No more typing reviews! Try our Samantha, our new voice AI agent.

Scytale vs SecurityScorecard comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Scytale
Ranking in IT Vendor Risk Management
19th
Ranking in AI Legal & Compliance
10th
Average Rating
1.0
Reviews Sentiment
2.4
Number of Reviews
1
Ranking in other categories
GRC (28th)
SecurityScorecard
Ranking in IT Vendor Risk Management
1st
Ranking in AI Legal & Compliance
2nd
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
AI Procurement & Supply Chain (3rd)
 

Mindshare comparison

As of May 2026, in the IT Vendor Risk Management category, the mindshare of Scytale is 1.7%. The mindshare of SecurityScorecard is 6.1%, down from 10.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
SecurityScorecard6.1%
Scytale1.7%
Other92.2%
IT Vendor Risk Management
 

Featured Reviews

reviewer2814822 - PeerSpot reviewer
CEO at a tech vendor with 11-50 employees
Sudden access suspension has disrupted compliance work and raises serious trust concerns
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a contract to us in full knowledge of what we do as a business. Compliance is a very broad word; we provide compliance into nonprofits, housing associations, markets that these guys do not serve. Somebody inside Scytale likely thought, "Oh my God, these guys must be competitive, so let's just cut them off." I'm assuming that's what happened, but there was no explanation, nothing. Scytale did not help me streamline my compliance processes. It didn't really identify gaps. There was no gap analysis in there that we could see. I didn't really get that far to use the effectiveness of Scytale's real-time insights in identifying potential compliance issues. All my experiences with Scytale have been negative. We haven't used the automated evidence collection of Scytale. Scytale has not helped me allocate resources more efficiently for compliance; it's been the opposite experience. We have put six months of effort into looking at the controls on 27001, talking about auditors, getting audit-ready, and so forth. But we've invested significant time, which has now been a complete waste of time. Scytale is not only unreliable, considering they can suspend access without any notice or formal reason, but this lack of stability results in serious concerns about their dependability as a partner. If they can do that without explanation, my fear is that even if they switch it on again, who's to know in three months' time that the same thing couldn't happen again?
AG
Application security engineer at a media company with 51-200 employees
Vendor risk monitoring has strengthened our security posture and reduced insurance costs
In terms of improvements, I feel SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high. Details on the technical mitigation would help my non-technical teams understand the security issues better. I think improvements could be made on the reporting side as well, such as the ability to download customizable reports. While SecurityScorecard offers various kinds of reports now, they are limited to predefined formats. Having the ability to choose specific fields for an automated report would be very helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The processes I participated in during the setup of Scytale were straightforward; it was acceptable and fine."
"The best features SecurityScorecard offers for me are mainly being able to properly position my organization's security posture because of the score that is provided."
"I rate the product's initial setup phase a nine on a scale of one to ten, where one is a difficult setup phase, and ten is an easy setup process."
"The biggest benefit is visibility, allowing organizations to understand their risks, vulnerabilities, and potential threats."
"With SecurityScorecard, the most valuable feature is the ability to identify if third parties or vendors have digital threats that may impact our company. It also scans all internal domains and IPs to find vulnerabilities in the digital landscape. The continuous monitoring capabilities have been beneficial by providing ongoing assessments of potential risks."
"One of its most effective features for risk identification is its enterprise-ready automation for third-party risk measurements."
"The initial setup takes just a couple of days and doesn't require any installation."
"SecurityScorecard has positively impacted my organization and my customers by providing numerous benefits, as customers easily obtain the score, can determine what ports are open and many other things so that they can secure their DNS, applications, and networks effectively, and they have improved compliance and security with the help of SecurityScorecard."
"With its automated approach, nothing is missed on the IPs your organization is related to."
 

Cons

"Scytale is not reliable at all; not stable. You would be unwise to put a mission-critical function like ISO 27001 on Scytale."
"SecurityScorecard can be complex during setup, and I would recommend that anyone implementing it get help setting it up because it is not as straightforward as people might think."
"The pricing of the product needs improvement in Brazil."
"SecurityScorecard can be improved. As it currently stands, it does a good job monitoring public-facing devices and the internet and DNS."
"The product can be improved by incorporating more data points and intelligence around dark web information and threat data."
"SecurityScorecard's technical team's response time is an area that my company expects to be made faster."
"The tool needs to have the ability to mitigate vulnerabilities with alternative solutions."
"I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side about how the scanner operates and how it is sometimes allowed to do those scans."
"They could improve the process with a questionnaire module for the product."
 

Pricing and Cost Advice

Information not available
"The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total. UPDATE: they have a new 400$ a month tier for starters."
"The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
"Even though it's competitive, they offer flexible pricing structures."
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
893,221 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise3
 

Questions from the Community

What needs improvement with Scytale?
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a c...
What is your primary use case for Scytale?
My usual use case for Scytale is for ISO 27001 compliance.
What advice do you have for others considering Scytale?
We're going to sue Scytale, and we're going to sue Amazon as well because they're technically the people we're paying. My feedback on Scytale is that it's terrible. Currently, it's actually useless...
What is your experience regarding pricing and costs for SecurityScorecard?
I have seen a return on investment with SecurityScorecard as it is easy to use and has saved us some time, so we do not need to do the scans on our own.
What needs improvement with SecurityScorecard?
I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side a...
What is your primary use case for SecurityScorecard?
My main use case for SecurityScorecard is to keep an eye on our vulnerabilities and also monitor which companies follow us in the platform, and we keep track when our score drops so we can fix it. ...
 

Comparisons

 

Overview

 

Sample Customers

Deel, Guesty, Berlitz, AXS Guard, vSure, KOR, Trial X, Tune Insight, Agora, Leen, Upsolver. For a full list of customers and testimonials, please visit: https://scytale.ai/customers/
TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial
Find out what your peers are saying about SecurityScorecard, OneTrust, BitSight and others in IT Vendor Risk Management. Updated: May 2026.
893,221 professionals have used our research since 2012.