Consistent, data-driven ratings

The Network Security module checks public datasets for evidence of high risk or insecure open ports within the organization network.

The DNS Health module measures the health and configuration of an organization's DNS settings. It validates that no malicious events occurred in the passive DNS history of the organization's network.

The Patching Cadence module analyzes how quickly an organization installs security updates to measure vulnerability risk mitigation practices.

The Endpoint Security module tracks identification points that are extracted from metadata related to the operating system, web browser, and related active plugins.

The IP Reputation and Malware Exposure module makes use of the SecurityScorecard sinkhole infrastructure as well as a blend of OSINT malware feeds and third-party threat intelligence data-sharing partnerships.

The Application Security module uses incoming threat intelligence from known exploitable conditions identified via: whitehat CVE databases, blackhat exploit databases, and sensitive findings indexed by major search engines.

The Cubit Score module measures a variety of security issues that an organization might have. For example, we check public threat intelligence databases for IP addresses that have been flagged.

The Hacker Chatter module is an automated collection and aggregation system for the analysis of multiple streams of underground hacker chatter.

This Information Leak module makes use of chatter monitoring and deep web monitoring capabilities to identify compromised credentials being circulated by hackers.

The Social Engineering Module is used to determine the potential susceptibility of an organization to a targeted social engineering attack.

Continuously monitor the threat landscape, scanning billions of signals each week to help you identify hidden risks so you can take action.

Enable collaboration between business units, vendor-risk managers (VRMs), and vendors. Shared security goals lead to a safer digital ecosystem for all.

SecurityScorecard integrates with dozens of Marketplace partners, turning findings into automated workflows within your tech stack.

Deliver powerful, automated reports in minutes. Communicate progress to company executives on internal risk management initiatives, or highlight third-party risk trends.