Try our new research platform with insights from 80,000+ expert users
SecurityScorecard Logo

SecurityScorecard Reviews

Vendor: SecurityScorecard
4.1 out of 5
Badge Ranked 1
Leave a review

What is SecurityScorecard?

SecurityScorecard provides cybersecurity management with features like continuous monitoring and comprehensive vulnerability identification, crucial for managing third-party risks and improving security posture through external assessments and visual dashboards.

Get the SecurityScorecard Buyer's Guide and find out what your peers are saying about SecurityScorecard, RSA Archer, Bitsight and more!
SecurityScorecard is the #1 ranked solution in top IT Vendor Risk Management solutions, #2 ranked solution in top AI Legal & Compliance solutions, and #2 ranked solution in top AI Procurement & Supply Chain solutions. PeerSpot users give SecurityScorecard an average rating of 8.2 out of 10. SecurityScorecard is most commonly compared to RSA Archer: SecurityScorecard vs RSA Archer. SecurityScorecard is popular among the large enterprise segment, accounting for 58% of users researching this solution on PeerSpot. The top industry researching this solution are professionals from a financial services firm, accounting for 12% of all views.
Buyer's Guide
SecurityScorecard
February 2026
Get the report
Helped 884,873 peers since 2012

Featured SecurityScorecard reviews

Read more reviews

SecurityScorecard mindshare

As of March 2026, the mindshare of SecurityScorecard in the IT Vendor Risk Management category stands at 7.5%, down from 11.4% compared to the previous year, according to calculations based on PeerSpot user engagement data.
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
SecurityScorecard7.5%
OneTrust GRC8.7%
Bitsight6.9%
Other76.9%
IT Vendor Risk Management

PeerResearch reports based on SecurityScorecard reviews

TypeTitleDate
CategoryIT Vendor Risk ManagementMar 25, 2026Download
ProductReviews, tips, and advice from real usersMar 25, 2026Download
ComparisonSecurityScorecard vs OneTrust GRCMar 25, 2026Download
ComparisonSecurityScorecard vs BitsightMar 25, 2026Download
ComparisonSecurityScorecard vs RSA ArcherMar 25, 2026Download
Suggested products
TitleRatingMindshareRecommending
RSA Archer4.06.9%92%42 interviewsAdd to research
Bitsight4.16.9%100%9 interviewsAdd to research
 
 
Key learnings from peers
Last updated Jan 18, 2026

Valuable Features

SecurityScorecard provides valuable features such as easy reporting, continuous monitoring, digital threat identification for third parties, IP vulnerability scanning, risk scoring, cyber insurance underwriting, and compliance support. Users benefit from quick assessment of security posture, improvement in compliance metrics, and effective risk management. The interface offers clear visualization, and automation features like alerts and notifications enhance efficiency. Teams can prioritize threat remediation and maintain ongoing visibility of their security environment.
  • "The best features SecurityScorecard offers for me are mainly being able to properly position my organization's security posture because of the score that is provided."
  • "SecurityScorecard has impacted my organization positively as it was a surprise to notice that many of our customers follow us there, and the tool scans the web twice per day, so we can see how hackers and what they can see from our publicly available IPs."
  • "SecurityScorecard helps us identify potential vulnerabilities early, reduce third-party risk, and make more informed security decisions without relying only on questionnaires or self-reporting information."

Room for Improvement

SecurityScorecard needs better problem-solving guidance and pricing adjustments. Timeliness in technical support responses requires enhancement. Users desire app scanning capabilities, improved questionnaire automation, and integration with AI platforms. Critical areas include enhanced dark web intelligence, customizable reporting, internal monitoring, and scheduled scans. Third-party risk management features should be more active, with detailed remediation guidance and more precise algorithmic data attribution. Stronger integration, improved user interface, and management of false positives are necessary improvements.
  • "I realized that because my company was acquired by a bigger organization, SecurityScorecard started associating other portfolio company vulnerabilities to our score, which was not helpful because it was giving us wrong data and giving us vulnerabilities we did not have."
  • "I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side about how the scanner operates and how it is sometimes allowed to do those scans."
  • "SecurityScorecard can be complex during setup, and I would recommend that anyone implementing it get help setting it up because it is not as straightforward as people might think."

ROI

Users indicate varied perspectives on ROI from SecurityScorecard. Many find it beneficial in enhancing security rankings and lowering insurance costs, while offering time-saving advantages. The tool is praised for improving visibility into risks and threats, helping organizations act promptly. Although quantifying ROI may be complex, some have reported significant percentage gains over time. Addressing third-party risks and preventing digital threats highlights its importance in modern digital security strategies.

Pricing

SecurityScorecard offers a pricing model with tiers catering to different organizational needs, including a $400 per month starter tier and higher-priced options. While some users mention the initial list price as high, many find the pricing competitive and reasonable given the features. Regional factors, such as high taxes for Brazil, can affect cost perceptions. The absence of setup costs and the SaaS deployment model are appreciated for ease of use and onboarding.
  • "The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
  • "Even though it's competitive, they offer flexible pricing structures."
  • "The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total.UPDATE: they have a new 400$ a month tier for starters."

Popular Use Cases

Organizations primarily use SecurityScorecard for assessing and managing cybersecurity risks. Its capabilities include monitoring vulnerabilities, evaluating third-party risk, and providing actionable intelligence. Users benefit by scanning domains and IPs, identifying weak configurations, and maintaining high security ratings. It serves various industries, allowing companies to improve their security posture and make informed decisions by analyzing external attack surfaces, vendor risks, and threat intelligence, facilitating continuous monitoring and response to detected security issues.

Service and Support

SecurityScorecard's customer service and support shows varying response times, with improvements noted over the past year. Users report helpful interactions during onboarding and frequent sync-up calls. Although some experience delays, the knowledgeable team is praised for resolving inquiries. Their 24/7 availability receives high satisfaction ratings, yet there's a notable need for better organization to handle customer volume efficiently. Many consider the service good, rating it between six to nine out of ten.

Deployment

Many users find SecurityScorecard's initial setup straightforward and easy, often achieving deployment in hours. As a SaaS platform, it facilitates swift deployment, although time varies with the number of companies monitored. Assistance from a Customer Success Manager enhances the process. Some users advise seeking third-party help due to potential complexities, particularly when dealing with third-party configurations. Licensing limitations may affect the number of domains or vendors integrated, varying based on the chosen license.

Scalability

Users find SecurityScorecard highly scalable due to its web-based nature, enabling easy adjustment for domain expansion. It's deemed suitable for medium to large businesses, though not ideal for Fortune 500 companies. Challenges during initial onboarding were resolved efficiently with the support team. Some users appreciated the scalability, while others expressed interest in alternatives. Users gave mixed ratings but generally felt scaling up was straightforward without major issues reported.

Stability

SecurityScorecard has consistently demonstrated stability. Users have reported no downtime, and there are no complaints regarding reliability. Most rate its stability between seven to nine out of ten. The platform efficiently handles operations and is mostly stable. A minor issue noted is with MS Edge requiring a specific setting adjustment during login. Many find it stable for their organizational needs without disruptions, and the browser extension feature is particularly appreciated.
These insights are based on the in-depth reviews provided by peers to help you make a better buying decision.
Download our SecurityScorecard Buyer's Guide for additional reliable information.

Review data by company size

By reviewers
Company SizeCount
Small Business6
Midsize Enterprise4
Large Enterprise2
By reviewers
By visitors reading reviews
Company SizeCount
Small Business106
Midsize Enterprise54
Large Enterprise221
By visitors reading reviews

Top industries

By visitors reading reviews
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
9%
Retailer
6%
Media Company
6%
Healthcare Company
6%
Insurance Company
6%
Government
5%
Energy/Utilities Company
5%
Comms Service Provider
5%
Construction Company
4%
University
3%
Outsourcing Company
3%
Legal Firm
2%
Transportation Company
2%
Educational Organization
2%
Non Profit
2%
Hospitality Company
2%
Wholesaler/Distributor
2%
Pharma/Biotech Company
1%
Recreational Facilities/Services Company
1%
Security Firm
1%
Consumer Goods Company
1%
Marketing Services Firm
1%
Engineering Company
1%
Logistics Company
1%
Real Estate/Law Firm
1%
Aerospace/Defense Firm
1%

Compare SecurityScorecard with alternative products

Go!

Learn more about SecurityScorecard

SecurityScorecard enhances cybersecurity by offering tools for external security assessments, vulnerability detection, and informed decision-making. By incorporating visual dashboards and daily updates, it simplifies usability and risk management. Its integration with Jira aids in efficient handling of cyber risks, while compliance support and risk scoring further reinforce a strong security framework. The platform assists in fostering effective security conversations with stakeholders and vendors, although enhancements in response time, mobile functionality, and threat intelligence integration are desired by users. SecurityScorecard's intuitive design and automated processes, combined with its support for cyber insurance underwriting, provide a comprehensive approach to managing modern cybersecurity challenges.

What are SecurityScorecard's Essential Features?
  • Easy Reporting: Simplifies the creation of security reports for stakeholders.
  • Continuous Monitoring: Constantly tracks security status and vulnerabilities.
  • Third-Party Risk Assessment: Evaluates external entities to identify potential risks.
  • Vulnerability Identification: Comprehensive detection of system weaknesses.
  • Jira Integration: Enhances risk management and task tracking.
What Benefits or ROI Should Users Look For?
  • Improved Security Posture: Strengthens overall cyber defense strategies.
  • Informed Decision-Making: Empowers stakeholders with actionable insights for security decisions.
  • Enhanced Compliance Support: Assists organizations in meeting regulatory and compliance requirements.
  • Efficient Risk Management: Streamlines processes to identify and mitigate risks effectively.

Industries like healthcare and finance leverage SecurityScorecard to assess cybersecurity resilience. By scanning domains and providing detailed security scores, it aids organizations in informed vendor selection and robust risk management, ensuring compliance and reducing exposure to cyber threats.

SecurityScorecard customers

TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial

Related questions

  • 75
What is your recommended automated audit software for internal and external audit?
  • 16
Vulnerability Management and Risk Management Integration
  • 48
What vendor risk management software do you recommend?
  • 39
What is the best solution for comprehensive Risk Management in financial services?
  • 87
What is the difference between SOC 1, SOC 2, and SOC 3 compliance?
  • 15
When evaluating IT Vendor Risk Management, what aspect do you think is the most important to look for?
  • 26
Which enterprise threat modeling tool do you recommend?
  • 39
What is Security Posture and what categories of Security Posture Management do exist?
  • 29
How many ISO norms do we have in the entire ISO27k security family standards?
  • 20
What should an enterprise risk management plan and strategy include in 2022?

Product Categories

Product Categories
IT Vendor Risk Management
AI Legal & Compliance
AI Procurement & Supply Chain

Popular Comparisons

Popular Comparisons
RSA Archer vs SecurityScorecard Logo
RSA Archer vs SecurityScorecard
Bitsight vs SecurityScorecard Logo
Bitsight vs SecurityScorecard
OneTrust GRC vs SecurityScorecard Logo
OneTrust GRC vs SecurityScorecard
AuditBoard vs SecurityScorecard Logo
AuditBoard vs SecurityScorecard
MetricStream vs SecurityScorecard Logo
MetricStream vs SecurityScorecard
ProcessUnity vs SecurityScorecard Logo
ProcessUnity vs SecurityScorecard
Black Kite vs SecurityScorecard Logo
Black Kite vs SecurityScorecard
RiskRecon vs SecurityScorecard Logo
RiskRecon vs SecurityScorecard
UpGuard Vendor Risk vs SecurityScorecard Logo
UpGuard Vendor Risk vs SecurityScorecard
Scytale vs SecurityScorecard Logo
Scytale vs SecurityScorecard
Panorays vs SecurityScorecard Logo
Panorays vs SecurityScorecard
Kovrr vs SecurityScorecard Logo
Kovrr vs SecurityScorecard
Microsoft Secure Score vs SecurityScorecard Logo
Microsoft Secure Score vs SecurityScorecard
Prevalent vs SecurityScorecard Logo
Prevalent vs SecurityScorecard
Venminder vs SecurityScorecard Logo
Venminder vs SecurityScorecard
See all alternatives
 
SecurityScorecard Reviews Summary
Author infoRatingReview Summary
Application security engineer at a media company with 51-200 employees4.0I use SecurityScorecard to manage vendor risk and monitor threats, which helped improve our security score from B to A, reduced insurance costs, and enhanced overall security maturity through valuable features, Jira integration, and reliable support.
Owner at Taktik Technologies3.5I've used SecurityScorecard for years to monitor third-party risk; it's highly informative, especially on cloud security, though setup is complex and data isn't always current. It’s effective but could improve automation and real-time scanning.
IT operations risk analyst at a energy/utilities company with 10,001+ employees4.0I've used SecurityScorecard for two years to monitor vulnerabilities in our domain; its scoring system helps prioritize threats, though accuracy suffered after a company acquisition. The platform is user-friendly, and customer support responds promptly to issues.
SOC analyst at BUSINESS IT4.0I use SecurityScorecard to quickly assess vendor security, reduce third-party risk, and support informed decisions. It's stable, scalable, and user-friendly, though it could improve customization, integration, and reporting. Overall, it saves time and delivers clear ROI.
Technical Lead at M.TECH Solutions India Pvt. Ltd.5.0I've used SecurityScorecard for years to help customers identify vulnerabilities, assess cyber risk, and improve compliance, with clear ROI and strong support, though it could improve by monitoring internal, non-public-facing systems more effectively.
Cybersecurity Specialist at a tech vendor with 501-1,000 employees4.5I've found SecurityScorecard easy to use, helpful for tracking vulnerabilities and improving our security score, which matters to customers. While it's mostly great, more detail on scans and managing false positives would improve it further.
Regional Director at a tech services company with 51-200 employees3.5I use Fortify Data for financial organizations to assess vulnerabilities by combining attack surface capabilities with dark web information. Its strength lies in comprehensive risk assessments, though it could improve by adding more threat data and active risk management features.
Co-Founder and CEO at Cloudway4.5I primarily use SecurityScorecard for assessing third-party cybersecurity risks. While ROI measurement is complex, its role in mitigating risks is invaluable. Improvement is needed in automating questionnaires. Despite this, its importance in enhancing security posture is undeniable.