Great alternative for Security Ratings
Use Cases and Deployment Scope
We used SecurityScorecard to have an overview and more insights about our public services such as web page and Internet facing applications.
I was very easy to set up, just give them your URLs & Public IP addresses and within a week we were getting results.
To keep track of issues, you can integrate your ticketing system to create new tickets.
You can also request further review if you think there's a false positive, which will affect your overall score.
About the overall score, you get to have a benchmark against similar companies, industry-size.
You're able to create portfolios to keep an eye on your vendors and get an overview about their scores.
One different feature, is the ability to create custom or use templates for Vendor questionnaires (such as PCI, ISO 27K, etc.) For this you'll have to but token, each token equals 1 questionnaire. The platform allows to keep track of requests (date sent, answered, etc.)
Pros
- Security Ratings
- Security Assessments
- Reporting Center
Cons
- Partner development
Most Important Features
- Security Ratings
Return on Investment
- Get insights about our external security posture
- Actionable tasks to solve
Other Software Used
BitSight Security Ratings, CyberGRX
