Cybersecurityratings.com vs RiskRecon
Cybersecurityratings.com
cybersecurityratings.comRiskRecon
riskrecon.comSide by side
| Figure | Cybersecurityratings.com | RiskRecon |
|---|---|---|
| Price from | $299/mo | Free |
| Free plan | Yes | Yes |
| Free trial | Yes | Yes |
| Open source | — | — |
| Web | Yes | Yes |
| API | Yes | Yes |
| Plans published | 7 | 4 |
| Spec score · Security Ratings Software | 8.2 (#4) | 8.2 (#6) |
| Headquarters | Denver, Colorado, USA | RiskRecon says it is headquartered in Salt Lake City, Utah, with a presence in Boston, Massachusetts. |
| Intended users | The FAQ says the service is for US businesses of any size and names healthcare, finance, SaaS, manufacturing, and legal organizations among its audiences. | The maker describes use by third-party risk teams, internal security analysts, M&A teams, CISOs, and boards. |
Plans
Cybersecurityratings.com
- StarterFree
- Professional$299 a month
- Business$799 a month
- Security Audit$2,500, paid once
- Incident Response Plan$3,500, paid once
- Compliance Readiness$4,500, paid once
- EnterprisePriced on request
RiskRecon
- 30-day free trialFree
- Free 30-day portal accessFree
- Paid subscriptionPriced on request
- RiskRecon subscriptionsPriced on request
In their own words
Cybersecurityratings.com
Cybersecurityratings.com provides cybersecurity ratings and consulting for businesses. Its A–F rating draws on more than 250 data points covering network and application security, data protection, DNS health, email security, and patching cadence. The free Starter plan provides one security snapshot, a basic grade, and the five leading risk factors, with access to a limited ratings database. Vendor lookup can show the rating of an organization in its database, such as a supplier, partner, or SaaS tool. Professional costs $299 a month and includes monthly score updates, five vendor lookups monthly, and email risk alerts. Business costs $799 a month and lists continuous monitoring, 50 vendor lookups monthly, 1,000 API calls monthly, quarterly expert review, and priority email and chat support. Its REST API returns JSON over HTTPS using bearer-token API key authentication, with SDKs listed for Python, Node.js, PHP, and Ruby. Business lists compliance mapping for SOC 2, NIST, and HIPAA; Enterprise includes custom frameworks. Professional and Business offer a 14-day free trial. The service is available via web and API.
RiskRecon
RiskRecon provides cybersecurity ratings and insights to help organizations assess and act on cyber risk across their vendor ecosystems. It continuously monitors vendors and offers real-time visibility into third-party exposure. Its asset discovery uses analyst-assisted machine-learning models tailored to each monitored company to attribute assets as they change. Findings are prioritized by issue severity and estimated asset value, with estimates based on factors such as authentication, transaction capabilities, and collected data types. The platform can create risk-prioritized vendor action plans; vendors can track remediation in its portal at no cost and without time limits. RiskRecon Assessments Powered by Whistic uses AI to help answer questionnaires, summarize documentation, and check compliance across a vendor catalog. Ratings cover externally visible systems, not direct inspection of internal systems. It offers API and web access, continuous score refresh, change alerts, and full attack-surface coverage. Pricing is on request, and a 30-day trial includes a quick-start guide and access to the Solutions Consulting team. A free plan is not available, though the trial includes portal access for up to 50 vendors.