About Us

Our Mission

To make the world a safer place by transforming the way companies understand, improve and communicate cybersecurity risk to their boards, employees and vendors

SecurityScorecard is the global leader in cybersecurity ratings and the only service with over a million companies continuously rated. SecurityScorecard’s patented rating technology is used by over 1,000 organizations for self-monitoring, third-party risk management, board reporting and cyber insurance underwriting; making all organizations more resilient by allowing them to easily find and fix cybersecurity risks across their externally facing digital footprint. SecurityScorecard is the only provider of instant risk ratings that automatically map to vendor cybersecurity questionnaire responses - providing a true 360 degree view of risk.

Learn about our History

Our Awards

Vendor Risk Management

Best Cybersecurity Company

Fastest Growing Cybersecurity Company

Cybersecurity Marketer of the Year: Susanne Gurman

Best Product: Security Ratings

Hot Company: Risk Management

Editor's Choice in Third Party Risk Management

Most Innovative Risk Ratings Platform

Leader: Third Party Risk Management (TPRM)

Best Product: Risk Management

Hot Company: Security Company of the Year

Our People

Scorecarders believe the best innovations, solutions, and foresight come from our unique perspectives. We are guided by our commitment to learn, be flexible, and adapt in pursuit of innovative defense solutions. By promoting diversity, we cultivate empathy and innovation enabling us to provide essential insights to our customers. We are #onescorecard

Innovation is what sets us apart.

We promote a company culture that is driven by innovation that enables us to execute on our vision and deliver solutions to our customers that reduce risk, improve security, and provide measurable business value.

Why we built SecurityScorecard

Dr. Aleksandr Yampolskiy

Sam Kassoumeh

Sam and I were assessing the security of a large financial provider that offered a fraud prevention product for vetting all e-commerce transactions. We spent weeks talking to them and reviewing their daunting 30-page security questionnaire. At the same time, our Financial Controller was standing outside my office every day impatiently asking, "Why are we not expediting the security assessment? We need this product YESTERDAY!"

Our security instincts told us that despite the pressure to sign a contract for a partnership we desperately needed, the impatience of the deal would not cloud a deeper vetting of the partner. The evaluation we needed could not be obtained by simply working on the questionnaire and waiting for the vendor to answer the deeper security questions they were avoiding.

We continued working on the assessment, losing money in e-commerce fraud that the solution could have prevented. We started poking around using passive security research methods and discovered signs on the Internet that the company was compromised. We could have lost our data if we rushed the deal. After discovering the vendor’s security issues, we incorporated specific legal provisions into the contract to protect the company.

It was during this experience we identified the opportunity for SecurityScorecard.

We thought, "What if we could engineer a way that would allow one company a deep view into another company’s security posture that would be instant, accurate, and independently verifiable without having to ask permission or wait around for weeks for answers to important security questions?"

We strongly believed there were non-intrusive ways to obtain a clearer picture of the security health of a company, which could really help speed up and complement the vetting process. This experience was an epiphany for us.

We Are SecurityScorecard.