SecurityScorecard Acquires Driftnet to Bolster Third-Party Risk Intelligence
SecurityScorecard has acquired the Internet scanning startup Driftnet to enhance its third-party risk management platform with real-time threat intelligence capabilities.
SecurityScorecard has announced the acquisition of Driftnet, a UK-based startup specializing in Internet scanning and threat intelligence. This strategic move is designed to bolster SecurityScorecard’s third-party risk management (TPRM) platform by integrating real-time visibility into external network exposures Dark Reading.
Driftnet operates an Internet search engine that allows users to query domains, IP addresses, or specific organizations to identify open ports, misconfigurations, and potential vulnerabilities. By incorporating this technology, SecurityScorecard aims to provide its clients with a more granular view of the digital footprint of their vendors and partners, enabling the discovery of attack campaigns before they escalate into full-scale breaches Dark Reading.
The acquisition comes as organizations face mounting pressure from complex supply chains and the rapid adoption of agentic artificial intelligence. SecurityScorecard reports that nearly one-third of all security breaches are linked to third-party entities, a figure the company believes is likely underreported and trending upward. The integration of Driftnet is intended to help security operations centers and TPRM practitioners align their efforts to proactively detect risks that traditional audit methods might miss Dark Reading.
SecurityScorecard CEO Aleksandr Yampolskiy highlighted that the current threat landscape has shifted significantly due to the proliferation of AI-driven automation and interconnected supply chain tools. Many existing TPRM programs lack the necessary visibility to assess the risks posed by these technologies, particularly when vendors deploy them with weak access controls or exposed credentials Dark Reading.
This acquisition is the latest in a series of investments by SecurityScorecard to automate and enhance its risk management suite. Earlier this year, the company introduced TITAN AI to streamline vendor risk workflows, and last year, it acquired HyperComply to automate the processing of security questionnaires. The financial terms of the Driftnet deal were not disclosed, though SecurityScorecard confirmed it will maintain Driftnet’s existing collaborations with various computer emergency response teams (CERTs) across the US, EU, and UK, as well as its ongoing academic partnerships Dark Reading.
The move reflects a broader industry trend where traditional, periodic security assessments are being replaced by continuous, automated monitoring. As third-party environments become increasingly interwoven, the ability to maintain real-time visibility into external assets is becoming a critical requirement for both operational security and regulatory compliance. Future developments in this space will likely focus on how effectively these automated tools can parse the noise of global Internet scanning to provide actionable intelligence for enterprise risk teams.