SecurityScorecard

SecurityScorecard AI-powered, threat-informed third-party risk management. Continuous visibility and predictive intelligence to secure global supply chains.

SecurityScorecard leads the way in Supply Chain Detection and Response, empowering organizations to swiftly manage and mitigate critical third-party risks.

Aviation averages a B grade for cybersecurity. That sounds fine, until you learn a B-rated organization is 2.9x more lik...
10/17/2026

Aviation averages a B grade for cybersecurity. That sounds fine, until you learn a B-rated organization is 2.9x more likely to suffer a breach than an A-rated one.

SecurityScorecard’s research on 250 major aerospace and aviation companies found the real problem isn’t the airlines themselves.

It’s their vendors: aviation-specific software and IT suppliers scored the lowest of any group studied, dragging the sector’s average down.

✈️ Why a handful of low-scoring vendors are wrecking the curve for an entire industry

📋 Why annual questionnaires can’t catch a vendor exposure that appears mid-year

🏛️ Why TSA and FAA oversight are now asking for proof, not paperwork

👉 Read the full breakdown and see what continuous, threat-informed TPRM looks like for aviation: https://securityscorecard.com/blog/airlines-are-flying-blind-on-third-party-cyber-risk/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

“People who design systems, people who build systems, they usually believe that people will be well behaved,” our CEO an...
10/16/2026

“People who design systems, people who build systems, they usually believe that people will be well behaved,” our CEO and Co-Founder Dr. Aleksandr Yampolskiy told Cybersecurity Dive. “But hackers are not well behaved.”

Days after the French supermarket refrigeration attacks, Cybersecurity Dive reports that thousands of controllers remain exposed globally.

SecurityScorecard’s own investigation found more than 5,200 StoreView instances visible across more than 4,600 public IP addresses, a wider footprint than any single headline captured.

👉 Read the full Cybersecurity Dive coverage: https://www.cybersecuritydive.com/news/thousands-refrigerator-devices-exposed-french-cyberattack/833117/

10/16/2026

A doctor checks your blood pressure. Your car has a speedometer. Buy a financial instrument, and you get a credit rating from S&P or Moody’s. What about for cybersecurity?

Our CEO and Co-Founder Dr. Aleksandr Yampolskiy explains how he pioneered security ratings, the idea behind SecurityScorecard on The Vlad Kachur Show: a security score for any company, so you can actually see the risk before you do business with them.

📺 Watch the full episode: https://www.youtube.com/watch?v=3OYUrYq9LOE

We’re proud to be participating in TPRA’s October 2026 Virtual Demo Day, an exclusive event for TPRM professionals to ex...
10/15/2026

We’re proud to be participating in TPRA’s October 2026 Virtual Demo Day, an exclusive event for TPRM professionals to explore innovative tools and services in third-party risk management.

Join Michelle Koestani, Director, Solutions Architects at SecurityScorecard for a 25-minute live demo, where she’ll showcase how TITAN AI helps TPRM teams move from periodic assessments to continuous, threat-informed risk management.

Her session is at 12:00 PM CT.

🔍 See how continuous monitoring surfaces vendor risk as it emerges

⚙️ Learn how AI agents automate manual questionnaire work

🎯 Get a clear view of your entire vendor ecosystem, not just your top-tier vendors

📅 Wednesday, October 21, 2026 | Starting at 9:00 AM CT
👉 Register here: https://www.tprassociation.org/demo-days

A 200-question spreadsheet sent to every vendor regardless of risk level isn’t enough to stay ahead of third-party cyber...
10/15/2026

A 200-question spreadsheet sent to every vendor regardless of risk level isn’t enough to stay ahead of third-party cyber risk.

SecurityScorecard’s new eBook breaks down why legacy TPRM tools can’t keep pace anymore: biannual assessment cycles, massive questionnaires, and manual evidence review create six-week delays while third-party involvement in breaches has climbed from 30% to 48% year-over-year.

📋 Why checkbox-driven assessment cycles fail to catch changing threats

⏱️ The hidden cost of questionnaire fatigue: delayed assessments and disconnected tools

🤖 How AI-driven automation and continuous monitoring close the visibility gap

👉 Get the eBook and see what it takes to modernize your vendor risk workflow to match the pace of real threats: https://securityscorecard.com/resources/ebook/ai-powered-tprm-an-answer-to-endless-questionnaires/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

Takedowns once cost attackers weeks of rebuilding. Now they only cost minutes.Richard Hummel and Gilad Friedenreich Maiz...
10/15/2026

Takedowns once cost attackers weeks of rebuilding. Now they only cost minutes.

Richard Hummel and Gilad Friedenreich Maizles broke down how SecurityScorecard’s STRIKE team uncovered CanOworms, a 633-server proxy fleet for rent, and why law enforcement takedowns rarely stick against infrastructure like this.

One single IP can host 10,000 domains, leased for as little as three hours. When attackers lose infrastructure, underground LLMs can rebuild it automatically in minutes.

🔍 Why tracking TCP flag anomalies and TLS fingerprints beats chasing IP reputation
🔄 Why one open-source tip from a partner led researchers to 633 servers
🛡️ The specific actions defenders should prioritize right now

👉 Read the full recap: https://securityscorecard.com/blog/canoworms-how-to-evict-hackers-for-rent-infrastructure/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

An “F”-rated company is 13.8x more likely to suffer a breach than an “A”-rated one. That’s not a guess. That’s validated...
10/14/2026

An “F”-rated company is 13.8x more likely to suffer a breach than an “A”-rated one. That’s not a guess. That’s validated correlation.

This Cybersecurity Awareness Month, SecurityScorecard’s latest blog breaks down how security ratings actually work, and why most companies’ confidence in their own visibility doesn’t hold up under scrutiny.

🔍 95% attribution accuracy, independently verified by Online Business Systems
⚡ A 0.0023% refute rate, with most corrections resolved within minutes
🆓 Free, unlimited access to correct your own score, whether you’re a customer or not

👉 Read the full blog and see how ratings translate into resolved risk, not just a number to report: https://securityscorecard.com/blog/how-security-ratings-turn-supply-chain-risk-into-resolved-risk/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

A supermarket opens Monday morning to freezers full of food that can no longer be sold. The power is on. The equipment i...
10/14/2026

A supermarket opens Monday morning to freezers full of food that can no longer be sold. The power is on. The equipment is intact. Someone just changed the instructions.

That’s what happened across roughly 700 French supermarkets after attacks on refrigeration controllers raised defrost settings and triggered reported fires.

Our CEO and Co-Founder Dr. Aleksandr Yampolskiy and VP of Threat Intelligence Richard Hummel used Driftnet to investigate the broader exposure, finding 5,282 StoreView observations across 4,642 public IPs in 75 countries.

🔍 Why a single page-title search missed most of the exposed surface entirely

🏭 Why an exposed HMI is a route toward the physical process, not just a web login

🤝 Why the contractor managing the unit may matter more than the retailer who owns it

👉 Read the full investigation: https://securityscorecard.com/blog/hackers-turned-supermarket-refrigerators-into-heaters/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

“I’ve learned to lean in with AI.”Amanda Smith, VP of Alliances & Channels at SecurityScorecard, says working at an AI-f...
10/14/2026

“I’ve learned to lean in with AI.”

Amanda Smith, VP of Alliances & Channels at SecurityScorecard, says working at an AI-first company changed how she approaches her job entirely.

“SecurityScorecard is such an AI-first company, and it’s really focused on creating productivity triggers and making sure that AI is really complementing the work that you do,” Amanda said. “I’ve been able to learn how to use AI daily to make my prior manual administrative work a lot easier.”

👉 Read Amanda’s full Scorecarder Spotlight for more on what she's built with partnerships at SecurityScorecard, what forward deployed engineers mean for the future of channel sales, and why she tells her younger self to stop being afraid to just make a decision: https://securityscorecard.com/blog/scorecarder-spotlight-amanda-smith/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

10/13/2026

Most TPRM workflows live across a half dozen tools: one for monitoring, another for questionnaires, a third for remediation tracking, a fourth for reporting.

This Demo Tuesday installment shows what changes when TITAN AI brings the entire workflow into a single platform, from the moment a vendor risk signal appears to the final report your leadership actually reads.

📺 Watch the full workflow below

👉 See how TITAN AI eliminates the tool-switching that slows down vendor risk response: https://securityscorecard.com/resources/?resource_tag=demo-tuesdays&utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook

Address

1140 Avenue Of The Americas/19th Floor
New York, NY
10036

Opening Hours

Monday 8:30am - 7pm
Tuesday 8:30am - 7pm
Wednesday 8:30am - 7pm
Thursday 8:30am - 7pm
Friday 8:30am - 7pm

Telephone

(800) 682-1707

Website

Alerts

Be the first to know and let us send you an email when SecurityScorecard posts news and promotions. Your email address will not be used for any other purpose, and you can unsubscribe at any time.

Contact The Business

Send a message to SecurityScorecard:

Shortcuts

Share

Category