No more typing reviews! Try our Samantha, our new voice AI agent.

IBM OpenPages vs SecurityScorecard comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

IBM OpenPages
Average Rating
7.2
Reviews Sentiment
7.2
Number of Reviews
9
Ranking in other categories
GRC (5th), IT Governance (3rd)
SecurityScorecard
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
IT Vendor Risk Management (1st), AI Legal & Compliance (2nd), AI Procurement & Supply Chain (2nd)
 

Featured Reviews

Gabriele  Meneguzzi - PeerSpot reviewer
GRC Practice Leader at Stratos Analytics
Have improved operational control and simplified internal workflows through a clear user interface
The most useful features in IBM OpenPages are the workflow features and front-end. The workflow feature in IBM OpenPages is very flexible, easy to configure, and can help design every kind of process, while the front-end is very useful, clear, simple, and dynamic. The benefit of a centralized platform in risk management, such as IBM OpenPages, is that it allows sharing information and guarantees a central framework of risk and control. The dashboards in IBM OpenPages help with monitoring processes for different users and profiles, and we use the dashboard extensively to show the state of different processes to control them. IBM OpenPages integrates effectively with other tools and existing infrastructure for my customers as we integrate other tools, using APIs to match different information, though some other tools may better support integration. IBM offers Connect, an add-on for integration, but we do not use it, relying solely on API. The reporting tools in IBM OpenPages have very strong potential because they are linked with Cognos IBM, a business intelligence tool, allowing for very good and complex reports, though creating these reports requires skills in business intelligence to get the most out of IBM OpenPages.
AG
Application security engineer at a media company with 51-200 employees
Vendor risk monitoring has strengthened our security posture and reduced insurance costs
In terms of improvements, I feel SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high. Details on the technical mitigation would help my non-technical teams understand the security issues better. I think improvements could be made on the reporting side as well, such as the ability to download customizable reports. While SecurityScorecard offers various kinds of reports now, they are limited to predefined formats. Having the ability to choose specific fields for an automated report would be very helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Good in ORM and compliance, analytics, custom reporting, features for our board including risk management, and good support for Basel regulations."
"With OpenPages, the risks and controls are registered and monitored continuously."
"The content, reporting, and workflow features stand out as the most valuable aspects."
"Everything about IBM OpenPages is valuable, particularly when compared to other solutions in the market like MetricStream, from which we switched due to its feasibility, user-friendliness, and performance."
"The most valuable features are the workflow engine, calculations, and security rules."
"IBM OpenPages provides time savings in recording risk management components."
"IBM OpenPages saves time in my work as a developer."
"The ability to keep a record of internal incidents in the company, and also the monitoring of Key Indicators."
"The solution helps identify our environment's vulnerabilities."
"SecurityScorecard continuously scans just about every IP address out there, which means there is information available about virtually every company."
"Fortify Data offers attack surface capabilities that identify vulnerabilities, exposed ports, and dark web information."
"SecurityScorecard has positively impacted my organization and my customers by providing numerous benefits, as customers easily obtain the score, can determine what ports are open and many other things so that they can secure their DNS, applications, and networks effectively, and they have improved compliance and security with the help of SecurityScorecard."
"With SecurityScorecard, the most valuable feature is the ability to identify if third parties or vendors have digital threats that may impact our company. It also scans all internal domains and IPs to find vulnerabilities in the digital landscape. The continuous monitoring capabilities have been beneficial by providing ongoing assessments of potential risks."
"SecurityScorecard has impacted my organization positively as it was a surprise to notice that many of our customers follow us there, and the tool scans the web twice per day, so we can see how hackers and what they can see from our publicly available IPs."
"One of its most effective features for risk identification is its enterprise-ready automation for third-party risk measurements."
"The biggest benefit is visibility, allowing organizations to understand their risks, vulnerabilities, and potential threats."
 

Cons

"Pricing! It's very expensive just for the licenses."
"Some self-relationships are not available in OpenPages' relationship model."
"IBM needs to work on pricing for organizations with around 100 users, as the licensing model is not competitive enough for SMEs."
"The reporting tools in IBM OpenPages have very strong potential because they are linked with Cognos IBM, a business intelligence tool, allowing for very good and complex reports, though creating these reports requires skills in business intelligence to get the most out of IBM OpenPages."
"I believe there's room for improvement in establishing connections with external information."
"IBM OpenPages needs improvement in its UI. Currently, it is difficult to see the relationships (associations/parents) between all items unless you click on the item itself."
"It would be useful to have more out-of-the-box functionality, especially triggers and calculations."
"IBM OpenPages could improve by adding more conditions to workflows, as some existing conditions might not work and can produce errors."
"SecurityScorecard's technical team's response time is an area that my company expects to be made faster."
"The tool needs to have the ability to mitigate vulnerabilities with alternative solutions."
"The pricing of the product needs improvement in Brazil."
"They could improve the process with a questionnaire module for the product."
"There are areas for improvement in response times and overall support."
"The product can be improved by incorporating more data points and intelligence around dark web information and threat data."
"SecurityScorecard can be improved. As it currently stands, it does a good job monitoring public-facing devices and the internet and DNS."
"I realized that because my company was acquired by a bigger organization, SecurityScorecard started associating other portfolio company vulnerabilities to our score, which was not helpful because it was giving us wrong data and giving us vulnerabilities we did not have."
 

Pricing and Cost Advice

Information not available
"The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
"Even though it's competitive, they offer flexible pricing structures."
"The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total. UPDATE: they have a new 400$ a month tier for starters."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
18%
Outsourcing Company
12%
Manufacturing Company
9%
Comms Service Provider
9%
Manufacturing Company
10%
Financial Services Firm
9%
Outsourcing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise1
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise3
 

Questions from the Community

What needs improvement with IBM OpenPages?
There is nothing in particular that needs improvement in IBM OpenPages, although reporting could be improved to make it easier to create reports.
What is your primary use case for IBM OpenPages?
My customers' main use cases for IBM OpenPages include ICT risk, operational risk management, and regulatory and compliance management.
What advice do you have for others considering IBM OpenPages?
For those planning to use IBM OpenPages, I recommend defining exactly what you want and understanding how IBM OpenPages can help you before starting to use it. I rate IBM OpenPages a nine out of ten.
What is your experience regarding pricing and costs for SecurityScorecard?
I have seen a return on investment with SecurityScorecard as it is easy to use and has saved us some time, so we do not need to do the scans on our own.
What needs improvement with SecurityScorecard?
I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side a...
What is your primary use case for SecurityScorecard?
My main use case for SecurityScorecard is to keep an eye on our vulnerabilities and also monitor which companies follow us in the platform, and we keep track when our score drops so we can fix it. ...
 

Also Known As

OpenPages
No data available
 

Overview

 

Sample Customers

Nationwide, Process Innovation AG, OSRAM Licht AG, Dep‹sito Central de Valores (DCV), Delta Lloyd Group, Unum
TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial
Find out what your peers are saying about RSA, MetricStream, Diligent and others in GRC. Updated: October 2026.
921,523 professionals have used our research since 2012.