MetricStream vs ThreatWatch

MetricStream has no write-up on Specifiction yet; its figures are above.

ThreatWatch is a web-based platform for monitoring third-party vendor risk. It tracks breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps, then assigns each vendor an A-to-F grade using threat intelligence, security scanning, questionnaire responses, and certifications. A passive, outside-in free scan requires no signup or credit card and returns a grade in about 30 seconds. The catalogue contains 280,770 companies searchable by name, domain, or alias. Vendor staff devices are re-checked hourly, while leaked credentials are re-checked daily. Vulnerability matching is included on every plan, but ThreatWatch confirms a vulnerability only when it can read the exact software version. Alerts can be sent to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook. Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, plus custom frameworks. AI Co-Pilot and Ask AI are available from Professional and above; proposed changes require human approval. A free plan is listed, and paid plan prices are on request.