Vendor Risk Management Software
SecurityScorecard review
Outside-in security ratings platform used to monitor vendors and your own attack surface continuously.
SecurityScorecard at a glance
- Category
- Vendor Risk Management Software
- Starting price
- Contact sales
- Pricing model
- custom
- Public pricing
- No
- Free plan
- No
- G2 rating
- 4.3 (91 reviews)
- Founded
- 2013
- Headquarters
- New York, US
- Employees
- 500-615 (estimates differ by source)
- Funding or owner
- About $290M raised; $180M Series E in 2021, $85M debt in July 2025 per PitchBook
Who SecurityScorecard is for
Choose SecurityScorecard if
- Security teams that want outside-in continuous monitoring of many vendors.
- Boards and insurers that want a single score for reporting.
Look elsewhere if
- Small companies with tight budgets (reviewer says pricing is hard to justify)
- Teams that need deep questionnaire and evidence workflow as the core.
SecurityScorecard pricing
SecurityScorecard does not publish a price list; pricing is quoted on request.
G2 shows no vendor-provided price; G2 reviewer data lists perceived cost as highest tier and a 20% average discount (g2.com/products/securityscorecard/pricing).
What SecurityScorecard really costs
- Billing
- Quote.
- Add-ons
- Cyber risk quantification (price not published); Unlimited partial monitoring (price not published); MAX managed services: Questionnaires, Monitor, Respond levels (price not published)
SecurityScorecard features by buying criteria
| Criterion | What we found |
|---|---|
| Continuous monitoring | Core product: scans internet-facing assets and scores them. |
| Pricing / add-on | Quote only. |
What reviewers say about SecurityScorecard
Praised for
- Continuous monitoring and vendor visibility.
- Responsive support.
- Likelihood reports help anticipate attacks.
Common complaints
- Score can be hurt by shared hosting providers.
- Dashboard can lag.
- Cost for small organizations.
Themes paraphrased from public reviews on G2 and similar sites, not quotes.
What most SecurityScorecard reviews leave out
- Scores come from outside scanning, so findings reflect public assets, not internal controls.
- G2 comparison says UpGuard has more reviews and higher rating, SecurityScorecard higher ease of use.
- Total funding about $290M per several sources.
SecurityScorecard alternatives
- UpGuardMid-size security teams that want published entry pricing for vendor risk.$1,750 per month, billed annually
BitsightTeams that want outside-in security ratings to monitor many vendors continuously.Contact sales
PanoraysSecurity teams monitoring a vendor base with outside-in cyber scoring.Contact sales
Mitratech PrevalentMid-market and enterprise risk teams running structured vendor assessment programs.Contact sales
WhisticSecurity and GRC teams that run questionnaire-based vendor assessments.Contact sales
DrataCompanies already using Drata for compliance that want vendor risk in the same system.Contact sales
Sources
Every fact on this page comes from SecurityScorecard's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.