No more typing reviews! Try our Samantha, our new voice AI agent.

Scytale vs SecurityScorecard comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Scytale
Ranking in IT Vendor Risk Management
19th
Ranking in AI Legal & Compliance
10th
Average Rating
1.0
Reviews Sentiment
2.4
Number of Reviews
1
Ranking in other categories
GRC (28th)
SecurityScorecard
Ranking in IT Vendor Risk Management
1st
Ranking in AI Legal & Compliance
2nd
Average Rating
8.2
Reviews Sentiment
6.5
Number of Reviews
13
Ranking in other categories
AI Procurement & Supply Chain (3rd)
 

Mindshare comparison

As of May 2026, in the IT Vendor Risk Management category, the mindshare of Scytale is 1.7%. The mindshare of SecurityScorecard is 6.1%, down from 10.9% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Vendor Risk Management Mindshare Distribution
ProductMindshare (%)
SecurityScorecard6.1%
Scytale1.7%
Other92.2%
IT Vendor Risk Management
 

Featured Reviews

reviewer2814822 - PeerSpot reviewer
CEO at a tech vendor with 11-50 employees
Sudden access suspension has disrupted compliance work and raises serious trust concerns
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a contract to us in full knowledge of what we do as a business. Compliance is a very broad word; we provide compliance into nonprofits, housing associations, markets that these guys do not serve. Somebody inside Scytale likely thought, "Oh my God, these guys must be competitive, so let's just cut them off." I'm assuming that's what happened, but there was no explanation, nothing. Scytale did not help me streamline my compliance processes. It didn't really identify gaps. There was no gap analysis in there that we could see. I didn't really get that far to use the effectiveness of Scytale's real-time insights in identifying potential compliance issues. All my experiences with Scytale have been negative. We haven't used the automated evidence collection of Scytale. Scytale has not helped me allocate resources more efficiently for compliance; it's been the opposite experience. We have put six months of effort into looking at the controls on 27001, talking about auditors, getting audit-ready, and so forth. But we've invested significant time, which has now been a complete waste of time. Scytale is not only unreliable, considering they can suspend access without any notice or formal reason, but this lack of stability results in serious concerns about their dependability as a partner. If they can do that without explanation, my fear is that even if they switch it on again, who's to know in three months' time that the same thing couldn't happen again?
AG
Application security engineer at a media company with 51-200 employees
Vendor risk monitoring has strengthened our security posture and reduced insurance costs
In terms of improvements, I feel SecurityScorecard could enhance some of the integrations based on AI platforms, where I could receive suggestions from the AI tool regarding why SecurityScorecard rates specific issues as critical or high. Details on the technical mitigation would help my non-technical teams understand the security issues better. I think improvements could be made on the reporting side as well, such as the ability to download customizable reports. While SecurityScorecard offers various kinds of reports now, they are limited to predefined formats. Having the ability to choose specific fields for an automated report would be very helpful.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The processes I participated in during the setup of Scytale were straightforward; it was acceptable and fine."
"Since we onboarded SecurityScorecard, our organization has been positively impacted by significantly improving our security maturity."
"The initial setup takes just a couple of days and doesn't require any installation."
"SecurityScorecard has impacted my organization positively as it was a surprise to notice that many of our customers follow us there, and the tool scans the web twice per day, so we can see how hackers and what they can see from our publicly available IPs."
"I rate the product's initial setup phase a nine on a scale of one to ten, where one is a difficult setup phase, and ten is an easy setup process."
"With SecurityScorecard, the most valuable feature is the ability to identify if third parties or vendors have digital threats that may impact our company. It also scans all internal domains and IPs to find vulnerabilities in the digital landscape. The continuous monitoring capabilities have been beneficial by providing ongoing assessments of potential risks."
"The biggest benefit is visibility, allowing organizations to understand their risks, vulnerabilities, and potential threats."
"With its automated approach, nothing is missed on the IPs your organization is related to."
"Fortify Data offers attack surface capabilities that identify vulnerabilities, exposed ports, and dark web information."
 

Cons

"Scytale is not reliable at all; not stable. You would be unwise to put a mission-critical function like ISO 27001 on Scytale."
"There could be more information in regards to solving problems like hints on what specifically to look for."
"The product can be improved by incorporating more data points and intelligence around dark web information and threat data."
"There are areas for improvement in response times and overall support."
"Regarding my experience with pricing, setup cost, and licensing for SecurityScorecard, since it does not require active deployment on our side being a SaaS-first company, I expected slightly lower pricing."
"Some wanted a different solution."
"SecurityScorecard's technical team's response time is an area that my company expects to be made faster."
"The pricing of the product needs improvement in Brazil."
"The tool needs to have the ability to mitigate vulnerabilities with alternative solutions."
 

Pricing and Cost Advice

Information not available
"The pricing of SecurityScorecard is fair. I would rate it a seven. It's a bit more on the expensive side. In Brazil, for example, making a payment to the vendor involves wire transfers and high taxes, making it more expensive. Selling SecurityScorecard or any American vendor's product in the United States is very different from selling in South America or Brazil."
"Even though it's competitive, they offer flexible pricing structures."
"The pricing could be split into a lower-paid tier for smaller organizations and another higher tier for others with a more security-focused outlook. $1000 per month is more than some companies pay for their internet connections in total. UPDATE: they have a new 400$ a month tier for starters."
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
894,807 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
No data available
Financial Services Firm
11%
Manufacturing Company
11%
Computer Software Company
8%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business7
Midsize Enterprise5
Large Enterprise3
 

Questions from the Community

What needs improvement with Scytale?
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a c...
What is your primary use case for Scytale?
My usual use case for Scytale is for ISO 27001 compliance.
What advice do you have for others considering Scytale?
We're going to sue Scytale, and we're going to sue Amazon as well because they're technically the people we're paying. My feedback on Scytale is that it's terrible. Currently, it's actually useless...
What is your experience regarding pricing and costs for SecurityScorecard?
I have seen a return on investment with SecurityScorecard as it is easy to use and has saved us some time, so we do not need to do the scans on our own.
What needs improvement with SecurityScorecard?
I suggest that SecurityScorecard could be improved by giving a little more specifics on how the scanning works and how you are able to detect those IPs, including more details on the privacy side a...
What is your primary use case for SecurityScorecard?
My main use case for SecurityScorecard is to keep an eye on our vulnerabilities and also monitor which companies follow us in the platform, and we keep track when our score drops so we can fix it. ...
 

Comparisons

 

Overview

 

Sample Customers

Deel, Guesty, Berlitz, AXS Guard, vSure, KOR, Trial X, Tune Insight, Agora, Leen, Upsolver. For a full list of customers and testimonials, please visit: https://scytale.ai/customers/
TriNet, USAA, Zurich, Gilt Groupe, McGraw Hill Financial
Find out what your peers are saying about SecurityScorecard, OneTrust, BitSight and others in IT Vendor Risk Management. Updated: May 2026.
894,807 professionals have used our research since 2012.