tHIS TOO IS A SIMPLE man when it comes to ease of use and an insane one for the depth. I rely on it daily for our public security posture and the MS Power BI integration (thru API's) allows simple dashboarding. This is another huge one, the amount of features dark web monitoring, IP reputation checks etc really does save us hours and hours compared to doing it all manually. Unmatchable customer service, every concern is catered in hours. Review collected by and hosted on G2.com.

The initial integration work was a bit hard because of some legacy systems we have here, but their team really helped us. The only issue is that it doesn't detect all the subdomains (so you must type them manually). Review collected by and hosted on G2.com.

Connecting our score to the fullest third-party security risk exposure view One of the things that I found most amazing was just how much you can see about a vendors security posture and not get bogged down in the weeds of all the technical analysis. Streamline the risk categorization (DNS Health, Patching cadence etc) for better focus and correct prioritization of remediation efforts. We got help and updates so you can be timely. Review collected by and hosted on G2.com.

The issue is… as positive as those scores are, we do still occasionally see some false positives related to the baked-in risk of vendors with whom we have no leverage. Once we had dialed in some compliance settings to better meet our own Risk Profiles, it was fairly straightforward to set up. As such — if reporting can be made any more flexible (which would cover the last gap), it will already be extremely similar to how we segment workflow. Review collected by and hosted on G2.com.

SecurityScorecard provides a comprehensive view of your organization's cybersecurity posture and the security ratings of your third-party vendors, giving you the tools to manage and improve security risks effectively. Review collected by and hosted on G2.com.

While SecurityScorecard offers a lot of useful data, some users find the interface slightly overwhelming, especially if they are not very familiar with cybersecurity metrics. Review collected by and hosted on G2.com.

the security scorecard was Budget Friendly (Moderate Budget Friendly) , Dashboards were good , good correlation with CVE Review collected by and hosted on G2.com.

Not having any Customer support, Not doing Constant Scans , Real time scanning was not available, Review collected by and hosted on G2.com.

It is very rare a platform can benchmark our security posture against our peers. It was extremely easy to implement and we were up and running in less than days. Completely game changing features like monitors for compromised credentials and DNS health checking. Proactive: Support will frequently suggest optimizations Review collected by and hosted on G2.com.

Sometimes scores will vary because of things like CDN outages which may cause unnecessary alerts. Another option would be a “pause monitoring” feature for maintenance windows. Review collected by and hosted on G2.com.

Its interface is deceptively simple with incredible functionality. I've rolled this out in three organizations, and EVERY time, it's found THE critical gaps (e.g.- expired SSL certificates). Daily use: it is my first dashboard check in the morning. PowerPoint Integration : Easily share insights with my leadership via PowerPoint. Review collected by and hosted on G2.com.

The very first setup had to do small adjustments not to score non-critical assets. It would help to have an onboarding wizard for this. Review collected by and hosted on G2.com.

What I truly value about Security Scorecard is its comprehensive approach to vendor risk management, specifically how it excels in identifying risk factors, conducting thorough assessments, enabling continuous monitoring, and facilitating effective management of those risks. Review collected by and hosted on G2.com.

SecurityScorecard, in my opinion, is an exceptionally well-conceived solution for third-party risk management. The truth is, it causes me practically no bother at all, which speaks volumes about its great effectiveness and intuitive design. I believe they've successfully developed a tool that significantly simplifies such a critical aspect as cybersecurity with external vendors, fully meeting expectations and facilitating efficient risk management. Review collected by and hosted on G2.com.

Since SecurityScorecard does not utilize any such data, the vendor ratings are impartial. The customers think of it as a no-brainer with one neutral benchmark. Understanding customer service & user-friendliness of platform (even for non-technical stakeholders). Review collected by and hosted on G2.com.

Ratings sometimes are unfairly strong about subjects a business cannot control (e.g. shared hosting providers) — More filters in data can be helpful Review collected by and hosted on G2.com.

Support from team. I like the likelihoods reports to help us help our customers prepare for possible attacks. Review collected by and hosted on G2.com.

There is nothing I dislike about Security Scorecard. Review collected by and hosted on G2.com.

You don't need to feed it anything, it starts looking for all the DNS of sites it relates to by itself, it is very easy to use and its implementation is natural, it is a tool for daily use. Review collected by and hosted on G2.com.

That sometimes you don't know why you are held responsible for some vulnerabilities that don't belong to your infrastructure, however, they are immediately removed when you let them know. Review collected by and hosted on G2.com.