If you are exactly looking for external attack surface monitoring, and you are exploring options, then Bitsight is a very good option that you can explore. I have not worked upon any other solutions, but as far as Bitsight is concerned, it gives flexibility in choosing third-party vendor risk agreements and licenses, or a first-party point of view. You can publish your own score as well in case you have any concerns. That flexibility particularly depends upon the license and agreement that you have, whether you are using it from a first-party perspective or a third-party perspective. Bitsight provides this flexibility. I would rate this review an overall rating of eight.
Senior AIML Engineer at a tech vendor with 1,001-5,000 employees
Real User
Top 5
Dec 10, 2025
My advice for others looking into using Bitsight is that it is definitely a great tool, especially to identify blind spots. If your applications are internet-facing and you have customers using your products or your cloud-based solutions, whether SaaS or PaaS, this tool is going to build trust between the customer and the provider. As the tool deploys for your application or domains, it continuously scans and finds vulnerabilities and reports them. As you find and report, it is also going to build your domain score, showing how well you are doing with publicly available applications, especially those that are internet-facing. I gave this review a rating of 9 out of 10.
Senior Manager and Global Capability Lead - Offensive Security at a tech vendor with 10,001+ employees
Real User
Top 20
Nov 3, 2025
If the ratings were very poor, low, or below the benchmark that we expected for Virtusa, we used to have a meeting with them, and then try to negotiate if they can improve their security, or else we would discontinue the business with them. So to that extent, we took actions based on the findings that we got from Bitsight. I give Bitsight a six out of ten for this review.
BitSight is still better than SecurityScorecard, and those two are completely separated from the rest of the market. For us, BitSight is better. I'd rate the solution nine out of ten.
My recommendation depends on the size of the company. You need to have some people to see our platform and distribute all the work. Overall, I rate the solution a nine out of ten.
I recommend BitSight because it is very convenient to use. It has become a standard tool used in many companies. It is easy to share a few components of an algorithm for users. It is not ideal as it only reflects some of the reality of Internet-facing applications. However, it is the best solution at the moment. I rate it an eight out of ten.
I rate this solution an eight out of ten. Regarding advice, BitSight scours assets to discover exposure and searches for existing vulnerabilities. Vulnerabilities that exist on the internet might try to abuse a company's assets, and it is important to get the upper hand before adversaries try to take advantage of organizational assets.
Bitsight provides advanced cyber risk intelligence with AI-driven insights and real-time visibility into threat exposure. With a vast dataset, Bitsight supports organizations in identifying and mitigating risks effectively across their digital landscape. Bitsight is a leader in cybersecurity insights, offering more than 3,500 customers the capability to manage and assess cyber risk proactively. By analyzing the most comprehensive external cybersecurity dataset, Bitsight uncovers security...
If you are exactly looking for external attack surface monitoring, and you are exploring options, then Bitsight is a very good option that you can explore. I have not worked upon any other solutions, but as far as Bitsight is concerned, it gives flexibility in choosing third-party vendor risk agreements and licenses, or a first-party point of view. You can publish your own score as well in case you have any concerns. That flexibility particularly depends upon the license and agreement that you have, whether you are using it from a first-party perspective or a third-party perspective. Bitsight provides this flexibility. I would rate this review an overall rating of eight.
My advice for others looking into using Bitsight is that it is definitely a great tool, especially to identify blind spots. If your applications are internet-facing and you have customers using your products or your cloud-based solutions, whether SaaS or PaaS, this tool is going to build trust between the customer and the provider. As the tool deploys for your application or domains, it continuously scans and finds vulnerabilities and reports them. As you find and report, it is also going to build your domain score, showing how well you are doing with publicly available applications, especially those that are internet-facing. I gave this review a rating of 9 out of 10.
If the ratings were very poor, low, or below the benchmark that we expected for Virtusa, we used to have a meeting with them, and then try to negotiate if they can improve their security, or else we would discontinue the business with them. So to that extent, we took actions based on the findings that we got from Bitsight. I give Bitsight a six out of ten for this review.
BitSight is still better than SecurityScorecard, and those two are completely separated from the rest of the market. For us, BitSight is better. I'd rate the solution nine out of ten.
My recommendation depends on the size of the company. You need to have some people to see our platform and distribute all the work. Overall, I rate the solution a nine out of ten.
Overall, I rate the solution a nine out of ten.
I recommend BitSight because it is very convenient to use. It has become a standard tool used in many companies. It is easy to share a few components of an algorithm for users. It is not ideal as it only reflects some of the reality of Internet-facing applications. However, it is the best solution at the moment. I rate it an eight out of ten.
I recommend the solution to others. It is simple to use, is very immediate, and has a return on investment. I rate it a ten.
I rate this solution an eight out of ten. Regarding advice, BitSight scours assets to discover exposure and searches for existing vulnerabilities. Vulnerabilities that exist on the internet might try to abuse a company's assets, and it is important to get the upper hand before adversaries try to take advantage of organizational assets.