4.6/5
G2 rating
Customer reviews
Report
Should I Use Bitsight?
AI-powered cyber risk intelligence platform. Continuous visibility into your attack surface, third-party ecosystem, and threats. Trusted by 3,500+ enterprises.
Depends
DependsBuy it if you're a large enterprise managing hundreds of vendors or producing board-level cyber risk reporting.
Enterprise cyber-risk ratings: strong fit for vendor-heavy giants; opaque pricing and overkill for small teams.
Confidence: Medium
308
Gartner reviews
In-depth ratings & reviews
$399M
Total funding
Founded 2011; $200M ARR in 2025
3,500+
Customers
68,000+ organizations in network
Value for money
3
Opaque pricing; annual commitments only
Ease of use
3
Users report unclear reporting
Feature depth
5
Ratings, EASM, TPRM, vuln intel combined
Support quality
4
Reviewers praise support responsiveness
Security posture
4
No public incidents in sources reviewed
Pros
- Holds a 4.6/5 G2 rating across a large review base
- Named a Leader in the Forrester Wave for cyber risk ratings¹
- Ratings correlate with breach outcomes across 27,000 companies analyzed
- One platform covers ratings, attack surface, third-party risk, and vulnerability intelligence
- 3,500+ customers; 20% of world's countries use it for national security
Cons
- No public pricing; everything is sales-negotiated⁸
- Review summaries flag lack of clarity in BitSight's reporting
- Users report long disputes over stale findings
- Annual subscription fees; no month-to-month option
Gotchas
- highPricing fully opaque — Bitsight does not publish list prices; expect a sales-negotiated annual contract.⁸
- mediumOutside-in ratings can flag old findings; remediation often requires the flagged vendor to correct the report.⁶
- mediumOne practitioner reports being dropped over an 'ancient' finding — disputes take real effort.
- lowGuess: ratings measure external posture only; they won't replace internal vulnerability scanning.
Best for
- Large enterprises with big vendor ecosystems
- Third-party risk management teams
- Cyber insurers and financial services
- Boards needing executive risk reporting
Not for
- Small teams — expensive overkill
- Buyers needing transparent published pricing
- Anyone unwilling to sign annual contracts
- Teams without staff to manage rating disputes
Companies that use it
- Veracode
- DATAMARK
- Cornerstone
Pricing
Enterprise subscription
Not published — sales quoted
- Annual subscription fees
- Priced by scope and modules (ratings, TPRM, EASM, vuln intel)
Security
No known public vulnerabilities found in the sources reviewed.
What users say
Customers praise BitSight's vendor visibility and responsive support, while Reddit practitioners complain ratings surface stale findings that are slow to correct.
“What I like best about BitSight is that it gives companies a...”
“Then the vendors themselves have to correct the rep...”
“BitSight dropped us because of some ancient findin...”
Alternatives
Compare Bitsight with each alternative.
SecurityScorecard
Closest direct rival in security ratings; similar enterprise model.
Bitsight vs SecurityScorecardUpGuard
Ratings plus vendor risk; claims 4.5/5 across 700 reviews.
Bitsight vs UpGuardCyCognito
Attack-surface-focused alternative, frequently compared head-to-head.
RiskLedger
Lighter-weight third-party risk option for smaller vendor programs.
Bitsight vs RiskLedgerFull analysis
Based on 20+ public sources including Gartner, G2, AWS Marketplace reviews, Reddit, Vendr pricing data, and Bitsight's own site. Pricing figures unavailable — all quotes are truncated in source snippets.
Sources
official
review
- Bitsight Reviews — G2g2.comreview
review
- BitSight is snake oil, right? — Redditreddit.comreview
- Bitsight is Bullshit — Redditreddit.comreview
- Bitsight Pricing & Packagingbitsight.comofficial
- Bitsight Software Pricing — Vendrvendr.comreview
- Bitsight Surpasses $200 Million in ARRbitsight.comnews
- BitSight raises $250M from Moody's — TechCrunchtechcrunch.comnews
- Bitsight Product Security Pagebitsight.comsecurity
Rate this review
Anonymous. You can change your vote.
Loading votes…
Ask a follow-up
Ask if a use case fits. Answers stay inside this report and its sources.
Comments
One queue. No replies. Give a display name first. Limit: 7 comments per day.
No comments yet.