Specifiction
For vendors
AdvertiseTop spots, featured rows, home sponsor Get listedAdd a product we don't cover yet Claim a listingFree: verify the domain, then correct your page Vendor dashboardNumbers, orders and placements
List your tool
Vendor dashboard
Tech riderRev. 1 Oct 2026

ThreatWatch

Ch 047.2of 29 Security Ratings Software
  1. 1Runs onWeb
  2. 2CostsFree plan · free trial
  3. 3Vendor monitoringYes
  4. 4Attack surface coveragefull attack surface
  5. 5Change alertsYes
  6. 6API accessYes
  7. 7Risk frameworksISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, NIST CSF 2.0, NIST 800-53, CSA CCM, DORA, NIS2, ISO 42001, EU AI Act, EU Cyber Resilience Act
7 lines stated Written from the maker's own pages: threat.watch
Visit site Alternatives
The ThreatWatch homepage

Overview

ThreatWatch is ranked #4 of 29 in security ratings software on Specifiction. It runs on Web. There is a free plan. A free trial is offered.

ThreatWatch plans and pricing

All plans
Free Free Your own organisation · Weekly rescans · No breach or dark-web intel · No OSINT enrichment · No deep attack-surface scan · No AI agents · No SSO · No API · Community support threat.watch · 1 Oct 2026
Starter Not published Small portfolio · Rescans every 2 days · Breach and dark-web intel · API access · Email support threat.watch · 1 Oct 2026
Enterprise Not published Enterprise programme · Rescans every 6 hours · Deep attack-surface scan · AI agents · SAML/OIDC SSO · API access · Custom branding · Dedicated support threat.watch · 1 Oct 2026
Professional Not published Growing portfolio · Rescans every 12 hours · Breach and dark-web intel · OSINT enrichment · AI Co-Pilot · Ask AI · SAML/OIDC SSO · API access · Priority support threat.watch · 1 Oct 2026
Enterprise Plus Not published Multi-entity programme · Rescans every 3 hours · Deep attack-surface scan · AI agents · SAML/OIDC SSO · API access · White-label branding · Dedicated support and account manager threat.watch · 1 Oct 2026

Compared on security ratings software

Free plan
Yesthreat.watch
Vendor monitoring
Yesthreat.watch
Attack surface coverage
full attack surfacethreat.watch
Change alerts
Yesthreat.watch
API access
Yesthreat.watch
Risk frameworks
ISO 27001, SOC 2, PCI DSS, HIPAA, GDPR, NIST CSF 2.0, NIST 800-53, CSA CCM, DORA, NIS2, ISO 42001, EU AI Act, EU Cyber Resilience Actthreat.watch

Facts

Product
ThreatWatch is a third-party risk intelligence platform for continuously monitoring vendors.threat.watch · 1 Oct 2026
Monitoring
It monitors vendor breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps.threat.watch · 1 Oct 2026
Risk grade
Each vendor receives an A-to-F grade built from threat intelligence, security scanning, questionnaire responses, and certifications.threat.watch · 1 Oct 2026
Passive scanning
The free scan is outside-in and passive, requires no signup or credit card, and returns a grade in about 30 seconds.threat.watch · 1 Oct 2026
Vendor catalogue
The platform includes a catalogue of 280,770 companies searchable by name, domain, or alias.threat.watch · 1 Oct 2026
Dark-web cadence
Vendor staff devices are re-checked hourly and leaked credentials are re-checked daily.threat.watch · 1 Oct 2026
Vulnerability matching
ThreatWatch confirms vendor vulnerabilities only when it can read the exact software version, and vulnerability matching is included on every plan.threat.watch · 1 Oct 2026
Integrations
Outbound alerts can be delivered to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook.threat.watch · 1 Oct 2026
AI approval
The AI Co-Pilot and Ask AI are available from Professional and above, and proposed changes require human approval.threat.watch · 1 Oct 2026
Compliance frameworks
Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks.threat.watch · 1 Oct 2026
Security controls
Traffic uses TLS with one year of preloaded HSTS, while secrets such as API keys, SSO secrets, and integration credentials are encrypted at field level at rest.threat.watch · 1 Oct 2026
Vendor access
Vendors use a one-time code sent to their email rather than creating an account or password.threat.watch · 1 Oct 2026
Import limitation
Imported vendors are not scanned when the file is uploaded; they wait for the first scan in the plan schedule.threat.watch · 1 Oct 2026

Best ThreatWatch alternatives

See all 20
All accessCh 01 Bitdefender Total Security Free trialAndroidiOS from $5/mo7.6 All accessCh 02 Cybersecurityratings.com Free planFree trialAPI from $299/mo7.3 All accessCh 03 Ivanti Neurons for Zero Trust Access AndroidiOS 7.2 All accessCh 05 CrowdStrike Falcon Surface Free trialLinuxMac 7.1 All accessCh 06 RiskRecon Free trialAPIWeb 7.1 All accessCh 07 SecurityScorecard Third-Party Risk Management Free planFree trialAPI Free to start7.1

Where it ranks on Specifiction

Is ThreatWatch yours?

Claim it for free: prove the domain, then correct facts, plans and screenshots. An editor reviews every change.

Claim it free Promote ThreatWatch

Sources