Sold by: SecurityScorecard
Deployed on AWS
SecurityScorecard is the global leader in third-party cyber risk management, with more than 12 million companies continuously rated. Our patented security ratings technology is used by organizations for enterprise risk management, third-party cyber risk management, board reporting, due diligence, cyber insurance underwriting, and regulatory oversight.
Thousands of customers rely on SecurityScorecard to help them move from risk identification to risk resolution, operationalize their cyber risk management program, and improve the overall cyber hygiene of their organizations.
4.3
Overview
The SecurityScorecard platform uses non-intrusive and proprietary data collection methods, as well as trusted commercial and open-source threat feeds, to quantitatively evaluate the cybersecurity posture of any organization. We continuously monitor 10 risk factor groups and instantly deliver an easy-to-understand A to F rating, empowering organizations to quickly find and fix vulnerabilities and issues.
SecurityScorecard assessments enable enterprises to cut through the "questionnaire noise" by empowering users to send, complete, and auto-validate questionnaires at scale. Our assessments leverage SecurityScorecard ratings to automatically provide insight into the validity of questionnaire responses. This inside-out approach coupled with SecurityScorecard Ratings outside-in perspective provide organizations an objective 360 degree view of the cybersecurity risks of any vendor.
Every company has the universal right to their trusted and transparent cybersecurity rating and can sign up for a free account. Please visit <www.securityscorecard.com/trust > for more information.
For inquiries about a Private Offer (PO) or a Channel Partner Private Offer (CPPO), please contact aws-sales@securityscorecard.io .
Highlights
- Hundreds of thousands of organizations followed and 12+ million companies continuously monitored
- Accelerates the vendor risk assessment process by 75% and cuts the questionnaire cycle in half
- Award-winning customer success team highly rated for "ease-of-setup" and "quality customer service" with over 98% satisfaction rate
Details
Sold by
Delivery method
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Buyer guide
Gain valuable insights from real users who purchased this product, powered by PeerSpot.
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Dimension | Description | Cost/12 months |
|---|---|---|
SSC Free | REQUEST QUOTE | $0.00 |
SSC Pro | REQUEST QUOTE | $0.00 |
SSC Business | For vendor management of 5 domains, reporting unlocked | $13,500.00 |
SSC Enterprise | Larger vendor management of 75 domains + onboarding experience | $155,375.00 |
Dimensions summary
You choose from four contract tiers priced by how many organizations you monitor and manage. SSC Free and SSC Pro are quote-based, so you request a quote to set terms. SSC Business covers vendor management of 5 domains and unlocks reporting. SSC Enterprise scales to 75 domains and adds an onboarding experience. Pricing rises with the number of monitored domains and the capabilities each tier unlocks. Pick the tier that matches the size of your vendor management program.
Top-of-mind questions for buyers
A domain is an organization you monitor and manage within the platform. SSC Business covers vendor management of 5 domains. SSC Enterprise covers 75 domains. Each organization you track toward the domain count for your tier, so the number of vendors you monitor drives which tier you need.
The main factor is usage, measured by how many organizations you monitor and manage in the platform. SSC Free and SSC Pro are quote-based. SSC Business supports 5 domains with reporting unlocked. SSC Enterprise supports 75 domains plus onboarding. Cost rises with domain count and the capabilities each tier includes.
Each tier is defined by a set number of domains. SSC Business covers 5 domains and SSC Enterprise covers 75. To monitor more organizations, you move to a tier that supports the higher domain count. Contact the vendor to confirm how added domains are handled.
securityscorecard.com
Helpful?
Vendor refund policy
All fees are non-cancellable and non-refundable except as required by law or as provided in our MSA.
Custom pricing options
Request a private offer to receive a custom quote.
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Software as a Service (SaaS)
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Resources
Vendor resources
Support
Vendor support
Our Customer Success team is a team of advisors, partners and experts that are here to help you maximize your experience with SecurityScorecard. They help you unleash the full potential of SecurityScorecard, provide guidance on use cases, as well as keep you apprised of new product features. From onboarding and adoption through operationalization and scaling, the Customer Success team will be your partner to ensure you meet your goals as an additional layer to our technical support resources. To reach the Customer Success team contact us at csm@securityscorecard.io . For technical support please contact us at support@securityscorecard.io .
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Updated weekly
By SecurityScorecard
By Bitsight
By Hackmetrix
Top
10
In Procurement & Supply Chain, Legal & Compliance
Top
50
In Device Security
Top
10
In Security Observability, Compliance and Auditing
Sentiment is AI generated from actual customer reviews on AWS and G2
Functionality
Ease of use
Customer service
Cost effectiveness
Positive reviews
Mixed reviews
Negative reviews
AI generated from product descriptions
Continuous Security Monitoring
Monitors 10 risk factor groups continuously across more than 12 million companies using non-intrusive and proprietary data collection methods combined with trusted commercial and open-source threat feeds.
Quantitative Risk Assessment
Delivers quantitative evaluation of cybersecurity posture with an easy-to-understand A to F rating system for rapid vulnerability identification and remediation.
Third-Party Risk Management
Enables objective 360-degree view of vendor cybersecurity risks by combining inside-out questionnaire validation with outside-in security ratings assessment.
Automated Questionnaire Validation
Supports sending, completing, and auto-validating questionnaires at scale with automatic insight into questionnaire response validity leveraging security ratings data.
Multi-Factor Risk Evaluation
Evaluates cybersecurity posture across 10 distinct risk factor groups to provide comprehensive assessment of organizational security hygiene.
Security Rating Platform
Independently correlated cybersecurity ratings platform that measures organizational security performance and likelihood of breach correlation.
Event Data Collection and Analysis
Processes 44+ trillion raw events with 100 billion new events collected daily for threat intelligence and risk assessment.
Historical Data and Benchmarking
Provides 12+ months of historical security performance data across 40 million rated organizations for trend analysis and comparative assessment.
Attack Surface Visibility
Delivers continuous visibility of extended digital footprint with hierarchical organizational structure mapping for comprehensive risk oversight.
Remediation Tracking and Prioritization
Enables prioritization of security findings and tracking of remediation activities with accountability framework across organizational units.
Continuous Vulnerability Monitoring
Continuously monitors systems to identify vulnerabilities and security misconfigurations with automated alerting capabilities.
Compliance Framework Alignment
Supports compliance with ISO 27001 and PCI DSS standards through streamlined compliance workflows and automated certification processes.
Multi-Layer Security Scanning
Performs domain scanning, device monitoring, and third-party application security assessments across infrastructure components.
Centralized Risk Management Dashboard
Provides integrated platform with centralized dashboard for risk assessments, audits, and comprehensive security reporting with real-time visibility.
Proactive Threat Analytics
Leverages analytics to identify potential vulnerabilities and security risks for proactive mitigation before escalation.
Standard contract
No
No
Customer reviews
Financial Services
Simple interface and visibility into third parties’ high-level scores
Reviewed on Nov 09, 2026
Review provided by G2
What do you like best about the product?
A simple user interface and the ability to view the scores of other companies and third parties.
What do you dislike about the product?
The score is based on few variables and is useful only for getting a high-level view of companies’ security posture.
What problems is the product solving and how is that benefiting you?
It gives you a high-level view of your company’s security posture and lets you analyze the security of other companies, suppliers, and third parties at a high level.
Manish L.
Clear Vendor Security Visibility with Helpful Ratings and Continuous Monitoring
Reviewed on Nov 05, 2026
Review provided by G2
What do you like best about the product?
It gives us clear visibility into the security posture of the companies we work with, without requiring us to manually investigate every vendor. The security ratings make it easier to spot which vendors may need additional attention. I also find the breakdown of different risk factors helpful, since it provides a clearer picture of where potential weaknesses might exist. The continuous monitoring is especially valuable because a vendor’s security condition can change after the initial assessment, and it helps us stay aware of those shifts over time.
What do you dislike about the product?
The security scores are helpful, but at times they don’t give enough context about the real business impact of a given issue. I also run into findings that require manual verification, since not every externally detected issue translates into an immediate security threat.
What problems is the product solving and how is that benefiting you?
SecurityScorecard helps us manage the risks tied to third-party vendors and external business partners. Previously, evaluating a vendor’s cybersecurity posture meant sending questionnaires, reviewing documentation, and manually checking a range of security indicators. With this platform, we can continuously monitor external security signals and quickly spot vendors that may need closer review or further investigation. As a result, we’re able to prioritize assessments more effectively, cut down on manual effort, and make more informed decisions before onboarding new vendors or renewing existing vendor relationships.
Banking
Clear Cyber Risk Visibility with Powerful Security Ratings and Attack Surface Insights
Reviewed on Nov 03, 2026
Review provided by G2
What do you like best about the product?
The security scorecard platform provides a clear view of cyber risk and the security posture of both internal and third-party organizations. The security ratings dashboard and attack surface visibility are the strongest features of the solution. The platform has improved our organization’s security posture by helping us identifying the open vulnerabilities of our third-party vendors. Automated discovery of open vulnerabilities, exposed services, and misconfigurations reduces manual effort and helps us prioritize remediation activities more effectively.
What do you dislike about the product?
All the features are excellent and easy to use. However, the pricing is a little high compared to other providers in the market.
What problems is the product solving and how is that benefiting you?
1. It mainly helps identify third-party vendor vulnerabilities without needing to access their network.
2. The management dashboard clearly presents and makes the overall security posture easy to understand.
3. It also provides automated discovery of exposed, public-facing services.
2. The management dashboard clearly presents and makes the overall security posture easy to understand.
3. It also provides automated discovery of exposed, public-facing services.
Sourav D.
Instant Vendor Risk Visibility with Executive-Friendly A–F Security Grades
Reviewed on Oct 31, 2026
Review provided by G2
What do you like best about the product?
The instant outside-in visibility into vendor risk is fantastic. Its simple A-to-F letter grades make explaining security posture to executives effortless. Being able to drill into specific DNS, SSL, and patching issues without waiting on vendor questionnaires saves our team huge manual effort.
What do you dislike about the product?
False positives on IP attribution can be frustrating. Minor issues like outdated marketing DNS records tank our score, and contesting findings through the dispute process takes too long. Also, the external scan doesn’t account for behind-the-firewall mitigating controls.
What problems is the product solving and how is that benefiting you?
It eliminates manual vendor risk assessments and endless security questionnaires. Automated continuous scoring alerts us the moment a critical partner drops in hygiene, like an expired SSL or open port, letting us remediate third-party vulnerabilities before they turn into real supply chain breaches.
Dr. Jagannath S.
Clear, Easy-to-Understand Security Ratings with Continuous Third-Party Risk Monitoring
Reviewed on Jul 25, 2026
Review provided by G2
What do you like best about the product?
What I like best about SecurityScorecard is its easy-to-understand security ratings and continuous third-party risk monitoring, which provide clear visibility into cyber risk across the organization and vendor ecosystem.
What do you dislike about the product?
What I dislike about SecurityScorecard: External-only assessments can sometimes generate false positives and provide limited context behind rating changes, requiring additional validation by security teams
What problems is the product solving and how is that benefiting you?
SecurityScorecard helps solve third-party cyber risk visibility and continuous security monitoring by identifying vulnerabilities, security posture weaknesses, and potential breach risks across our vendor ecosystem, enabling us to prioritize remediation, strengthen vendor governance, and make more informed risk-based decisions.