Agent Index by Heritage Services
Submit / Claim
Home / Agents / SecurityScorecard

SecurityScorecard

Vendor: SecurityScorecard · HQ: United States · Category: Risk · Security

Last verified · 4 sources · How we verify

Visit official site (opens in new tab) Claim this listing

Vendor? Get your “Listed on Agent Index” badge

What it does

SecurityScorecard scores organizations' security posture for third-party and supply-chain risk programs. Its TITAN AI platform (TITAN Watch, Assess and Secure) now runs as one TPRM workflow: AI-assisted vendor intake and tiering, a Review Agent for questionnaire responses, and a Response Agent that drafts and follows up on remediation requests, with configurable human approval.

Frameworks (vendor-stated)

SOC 2ISO 27001

Government authorizations

Registry records checked 2026-10-18. Scope “listing” means the certified product is this listing or the government boundary it already documents; “platform-only” means another product line is certified and the vendor does not state this agent is inside that boundary.

Program Product Status Scope Source
TX-RAMP SecurityScorecard Security Ratings · Provisional · TX1535552 Provisional Vendor platform; agent scope not stated Registry
GovRAMP Ratings Cloud Service · Ready · Moderate Ready Vendor platform; agent scope not stated Registry

Pricing (as published)

Not published

Tasks

vendor risksecurity ratingsquestionnaire automationremediation

Sources

  1. securityscorecard.com/ (primary)
  2. securityscorecard.com/blog/titan-ai-now-runs-third-party-risk-management-end-to-end/
  3. dir.texas.gov/resource-library-item/tx-ramp-certified-cloud-products
  4. govramp.org/program-participants

Last verified 18 Oct 2026. Framework tags indicate relevance, not certification; “vendor-claimed” items are as marketed by the vendor. Spotted an error? Submit a correction or email [email protected]. See our methodology.

Not legal or audit advice. Confirm current pricing, framework coverage and India-regulatory claims with the vendor before purchasing.

Next step: find an auditor

After you pick a tool, the usual next step is an independent audit. These are directory listings (Verified or registry-listed), not rankings or endorsements.

Auditors by framework

Existing directory filters for frameworks this listing tags, shown only where at least three Verified firms are listed. A tag is vendor-stated relevance, not a certification.

Narrow by region

This listing’s HQ country is United States. That is a starting point only — choose any published country page.

United States (suggested) · India · United Kingdom · Japan · Germany · Australia · Netherlands · Canada · Brazil · Singapore · Ireland · United Arab Emirates

Audit firms in the United States (195)

Send a request Get matched with verified auditors All verified audit firms

Send my request to up to 3 matches

Choose up to 3 listed tools and/or audit firms, or tick Match me and we will pick from the directory. We store the request for review. Nothing is sent to any firm from this form. Not a ranking.

Listings (up to 3)

0 of 3 selected

Framework(s) (select all that apply)

Next steps

Working aids from official sources and this directory. This is not a ranking.

Guides

Request a demo

We'll pass your request to the vendor later; no automatic emails. Nothing is sent to the vendor now.

Use-case comparisons

Compare SecurityScorecard with

Alternatives

  • LogicGate Risk Cloud — AI GRC platform (Risk Cloud) with GRC Agents that act under human supervision for third-party risk, AI governance, enterprise risk and business continuity. (shared tags: SOC 2, ISO 27001)
  • OneTrust — Privacy, GRC and responsible AI governance platform used by large organizations for consent, preference, third-party risk and AI oversight. (shared tags: SOC 2, ISO 27001)
  • UpGuard — Cyber risk and third-party risk management platform with published CRPM pricing page. (shared tags: SOC 2, ISO 27001)
  • 6clicks Hailey AI — Sovereign GRC AI engine that maps controls, finds gaps, drafts assessment responses and creates risks, issues and tasks inside the 6clicks Hub & Spoke platform. (shared tags: SOC 2, ISO 27001)
  • Akitra Andromeda AI compliance agents — AI-native GRC platform whose agents monitor controls, collect evidence, map controls, flag gaps, draft security-questionnaire responses and remediate gaps across 40+ frameworks, with a dedicated compliance expert per customer. (shared tags: SOC 2, ISO 27001)
  • Andesite Human-AI SOC (Azimuth for Government) — Agentic SOC platform with configurable agents for alert triage, enrichment, investigation and remediation under analyst oversight; its government offering is FedRAMP High authorized. (shared tags: SOC 2, ISO 27001)

See all SecurityScorecard alternatives →

FAQ (from this dataset)

What does SecurityScorecard do?

Third-party cyber risk platform with security ratings and TITAN AI agents running TPRM intake, assessment, monitoring and remediation.

How much does SecurityScorecard cost?

Not published

Where is SecurityScorecard headquartered?

United States

Which frameworks does SecurityScorecard support?

Frameworks (vendor-stated): SOC 2, ISO 27001. Framework tags indicate relevance, not certification.

What are alternatives to SecurityScorecard?

See the SecurityScorecard alternatives page for category-sharing listings in relevance order, not a ranking. SecurityScorecard alternatives.

Stay updated

We use your email only to send the newsletter. See our privacy policy.