# OneTrust Third-Party Risk vs SecurityScorecard

**Leader by vioscaleAI score:** SecurityScorecard

| Attribute | OneTrust Third-Party Risk | SecurityScorecard |
|---|---|---|
| **vioscaleAI score** | 46.1 (44% (low)) | 60.9 (70% (medium)) |
| content.faq | `[{"answer":"Helps organizations oversee vendor risk and maintain regulatory compliance through automated questionnaires, continuous security assessment of vendors, and centralized documentation of vendor relationships and security measures. It is indexed under Vendor Risk Management.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What is OneTrust Third-Party Risk?","confidence":0.6},{"answer":"OneTrust Third-Party Risk does not publish its prices. Pricing is quoted on request, so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://www.onetrust.com/products/third-party-risk/","question":"How much does OneTrust Third-Party Risk cost?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for OneTrust Third-Party Risk, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://www.onetrust.com/products/third-party-risk/","question":"Can OneTrust Third-Party Risk be self-hosted?","confidence":0.6},{"answer":"We have confirmed 5 integrations for OneTrust Third-Party Risk, including Microsoft Purview, Microsoft Intelligent Data Platform, Databricks, AWS Bedrock and Microsoft Foundry. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What does OneTrust Third-Party Risk integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2 and GDPR for OneTrust Third-Party Risk. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as OneTrust Third-Party Risk not holding them. Always confirm compliance directly before you rely on it.","source":"https://www.onetrust.com/products/third-party-risk/","question":"What security certifications does OneTrust Third-Party Risk have?","confidence":0.48},{"answer":"OneTrust Third-Party Risk is available worldwide. Its primary markets are the United States, the United Kingdom and the EU.","source":"https://www.onetrust.com/products/third-party-risk/","question":"Where is OneTrust Third-Party Risk available?","confidence":0.75}]` | `[{"answer":"Helps organizations identify and reduce security threats by providing continuous monitoring of vendors and third-party partners, using AI-powered threat intelligence and automated risk assessment workflows to streamline compliance and vendor management. It is indexed under Vendor Risk Management.","source":"https://securityscorecard.com","question":"What is SecurityScorecard?","confidence":0.6},{"answer":"SecurityScorecard does not publish its prices. Pricing is quoted on request, across 5 plans (Free, TITAN Watch, TITAN Assess and TITAN Secure), so the figure depends on your seat count and requirements. We record this as a pricing-transparency signal rather than guessing a number. Pricing changes often, so verify at source before relying on it.","source":"https://securityscorecard.com/pricing/","question":"How much does SecurityScorecard cost?","confidence":0.6},{"answer":"We have confirmed browser-based access to SecurityScorecard. That is the extent of what we could verify from public sources, so it may well offer desktop or mobile clients we have not indexed.","source":"https://securityscorecard.com/pricing/","question":"What platforms does SecurityScorecard support?","confidence":0.6},{"answer":"We have only confirmed a cloud / SaaS deployment for SecurityScorecard, so it appears to be vendor-hosted. If a self-hosted option exists we have not found it documented publicly.","source":"https://securityscorecard.com/pricing/","question":"Can SecurityScorecard be self-hosted?","confidence":0.6},{"answer":"We have confirmed 5 integrations for SecurityScorecard, including CrowdStrike, Archer, OneTrust, ProcessUnity and ServiceNow. This is what we could verify from public sources, so the vendor may support others we have not indexed.","source":"https://securityscorecard.com/pricing/","question":"What does SecurityScorecard integrate with?","confidence":0.6},{"answer":"We have independently confirmed SOC 2, ISO 27001 and GDPR for SecurityScorecard. Certifications we do not list are ones we have not been able to verify from public sources, which is not the same as SecurityScorecard not holding them. Always confirm compliance directly before you rely on it.","source":"https://securityscorecard.com/","question":"What security certifications does SecurityScorecard have?","confidence":0.48},{"answer":"SecurityScorecard is available worldwide. Its primary markets are the United States and the EU.","source":"https://securityscorecard.com/pricing/","question":"Where is SecurityScorecard available?","confidence":0.75}]` |
| deployment.options | `{"cloud":true}` | `{"cloud":true}` |
| description.long | OneTrust provides a unified governance platform that automates third-party risk management from initial vendor assessment through ongoing monitoring and compliance reporting. The platform combines AI-driven assessments, continuous risk monitoring, and integrated intelligence on vendor security posture to help organizations manage vendor relationships at scale. | A platform that combines automated monitoring, questionnaire management, and threat intelligence to help organizations assess and manage security risks from their vendors throughout the supply chain. |
| features.capabilities | `{"continuous_vendor_monitoring":true,"custom_questionnaire_builder":true,"remediation_workflow_ticketing":true,"external_passive_security_rating":true}` | `{"soc2_type_ii":true,"pricing_model":"quote","continuous_vendor_monitoring":true,"custom_questionnaire_builder":true,"remediation_workflow_ticketing":true,"ai_questionnaire_intake_parsing":true,"external_passive_security_rating":true}` |
| integrations.count | 200 | 73 |
| integrations.list | `[{"name":"Microsoft Purview"},{"name":"Microsoft Intelligent Data Platform"},{"name":"Databricks"},{"name":"AWS Bedrock"},{"name":"Microsoft Foundry"}]` | `[{"name":"CrowdStrike"},{"name":"Archer"},{"name":"OneTrust"},{"name":"ProcessUnity"},{"name":"ServiceNow"}]` |
| market.availability | `{"primaryMarkets":["US","GB","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | `{"primaryMarkets":["US","EU"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` |
| platform.support | `{"web":true}` | `{"web":true}` |
| pricing | `{"type":"quote","freeTier":false,"sourceUrl":"https://www.onetrust.com/products/third-party-risk/","retrievedAt":"2026-08-19T22:23:56.551Z"}` | `{"type":"quote","plans":[{"free":true,"name":"Free Forever","summary":"Free forever","features":["Security rating for own domain","Digital footprint management","Issue remediation prioritization","Self-monitoring dashboard","Technical support"],"description":"Foundational understanding of external security posture with self-monitoring capabilities","contactSales":false},{"free":false,"name":"Watch","features":["Security ratings scorecard","Pre-built workflow integrations","Vendor intake process"],"description":"Continuous outside-in visibility into vendor risk before prioritization and response","contactSales":true},{"free":false,"name":"Assess","features":["Security rating scorecard","Questionnaire management","Vendor management","Vendor intake","Vendor tiering","Automatic remediation of gaps","Workflow and user management","Role-based access controls","API for custom integrations"],"description":"Automates sending, completion, and verification of security questionnaires at scale","contactSales":true},{"free":false,"name":"Secure","features":["Continuous monitoring","Unlimited partial monitoring","Workflow builder"],"description":"Integrates real-time threat intelligence into vendor workflows to actively reduce security risk","contactSales":true}],"summary":"Free tier available; paid tiers available on quote based on number of monitored organizations","freeTier":true,"sourceUrl":"https://securityscorecard.com/pricing/","retrievedAt":"2026-10-12T15:30:07.291Z"}` |
| pricing.free_tier | no | yes |
| pricing.model | quote | quote |
| pricing.price_level | unknown | low |
| pricing.transparent | no | no |
| reliability.sla_pct | - | 99.9 |
| security.certifications | - | `[{"name":"SOC 2 Type II","level":"Type II","status":"active"}]` |
| security.gdpr | yes | yes |
| security.iso27001 | - | yes |
| security.soc2 | yes | yes |
| security.trust_center | https://www.onetrust.com/blog/security-focused-sales/ | https://securityscorecard.com/ |

## Capabilities (Vendor Risk Management)

| Capability | OneTrust Third-Party Risk | SecurityScorecard |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Custom questionnaire builder | ✓ | ✓ |
| AI questionnaire intake parsing | - | ✓ |
| External passive security rating | ✓ | ✓ |
| Vendor trust exchange network | - | - |
| Dark web breach monitoring | - | - |
| Sig caiq standard templates | - | - |
| Procurement coupa ariba integration | - | - |
| Continuous vendor monitoring | ✓ | ✓ |
| Remediation workflow ticketing | ✓ | ✓ |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | - |
| Pricing model | - | Quote |

*Source: vioscaleAI. Generated 2026-10-16T06:23:35.057Z. "-" = undocumented, not absent.*