What we like best about SecurityScorecard is the intuitive user experience and well organized content. The platform is very well layered to provide a wide audience with reporting, security risk metrics, and technical risk details to help support the needs of a well rounded Continuous Monitoring program. It enables its users to not only detect, but react and collaborate with in scope suppliers through the use of the vendor invite functionality. Additionally the Security Scorecard team has been beyond supportive in this journey helping the team to not only understand the tool, but how to develop processes and a program structure to maximize the value the tool brings. Review collected by and hosted on G2.com.

1) The team often finds themselves needing to refresh pages such as the insights dashboard, a supplier profile, ip inventory, etc. The data often doesn't load and we receive error messages advising us to refresh. 2) Inability to track and report on invited vendor engagements such as when the vendor was invited, did they accept the invite, when did they last login, etc. 3) Custom Scorecard data unavailable through the API. Review collected by and hosted on G2.com.

SecurityScorecard presents security metrics that are easy to understand and present to upper management. It has given me ammo to change some low-hanging security settings without burdening my staff. Review collected by and hosted on G2.com.

There can be some false positive when looking at the scorecards of vendors because they may use cloud resources which are shared by other companies so malware sources or IP reputation might have been affected by the other companies using the same resource. Review collected by and hosted on G2.com.

In a word: ACCESSIBILITY. Everyone makes you feel like your issues actually matter and will elevate to the appropriate people. The escalation path never feels like someone trying to satiate you. Review collected by and hosted on G2.com.

Random errors and slowdowns. It can take a LONG TIME to generate a report. Review collected by and hosted on G2.com.

Super User friendly interface

Great insight into the security posture

The detailed report analysis are best in class compared to other reporting tools Review collected by and hosted on G2.com.

Domain/IP mapping for company entities is fairly inaccurate

I would like to see improvements to the bottom three scorecard domains (Hacker Chatter, Information Leak and Social Engineering), they tend to never change Review collected by and hosted on G2.com.

Comprehensive research presented well. Quick and helpful support team! Review collected by and hosted on G2.com.

Sometimes items get misidentified a few times until the algorithm get updated. As the support team is quick in removing demonstrated incorrect entries, this isn’t a big detractor. Review collected by and hosted on G2.com.

SS interface is user friendly, easy to explain to other staffs in the bank. Review collected by and hosted on G2.com.

We have started using the platform, once we mature with time we would be in better postion to provide the feedback on dislike. Review collected by and hosted on G2.com.

I am able to review our vendors in real time to frameworks such as PCI, HIPAA and many more. We had a vendor say they were HIPAA compliant and I was able to show them they were not according to security scorecard Review collected by and hosted on G2.com.

They make so many improvements to the product at this point it would only be nitpicking Review collected by and hosted on G2.com.

Security Scorecard allows us to monitor the changing security posture of our suppliers Review collected by and hosted on G2.com.

One feature that would be great is to be able to nest portfolios. In the compliance tab having the ability to have a holistic view of all of our vendors that do not meet a certain control Review collected by and hosted on G2.com.

SecurityScorecard supports the communication with supplier by adding more focus in potential risks and the possibility to interact. Review collected by and hosted on G2.com.

Sometimes IPs/URLs impact the score even if they are unused and only reserved for a company. Review collected by and hosted on G2.com.

Very helpful team. Product is robust and accurate, we use it as a core component of our third party risk management programme and we are not dissapointed. It's great that Security Scorecard keep updating the platform and developing useful new features. Review collected by and hosted on G2.com.

Occasional false positives have caused internal and external issues Review collected by and hosted on G2.com.