Full-Time
Cybersecurity security-ratings platform with AI analytics
$150k - $200k/yr
No H1B Sponsorship
New York, NY, USA
Hybrid
One day per week on-site in NYC; hybrid work arrangement.
| , |
SecurityScorecard provides a comprehensive security ratings platform for a wide range of customers to manage cybersecurity risk. It uses AI-driven analytics to identify and prioritize threats, offering a unified view of threat and risk intelligence from an attacker’s perspective. The platform helps secure supply chains, manage third-party cyber risk, ensure regulatory compliance, and support cyber insurance and due diligence, including risk assessment for mergers and acquisitions. What sets it apart is its commitment to transparency—making its methodologies accessible to all and extending security ratings to any organization, not just select customers. Its goal is to create a safer world by providing clear, actionable risk information so organizations can reduce cyber risks and improve security across their networks.
Company Size
501-1,000
Company Stage
Series E
Total Funding
$292.2M
Headquarters
New York City, New York
Founded
2013
Help us improve and share your feedback! Did you find this helpful?
Health benefits
Education stipend
Unlimited PTO
Parental leave
401K
Stock options
Referral bonuses
Remote work available
Introducing SecurityScorecard AI Agents. Transform your vendor risk management with new SecurityScorecard AI Agents. Learn how to automate security questionnaire management, gain real-time threat insights, and accelerate remediation to stay ahead of emerging cyber threats. Third-Party Risk Management (TPRM) demands time that most teams do not have. Most security teams spend several hours of their day conducting manual tasks, navigating page-by-page through vendor profiles, chasing down score drops, and manually compiling remediation plans. These workflows slow your team and limit your ability to reduce risk. This isn't just exhausting; it's a strategic bottleneck. Every hour spent on a spreadsheet is an hour not spent on identifying and addressing critical vulnerabilities. With an increase in third-party attacks doubling over the past year it is now more important than ever for teams to catch critical vulnerabilities This release addresses those limitations. SecurityScorecard is pleased to announce the official release of 10 new SecurityScorecard AI Agents. These aren't just chatbots; these AI agents execute defined TPRM workflows without manual intervention. They are autonomous assistants designed to handle the manual grind of traditional TPRM workflows. They analyze vendor data, identify risks, and support remediation planning in seconds. This allows you to reclaim your time and focus on what matters most: strategy and resilience. Introducing 10 new AI Agents to accelerate your TPRM program Why manual Third-Party Risk Management slows security teams. Monitoring critical vendors in traditional TPRM programs often relies on reactive processes. You receive an alert, you log in, you investigate the cause, and you manually draft an email to the vendor. SecurityScorecard's AI Agents flip this script. They act as an extension of your team, executing complex workflows in seconds that used to take hours. You can identify and address risk before it escalates into a breach. How AI Agents automate Third-Party Risk Management workflows: SecurityScorecard Inc. has three categories of agents: Analysis and Monitoring Agents, Breach Analysis Agents, and Remediation Planning Agents. AI Agents for Analysis and Monitoring. Streamline your internal operations and make your data more portable with AI agents for data, reporting, and workflows. * Reporting Agent: Transform complex metrics into line charts or trend graphs. Track portfolio health over time and export results as CSVs or images for your next board deck. * Rule Builder Agent: Set up alert rules and monitoring for entire portfolios at once, replacing tedious manual configuration. * Monitoring Agent: Set up alert for score drops and breach events for proactively monitoring vendors * Questionnaire Gap Analysis Agent: In addition to sending questionnaires to vendors, you can leverage agents to analyze received responses to identify gaps and create follow-up requirements. AI Agents for Breach Analysis. Leverage Breach Analysis Agents for your vendors as well as fourth party vendors with specialized AI agents for malware, ransomware, and supply chain risk. * Downstream Breach Analyst (Automatic Vendor Detection): Gain an intuitive view of fourth-party risk. Understand how breaches at your vendors' vendors impact your security posture. * Malware & Ransomware Analyst: Conduct broad scans for infection events to identify high-risk areas before they escalate. AI Agents for Remediation Planning. Close the gap between finding a risk and fixing it with AI agents for vulnerability monitoring and remediation plans. * KEV Remediation Plan Agent: Quickly identify Known Exploited Vulnerabilities (KEVs) across your portfolio and draft vendor-facing emails for immediate outreach. * Score Drop Remediation Agent: Instantly explain the "why" behind score fluctuations and outline specific corrective actions. * Critical Vulnerability Agent: Scan your entire portfolio for general Common Vulnerabilities Exposures (CVEs) to prioritize your response. * Breach Remediation Plan Agent: Pinpoint breach events and build a step-by-step recovery and communication plan. How AI reduces vendor Review time and manual effort. Efficiency is essential for scaling TPRM as vendor ecosystems grow and as AI changes threat actors' calculus. By automating the repetitive parts of portfolio monitoring and vendor outreach, its AI agents are designed to save teams dozens of hours per month. * Manual Task: Reviewing over 100 vendors for new ransomware infections. (Estimated: 2-3 hours) * AI Agent Task with SecurityScorecard: "Show me which vendors in my 'Critical' portfolio have infection events from the last 30 days." (Estimated: 30 seconds) When you automate the "how," you can finally focus on the "why": You can shift from manual execution to measurable risk reduction. As one SecurityScorecard customer shared: "The reporting and rule builder agents are immediate opportunities for us. By using AI to filter out the noise, we can make our monitoring significantly more relevant to what we actually need to see." - Security Analyst at a major medical provider Data security, privacy, and AI governance. SecurityScorecard Inc. understand that data storage and privacy are important to its customers and SecurityScorecard Inc. take those needs seriously. * Agents are not trained on your input. SecurityScorecard Inc. use foundational third-party models. * Agents pull information available from the SecurityScorecard API within your subscription; their scope matches what you and other customers can manually extract. * Review SecurityScorecard's Artificial Intelligence Addendum here for details on the AI Features SecurityScorecard Inc. currently offer, data handling, your rights, and responsible AI governance. AI-generated outputs should be reviewed by qualified personnel before implementation and do not constitute professional advice. All AI actions require human approval. Use of AI Features is subject to its Terms of Service and Artificial Intelligence Addendum. Start automating Third-Party Risk Management today. You can now access these agents in the SecurityScorecard platform by selecting the purple sparkle in the bottom right corner or using the ChatSSC search bar at the top of the platform. Click on the purple sparkle icon in the bottom right corner to open the chat window and access the AI agents. You can also access the AI agents via the search bar. Stop checking boxes and start moving the needle. It's time to let the agents handle the manual effort so you can handle the strategy. Frequently asked questions. What are AI agents in Third-Party Risk Management? AI agents at SecurityScorecard automate tasks such as questionnaire analysis, rule-building, vendor monitoring, and remediation planning, reducing manual workload. How do AI agents improve vendor risk management? SecurityScorecard AI agents identify risks faster, automate reporting, and enable continuous monitoring across third- and fourth-party vendors. They also reduce the manual grind of TPRM. How do AI agents improve the accuracy and speed of security questionnaire management? The Questionnaire Gap Analysis Agent at SecurityScorecard significantly improves security questionnaire workflows by analyzing a questionnaire and identifying any issues in the responses. The AI force multiplier: scale your security team with Agents and automation. SecurityScorecard Inc. recently hosted a webinar to show its new AI agents - check it out below to see them in action!
SecurityScorecard has launched TITAN AI, an artificial intelligence-powered platform designed to automate third-party risk management. Announced at RSA Conference 2026, the system combines AI automation with threat intelligence to help organisations manage vendor and supply chain cyber risks. Built on SecurityScorecard's existing ratings platform, TITAN AI aims to reduce manual effort in vendor risk management, enabling teams to scale programmes without additional staff. The company claims the technology can help achieve up to 75% fewer supply chain breaches through continuous exposure identification and earlier remediation. The platform features 99.9% accurate risk attribution and creates a shared operational layer connecting enterprises and vendors for real-time collaboration on risk detection, assessment and remediation. TITAN AI replaces manual processes like spreadsheet management and assessment reviews with automated workflows.
SecurityScorecard, a global leader in third-party risk management, has appointed former Maryland Governor Larry Hogan to its advisory board. The move strengthens the company's position in helping public sector and critical infrastructure organisations manage cybersecurity risks. During his gubernatorial tenure, Hogan prioritised cybersecurity by establishing Maryland's first State Chief Information Security Officer role, launching the Maryland Information Sharing and Analysis Center, and convening the Annapolis Cybersecurity Summit. His "whole-of-state" approach made Maryland a national leader in coordinated cyber defence. SecurityScorecard provides continuous, threat-informed risk monitoring across vendor ecosystems. The company serves over 3,300 organisations, including 70% of the Fortune 100, and is recognised by the US Cybersecurity & Infrastructure Security Agency.
SecurityScorecard, a leader in third-party risk management, has reported triple-digit partner growth in 2025, with 160% year-over-year ARR growth across its channel programme and 126% increase in partner-led pipeline. The company now has over 600 partners worldwide, adding 35 new partners this year. The growth was driven by expansion of SecurityScorecard's SCORE Partner Programme and its MAX Service Delivery Partner Programme, which enables service providers to deliver managed third-party risk services. New MAX partners in 2025 include Uniqus Consultech, P3 Group, KPMG Canada and Crowe LLP, expanding coverage across Asia-Pacific, North America, Europe and the Middle East. SecurityScorecard also broadened its technology ecosystem, with MAX becoming available in the CrowdStrike Marketplace and new alliances with BlinkOps, AWS and WTW.
Aon partners with SecurityScorecard to widen cyber risk offering. Under the arrangement, SecurityScorecard's outside-in risk management tools will be made available alongside Aon's CyQu data platform. UK-based professional services provider Aon is collaborating with SecurityScorecard to extend the range of cyber risk services available to its clients. Under the arrangement, SecurityScorecard's outside-in risk management tools will be made available alongside Aon's CyQu platform, which the broker says provides actionable data to support decision-making. The combined package is designed to help organisations pinpoint publicly exposed domains and possible weaknesses, aiding preparation for cyber underwriting and supporting more data-driven assessments in the risk-transfer market. Aon cyber solutions global head Brent Rieth said: "By combining SecurityScorecard's external findings with the insights from CyQu and our consulting team, we are deepening visibility into clients' cyber risk posture, giving them the insights needed to make informed decisions in a dynamic insurance marketplace." Aon cited its 2025 Global Risk Management Survey, which found that cyber threats remain the top present and future concern for executives. It also noted that increased scrutiny from boards, regulators and shareholders is driving demand for stronger visibility and resilience planning. US tariffs are shifting - will you react or anticipate? Don't let policy changes catch you off guard. Stay proactive with real-time data and expert analysis. The company said its Cyber Solutions unit supports clients through proprietary platforms such as CyQu and the Cyber Risk Analyzer, together with its CyQu consulting team. Bringing these tools together with practitioner expertise is intended to give oragnisations a broader base for managing, mitigating and transferring cyber exposures. The partnership forms part of Aon's broader push to strengthen cyber risk evaluation and underwriting support worldwide. SecurityScorecard chief revenue officer Peter Jantzen added: "By collaborating with Aon, we are helping organisations move from point-in-time assessments to a more continuous, data-driven view of exposure that supports smarter risk and insurance decisions." Earlier this week, it reported net income attributable to shareholders of $1.7bn (£1.25bn) for the fourth quarter of 2025, up 136% from $716m a year earlier. Diluted earnings per share rose to $7.82 from $3.28 in the same period of 2024, while operating income increased 11% to $1.2bn. Last month, Aon also expanded its proprietary Data Centre Lifecycle Insurance Programme by $1bn, lifting total capacity to $2.5bn. The move came as investment accelerates in cloud computing, AI and digital infrastructure, alongside the growing scale and capital intensity of modern data centre projects.