Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Best External Security Posture Rating platform
What do you like best about the product?
SecurityScoreCard (SCC) is not just an external security posture rating platform, but it is also external attack surface management. With all the public data available, it shows a mirror to organizations how exactly security looks from the outside.
With every organization now using SCC scores, a kind of social pressure has been created that every organization must maintain a mark security posture, which is overall good for the community.
With every organization now using SCC scores, a kind of social pressure has been created that every organization must maintain a mark security posture, which is overall good for the community.
What do you dislike about the product?
Anything related to your company name impacts the score, even your vendor services and all. Although that's the idea that the security posture of any company is not just its own infrastructure but all supplied ecosystem as well. However, sometimes test systems are also hosted with the same company domain, which can drop security scores a lot.
The assist discovery algorithm is not the best, especially for subdomains.
The assist discovery algorithm is not the best, especially for subdomains.
What problems is the product solving and how is that benefiting you?
Continuously monitoring external security posture in all areas of the security domain.
Social pressure to remain on top of our security.
Ability to detect external threats.
Social pressure to remain on top of our security.
Ability to detect external threats.
- Leave a Comment |
- Mark review as helpful
It has been a cornerstone of building a successful security program
What do you like best about the product?
Simple to use interface, knowledgeable folks to work with, help resolving issues when they appear on reports, and daily comfort of knowing where I stand on attack surfaces.
What do you dislike about the product?
Wish there was more than just one complimentary vendor to have in the portfolio.
What problems is the product solving and how is that benefiting you?
It provides a powerful outside-in look at my network.
Strong Product that Provides Leverage in Vendor Business Dealings
What do you like best about the product?
- SS provides various reporting options that allow me to target my security results message according to my audience. This is critical as we use results as contract leverage - agreement from the vendor for security control maintenance which can be observed on SS
- SS has a responsive support team. which is critical to me on time-sensitive projects.
-- SS engages its customers regularly to help improve and grow their use of the SS, and to obtain useful feedback from their user base
- SS has a responsive support team. which is critical to me on time-sensitive projects.
-- SS engages its customers regularly to help improve and grow their use of the SS, and to obtain useful feedback from their user base
What do you dislike about the product?
- SS must integrate Atlas with the rest of the product in order to create a holistic view of the vendor's security controls. If they do this, they have a powerhouse tool. Security controls go beyond what can be seen from the Internet or what is reported in the news. Administrative controls, awareness and phishing exercises I need to know about for a final score on a vendor.
- I would like it to be easier to manipulate the footprint/IP roster used to create reports. Case in point, I have business partners I assess who contract with an IT provider to manage their domain. I know the full score of the IT provider includes all domains it provides, and it is the true indicator of its security practices. But I need to report on the subdomain of my customer to gain credibility on my final assessment rating.
- I would like it to be easier to manipulate the footprint/IP roster used to create reports. Case in point, I have business partners I assess who contract with an IT provider to manage their domain. I know the full score of the IT provider includes all domains it provides, and it is the true indicator of its security practices. But I need to report on the subdomain of my customer to gain credibility on my final assessment rating.
What problems is the product solving and how is that benefiting you?
-Quickly providing provable, unbiased data about the technical security control environment of third parties with whom we share data/connectivity. The SS information is used as part of my final security risk assessments.
- Provides breach history and company stats without me having to research
- SS provides a visual way to begin the security conversation - and continue it - with our vendors/third parties. It gives us leverage during contract renewals and initial signing
- Simply put, IT HELPS ME WITH MY WORKLOAD. I have too many assessments coming in to manage. SS ups my efficiency
- Provides breach history and company stats without me having to research
- SS provides a visual way to begin the security conversation - and continue it - with our vendors/third parties. It gives us leverage during contract renewals and initial signing
- Simply put, IT HELPS ME WITH MY WORKLOAD. I have too many assessments coming in to manage. SS ups my efficiency
Great tool
What do you like best about the product?
Being able to validate the level of security a vendor is claiming. new scan results appear quickly and support is responsive.
What do you dislike about the product?
So far i have not found anything to dislike.
What problems is the product solving and how is that benefiting you?
I can see our 3rd party vendors and issues that might arise, as well as issues my organization may have.
Security Scorecard Review
What do you like best about the product?
It gives comprehensive review about our key vendors, and also gives capability to look at our overall security posture.
What do you dislike about the product?
1. Suddenly too many false positives appear out of no where, and we end up cleaning the ips that are wrongly mapped
2. Whenever there are new ips found, customer should be given a choice to say Yes/No, before tagging them to customer score card.
2. Whenever there are new ips found, customer should be given a choice to say Yes/No, before tagging them to customer score card.
What problems is the product solving and how is that benefiting you?
It is helping us draw a security baseline across different vendors
It is also helping us to review, the security posture of our organization from external point of view
It is also helping us to review, the security posture of our organization from external point of view
Low cost, highly effective solution!
What do you like best about the product?
Security Scorecard is one of the most easy-to-use, intuitive pieces of software I have used in my 36-year working history. It is useful from the time you start using it. Great dashboard display, which then allows you to go deeper into findings and then, as an added bonus - it tells you how to remediate the problem. The software is so good that I have purchased it in the past 3 security roles I have had. I recommend it to security people I know, who have all been "wowed" by it. And did I mention Support? Support is fantastic!
What do you dislike about the product?
There isn't a lot I dislike about Security Scorecard. In fact...I can't think of one item that annoys me! Maybe IF it included some information gathered from the Dark Web about my company... yeah, that would make it an 11/10 instead of a 10/10 rating.
What problems is the product solving and how is that benefiting you?
Security Scorecard is showing me either 1- what I don't know (Patching Cadence, DNS Health etc.) or 2- what would take me hours/ days to gather and then more time to assess. With respect to my second point - it has reduced the likelihood of hiring a security analyst to locate, collect and analyse all the data that Security Scorecard does with the click of a button.
Good service, not the best experience
What do you like best about the product?
It has great customer service and a user-friendly interface.
What do you dislike about the product?
The lack of other clients/users represented in the system.
What problems is the product solving and how is that benefiting you?
Vendor management and some function of third-party risk management.
Great tool for cyber monitoring
What do you like best about the product?
Security Scorecard is a premier tool for cyber monitoring. The tool has great dashboards, metrics and follow-up capabilities. The customer service experience has been well too.
What do you dislike about the product?
The tool was not as user friendly as it competitors. Its for more tech heavy users. This tool isn't ideal for collaboration with other business units such as legal/contract mgmt.
What problems is the product solving and how is that benefiting you?
Security Scorecard was purchased to fill our gap in our third party risk management program. Our processes were manual and time intensive and this tool has helped automate the monitoring of our vendors.
A Good Service For Vendor Reviews
What do you like best about the product?
They provide a brief, in depth look at a company's external facing internet presence. They monitor and alert me to issues with my footprint, and they also provide a quick way for me to assess whether a vendor takes security seriously.
What do you dislike about the product?
They can be sticklers when they make a mistake. It can take multiple touch points to get them to remove an IP that isn't mine which they accidentally attributed to me.
What problems is the product solving and how is that benefiting you?
External vulnerability notifications and vendor management.
SecurityScorecard Review
What do you like best about the product?
Most of the functionalities are valuable. The atlas assessments are the part that I mostly like in this platform.
What do you dislike about the product?
Nothing special. This product is very good product for the banking related customers mostly.
What problems is the product solving and how is that benefiting you?
Most of the time handled with the application-related portfolio management and IT risk management kind of things on the securityscore card.
showing 31 - 40