SecurityScorecard Reviews & Product Details

Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics & Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard's technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes.

Seller

SecurityScorecard

Discussions

SecurityScorecard Community

Languages Supported

English

Solution Type

Best-of-Breed

Overview by

Kristina LeBlanc

Used by Kubra and 2 others

Beta

Value at a Glance

Averages based on real user reviews.

Time to Implement

1 month

View More Pricing Information

SecurityScorecard Integrations

(1)

Verified by SecurityScorecard

G2 reviews are authentic and verified.

Here's how.

Dr. Jagannath S.

Group CISO & DPO

Manufacturing

Enterprise (> 1000 emp.)

7/25/2026

"Clear, Easy-to-Understand Security Ratings with Continuous Third-Party Risk Monitoring"

4.5/5

What do you like best about SecurityScorecard?

What I like best about SecurityScorecard is its easy-to-understand security ratings and continuous third-party risk monitoring, which provide clear visibility into cyber risk across the organization and vendor ecosystem. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

What I dislike about SecurityScorecard: External-only assessments can sometimes generate false positives and provide limited context behind rating changes, requiring additional validation by security teams Review collected by and hosted on G2.com.

What problems is SecurityScorecard solving and how is that benefiting you?

SecurityScorecard helps solve third-party cyber risk visibility and continuous security monitoring by identifying vulnerabilities, security posture weaknesses, and potential breach risks across our vendor ecosystem, enabling us to prioritize remediation, strengthen vendor governance, and make more informed risk-based decisions. Review collected by and hosted on G2.com.

Chris L.

Cloud Security Engineer

Information Technology and Services

Enterprise (> 1000 emp.)

8/14/2025

"External Vulnerability Management External Attack Surface"

5/5

What do you like best about SecurityScorecard?

tHIS TOO IS A SIMPLE man when it comes to ease of use and an insane one for the depth. I rely on it daily for our public security posture and the MS Power BI integration (thru API's) allows simple dashboarding. This is another huge one, the amount of features dark web monitoring, IP reputation checks etc really does save us hours and hours compared to doing it all manually. Unmatchable customer service, every concern is catered in hours. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

The initial integration work was a bit hard because of some legacy systems we have here, but their team really helped us. The only issue is that it doesn't detect all the subdomains (so you must type them manually). Review collected by and hosted on G2.com.

Tim U.

Cyber Security / Automation Expert

Computer & Network Security

Mid-Market (51-1000 emp.)

8/14/2025

"Essential for Third-Party Risk Management"

5/5

What do you like best about SecurityScorecard?

Connecting our score to the fullest third-party security risk exposure view One of the things that I found most amazing was just how much you can see about a vendors security posture and not get bogged down in the weeds of all the technical analysis. Streamline the risk categorization (DNS Health, Patching cadence etc) for better focus and correct prioritization of remediation efforts. We got help and updates so you can be timely. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

The issue is… as positive as those scores are, we do still occasionally see some false positives related to the baked-in risk of vendors with whom we have no leverage. Once we had dialed in some compliance settings to better meet our own Risk Profiles, it was fairly straightforward to set up. As such — if reporting can be made any more flexible (which would cover the last gap), it will already be extremely similar to how we segment workflow. Review collected by and hosted on G2.com.

What problems is SecurityScorecard solving and how is that benefiting you?

For vendor risk assessments, the utility use 60% time savings over manual due diligence. Yet, to keep their defenses up they can set up automatic alerts for when ratings drop and address vulnerabilities head-on so changes are made before things become dire. It is already quite critical for the compliance reporting and C-Level Risk visibility. Review collected by and hosted on G2.com.

Cristian C.

Administrador

Small-Business (50 or fewer emp.)

4/8/2025

"Comprehensive Cybersecurity Insights with Room for Improvement"

5/5

What do you like best about SecurityScorecard?

SecurityScorecard provides a comprehensive view of your organization's cybersecurity posture and the security ratings of your third-party vendors, giving you the tools to manage and improve security risks effectively. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

While SecurityScorecard offers a lot of useful data, some users find the interface slightly overwhelming, especially if they are not very familiar with cybersecurity metrics. Review collected by and hosted on G2.com.

What problems is SecurityScorecard solving and how is that benefiting you?

One issue is that the service might sometimes be too focused on broad metrics rather than providing highly detailed information. This forces me to look at other sources for deeper analysis, which can be time-consuming. However, it benefits me by keeping my focus on high-level security trends and identifying partners' general risk profiles quickly. Review collected by and hosted on G2.com.

Verified User in Financial Services

Mid-Market (51-1000 emp.)

8/14/2025

"Security Scorecard as TPRM"

2.5/5

What do you like best about SecurityScorecard?

the security scorecard was Budget Friendly (Moderate Budget Friendly) , Dashboards were good , good correlation with CVE Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

Not having any Customer support, Not doing Constant Scans , Real time scanning was not available, Review collected by and hosted on G2.com.

What problems is SecurityScorecard solving and how is that benefiting you?

Security Card was doing very well in managing the Vendor Risks , So it benefiting us to understand that how much access or how we can have a controlled environment that our vendor risk does not affect security of our organization, Moreover the Security Card was monitoring the External attack surface of Our Organization but withstanding it was not much accurate still at one point of time it helps us to understand the Attack surface and According to Attack surface we were able to monitor our Outer facing environment, while working on the Security Scorecard it helps us understanding that this Vulnerability can impact how much to the score of the Organization and also in maintaining best score by giving remediation practices to us Review collected by and hosted on G2.com.

Brad H.

Chief Technology Officer

Information Technology and Services

Mid-Market (51-1000 emp.)

8/16/2025

"Industry Benchmarking at Its Best"

5/5

What do you like best about SecurityScorecard?

It is very rare a platform can benchmark our security posture against our peers. It was extremely easy to implement and we were up and running in less than days. Completely game changing features like monitors for compromised credentials and DNS health checking. Proactive: Support will frequently suggest optimizations Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

Sometimes scores will vary because of things like CDN outages which may cause unnecessary alerts. Another option would be a “pause monitoring” feature for maintenance windows. Review collected by and hosted on G2.com.

David Q.

Security Industry Advisor

Information Technology and Services

Mid-Market (51-1000 emp.)

8/16/2025

"The Gold Standard for Security Ratings"

5/5

What do you like best about SecurityScorecard?

Its interface is deceptively simple with incredible functionality. I've rolled this out in three organizations, and EVERY time, it's found THE critical gaps (e.g.- expired SSL certificates). Daily use: it is my first dashboard check in the morning. PowerPoint Integration : Easily share insights with my leadership via PowerPoint. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

The very first setup had to do small adjustments not to score non-critical assets. It would help to have an onboarding wizard for this. Review collected by and hosted on G2.com.

Verified User in Computer & Network Security

Mid-Market (51-1000 emp.)

7/24/2025

"Security Scorecard TPRM"

5/5

What do you like best about SecurityScorecard?

What I truly value about Security Scorecard is its comprehensive approach to vendor risk management, specifically how it excels in identifying risk factors, conducting thorough assessments, enabling continuous monitoring, and facilitating effective management of those risks. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

SecurityScorecard, in my opinion, is an exceptionally well-conceived solution for third-party risk management. The truth is, it causes me practically no bother at all, which speaks volumes about its great effectiveness and intuitive design. I believe they've successfully developed a tool that significantly simplifies such a critical aspect as cybersecurity with external vendors, fully meeting expectations and facilitating efficient risk management. Review collected by and hosted on G2.com.

What problems is SecurityScorecard solving and how is that benefiting you?

The fundamental challenge that Security Scorecard effectively addresses is the lack of unified vendor risk management, coupled with the critical need for greater visibility into the technological security posture and proactive threat intelligence regarding third-party vendors. In today's interconnected digital landscape, organizations are increasingly reliant on a vast ecosystem of third-party providers, each representing a potential entry point for cyberattacks. Security Scorecard steps in to bridge this gap, transforming a chaotic and opaque process into a structured, insightful, and actionable one. Review collected by and hosted on G2.com.

Thomas B.

Information Technology COO

Information Technology and Services

Small-Business (50 or fewer emp.)

8/15/2025

"Objective Metrics for Security Posture"

5/5

What do you like best about SecurityScorecard?

Since SecurityScorecard does not utilize any such data, the vendor ratings are impartial. The customers think of it as a no-brainer with one neutral benchmark. Understanding customer service & user-friendliness of platform (even for non-technical stakeholders). Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

Ratings sometimes are unfairly strong about subjects a business cannot control (e.g. shared hosting providers) — More filters in data can be helpful Review collected by and hosted on G2.com.

Verified User in Information Technology and Services

Mid-Market (51-1000 emp.)

10/9/2025

"Cybersecurity Analyst"

5/5

What do you like best about SecurityScorecard?

Support from team. I like the likelihoods reports to help us help our customers prepare for possible attacks. Review collected by and hosted on G2.com.

What do you dislike about SecurityScorecard?

There is nothing I dislike about Security Scorecard. Review collected by and hosted on G2.com.