shouldiuse.io

Categories

VERDICT

SecurityScorecard Review

Depends

Should I use SecurityScorecard?

Protect your supply chain and manage third-party cyber risk with continuous vendor monitoring and TPRM. - securityscorecard.com

· 1 month ago

Buy if you're a mid-to-large org with dozens of vendors, compliance pressure, or a board that wants a risk score. Small teams with a short vendor list should skip it and use questionnaires plus a spreadsheet.

Confidence

Medium. Based on ~15 public sources; review snippets truncated, so no verbatim user quotes available. Pricing details not public in reviewed sources.

Ratings

  • Value for money
  • Ease of useNo usable usability evidence found
  • Feature depth
  • Support qualityNo support evidence found
  • Security postureNo public vulnerability findings either way

Pricing

Not disclosed

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed

Best for

  • Mid-to-large enterprises with long vendor lists
  • GRC and third-party risk teams
  • Regulated industries (healthcare case study exists)
  • Boards wanting a vendor risk score

Not for

  • Small businesses with under ~20 vendors
  • Teams wanting transparent, self-serve pricing
  • Security teams that reject ratings methodologies outright
  • Anyone seeking open-source or self-hosted TPRM

Gotchas - check before you buy

medium

Enterprise quote-only pricing; expect implementation and onboarding fees on top of license

medium

Ratings methodology is polarizing; some security leaders reject such scores outright

medium

Score-impacting findings take real effort to resolve on your end

Pros and cons

Pros

  • Used by 25,000+ organizations for continuous vendor security monitoring
  • Broad suite: ratings, CVE detection, cyber risk quantification
  • MAX managed service handles supply chain threat detection and response
  • Available via AWS Marketplace for easier procurement
  • Named a Leader in a cybersecurity risk ratings report

Cons

  • Some CISOs refuse to even discuss SecurityScorecard
  • No public pricing; implementation and onboarding cost extra
  • Ongoing practitioner debate over whether ratings tools add value
  • Reddit users hunt for open-source alternatives, signaling cost pain

Sources & method

- 12 sources - No known vulnerabilities found in the sources reviewed.

official x2review x7security x1news x2

Key stats

  • Value for money: 2/5

    Rating

  • Not disclosed

    Starting price

  • 12

    Sources

  • Analyzed

  • Value for money: 2/5. Quote-only pricing; ratings methodology contested
  • Ease of use. No usable usability evidence found
  • Feature depth: 4/5. Ratings plus CVE intel, CRQ, managed service
  • Support quality. No support evidence found
  • Security posture. No public vulnerability findings either way
  • 25,000+ Customers vendor-claimed
  • 4.3/5 Software Advice rating listed 2026
  • 2013 Founded by security researchers
  • $180M Series E Funding ~$140M ARR reported

Pricing

Not disclosed

Security

No known vulnerabilities found in the sources reviewed.

What users say

Software Advice lists 4.3/5 and G2 reviews run positive, but practitioner sentiment on Reddit and LinkedIn is polarized.

Companies that use it

  • Altair
Full analysis

Based on ~15 public sources; review snippets truncated, so no verbatim user quotes available. Pricing details not public in reviewed sources.

Enterprise third-party cyber-risk monitoring. Right for big vendor lists and audits; overkill for small teams.

Methodology

Based on ~15 public sources; review snippets truncated, so no verbatim user quotes available. Pricing details not public in reviewed sources.

Read how a report is made.

Sources

  1. SecurityScorecard homepagesecurityscorecard.com
    official
  2. G2 reviewsg2.com
    review
  3. Software Advice reviews (4.3/5)softwareadvice.com
    review
  4. Reddit: Are you using BitSight / SecurityScorecard?reddit.com
    review
  5. Reddit: BitSight is snake oil, right?reddit.com
    review
  6. LinkedIn: The Dilemma of Security Ratings for CISOslinkedin.com
    review
  7. Reddit: Open-source alternative of SecurityScorecard?reddit.com
    review
  8. Vendr pricing datavendr.com
    review
  9. Series E funding press releaseprnewswire.com
    news
  10. FounderPath growth analysis (~$140M ARR)founderpath.com
    news
  11. AWS Marketplace listingaws.amazon.com
    official
  12. Product security pagesecurityscorecard.com
    security

Add this review to your site

This check for SecurityScorecard says Depends.

Put the badge on your site.

Visitors see the independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Depends SecurityScorecard Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.