  ### 19. Insightful data, potential for more reporting

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

**Reviewed Date:** June 28, 2024

**What do you like best about SecurityScorecard?**

The data presented is valuable and insightful, it helps to kick starty conversations with vendors regarding their cybersec controls. There are plenty of features to gather data, evidence and contact with Vendors to understand their infosec posture.

**What do you dislike about SecurityScorecard?**

There is room to improve further the autoamted reporting capabilities.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It provides valuable information to strenght the TPRM program.

  ### 20. Accurate and pervasive platform - incredible customer service

**Rating:** 5.0/5.0 stars

**Reviewed by:** Steve D. | Information Security Assessment Consultant, Enterprise (> 1000 emp.)

**Reviewed Date:** March 11, 2024

**What do you like best about SecurityScorecard?**

Accurate ratings and great customer service.

**What do you dislike about SecurityScorecard?**

Too much info is available.  i find myself running down rabbit holes with a vendor - as if I am one of their network defenders.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Scorecard provides and objective point of view about a company's cyber hygiene posture.  It gathers whatever the internet shows, and display the results in terms of threats and specific cyber-hygiene categories.  Their service gives us an independent assessment of a vendor - without having to request any information from the vendro.

  ### 21. Scoreard - great product

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Banking | Enterprise (> 1000 emp.)

**Reviewed Date:** March 18, 2024

**What do you like best about SecurityScorecard?**

Great tool in moniotirng security score for own company and/or third parties. I like the folwing about Scorecard:
- Easy to understand
- Easy to use
- Customer Servie orientation
- Takes feedback to heart
- Allos to try out new features as a pilot

**What do you dislike about SecurityScorecard?**

- False positives
- No aggregate scoring for enire Enterprise

**What problems is SecurityScorecard solving and how is that benefiting you?**

Improving internal processes
Cotinuous monitoring of Third Parties

  ### 22. Very good

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Insurance | Enterprise (> 1000 emp.)

**Reviewed Date:** June 13, 2024

**What do you like best about SecurityScorecard?**

it provides good information abouit our partners.

**What do you dislike about SecurityScorecard?**

its not easy to find or use.  you can not save your work and go back to it.

**What problems is SecurityScorecard solving and how is that benefiting you?**

contious mnitoring of our vendors

  ### 23. Useful to kick off a conversation

**Rating:** 3.0/5.0 stars

**Reviewed by:** Analia P. | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 21, 2023

**What do you like best about SecurityScorecard?**

I use it as one more input when reviewing the vendor security posture within the vendor security risk assessment process. I like it gives me detailed inputs to start asking things about the third party. The reports are detailed enough to submit them and wait for a targeted and not high-level answer.

**What do you dislike about SecurityScorecard?**

According to third-party feedback, unfortunately, it gives many false positives. I would say that 50% of the vendors I asked about Scorecard-> are not maintaining it and re-direct us to their security trust center with more accurate pentest on their domains.

**What problems is SecurityScorecard solving and how is that benefiting you?**

As I said, it's giving me further inputs to kick off conversations with third parties. I wouldn't say it's solving any problem but it's in our checklist in the 3rd parties and supplier assessment. Honestly, so far, it hasn't given us enough accurate information to detect risk exposure in the third party. They don't give much relevance to what SS says and redirect us to their pen tests. It's plenty of false positives (i.e., domains not owned by the scanned URL) in the Application and network security sections.
If we had to follow up each variation in SS we would need a person dedicate to that with no full assurance on adding any value, so, we are not following that "live".

  ### 24. Best External Security Posture Rating platform

**Rating:** 4.5/5.0 stars

**Reviewed by:** Subodh P. | Principal Information Security Architect, Enterprise (> 1000 emp.)

**Reviewed Date:** February 21, 2023

**What do you like best about SecurityScorecard?**

SecurityScoreCard (SCC) is not just an external security posture rating platform, but it is also external attack surface management. With all the public data available, it shows a mirror to organizations how exactly security looks from the outside.

With every organization now using SCC scores, a kind of social pressure has been created that every organization must maintain a mark security posture, which is overall good for the community.

**What do you dislike about SecurityScorecard?**

Anything related to your company name impacts the score, even your vendor services and all. Although that's the idea that the security posture of any company is not just its own infrastructure but all supplied ecosystem as well. However, sometimes test systems are also hosted with the same company domain, which can drop security scores a lot.
The assist discovery algorithm is not the best, especially for subdomains.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Continuously monitoring external security posture in all areas of the security domain.
Social pressure to remain on top of our security.
Ability to detect external threats.

  ### 25. Strong Product that Provides Leverage in Vendor Business Dealings

**Rating:** 4.0/5.0 stars

**Reviewed by:** Karen M. | Enterprise (> 1000 emp.)

**Reviewed Date:** February 16, 2023

**What do you like best about SecurityScorecard?**

- SS provides various reporting options that allow me to target my security results message according to my audience. This is critical as we use results as contract leverage - agreement from the vendor for security control maintenance which can be observed on SS
- SS has a responsive support team. which is critical to me on time-sensitive projects.
-- SS engages its customers regularly to help improve and grow their use of the SS, and to obtain useful feedback from their user base

**What do you dislike about SecurityScorecard?**

- SS must integrate Atlas with the rest of the product in order to create a holistic view of the vendor's security controls.  If they do this, they have a powerhouse tool. Security controls go beyond what can be seen from the Internet or what is reported in the news.   Administrative controls, awareness and phishing exercises I need to know about for a final score on a vendor. 
- I would like it to be easier to manipulate the footprint/IP roster used to create reports.  Case in point, I have business partners I assess who contract with an IT provider to manage their domain.  I know the full score of the IT provider includes all domains it provides, and it is the true indicator of its security practices.  But I need to report on the subdomain of my customer to gain credibility on my final assessment rating.

**What problems is SecurityScorecard solving and how is that benefiting you?**

-Quickly providing provable, unbiased data about the technical security control environment of third parties with whom we share data/connectivity. The SS information is used as part of my final security risk assessments.
- Provides breach history and company stats without me having to research
- SS provides  a visual way to begin the security conversation - and continue it - with our vendors/third parties.  It gives us leverage during contract renewals and initial signing  
- Simply put, IT HELPS ME WITH MY WORKLOAD.  I have too many assessments coming in to manage.  SS ups my efficiency

  ### 26. Low cost, highly effective solution!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Richard H. | Security Industry Advisor, Mid-Market (51-1000 emp.)

**Reviewed Date:** February 15, 2023

**What do you like best about SecurityScorecard?**

Security Scorecard is one of the most easy-to-use, intuitive pieces of software I have used in my 36-year working history. It is useful from the time you start using it. Great dashboard display, which then allows you to go deeper into findings and then, as an added bonus - it tells you how to remediate the problem. The software is so good that I have purchased it in the past 3 security roles I have had. I recommend it to security people I know, who have all been "wowed" by it. And did I mention Support? Support is fantastic!

**What do you dislike about SecurityScorecard?**

There isn't a lot I dislike about Security Scorecard. In fact...I can't think of one item that annoys me! Maybe IF it included some information gathered from the Dark Web about my company... yeah, that would make it an 11/10 instead of a 10/10 rating.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Scorecard is showing me either 1- what I don't know (Patching Cadence, DNS Health etc.) or 2- what would take me hours/ days to gather and then more time to assess. With respect to my second point - it has reduced the likelihood of hiring a security analyst to locate, collect and analyse all the data that Security Scorecard does with the click of a button.

  ### 27. Good data

**Rating:** 4.5/5.0 stars

**Reviewed by:** Caréto René B. | Président directeur général groupe, Accounting, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 07, 2023

**What do you like best about SecurityScorecard?**

I verify and consult they webinair and my mail receive

**What do you dislike about SecurityScorecard?**

I dislike is a not remote my cash money in my account bank

**What problems is SecurityScorecard solving and how is that benefiting you?**

My analyse data is real times for my domaine name

  ### 28. Security Scorecard adds value to TPRM program

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Management Consulting | Enterprise (> 1000 emp.)

**Reviewed Date:** March 11, 2024

**What do you like best about SecurityScorecard?**

Security Scorecard adds value when completing vendor assessments and self-monitoring our organization's external facing vulnerabilities.

**What do you dislike about SecurityScorecard?**

Mis-attribution of vulnerablities to vendor organization's

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Scorecard helps streamline the vendor assessment process.

  ### 29. Security Scorecard has provided important visibility in how I am being viewed on the Internet.

**Rating:** 5.0/5.0 stars

**Reviewed by:** William G. | Enterprise (> 1000 emp.)

**Reviewed Date:** March 02, 2023

**What do you like best about SecurityScorecard?**

Detailed information around issues being observed that could lead to a compromise. It is also providing insight into how our partners are handling their security posture and historical stance.

**What do you dislike about SecurityScorecard?**

There have been some changes to the interface that make it feel like more clicks are required to get to the report center.
The 3rd party and 4th party risk isn't intuitive so it takes some time to dig into it and understand what information it is trying to share.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Providing board level reporting on how our organization is doing as well as providing comparison to our vertical to help justify the spend we are making in the area of IT Security.
It is also useful in comparing multiple vendors participating in an RFP to help decide on who we should proceed with, all other values being equal.

  ### 30. Very useful tool

**Rating:** 5.0/5.0 stars

**Reviewed by:** Manuel A. | Cybersecurity Specialist, Enterprise (> 1000 emp.)

**Reviewed Date:** April 27, 2023

**What do you like best about SecurityScorecard?**

Security Scorecard help us as organization to keep aware of everything related to our domains, keep track in every situation related to the most vulnerable portion of our perimeter

**What do you dislike about SecurityScorecard?**

Using the tool since a year ago, I haven't found anything bad or any dislike about it. Probably it could be better if as a customer in a subscription, have more options to add more companies to the dashboard

**What problems is SecurityScorecard solving and how is that benefiting you?**

Security Scorecard is helping us to keep track of every domain for example or any active vulnerabilities, mis configuration and it's benefiting us since we have already implemented a process giving the tool priority in order to secure our perimeter

  ### 31. Good solution for seeing most of the things from one place

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Telecommunications | Enterprise (> 1000 emp.)

**Reviewed Date:** August 01, 2023

**What do you like best about SecurityScorecard?**

The best thing I like about SecurityScorecard is that it provides you to see the entire security posture of your ecosystem from one place. And also dashboards are so user-friendly

**What do you dislike about SecurityScorecard?**

I would like to have more possibility for using API integration with the solution so I can implement it to that our operation more. Other than that everything looks OK

**What problems is SecurityScorecard solving and how is that benefiting you?**

I can see all risks from one place. That helps me to consolidate everything in a on solution and with that way I can easily evaluate risk from one tool which is so helpful.

  ### 32. Atlas security scorecard review

**Rating:** 5.0/5.0 stars

**Reviewed by:** Pushpendra S. | Enterprise (> 1000 emp.)

**Reviewed Date:** June 07, 2023

**What do you like best about SecurityScorecard?**

It is a very simplified tool to design questionnaire in perspective to send to any business. We do it to understand security posture of our vendors. You can easily set questionnaire related to your business.

**What do you dislike about SecurityScorecard?**

There are no major dislikes however we can see more automated tools to achieve same functions from other competitive Companies.

**What problems is SecurityScorecard solving and how is that benefiting you?**

We can send questionnaire to our vendors very easily and quickly with compromising security. It also helps vendors to easily answer  once they create user account on it.

  ### 33. Nice app but needs improvement

**Rating:** 3.0/5.0 stars

**Reviewed by:** ibrahim k. | Enterprise (> 1000 emp.)

**Reviewed Date:** July 28, 2023

**What do you like best about SecurityScorecard?**

Very simple, Very fast, understandable. Fast support team.

**What do you dislike about SecurityScorecard?**

Mail sending and reporting module is insufficient and problematic.

**What problems is SecurityScorecard solving and how is that benefiting you?**

I use it in my group company, supplier, consultant and 3rd party security scoring.

  ### 34. Quick and easy to set up; can start remediating issues immediately

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.)

**Reviewed Date:** August 07, 2023

**What do you like best about SecurityScorecard?**

It's got a very straightforward dashboard, with the ability to drill down into any areas of interest to help understand the specific remediation needed to rectify whatever issues are impacting your score.

**What do you dislike about SecurityScorecard?**

It's not always easy to see specifically why a score has gone up or down as there is sometimes a lack of clarity between the items newly detected and the impact on score.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It shows us our business as we look to the outside world as it puts us into our customers' shoes and also helps us oversee the constantly changing risk environment of our suppliers.

  ### 35. Nice tool

**Rating:** 4.5/5.0 stars

**Reviewed by:** Julien B. | External CISO / Transition CISO / Cybersecurity program manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 05, 2023

**What do you like best about SecurityScorecard?**

Simple, showing what is vulnerable. At a glance, we can use SSC to improve the security level / score of the (exposed) organisation.

**What do you dislike about SecurityScorecard?**

Some vulnerabilities / weaknesses are the sale. It seems not to be adapted according to the organisation's context.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Our security level for our Clients. It helps to show that we are trusted partners.

  ### 36. Mature service that satisfies our needs

**Rating:** 4.0/5.0 stars

**Reviewed by:** Verified User in Banking | Mid-Market (51-1000 emp.)

**Reviewed Date:** July 27, 2023

**What do you like best about SecurityScorecard?**

We rely on security scorecard to rate or cybersecurity risk exposure, identify weaknesses and evaluate cybersecurity of our third parties.

**What do you dislike about SecurityScorecard?**

nothing. all is good. we are not facing any issues with the service.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Getting an accurate rating of our assets on the internet and evaluating security maturity of our vendors and third parties.

  ### 37. Solid if product!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kyle T. | Enterprise (> 1000 emp.)

**Reviewed Date:** April 26, 2023

**What do you like best about SecurityScorecard?**

I appreciate the clear information and reasonings behind ratings. Moreover, I appreciate the willingness to re-review their scores as environmental improvements or organizational changes are made.

**What do you dislike about SecurityScorecard?**

The only negative about the product is that it can be a completely different score from other products on the market, leading to competing priorities and discussions with third parties.

**What problems is SecurityScorecard solving and how is that benefiting you?**

SecurityScorecard allows us to quantify organizational risk as well as third parties we are considering business relationships with. This allows us to manage both our own optics with others as well as providing risk posture assessments for vendors.

  ### 38. Security Score card rocks

**Rating:** 4.5/5.0 stars

**Reviewed by:** Eric H. | Enterprise (> 1000 emp.)

**Reviewed Date:** August 01, 2023

**What do you like best about SecurityScorecard?**

The ability to score third parties and also get feedback from them

**What do you dislike about SecurityScorecard?**

It works well. I do not find any fault with it at all

**What problems is SecurityScorecard solving and how is that benefiting you?**

We have 700 suppliers and need automation to be able to cope with them all using a small team

  ### 39. Good source of the true state of security

**Rating:** 4.0/5.0 stars

**Reviewed by:** Luis M. | Enterprise (> 1000 emp.)

**Reviewed Date:** June 30, 2023

**What do you like best about SecurityScorecard?**

Realtime information of security posture

**What do you dislike about SecurityScorecard?**

At this moment wr have a limit of 5  companies

**What problems is SecurityScorecard solving and how is that benefiting you?**

Understand the security posture of a provider

  ### 40. Third party risk assessment

**Rating:** 4.5/5.0 stars

**Reviewed by:** Hu D. | Small-Business (50 or fewer emp.)

**Reviewed Date:** April 27, 2023

**What do you like best about SecurityScorecard?**

Most helpful feature of security scorecard is that it can provide an initial assessment of your vendor on their external assets. You can verify if it align with their security policy strategy and if further assessment is needed.

**What do you dislike about SecurityScorecard?**

Prices are more geared toward enterprise level client.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Reconasence on your critical vendors

  ### 41. Bringing value in under an hour

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Mid-Market (51-1000 emp.)

**Reviewed Date:** April 25, 2023

**What do you like best about SecurityScorecard?**

I like the interface of security scorecard I think that it's very insightful the dashboards are useful and the layout initially gives you the information that you need right away.

**What do you dislike about SecurityScorecard?**

I think there is a little bit of learning curve on where to find your vulnerabilities but that can be overcome easily within the first couple hours of using the platform.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Instead of our company being reactive to customers reports we are able to be proactive and see these vulnerabilities and alerts before they come up in an audit.

  ### 42. Good rating service but can go further

**Rating:** 3.0/5.0 stars

**Reviewed by:** Verified User in Retail | Mid-Market (51-1000 emp.)

**Reviewed Date:** June 20, 2023

**What do you like best about SecurityScorecard?**

Good interface, easy to use. Remediation plan are efficient and easy to apply to your business and allows you to have a battle plan to improve your rating.

**What do you dislike about SecurityScorecard?**

Should go further by checking more security controls. Today it's a lot relying on SSL/TLS version, http headers best practices and HTTP redirection to give you a score.
Also looking alike subdomains and domains shouldn't be automatically counted as per of your company

**What problems is SecurityScorecard solving and how is that benefiting you?**

Give us a security score that is used externally by auditors or cyber insurance.

  ### 43. We love Security Scorecard

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 10, 2023

**What do you like best about SecurityScorecard?**

Marketing buzzwords like ‘best-in-class,’ ‘leading,’ ‘industry-standard,'  is so common for so many products. But security scorecard makes our life easier by helping us evaluate this. It had helped us make our strategic decisions so much easier for our organization.

**What do you dislike about SecurityScorecard?**

I love security scorecard & there are no concerns we have.

**What problems is SecurityScorecard solving and how is that benefiting you?**

We are a small team of IT & Information Security. It becomes extremely difficult for us to evaluate these multiple vendors or tools in the technology domain. We are a smb & these strategic decisions we make with the help of security scorecard makes our life easy & secure.

  ### 44. We are using securityscorecard to monitor our third party vendors

**Rating:** 4.0/5.0 stars

**Reviewed by:** Hendra G. | Information Technology Security Manager, Enterprise (> 1000 emp.)

**Reviewed Date:** February 21, 2023

**What do you like best about SecurityScorecard?**

simplicity and easy to use reporting, its comprehensive coverage areas

**What do you dislike about SecurityScorecard?**

sometimes the data is not accurate after confirming with vendors

**What problems is SecurityScorecard solving and how is that benefiting you?**

blindsidedness when dealing with new third parties.  This gives me an opportunity to evaluate risk profiles of the parties we are dealing with.

  ### 45. Good platform that continues to evolve

**Rating:** 3.5/5.0 stars

**Reviewed by:** Matt M. | Enterprise (> 1000 emp.)

**Reviewed Date:** February 21, 2023

**What do you like best about SecurityScorecard?**

Quick and easy to use to find potential issues with your external assets.

**What do you dislike about SecurityScorecard?**

Some of the factors used to determine score are subjective and SSC does not provide strong evidence of a risk-based decision.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Clear view into external asset security posture.  In addition, customers are able to the score and how it improves over time.

  ### 46. Security Scorecard Review

**Rating:** 4.5/5.0 stars

**Reviewed by:** Goutam P. | Enterprise (> 1000 emp.)

**Reviewed Date:** February 16, 2023

**What do you like best about SecurityScorecard?**

It gives comprehensive review about our key vendors, and also gives capability to look at our overall security posture.

**What do you dislike about SecurityScorecard?**

1. Suddenly too many false positives appear out of no where, and we end up cleaning the ips that are wrongly mapped
2. Whenever there are new ips found, customer should be given a choice to say Yes/No, before tagging them to customer score card.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It is helping us draw a security baseline across different vendors 
It is also helping us to review, the security posture of our organization from external point of view

  ### 47. It has been a cornerstone of building a successful security program

**Rating:** 5.0/5.0 stars

**Reviewed by:** Scott F. | Chief Information Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 20, 2023

**What do you like best about SecurityScorecard?**

Simple to use interface, knowledgeable folks to work with, help resolving issues when they appear on reports, and daily comfort of knowing where I stand on attack surfaces.

**What do you dislike about SecurityScorecard?**

Wish there was more than just one complimentary vendor to have in the portfolio.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It provides a powerful outside-in look at my network.

  ### 48. Good product at a good price

**Rating:** 5.0/5.0 stars

**Reviewed by:** Richard H. | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 23, 2023

**What do you like best about SecurityScorecard?**

Ease of use. From day 1, you can start Security Scorecard it is of instant value. You will find information you weren't aware of.

**What do you dislike about SecurityScorecard?**

Nothing really. It is very comprehensive.

**What problems is SecurityScorecard solving and how is that benefiting you?**

It brings to my attention "hidden" risks such as lack of TLS, SPF, DMARC, missing patches etc.

  ### 49. Good experience

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Insurance | Mid-Market (51-1000 emp.)

**Reviewed Date:** April 28, 2023

**What do you like best about SecurityScorecard?**

The open source feed that allows a company to gather insights necessary that helps understand a hacker's perspective.

**What do you dislike about SecurityScorecard?**

Some of the features are limited compared to other vendors I took a look at from the conference.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Vendor security and privacy and security risk analysis

  ### 50. Good follow-up of tech aspects

**Rating:** 4.0/5.0 stars

**Reviewed by:** Carlo W. | Enterprise (> 1000 emp.)

**Reviewed Date:** April 25, 2023

**What do you like best about SecurityScorecard?**

The overview of measures that are possible to protect us better.
The scoring and possibility to look at the scoring of peers.

**What do you dislike about SecurityScorecard?**

Nothing really, it does what we want it to do.

**What problems is SecurityScorecard solving and how is that benefiting you?**

Especially the third party follow up and the scoring as such are top


## SecurityScorecard Discussions
  - [Apart from Third Party &amp; Supplier Risk Management, How can we use other functionality of SS?](https://www.g2.com/discussions/apart-from-third-party-supplier-risk-management-how-can-we-use-other-functionality-of-ss) - 1 comment, 1 upvote
  - [What is SecurityScorecard used for?](https://www.g2.com/discussions/what-is-securityscorecard-used-for) - 1 comment
  - [How much does BitSight cost?](https://www.g2.com/discussions/how-much-does-bitsight-cost) - 1 comment
  - [Why SecurityScorecard?](https://www.g2.com/discussions/why-securityscorecard) - 1 comment

- [View SecurityScorecard pricing details and edition comparison](https://www.g2.com/products/securityscorecard/reviews?section=pricing&secure%5Bexpires_at%5D=2026-05-31+16%3A36%3A35+-0500&secure%5Bsession_id%5D=c57872c4-a75c-4f46-b91a-ace329372e67&secure%5Btoken%5D=79a6137934503724ca8a73dba414dec0c416764db8f6806a67b1de6fa6b5dc0b&format=llm_user)
## SecurityScorecard Integrations
  - [Microsoft PowerPoint](https://www.g2.com/products/microsoft-powerpoint/reviews)

## SecurityScorecard Features
**Functionality**
- Customized Vendor Pages
- Centralized Vendor Catalog
- Questionnaire Templates
- User Access Control

**Generative AI**
- AI Text Generation

**Risk assessment**
- Risk Scoring
- 4th Party Assessments
- Monitoring And Alerts
- AI Monitoring

**Monitoring - IT Risk Management**
- AI Monitoring

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Agentic AI - IT Risk Management**
- Autonomous Task Execution
- Multi-step Planning

## Top SecurityScorecard Alternatives
  - [Vendor Risk](https://www.g2.com/products/vendor-risk/reviews) - 4.5/5.0 (706 reviews)
  - [Bitsight](https://www.g2.com/products/bitsight/reviews) - 4.5/5.0 (76 reviews)
  - [LogicGate Risk Cloud](https://www.g2.com/products/logicgate-risk-cloud/reviews) - 4.6/5.0 (188 reviews)

