Skip to content
ComplianceOfficer

Pricing · vendor security ratings

SecurityScorecard pricing and cost per plan, per slot and per add-on

SecurityScorecard costs $12,000 to $13,500 a year for 5 monitored vendors and $141,250 to $155,375 for 75, on the two price lists it keeps on AWS Marketplace. Recorded buyers pay a median of $23,619. The unit behind every quote is the slot, one fully monitored company, and the contract lets the slot count go up during the term but never down.

§ Live · Compliance scan

One free run. Nothing you pick is stored.

Frameworks you answer to

Fintech, US · what a scan returns

  • § 01 Written AML program with a named officer
  • § 02 KYC and customer due diligence
  • § 03 Sanctions screening lists Changed
  • § 04 PCI DSS v4.0 validation
§ 02

Two price lists, one product

SecurityScorecard pricing per plan on its two AWS Marketplace listings

SecurityScorecard's own pricing page shows packages and no figures. AWS Marketplace shows figures, twice. The vendor keeps a standard listing and a second one titled "Private Offer Only", with the same tier names and different prices. The private listing is 10 to 12.5 percent lower before anyone has negotiated.

All prices are for a 12-month contract. Business adds reporting and API access, and Enterprise adds onboarding and what the listing calls white-glove support. Both listings also carry a free tier for your own domain. The practical use of the second listing is simple: if your first quote for 5 slots is above $12,000, or above $141,250 for 75, you are being quoted over a price the vendor already publishes.

Notice the gap in the middle. Nothing is listed between 5 and 75 domains, which is where most programs sit. A buyer with 20 critical vendors is priced by a salesperson, and the two anchors say the rate should fall from about $2,400 a slot toward $1,900 as the count grows. The tier names on AWS also predate the current packaging (Watch, Assess, Secure and the managed MAX service), so ask which package an old tier maps to.

§ 03

The billing unit

SecurityScorecard cost per slot and why the slot count only goes up

The end user agreement (last updated May 26, 2023) defines a slot as "a unique top-level domain maintained in Customer's portfolio" that is "subject to change during a twelve (12) month period a maximum of 10 times". One slot is one company you can see in full. Three clauses then decide what the slot count does to your bill.

  • Swaps are rationed. Ten changes in twelve months. A team that rotates vendors through a small pool of slots to review each one quarterly will run out.
  • Overuse resets the limit. Go over, and you have 10 days after notice to reduce. If you do not, you pay for the excess and the higher number becomes your limit "for the remainder of the Subscription Term and thereafter".
  • No reductions mid-term. Section 5.2 says fees follow what you bought, not what you used, and that "quantities purchased cannot be decreased during the relevant Subscription Term".

So size the slot count from a tiered vendor list, not from the size of the vendor master file. The critical and high-risk tiers get slots. The long tail can sit in the unlimited partial monitoring add-on, which shows a letter grade and score without the detail.

§ 04 · The add-on price book

SecurityScorecard add-on prices from its public-sector price list

Two UK resellers filed SecurityScorecard price lists on the government's G-Cloud 15 framework in January 2026. They are the only place the add-ons carry a number. One of them is plainly the vendor's internal price book, with a column of notes to the sales team left in. Prices are in pounds unless marked, per 12-month term.

Line item List price What it covers
Platform licence1,000 per companyFull monitoring for each purchased company, shown in brackets on the list
Unlimited partial monitoring25,000Letter grade and score for any number of companies, no detail
Automatic Vendor Detection15,000 / 50,000 / 75,000Up to 100 slots, unlimited, and unlimited with Enhanced Illumination
HyperComply trust portal$19,575 / $37,800 / $66,150StartUp 10 users, Growth 25 users, Enterprise 50 users and 3 trust pages
Cyber risk quantification25,000Continuous tier for your own organization. One-off reports 2,375 each for the first 10, falling to 350
Managed vendor risk service295 / 625 / 1,250 per slotSilver, Gold, Platinum. Minimum 200 vendors, so 59,000 to 250,000 a year
Zero-day service45,000 to 125,000Up to 200 vendors at the low end, 1,001 to 2,500 at the top
Tabletop exercises25,000 to 55,000Executive, technical or combined. Board session adds 10,000
Onboarding1,000 onceReplaces the older JumpStart and White Glove packages

Two details are worth more than the numbers. The sales note on Enhanced Illumination says a discount on that line requires manager approval, which suggests discounts on the other lines do not. And the managed service is priced per slot with a 200-vendor floor, so it more than doubles a mid-size subscription before a single analyst hour is used. The filings are services 190105682643049 and 640315336701168.

§ 05

Recorded deals

How much SecurityScorecard costs in signed contracts

Vendr's buyer data puts the median SecurityScorecard contract at $23,619 a year, in a range of $12,420 to $135,395. Read that range against the list prices and it makes sense at once: the low end is the 5-slot Business tier, and the high end sits just under the 75-slot Enterprise tier. The median buys roughly 10 slots at the Business rate.

Federal award records add three public data points. The Commodity Futures Trading Commission paid $25,564.77 for a subscription year starting March 2023 and $25,642.48 for the year starting July 2024, a rise of 0.3 percent. The Transportation Security Administration ordered two years of licenses with a JumpStart package for $398,663.98 in April 2023. A Federal Aviation Administration order dated August 2026 is recorded at $427,956. All three went through resellers.

A flat renewal like the CFTC's is achievable. Nothing in the agreement caps an increase, though, so a cap has to be written into the order form.

§ 06

What you sign

SecurityScorecard contract terms that change the price after signature

SecurityScorecard publishes its end user agreement, along with a plain-language note explaining that it "does not provide convenience termination language because our pricing is based upon commitment". Five terms matter to a budget owner.

  1. 1. 60-day notice. Section 11.2 renews a subscription automatically for the same term or one year, whichever is shorter, unless notice is given at least 60 days before the end.
  2. 2. No exit for convenience. Payment obligations are non-cancelable. A refund of prepaid fees is owed only if you terminate for the vendor's uncured material breach.
  3. 3. Paid in advance. Fees are invoiced annually up front and due net 30. Paying late lets the vendor shorten payment terms on future renewals.
  4. 4. A ratchet on slots. Unremedied overuse raises the contractual limit for the rest of the term and afterwards, and purchased quantities cannot be decreased mid-term.
  5. 5. Data after exit. Once the agreement ends the vendor has no duty to keep your data and may delete it at its discretion. Export assessments and evidence before the last day.
  6. The price lock. The same note says multi-year terms exist for buyers who want a longer price lock. That is the lever: trade term length for a written cap on the renewal rate and a fixed per-slot price for added slots.
§ 07

The competitors

SecurityScorecard pricing against Bitsight, UpGuard and Panorays

Public figures only, read between 5 and 7 October 2026. Each vendor meters something different, which matters more than the headline price.

Vendor Public price Recorded contracts Billing unit Best for
SecurityScorecard $12,000 to $13,500 for 5 slots, $141,250 to $155,375 for 75 (AWS) Median $23,619 (range $12,420 to $135,395) Slot, one top-level domain, 10 changes a year Teams that want a free rating of their own domain and a managed service option
Bitsight $138,550 for an enterprise license with 20 benchmarking subscriptions (AWS) Median $23,640 (range $5,206 to $58,821), 16% average saving License plus monitored companies Large enterprises and agencies. Detail in our Bitsight pricing breakdown
UpGuard $1,750 a month billed annually for 50 vendors, $79 a month per extra vendor No recorded data Monitored vendor Mid-size programs that want a published price and 50 vendors for $21,000
Panorays 800 pounds per vendor for monitoring, 500 for assessment, under 100 vendors (UK list) Median $21,700 (range $12,000 to $34,900) Vendor, per evaluation type Deep questionnaire work on a short list. See Panorays pricing per vendor
ComplianceOfficer $149 a month, $298 for up to three people Published prices, no quote Flat plan, month to month Not a ratings tool. Tracks the rules that require vendor oversight and flags policy gaps when they change

The honest read: at 50 vendors UpGuard's published $21,000 is far below what 50 SecurityScorecard slots would cost at either listed rate, and SecurityScorecard wins when you only need full detail on a handful of critical suppliers plus grades on everyone else. If the questionnaire side matters more than the rating, compare OneTrust and Panorays on price.

§ 08

Before you buy

How to size a SecurityScorecard quote from the rules you answer to

Nobody buys vendor ratings for their own sake. A bank buys them because the 2023 interagency guidance on third-party relationships expects ongoing monitoring of critical activities. A New York licensee buys them for 23 NYCRR 500.11. An adviser buys them because Regulation S-P now requires oversight of service providers. Those rules say which vendors need continuous monitoring, and that list is your slot count.

1

Map the rules

Run the scan at the top of this page. It lists the vendor oversight, security and privacy rules on your register.

2

Tier the vendors

Slots for vendors a rule makes you monitor continuously. Partial monitoring, or nothing, for the rest.

3

Anchor low

Open with the private listing rates, $2,400 a slot at 5 and $1,883 at 75, and ask where your count falls between them.

4

Ask in writing

A renewal cap, a fixed price per added slot, more than 10 swaps a year, and the right to drop slots at renewal.

Get started for $149 a month Vendor risk management software Bank compliance software
§ 09

Questions buyers ask

How much does SecurityScorecard cost?

SecurityScorecard lists three paid tiers on AWS Marketplace: Pro at $4,800 a year for monitoring your own domain, Business at $12,000 to $13,500 a year for 5 vendor domains, and Enterprise at $141,250 to $155,375 a year for 75 domains. Buyers recorded on Vendr pay a median of $23,619 a year, in a range of $12,420 to $135,395. Figures read 7 October 2026.

Is SecurityScorecard free?

Partly. SecurityScorecard keeps a free account that shows the security rating for your own domain, with an issues overview, score alerts and questionnaire responses. Monitoring other companies in full detail is the paid product, and it is sold by slot. A free account answers the question a customer asks about you. It does not run a vendor risk program.

What is a slot in SecurityScorecard?

A slot is the billing unit. SecurityScorecard's end user agreement defines it as a unique top-level domain kept in your portfolio, and says a slot can be changed at most 10 times in a 12-month period. One slot is one fully monitored company. A 5-slot plan therefore covers 5 vendors at a time, with a limited number of swaps.

How much does SecurityScorecard cost per vendor?

On the AWS list prices, between $1,883 and $2,700 per monitored vendor a year. The Business tier works out to $2,400 or $2,700 per domain depending on the listing, and the Enterprise tier to $1,883 or $2,072 per domain at 75 domains. A UK public-sector price list shows the platform licence at 1,000 pounds per fully monitored company.

Does SecurityScorecard auto-renew?

Yes, unless the order form says otherwise. The end user agreement gives subscriptions a one-year initial term and renews them automatically for the same period or one year, whichever is shorter, unless either side gives notice at least 60 days before the term ends. Fees are non-cancelable, and quantities cannot be reduced during the term.

Is SecurityScorecard cheaper than Bitsight?

They land in the same place. The median recorded contract is $23,619 a year for SecurityScorecard and $23,640 for Bitsight, a $21 difference. Enterprise list prices on AWS are also close: $141,250 to $155,375 for SecurityScorecard against $138,550 for a Bitsight enterprise license. The decision usually turns on slot rules and add-ons, not the headline price.

Know which vendor oversight rules apply before you pay for slots

One register of the federal and state rules that apply to your firm, watched daily, with the policy update drafted when one moves. $149 a month for one owner, $298 for up to three people, month to month. Compare every plan on pricing.

Start for $149 a month Run the compliance scan
§ 90

Related registers

Buy the plan