SecurityScorecard, LLC: SecurityScorecard Security Ratings

SecurityScorecard Security Ratings monitors the security posture of millions of companies by calculating a risk score derived from publicly available data. Companies are assigned A-F ratings across risk factors including domain name system (DNS) health, internet protocol (IP) reputation, web application security, network security, leaked information, hacker chatter, endpoint security, and patching cadence. This data is provided to customers via the Security Ratings web application. Customers use the Security Ratings web application to review security ratings and detailed security reports. Users access Security Ratings through a standard web browser and leverage identity federation for authentication. Within the application, users search for companies of interest and review security reports developed by SecurityScorecard. These ratings and reports allow customers to evaluate the cybersecurity risk for companies of interest using data-driven, objective, and continuously evolving metrics that provide visibility into information security control weaknesses as well as potential vulnerabilities throughout the supply chain ecosystem. Users can also create "portfolios" to group together companies of interest and easily compare vendors to help make procurement decisions, evaluate acquisition targets, conduct industry benchmarking, and more. Additional capabilities and data points (collected from publicly available data sources) in the Security Ratings web application include: • IP attribution to company domain(s) • Security vulnerability monitoring by company and security factors • Security risk benchmarking and scoring by company and industry • Alerts for changes in risk scores • Executive and detailed company scorecard reports • Workflow for collaboration and remediation with monitored suppliers