ThreatWatch

ThreatWatch is a third-party risk intelligence platform for organizations monitoring the security and compliance of vendors. It is best suited to risk teams that need recurring assessments across a supplier portfolio, rather than individuals seeking device protection. Its no-signup scan is a useful first look; sustained monitoring and richer intelligence require a paid plan with custom pricing.

Overview

ThreatWatch monitors vendor breaches, dark-web exposure, attack-surface vulnerabilities, and compliance gaps, then combines threat intelligence, security scans, questionnaire responses, and certifications into an A-to-F grade. Bringing those signals together can help teams prioritize reviews, although vulnerability matching is confirmed only when the exact software version is readable.

A passive, outside-in scan returns a grade in about 30 seconds without signup or a credit card. The searchable catalogue covers 280,770 companies by name, domain, or alias, making it practical to check a prospective supplier before adding it to a monitoring programme. That quick scan is not equivalent to scheduled oversight of a portfolio.

Key features

Rescan cadence ranges from weekly on Free to every three hours on Enterprise Plus. Free omits breach and dark-web intelligence, while Starter and higher include it. Vendor staff devices are re-checked hourly for dark-web exposure and leaked credentials daily, which provides a more frequent signal than the general plan rescan schedule.

Vulnerability matching appears on every plan, but confirmation depends on ThreatWatch being able to read the precise software version. This is a useful qualification for teams interpreting findings: an unconfirmed match is not the same as a verified vulnerability.

Outbound alerts can go to Slack, Microsoft Teams, Jira, ServiceNow, PagerDuty, email, the app, or a generic webhook. Compliance AI supports PCI-DSS, ISO 27001, SOC 2, HIPAA, GDPR, and NIST CSF questionnaires, as well as custom frameworks. The broader supported risk-framework set also includes NIST 800-53, CSA CCM, DORA, NIS2, ISO 42001, and the EU AI Act and Cyber Resilience Act.

AI Co-Pilot and Ask AI start at Professional; proposed changes still require human approval. Traffic uses TLS with one year of preloaded HSTS, and sensitive credentials such as API keys and SSO or integration secrets are encrypted at field level at rest. Vendor access uses a one-time email code rather than an account password. Imported vendors wait for the plan's first scheduled scan rather than being scanned at upload, so a large import does not produce immediate coverage.

Pricing

ThreatWatch is freemium, with custom pricing for paid plans and a free trial. The Free plan costs nothing and covers your own organisation, with weekly rescans and community support. It has no breach or dark-web intelligence, OSINT enrichment, deep attack-surface scan, AI agents, SSO, or API. It is a reasonable starting grade for a small, self-directed assessment, but its exclusions make it a poor fit for teams that need third-party intelligence or integrations.

Starter has custom pricing for a small portfolio, rescans every two days, breach and dark-web intelligence, API access, and email support. Its slower cadence and lack of listed OSINT enrichment or AI tools make it the leaner paid choice when core exposure signals and API access matter more than frequent refreshes.

Professional has custom pricing for a growing portfolio, with rescans every 12 hours, breach and dark-web intelligence, OSINT enrichment, AI Co-Pilot, Ask AI, SAML/OIDC SSO, API access, and priority support. It is the clearest fit for teams wanting AI-assisted workflow and identity controls without the deep attack-surface scanning offered by Enterprise tiers.

Enterprise is custom priced for an enterprise programme, with six-hour rescans, deep attack-surface scanning, AI agents, SAML/OIDC SSO, API access, custom branding, and dedicated support. Enterprise Plus is custom priced for multi-entity programmes and tightens rescans to every three hours, retaining deep scanning and AI agents while adding white-label branding and a dedicated account manager. Those higher tiers suit larger programmes that need more frequent checks and support; teams that do not need those capabilities can avoid that level of commitment.

Platforms

ThreatWatch is available on the web. API access is included from Starter upward, while Free has no API.

Who it's for

ThreatWatch makes most sense for organizations that need to grade, monitor, and route alerts about third-party vendors, especially where questionnaires and compliance frameworks are part of supplier oversight. The free scan also serves teams that only need an initial outside-in grade. It is less suitable for personal security needs or for buyers who require immediate scans at bulk import.

Pros and cons

• Pros: A fast passive scan needs no signup or payment details, and the large searchable company catalogue helps with initial vendor checks.
• Pros: Alerts cover common operational tools, and API access begins at Starter rather than being confined to the top tiers.
• Pros: Professional adds OSINT enrichment, AI assistance, and SSO; higher Enterprise tiers offer deep scanning and shorter rescan intervals.
• Cons: Free is limited to weekly rescans and excludes breach and dark-web intelligence, API, and SSO, limiting its usefulness for a managed portfolio.
• Cons: Paid plan prices are custom, so buyers cannot compare spend from a public rate; imported vendors also wait for the next scheduled scan.
• Cons: Vulnerability confirmation depends on exact software-version visibility, which can constrain certainty in matches.

Alternatives

Cybersecurityratings.com is worth considering when a free, limited snapshot is enough: its free tier includes one security snapshot, a basic A–F grade, and the top five risk factors. RiskRecon may suit a time-boxed evaluation of up to 50 vendors, with a 30-day portal and risk-prioritized findings. Scovery is another web-based freemium option.

SecurityScorecard Third-Party Risk Management is an alternative for teams seeking a free forever plan that includes a rating for their own domain, footprint management, issue prioritization and alerts, questionnaire response, and self-monitoring. ThreatNG Security offers a limited-time evaluation of its complete platform, which may be preferable when a short full-platform trial is the priority. Bitdefender Total Security is a different category of choice for personal device security, with a first-year individual plan covering five devices.

ImmuniWeb is an alternative for mobile application scanning; its listed monthly subscription is priced per app and allows unlimited scans of builds or versions of the same Android or iOS app. Infoblox Cloud Network Automation is a distinct option for cloud network automation, using token-based licensing.

Browse more options in Security Ratings Software.

Verdict

ThreatWatch is a strong fit for teams that need recurring vendor risk grades, breach and dark-web monitoring, compliance questionnaires, and alerts routed into their workflow. Its no-signup scan lowers the barrier to a first assessment, while the paid tiers add progressively faster rescans, integrations, AI, and enterprise controls. Look elsewhere if public paid pricing or an immediate scan on portfolio import is essential.