--- title: Bitsight Reviews meta_title: 'Bitsight Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 76 reviews by the users' company size, role or industry to find out how Bitsight works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 76 scale: '5' date_modified: '2026-08-09' parent_category: name: Governance, Risk & Compliance url: https://www.g2.com/categories/governance-risk-compliance --- # Bitsight Reviews **Vendor:** Bitsight **Category:** [Third Party & Supplier Risk Management Software](https://www.g2.com/categories/third-party-supplier-risk-management) **Average Rating:** 4.5/5.0 **Total Reviews:** 76 ## About Bitsight Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance. ## Bitsight Pros & Cons **What users like:** - Users value the **comprehensive security posture** provided by Bitsight, enhancing protection for their organization and suppliers. (15 reviews) - Users value the **comprehensive security posture** provided by Bitsight, enhancing management of cyber risk and third-party suppliers. (14 reviews) - Users find Bitsight's **ease of use** remarkable, enjoying its intuitive interface and seamless integration with various platforms. (13 reviews) - Users appreciate the **detailed insights** and **collaboration features** of Bitsight, enhancing vendor risk management effectively. (11 reviews) - Users praise the **fantastic customer support** of Bitsight, highlighting their knowledge and eagerness to assist effectively. (9 reviews) - Users find Bitsight to be **extremely helpful** for vulnerability detection and organization, enhancing security and knowledge. (9 reviews) - Security Management (7 reviews) - Vendor Management (7 reviews) - Users value the **efficient assessment process** of Bitsight, enhancing their security posture and providing valuable insights. (5 reviews) - Cybersecurity (5 reviews) **What users dislike:** - Users find **missing features** in Bitsight, such as lack of transparency and inadequate questionnaire management, frustrating overall. (6 reviews) - Users criticize the **lack of clarity** in BitSight's scoring mechanism and experience occasional inaccuracies in domain reporting. (5 reviews) - Users experience **poor customer support** and inadequate documentation, hindering effective use of the Bitsight platform. (4 reviews) - Users experience **poor notifications** with delayed alerts and irrelevant historical breaches, impacting timely critical monitoring. (4 reviews) - Users experience **slow loading** times and timeouts that hinder workflow and overall satisfaction with Bitsight. (4 reviews) - Users have noted that the **slow performance** of Bitsight in reflecting score improvements can be frustrating after implementing security fixes. (4 reviews) - Users experience **delay issues** with Bitsight, particularly in response times and updates on vulnerabilities. (3 reviews) - Users feel that Bitsight is **expensive** compared to other vendors, wishing it could be more affordable. (3 reviews) - False Positives (3 reviews) - Users highlight the need for **improvement in thoroughness and support response times** in Bitsight's services. (3 reviews) ## Bitsight Reviews ### 1. Great tool for managing external sourced vulnerabilities **Rating:** 5.0/5.0 stars **Reviewed by:** Steve W. | Lead Information Security Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Bitsight?** The organization of vulnerability findings by severity, risk vector, type of vulnerability makes it helpful to organize and report on your vulnerabilities. Many findings have been from areas we either didnt know about, or never knew were vulnerable. While the GUI interface is extremely well organized and easy to use, I found it quite helpful using the Bitsight API structure to pull finding totals by Risk Vector, Grade, etc into a spreadsheet that gets regularly updated every few hours. Bitsight has not only helped our company's security posture, but also helped in my knowledge of website construction on a deeper level than I previously had, and Ive been in this field as a developer and a security analyst for over 30 years. Of all the security tools we employ here, Bitsight is probably my preferred tool to use. I find it challenging and easy at the same time. I find the customer support team an excellent resource. In my 4 years of working with them now, Im sure Ive aggrivated them to no degree with my relentless questions and requests. But they are always there and willing to help me. I use Bitsight everyday. Its part of my job. I consider it to be my 3rd arm. The loss of this tool would be a significant change in my career. **What do you dislike about Bitsight?** As helpful as it can be, at times there are areas that can be improved as well. Bitsight isnt as always as thorough as it could be. While it does in depth scanning of many of our external resources. there are several with the same vulnerabilities that seemingly get overlooked. Or its like one group of findings gets found one month.. two months later, another group is found with the same vulnerabilities. Also Id love to see a bit more transparency about the formulas used in calculating grades, and RV scores. Lately, my use of customer support has been not as frequent as their response time has dropped off a bit. Where I used to get responses to questions within a few hours to a day.. now it seems many questions go several days before they get a first response. **What problems is Bitsight solving and how is that benefiting you?** BItsight helps our company in improving its security posture. In the years that I have been administering Bitsight for us, we have improved our security view and the way we look at ourselves immeasurably. Not only myself, my security team, but other peripheral teams in our IT department take stock of what we do here too. ### 2. Easy to use. Actionable data and pinpoints where to focus efforts. Immediate ROI. **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** September 05, 2025 **What do you like best about Bitsight?** BitSight provides our team an outside-in view of our security posture. The daily security ratings are easy to track and give clear insight into areas like potential compromised systems, risky behavior, and probable past incidents. As part of our multi-layered security strategy, BitSight adds a unique layer of visibility that complements our internal tools, helping us with potential blind spots and external risks that we might otherwise miss. I especially like the Ratings Tree as it breaks down risk across different business units so we can quickly pinpoint where to focus our efforts. It doesn’t replace our internal monitoring or detection tools, but its part of our multi-layered defense where BitSight provides an essential external perspective that strengthens our overall defense and helps us communicate and prioritize cybersecurity with leadership. Further Luisa from the CS team is an amazing contact and so is Ciaran; with both of them we're confident we're getting the services that we need without waiting days for a reply. Its also easy to implement and integrate. **What do you dislike about Bitsight?** It's good for us. So nothing I can think of at the moment. **What problems is Bitsight solving and how is that benefiting you?** BitSight provides our team an outside-in view of our security posture. The daily security ratings are easy to track and give clear insight into areas like potential compromised systems, risky behavior, and probable past incidents. As part of our multi-layered security strategy, BitSight adds a unique layer of visibility that complements our internal tools, helping us with potential blind spots and external risks that we might otherwise miss. I especially like the Ratings Tree as it breaks down risk across different business units so we can quickly pinpoint where to focus our efforts. It doesn’t replace our internal monitoring or detection tools, but its part of our multi-layered defense where BitSight provides an essential external perspective that strengthens our overall defense and helps us communicate and prioritize cybersecurity with leadership. Further Luisa from the CS team is an amazing contact and so is Ciaran; with both of them we're confident we're getting the services that we need without waiting days for a reply. Its also easy to implement and integrate. ### 3. Reliable Security Ratings and Excellent Support Experience **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Enterprise (> 1000 emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Bitsight?** Bitsight provides clear, data-driven security ratings that help benchmark our organization’s cybersecurity posture and evaluate third-party vendors. The intuitive dashboards and detailed analytics allow for quick risk assessments and informed decision-making. Data Transparency: The platform provides visibility into the specific risk vectors affecting the rating, allowing our team to prioritize mitigation efforts. Regulatory Alignment: Bitsight’s reports are helpful for communicating risk posture to stakeholders and auditors. Responsive Support: Their support staff is knowledgeable and responsive, helping us quickly resolve questions and get the most from the tool. **What do you dislike about Bitsight?** Until recently, the remediation timeline for reflected improvements in the score can be slow, even after fixing identified issues. This sometimes creates a disconnect between our internal posture and the external rating. **What problems is Bitsight solving and how is that benefiting you?** Bitsight is helping our organization address several key cybersecurity and compliance challenges: Security Performance Benchmarking: It provides a standardized way to measure and compare our organization’s cybersecurity performance over time and against industry peers, which helps justify security investments and track improvements. Regulatory and Compliance Readiness: Bitsight supports our compliance efforts with HIPAA, HITECH, and other healthcare regulations by providing external validation of our cybersecurity controls and offering documentation that can be used in audits and board reporting. Executive and Stakeholder Communication: The platform makes it easier to communicate cybersecurity risk in business terms to non-technical stakeholders, which helps align security initiatives with broader organizational goals. ### 4. Excellent Support **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Enterprise (> 1000 emp.) **Reviewed Date:** October 22, 2025 **What do you like best about Bitsight?** I really appreciate how available and responsive the Bitsight team is when I have questions. They’re always willing to discuss details and help clarify how to get the most out of the platform. **What do you dislike about Bitsight?** I’d like the lifetime expiration to be shorter once an asset is removed, to avoid ongoing impact on the overall score — though I understand that’s part of the observation process. **What problems is Bitsight solving and how is that benefiting you?** Bitsight supports us in managing our external attack surface and improving our overall security posture. With Priority Scanning, we now get faster, more accurate insights through daily scans, which helps us prioritize remediation efforts and understand their impact on our score more quickly. ### 5. Tool is good, managed service has improved greatly, but at quite the premium cost **Rating:** 3.5/5.0 stars **Reviewed by:** Reed C. | Third Party Cyber Risk Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** July 28, 2025 **What do you like best about Bitsight?** the finding details, customer service is usually pretty good from managed service employees and bitsight support, rarely any down from the platform time as I use it daily **What do you dislike about Bitsight?** not being able to send questionnaires to some third parties without having to submit a support ticket.... by far the worst feature. The questionnaire Issue Management is lacking (sending issues back to vendor and having them respond), overall the Bitsight tools function very much like separate tools, don't work together, at times the managed service employee's lack of cyber knowledge is very apparent as they are way overly reliant on Bitsight's scoring system, lack of AI features as competitors implement them **What problems is Bitsight solving and how is that benefiting you?** manage vendors ### 6. Best EASM product out there **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Manufacturing | Enterprise (> 1000 emp.) **Reviewed Date:** July 17, 2025 **What do you like best about Bitsight?** Bitsight's algorithm is the most transparent and logical one on the market. Algorithm changes are communicated with plenty of advance notice and are accompanied by helpful tools to plan and predict, as well as maximize return on effort in prioritizing remediation. The portal is very intuitive and easy to use, integrates very nicely with IaaS platforms and Jira, setup is a breeze, and support is spectacular, both from a technical standpoint as well as the account team. We use Bitsight on a daily basis to ensure we are responding in a timely manner to any unexpected changes to our footprint. **What do you dislike about Bitsight?** There's not too much to criticize about Bitsight. If I had to pick one thing, I guess it could be cheaper. **What problems is Bitsight solving and how is that benefiting you?** We are primarily leveraging Bitsight for first party use, to ensure we maintain a relatively high score, which is shared with our investors via Glass Lewis proxy. ### 7. Easy Integration and Excellent Support—A Must-Have Security Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Emre U. | Infrastructure and System Support Manager, Enterprise (> 1000 emp.) **Reviewed Date:** October 20, 2025 **What do you like best about Bitsight?** Useful security tool, good customer relations, easy to implement and manage. Integration is simple. features are well designed. **What do you dislike about Bitsight?** No dislikes yet. Everything looks fine so far. **What problems is Bitsight solving and how is that benefiting you?** It keeps security up tp date and alerts for threats. ### 8. Great Representatives and Responsive Support **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Medical Devices | Enterprise (> 1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Bitsight?** Bitsight's support representatives are fantastic at showcasing new tools and offering support where needed. They are knowledgeable, friendly, and eager to research topics to provide speedy support. **What do you dislike about Bitsight?** Their platform is great to use and the only hiccups are niche requirements that I, as a user, may have. However, Bitsight has always been eager to create internal enhancement requests for these niche needs. **What problems is Bitsight solving and how is that benefiting you?** Bitsight is providing us with insight into our supply chain's resiliency in terms of cybersecurity. ### 9. Great Experience and reactive team! **Rating:** 4.5/5.0 stars **Reviewed by:** Salma A. | CERT Member/ ASM consultant, Enterprise (> 1000 emp.) **Reviewed Date:** February 18, 2025 **What do you like best about Bitsight?** To have an idea about out company security's posture, an intuitive interface and reactive support team. **What do you dislike about Bitsight?** The long lifetime of some risk vectors after a rescan or the incapability to rescan some findings. **What problems is Bitsight solving and how is that benefiting you?** Anticipating certain cybersecurity attacks. ## Bitsight Discussions - [What does Bitsight Security Ratings do?](https://www.g2.com/discussions/what-does-bitsight-security-ratings-do) - [How is BitSight calculated?](https://www.g2.com/discussions/how-is-bitsight-calculated) - [What is a BitSight security rating?](https://www.g2.com/discussions/what-is-a-bitsight-security-rating) - [View Bitsight pricing details and edition comparison](https://www.g2.com/products/bitsight/reviews?filters%5Bsentiment_snippet%5D=2019277&qs=pros-and-cons§ion=pricing&secure%5Bexpires_at%5D=2026-08-14+08%3A20%3A59+-0500&secure%5Bsession_id%5D=78e64f05-2bd1-4002-97dc-d7f062868fc6&secure%5Btoken%5D=784158dae634062f70ffae5ff6040c12e33ea858bf7806a082165b74c8763a28&format=llm_user) ## Bitsight Integrations - [Aravo](https://www.g2.com/products/aravo/reviews) - [Archer](https://www.g2.com/products/archer-technologies-archer/reviews) - [Coupa](https://www.g2.com/products/coupa-software-coupa/reviews) - [Diligent](https://www.g2.com/products/diligent/reviews) - [Graphite Connect](https://www.g2.com/products/graphiteconnect-graphite-connect/reviews) - [Interos](https://www.g2.com/products/interos/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Microsoft Power BI](https://www.g2.com/products/microsoft-microsoft-power-bi/reviews) - [Microsoft Sentinel](https://www.g2.com/products/microsoft-sentinel/reviews) - [Netskope](https://www.g2.com/products/netskope-activity-feeds-for-microsoft-onedrive-netskope/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [OneTrust Third-Party Management](https://www.g2.com/products/onetrust-third-party-management/reviews) - [Onspring](https://www.g2.com/products/onspring/reviews) - [Palo Alto Cortex XSIAM](https://www.g2.com/products/palo-alto-cortex-xsiam/reviews) - [SAP Ariba](https://www.g2.com/products/sap-ariba/reviews) - [Splunk](https://www.g2.com/products/splunk-2025-01-30/reviews) - [ThreatQ](https://www.g2.com/products/threatq/reviews) - [Venminder](https://www.g2.com/products/venminder/reviews) - [Whistic](https://www.g2.com/products/whistic/reviews) ## Bitsight Features **Additional Functionality** - Incident Management - Real-Time Monitoring - Evidence Management - Risk Alerts - Reporting & Statistics - Third-Party Integrations - Workflow Management - Risk Analysis - Sarbanes-Oxley Compliance - Single Sign On - Compliance Management - Policy Management - Real-Time Reporting - Audit Trail - Assessment Management - HIPAA Compliant - Operational Risk Management - Document Storage - Enterprise Risk Management - Data Visualization - Configurable Workflow - Vendor Management - IT Risk Management - User Management - Issue Management - Internal Controls Management - AI Copilot - Environmental Compliance - Customizable Reports - Data Import/Export - Risk Management - API - Document Management - Risk Assessment - Activity Dashboard - Task Management - Audit Management - Generative AI - Governance - Corrective and Preventive Actions (CAPA) - Alerts/Notifications - FDA Compliance - Secure Data Storage - Approval Process Control - Version Control **Additional Functionality** - Search/Filter - Risk Management - Generative AI - Alerts/Notifications - Compliance Management - Third-Party Integrations - Certificate Assessment - API - Incident Management - Automated Containment - Real-Time Data - Vulnerability Scanning - Monitoring - Policy Management - Asset Discovery - Penetration Testing - Runtime Container Security - Activity Dashboard - Security Auditing - Issue Tracking - Threat Intelligence - Patch Management - Endpoint Management - Collaboration Tools - Vulnerability Management - Goal Setting/Tracking - Vulnerability Assessment - Asset Tagging - Assessment Management - Access Controls/Permissions - AI Copilot - Vulnerability/Threat Prioritization - Vulnerability Protection - Risk Assessment - Reporting/Analytics - SQL Injections **Performance** - Issue Tracking - Detection Rate - False Positives - Automated Scans - Anomaly/Malware Detection **Risk Analysis** - Risk Scoring - Reporting - Risk-Prioritization **Functionality** - Customized Vendor Pages - Centralized Vendor Catalog - Questionnaire Templates - User Access Control **Asset Management** - Asset Discovery - Shadow IT Detection - Change Management - Compliance Management **Data management** - Data repository - Natural Language Processing (NLP) - Data quality - Automation - Data structuring **Risk Assessment** - Scoring - AI **Vulnerability Management - Digital Risk Protection (DRP) Platforms** - Vulnerability Assessment - Digital Footprint Mapping - Fraud Detection - Data Leak Detection - Anti-Counterfeiting - Brand Protection **Generative AI - Exposure Management Platforms** - Predictive Analytics - Automated Threat Detection **Orchestration** - Asset Management - Security Workflow Automation - Deployment - Sandboxing - Remediation Management **Network** - Compliance Testing - Perimeter Scanning - Configuration Monitoring - Vulnerability Scanning - Source-Code Scanning - Web Scanning **Vulnerability Assesment** - Vulnerability Scanning - Vulnerability Intelligence - Contextual Data - Dashboards **Risk assessment** - Risk Scoring - 4th Party Assessments - Monitoring And Alerts - AI Monitoring **Monitoring** - Gap Analysis - Vulnerability Intelligence - Compliance Monitoring - Continuous Monitoring - Server Monitoring - Real-Time Monitoring **Functionality** - Customized Datasets - Customer support - Real-time data - Complete datasets - Compliance - Plug-ins **Risk Control** - Reviews - Policies - Workflows **Incident Response Digital Risk Protection (DRP) Platforms** - Threat Remediation - Automated Reponses - Incident Response Capabilities **Risk Identification and Assessment - Exposure Management Platforms** - Comprehensive Risk Assessment - Advanced Analytics and Reporting **Information** - Proactive Alerts - Malware Detection - Intelligence Reports - Threat Intelligence - Real-time Alerts **Application** - Manual Application Testing - Static Code Analysis - Black Box Testing - Risk Analysis **Automation** - Automated Remediation - Workflow Automation - Security Testing - Test Automation **Risk Management** - Risk-Prioritization - Reconnaissance - At-Risk Analysis - Threat Intelligence **Monitoring** - Vendor Performance - Notifications - Oversight **Reporting and Analytics - Digital Risk Protection (DRP) Platforms** - Threat Trends Analysis - Risk Assessment Reports - Customizable Dashboards **Monitoring and Integration - Exposure Management Platforms** - Integration and Data Consolidation - Real-time Monitoring and Alerts **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Personalization** - Endpoint Intelligence - Security Validation - Dynamic/Code Analysis - Event Analysis - Web-Application Security - Application Security **Reporting** - Templates - Centralized Data - 360 View **Generative AI** - AI Text Summarization **Agentic AI - Vulnerability Scanner** - Autonomous Task Execution - Proactive Assistance **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security - Runtime Container Security - Asset Discovery - Threat Intelligence - Vulnerability Protection - Alerts/Notifications - Vulnerability/Threat Prioritization - Generative AI - SQL Injections - Real-Time Analytics - Threat Protection - Web-Application Security - Password Protection - Website Crawling - Vulnerability Assessment **Additional Functionality** - SSL Security - HIPAA Compliant - API - Threat Response - Endpoint Protection - Maintenance Scheduling - Third-Party Integrations - Security Auditing - Application Security - Encryption - Network Security - Real-Time Reporting - AI Copilot - Reporting/Analytics - Authentication - Financial Data Protection - Anti Virus - Secure Data Storage - Virus Definition Update - Activity Dashboard - VPN - Audit Trail - Anti Spam - Access Controls/Permissions - Data Visualization - Alerts/Escalation - Data Security **Generative AI** - AI Text Summarization - Generate Attack Scenarios - Generate Threat Detection Rules - Generate Threat Summaries - Generative AI **Agentic AI - Third Party & Supplier Risk Management** - Adaptive Learning - Decision Making **Agentic AI - Threat Intelligence** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Additional Functionality** - Real-Time Reporting - Real-Time Analytics - Network Monitoring - API - Reporting/Analytics - Alerts/Notifications - Behavior Analytics - AI Copilot - Activity Dashboard - Profiling - Cloud Backup - Data Visualization - Activity Monitoring - Network Scanning - Event Logs - Monitoring - Server Monitoring - Vulnerability Scanning - Incident Reporting - Activity Tracking - Reporting & Statistics - Network Provisioning - Prioritization - Threat Response - Real-Time Data - IT Reporting ## Top Bitsight Alternatives - [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) - 4.5/5.0 (727 reviews) - [Recorded Future](https://www.g2.com/products/recorded-future/reviews) - 4.6/5.0 (225 reviews) - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,676 reviews)