No more typing reviews! Try our Samantha, our new voice AI agent.

NAVEX Global vs SecurityScorecard comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NAVEX Global
Average Rating
9.0
Reviews Sentiment
7.9
Number of Reviews
10
Ranking in other categories
GRC (15th)
SecurityScorecard
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
IT Vendor Risk Management (1st), AI Legal & Compliance (2nd), AI Procurement & Supply Chain (2nd)
 

Featured Reviews

JT
-- at a performing arts with 201-500 employees
The streamlined process of getting policies out to all staff in a quick efficient manner has been most valuable.
Currently we have monthly competencies that the 2 Staff Development Departments would initiate by a manual paper process and have to track staff down for all 3 shifts. Since we have started placing these items on Policytech, we have had a much better compliance rate as the staff are able to do it and it automatically records responses and results. Staff either read a document or view a powerpoint and then have a survey to answer, they have to receive a passing grade and if they pass they then receive the competency for that specific training. What we would like to add would be to be able to have Templates for certificates as we have different types of programs that have specific required documentation on the certificates, currently the certificates are one size fits all and that doesn’t work for us. So we are running a weekly report and manually send staff certificates. Another area is tracking Writer, Reviewer, and Approver statuses.
AG
Application security engineer at a media company with 51-200 employees
Vendor risk monitoring has strengthened our security posture and reduced insurance costs
In terms of improvements, I feel SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high. Details on the technical mitigation would help my non-technical teams understand the security issues better. I think improvements could be made on the reporting side as well, such as the ability to download customizable reports. While SecurityScorecard offers various kinds of reports now, they are limited to predefined formats. Having the ability to choose specific fields for an automated report would be very helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"Technical support is excellent."
"PolicyTech has probably been the most reliable solution we have and it's been the most stable solution over the last eight years, compared to any other information technology solution we've had."
"The streamlined process of getting policies out to all staff in a quick efficient manner has been most valuable."
"The company is always timely, they always have good suggestions, and they always have quick fixes for me."
"Before choosing, there were four different options that I was looking at, and going through all the tutorials and talking with the salespeople really sold me on NAVEX Global because I thought they were the gold standard for that type of policy format."
"It has made all the policies available in one accessible location for people to use them."
"This solution gives an opportunity for anonymous hotline complaints."
"Worth every penny. Not a critical business process worth skimping on; its impact when fully introduced and utilized is incomparable."
"I rate the product's initial setup phase a nine on a scale of one to ten, where one is a difficult setup phase, and ten is an easy setup process."
"Fortify Data offers attack surface capabilities that identify vulnerabilities, exposed ports, and dark web information."
"With SecurityScorecard, the most valuable feature is the ability to identify if third parties or vendors have digital threats that may impact our company. It also scans all internal domains and IPs to find vulnerabilities in the digital landscape. The continuous monitoring capabilities have been beneficial by providing ongoing assessments of potential risks."
"The best features SecurityScorecard offers for me are mainly being able to properly position my organization's security posture because of the score that is provided."
"The solution helps identify our environment's vulnerabilities."
"With its automated approach, nothing is missed on the IPs your organization is related to."
"SecurityScorecard helps us identify potential vulnerabilities early, reduce third-party risk, and make more informed security decisions without relying only on questionnaires or self-reporting information."
"One of its most effective features for risk identification is its enterprise-ready automation for third-party risk measurements."
 

Cons

"The reporting functions are terrible."
"The one thing that I noticed was, it times out sometimes."
"What we would like to add would be to be able to have templates for certificates as we have different types of programs that have specific required documentation on the certificates, currently the certificates are one size fits all and that doesn’t work for us."
"Recent product update led to confusion."
"Truthfully, the hardest part is that there are some little setup things that need to be done before people can actually use PolicyTech."
"We had some problems in middle of July, when we stopped getting our email notifications."
"Uploading PDFs is more time consuming and you have to go in and out of multiple screens/functions."
"There is an area on the “New Case” screen that I have reported a while back that when we click the drop down box to select state, then onto select the city, the state selection selected is deselected, it’s selected again and the city is deselected but after a couple of selections with it only in that area it does maintain the selection."
"They could improve the process with a questionnaire module for the product."
"I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side about how the scanner operates and how it is sometimes allowed to do those scans."
"There are areas for improvement in response times and overall support."
"SecurityScorecard can be complex during setup, and I would recommend that anyone implementing it get help setting it up because it is not as straightforward as people might think."
"Regarding my experience with pricing, setup cost, and licensing for SecurityScorecard, since it does not require active deployment on our side being a SaaS-first company, I expected slightly lower pricing."
"There could be more information in regards to solving problems like hints on what specifically to look for."
"SecurityScorecard can be improved. As it currently stands, it does a good job monitoring public-facing devices and the internet and DNS."
"The tool needs to have the ability to mitigate vulnerabilities with alternative solutions."
 

Pricing and Cost Advice

Information not available
"The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
"The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total. UPDATE: they have a new 400$ a month tier for starters."
"Even though it's competitive, they offer flexible pricing structures."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Outsourcing Company
11%
Financial Services Firm
11%
Manufacturing Company
8%
Construction Company
8%
Manufacturing Company
10%
Financial Services Firm
9%
Outsourcing Company
8%
Computer Software Company
7%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise3
Large Enterprise4
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise3
 

Questions from the Community

Ask a question
Earn 20 points
What is your experience regarding pricing and costs for SecurityScorecard?
I have seen a return on investment with SecurityScorecard as it is easy to use and has saved us some time, so we do not need to do the scans on our own.
What needs improvement with SecurityScorecard?
I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side a...
What is your primary use case for SecurityScorecard?
My main use case for SecurityScorecard is to keep an eye on our vulnerabilities and also monitor which companies follow us in the platform, and we keep track when our score drops so we can fix it. ...
 

Overview

 

Sample Customers

Toyota, Delta, Cedars-Sinai, Coca-Cola, Equifax, Cisco, Yahoo!, Jamba Juice, Fairmont Hotels & Resorts, Auburn University, NEC, Fleet Laboratories, AVAYA, Del Taco, Valero, OCWEN, Samaritan Health Services, Levi Strauss & Co, Telus
TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial
Find out what your peers are saying about RSA, MetricStream, Diligent and others in GRC. Updated: October 2026.
921,523 professionals have used our research since 2012.