It gives us clear visibility into the security posture of the companies we work with, without requiring us to manually investigate every vendor. The security ratings make it easier to spot which vendors may need additional attention. I also find the breakdown of different risk factors helpful, since it provides a clearer picture of where potential weaknesses might exist. The continuous monitoring is especially valuable because a vendor’s security condition can change after the initial assessment, and it helps us stay aware of those shifts over time. Review collected by and hosted on G2.com.

The security scores are helpful, but at times they don’t give enough context about the real business impact of a given issue. I also run into findings that require manual verification, since not every externally detected issue translates into an immediate security threat. Review collected by and hosted on G2.com.

The instant outside-in visibility into vendor risk is fantastic. Its simple A-to-F letter grades make explaining security posture to executives effortless. Being able to drill into specific DNS, SSL, and patching issues without waiting on vendor questionnaires saves our team huge manual effort. Review collected by and hosted on G2.com.

False positives on IP attribution can be frustrating. Minor issues like outdated marketing DNS records tank our score, and contesting findings through the dispute process takes too long. Also, the external scan doesn’t account for behind-the-firewall mitigating controls. Review collected by and hosted on G2.com.

The security scorecard platform provides a clear view of cyber risk and the security posture of both internal and third-party organizations. The security ratings dashboard and attack surface visibility are the strongest features of the solution. The platform has improved our organization’s security posture by helping us identifying the open vulnerabilities of our third-party vendors. Automated discovery of open vulnerabilities, exposed services, and misconfigurations reduces manual effort and helps us prioritize remediation activities more effectively. Review collected by and hosted on G2.com.

All the features are excellent and easy to use. However, the pricing is a little high compared to other providers in the market. Review collected by and hosted on G2.com.

What I like best about SecurityScorecard is its easy-to-understand security ratings and continuous third-party risk monitoring, which provide clear visibility into cyber risk across the organization and vendor ecosystem. Review collected by and hosted on G2.com.

What I dislike about SecurityScorecard: External-only assessments can sometimes generate false positives and provide limited context behind rating changes, requiring additional validation by security teams Review collected by and hosted on G2.com.

tHIS TOO IS A SIMPLE man when it comes to ease of use and an insane one for the depth. I rely on it daily for our public security posture and the MS Power BI integration (thru API's) allows simple dashboarding. This is another huge one, the amount of features dark web monitoring, IP reputation checks etc really does save us hours and hours compared to doing it all manually. Unmatchable customer service, every concern is catered in hours. Review collected by and hosted on G2.com.

The initial integration work was a bit hard because of some legacy systems we have here, but their team really helped us. The only issue is that it doesn't detect all the subdomains (so you must type them manually). Review collected by and hosted on G2.com.

Connecting our score to the fullest third-party security risk exposure view One of the things that I found most amazing was just how much you can see about a vendors security posture and not get bogged down in the weeds of all the technical analysis. Streamline the risk categorization (DNS Health, Patching cadence etc) for better focus and correct prioritization of remediation efforts. We got help and updates so you can be timely. Review collected by and hosted on G2.com.

The issue is… as positive as those scores are, we do still occasionally see some false positives related to the baked-in risk of vendors with whom we have no leverage. Once we had dialed in some compliance settings to better meet our own Risk Profiles, it was fairly straightforward to set up. As such — if reporting can be made any more flexible (which would cover the last gap), it will already be extremely similar to how we segment workflow. Review collected by and hosted on G2.com.

SecurityScorecard provides a comprehensive view of your organization's cybersecurity posture and the security ratings of your third-party vendors, giving you the tools to manage and improve security risks effectively. Review collected by and hosted on G2.com.

While SecurityScorecard offers a lot of useful data, some users find the interface slightly overwhelming, especially if they are not very familiar with cybersecurity metrics. Review collected by and hosted on G2.com.

the security scorecard was Budget Friendly (Moderate Budget Friendly) , Dashboards were good , good correlation with CVE Review collected by and hosted on G2.com.

Not having any Customer support, Not doing Constant Scans , Real time scanning was not available, Review collected by and hosted on G2.com.

It is very rare a platform can benchmark our security posture against our peers. It was extremely easy to implement and we were up and running in less than days. Completely game changing features like monitors for compromised credentials and DNS health checking. Proactive: Support will frequently suggest optimizations Review collected by and hosted on G2.com.

Sometimes scores will vary because of things like CDN outages which may cause unnecessary alerts. Another option would be a “pause monitoring” feature for maintenance windows. Review collected by and hosted on G2.com.

Its interface is deceptively simple with incredible functionality. I've rolled this out in three organizations, and EVERY time, it's found THE critical gaps (e.g.- expired SSL certificates). Daily use: it is my first dashboard check in the morning. PowerPoint Integration : Easily share insights with my leadership via PowerPoint. Review collected by and hosted on G2.com.

The very first setup had to do small adjustments not to score non-critical assets. It would help to have an onboarding wizard for this. Review collected by and hosted on G2.com.