Vendor Risk Management Software
SecurityScorecard review
Outside-in security ratings platform used to monitor vendors and your own attack surface continuously.
SecurityScorecard at a glance
- Category
- Vendor Risk Management Software
- Starting price
- Contact sales
- Pricing model
- custom
- Public pricing
- No
- Free plan
- No
- G2 rating
- 4.3 (91 reviews)
- Founded
- 2013
- Headquarters
- New York, US
- Employees
- 500-615 (estimates differ by source)
- Funding or owner
- About $290M raised; $180M Series E in 2021, $85M debt in July 2025 per PitchBook
Buying SecurityScorecard: security, admin and contract
- Contract
- Quote based on number of organizations monitored; free-forever scorecard for own domain; buyable via resellers and public-sector contract vehicles. Tiers: TITAN Watch, Assess, Secure.
- Support
- Self-service docs, business-hours technical support, customer success managers for larger customers (pricing page)
Questions to ask SecurityScorecard before you sign
- Which plan includes SAML SSO, and what does it cost for our seat count?
- Is SCIM provisioning included, or a paid add-on?
- Which plan includes audit logs, and how long are they kept?
- Where is our data stored, and can we choose the region?
- Can we sign your standard DPA without changes?
- What will the price be at renewal, and is the increase capped?
Questions are listed where SecurityScorecard's public pages leave the answer open.
Who SecurityScorecard is for
Choose SecurityScorecard if
- Security teams that want outside-in continuous monitoring of many vendors.
- Boards and insurers that want a single score for reporting.
Look elsewhere if
- Small companies with tight budgets (reviewer says pricing is hard to justify)
- Teams that need deep questionnaire and evidence workflow as the core.
SecurityScorecard pricing
SecurityScorecard does not publish a price list; pricing is quoted on request.
G2 shows no vendor-provided price; G2 reviewer data lists perceived cost as highest tier and a 20% average discount (g2.com/products/securityscorecard/pricing).
SecurityScorecard features by buying criteria
| Criterion | What we found |
|---|---|
| Continuous monitoring | Core product: scans internet-facing assets and scores them. |
| Pricing / add-on | Quote only. |
What reviewers say about SecurityScorecard
Praised for
- Continuous monitoring and vendor visibility.
- Responsive support.
- Likelihood reports help anticipate attacks.
Common complaints
- Score can be hurt by shared hosting providers.
- Dashboard can lag.
- Cost for small organizations.
Themes paraphrased from public reviews on G2 and similar sites, not quotes.
What most SecurityScorecard reviews leave out
- Scores come from outside scanning, so findings reflect public assets, not internal controls.
- G2 comparison says UpGuard has more reviews and higher rating, SecurityScorecard higher ease of use.
- Total funding about $290M per several sources.
SecurityScorecard alternatives
- UpGuardMid-size security teams that want published entry pricing for vendor risk.$1,750 per month, billed annually
BitsightTeams that want outside-in security ratings to monitor many vendors continuously.Contact sales
PanoraysSecurity teams monitoring a vendor base with outside-in cyber scoring.Contact sales
Mitratech PrevalentMid-market and enterprise risk teams running structured vendor assessment programs.Contact sales
WhisticSecurity and GRC teams that run questionnaire-based vendor assessments.Contact sales
DrataCompanies already using Drata for compliance that want vendor risk in the same system.Contact sales
Sources
Every fact on this page comes from SecurityScorecard's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.