Vendor Risk Management Software
SecurityScorecard: features, pricing and who it fits
SecurityScorecard scans internet-facing assets to score vendors and your own attack surface continuously, with quote-only pricing. Boards and insurers like a single score for reporting. Reviewers mention that shared hosting can hurt a score, and cost is hard to justify for small firms.
Who SecurityScorecard is for
Best for
- Security teams that want outside-in continuous monitoring of many vendors
- Boards and insurers that want a single score for reporting
Look elsewhere if
- Small companies with tight budgets (reviewer says pricing is hard to justify)
- Teams that need deep questionnaire and evidence workflow as the core
Fit by company size
| Category | 1-10 people | 11-50 people | 51-500 people | 500+ people |
|---|---|---|---|---|
| Vendor Risk Management Software | No data | Poor fit | No data | No data |
Strong fitWorkablePoor fitNo data from the vendor
SecurityScorecard features
- Continuous monitoring
- Core product: scans internet-facing assets and scores them
- Pricing / add-on
- Quote only
Pros and cons
What users like
- Continuous monitoring and vendor visibility
- Responsive support
- Likelihood reports help anticipate attacks
Common complaints
- Score can be hurt by shared hosting providers
- Dashboard can lag
- Cost for small organizations
Worth knowing before you buy
- Scores come from outside scanning, so findings reflect public assets, not internal controls
- G2 comparison says UpGuard has more reviews and higher rating, SecurityScorecard higher ease of use
- Total funding about $290M per several sources
