

Find out what your peers are saying about SecurityScorecard, BitSight, OneTrust and others in IT Vendor Risk Management.
This resulting in a lower insurance premium cost for us and considerable cost savings overall, which made our management very pleased with the progress.
The biggest benefit is visibility, allowing organizations to understand their risks, vulnerabilities, and potential threats.
We have seen a clear return on investment, and in terms of the metrics, the time saver is in the reduction of time spent.
If we cannot adjust how to operate the solution, then it becomes very difficult, so hearing and initial tuning are very important.
Through the use of Tenable Security Center, my clients achieve more efficient patching and gain visibility and understanding of security operations, leading to improved resilience and infrastructure insight.
They need better organization to support their customer volume.
they continue to assist us with bi-monthly sync-up calls whenever we face issues with the platform regarding risk and how to improve our security score
I would rate the customer support for SecurityScorecard nine out of 10.
Longer response times and less thorough assistance.
They are helpful and were very helpful to us, coordinating with us on several issues.
The product is suitable for medium to large businesses, typically with a revenue range from $200 million to a couple of billion dollars.
My experience with SecurityScorecard is that it is highly scalable and can handle more vendors or users as my organization grows.
I can scale it extensively with the use of agents, allowing scanning in restrictive environments and loosely connected devices.
Scalability is a bit limited with Tenable Security Center.
I find SecurityScorecard stable for our organization, as I have not encountered any downtime.
The stability of the solution is outstanding.
If SecurityScorecard could improve anything, it would be making sure the algorithm pulls the right data for the right domain.
There is a need for more active rather than passive third-party risk management features to truly mitigate risks.
SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high.
It's important for Tenable to catch up on testing capabilities that are present in solutions like Qualys.
The reports and plugins for reports and scans could benefit from enhancements.
Translating reports into European languages is especially relevant in Central Eastern Europe, where clients often require reports in local languages.
There are more expensive and cheaper options available.
I expected slightly lower pricing.
Pricing is acceptable as per the Indian market.
The product is somewhat pricey, reflecting its valuable features and status as a high-quality solution in the vulnerability management market.
Tenable Security Center is quite expensive, particularly for the CEE region, causing us to lose cases due to its pricing.
The price of Tenable Security Center is not so high; it's relatively a cheaper solution.
It combines threat intel data with vulnerability information to increase risk ratings and provides insights into third-party supply chain risks.
I particularly value the Jira integration, so any issue identified as part of the threat intel activity can be directly updated through our Jira.
It converts complex security issues into business-friendly language, which helps executives and the board understand cyber risk.
We obtained good reports showing when patches were closed and the details of each patch, including who executed it and everything related to the patching process until it was closed.
Tenable Security Center provides an overall score of vulnerabilities, comparing an organization with others in the same industry.
The most effective feature of Tenable Security Center for detecting vulnerabilities is its capability for critical mapping.
| Product | Market Share (%) |
|---|---|
| SecurityScorecard | 8.1% |
| OneTrust GRC | 8.3% |
| RSA Archer | 8.0% |
| Other | 75.6% |
| Product | Market Share (%) |
|---|---|
| Tenable Security Center | 9.0% |
| Qualys VMDR | 12.7% |
| Rapid7 InsightVM | 11.0% |
| Other | 67.3% |

| Company Size | Count |
|---|---|
| Small Business | 7 |
| Midsize Enterprise | 5 |
| Large Enterprise | 3 |
| Company Size | Count |
|---|---|
| Small Business | 22 |
| Midsize Enterprise | 10 |
| Large Enterprise | 27 |
SecurityScorecard provides comprehensive cybersecurity insights with features such as notifications for score changes and configurable reporting, supporting team collaboration. It emphasizes multi-factor authentication and continuous monitoring for improved risk assessments.
SecurityScorecard specializes in assessing third-party cybersecurity risks, enhancing security posture, and analyzing exposed data. It offers automated information gathering and vendor reports, aiding in vulnerability assessments for supply chain risk management. Users value the Attack Surface Index and recommendations for security improvements, though faster technical response times and better cost-effectiveness, especially in Brazil, are desired. Enhancements such as app scanning and more efficient vulnerability management could expand its capabilities.
What are the key features of SecurityScorecard?SecurityScorecard is utilized in industries for managing third-party cybersecurity threats by providing detailed vulnerability assessments and automated reporting. Its implementation aids supply chain risk management and enhances industry-specific security strategies, with room for improvement in technical response times and dark web intelligence inclusion.
Get a risk-based view of your IT, security and compliance posture so you can quickly identify, investigate and prioritize your most critical assets and vulnerabilities.
Managed on-premises and powered by Nessus technology, the Tenable Security Center (formerly Tenable.sc) suite of products provides the industry’s most comprehensive vulnerability coverage with real-time continuous assessment of your network. It’s your complete end-to-end vulnerability management solution.
We monitor all IT Vendor Risk Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.