Try our new research platform with insights from 80,000+ expert users

RiskIQ Illuminate vs SecurityScorecard comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

RiskIQ Illuminate
Average Rating
0.0
Number of Reviews
1
Ranking in other categories
Attack Surface Management (ASM) (30th)
SecurityScorecard
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
IT Vendor Risk Management (1st), AI Legal & Compliance (2nd), AI Procurement & Supply Chain (2nd)
 

Mindshare comparison

While both are Security Software solutions, they serve different purposes. RiskIQ Illuminate is designed for Attack Surface Management (ASM) and holds a mindshare of 1.0%, up 0.2% compared to last year.
SecurityScorecard, on the other hand, focuses on IT Vendor Risk Management, holds 7.5% mindshare, down 11.4% since last year.
Attack Surface Management (ASM) Mindshare Distribution
ProductMindshare (%)
RiskIQ Illuminate1.0%
CrowdStrike Falcon7.2%
Darktrace4.9%
Other86.9%
Attack Surface Management (ASM)
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
SecurityScorecard7.5%
OneTrust GRC8.7%
Bitsight6.9%
Other76.9%
IT Vendor Risk Management
 

Featured Reviews

SimonClark - PeerSpot reviewer
Cyber Security Advisor - Director at Fort Net UK
Able to discover unpatched servers, offers good stability, and scales very well
A low-cost service to evaluate the risk score of a supply chain would be very helpful. This could be useful for insurance companies offering cyber insurance to enterprise customers, providing the insurer with a valuable way to unobtrusively, quickly, and frequently assess their customers and apply appropriate premiums for the level of risk. This would also be useful for enterprises. They could, for example, assess companies prior to a merger or acquisition. What would also be useful for any enterprise would be if their supply chain has some kind of direct digital access to parts of their network.
AG
Application security engineer at a media company with 51-200 employees
Vendor risk monitoring has strengthened our security posture and reduced insurance costs
In terms of improvements, I feel SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high. Details on the technical mitigation would help my non-technical teams understand the security issues better. I think improvements could be made on the reporting side as well, such as the ability to download customizable reports. While SecurityScorecard offers various kinds of reports now, they are limited to predefined formats. Having the ability to choose specific fields for an automated report would be very helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The solution is stable with 12 years of established historical data."
"The best features SecurityScorecard offers for me are mainly being able to properly position my organization's security posture because of the score that is provided."
"SecurityScorecard continuously scans just about every IP address out there, which means there is information available about virtually every company."
"SecurityScorecard has positively impacted my organization and my customers by providing numerous benefits, as customers easily obtain the score, can determine what ports are open and many other things so that they can secure their DNS, applications, and networks effectively, and they have improved compliance and security with the help of SecurityScorecard."
"With its automated approach, nothing is missed on the IPs your organization is related to."
"The solution helps identify our environment's vulnerabilities."
"One of its most effective features for risk identification is its enterprise-ready automation for third-party risk measurements."
"The initial setup takes just a couple of days and doesn't require any installation."
"SecurityScorecard helps us identify potential vulnerabilities early, reduce third-party risk, and make more informed security decisions without relying only on questionnaires or self-reporting information."
 

Cons

"A low-cost service to evaluate the risk score of a supply chain would be very helpful."
"The pricing of the product needs improvement in Brazil."
"Regarding my experience with pricing, setup cost, and licensing for SecurityScorecard, since it does not require active deployment on our side being a SaaS-first company, I expected slightly lower pricing."
"I realized that because my company was acquired by a bigger organization, SecurityScorecard started associating other portfolio company vulnerabilities to our score, which was not helpful because it was giving us wrong data and giving us vulnerabilities we did not have."
"SecurityScorecard can be improved. As it currently stands, it does a good job monitoring public-facing devices and the internet and DNS."
"SecurityScorecard's technical team's response time is an area that my company expects to be made faster."
"They could improve the process with a questionnaire module for the product."
"The tool needs to have the ability to mitigate vulnerabilities with alternative solutions."
"The product can be improved by incorporating more data points and intelligence around dark web information and threat data."
 

Pricing and Cost Advice

Information not available
"The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total. UPDATE: they have a new 400$ a month tier for starters."
"Even though it's competitive, they offer flexible pricing structures."
"The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
report
Use our free recommendation engine to learn which Attack Surface Management (ASM) solutions are best for your needs.
884,933 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
12%
Manufacturing Company
11%
Computer Software Company
9%
Retailer
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise3
 

Questions from the Community

Ask a question
Earn 20 points
What do you like most about SecurityScorecard?
One of its most effective features for risk identification is its enterprise-ready automation for third-party risk measurements.
What is your experience regarding pricing and costs for SecurityScorecard?
I have seen a return on investment with SecurityScorecard as it is easy to use and has saved us some time, so we do not need to do the scans on our own.
What needs improvement with SecurityScorecard?
I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side a...
 

Also Known As

RiskIQ Digital Threat Management
No data available
 

Overview

 

Sample Customers

DocuSign, Outbrain, The Economist Group, Rackspace, The Citizen Lab
TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial
Find out what your peers are saying about CrowdStrike, Qualys, TrendAI and others in Attack Surface Management (ASM). Updated: March 2026.
884,933 professionals have used our research since 2012.