# What does SecurityScorecard use?

SecurityScorecard (securityscorecard.com) shows public evidence of 45 tools, according to runsonwhat (last checked 2026-10-10).

- Industry: Computer Security
- Size: 201–1,000 employees
- Based in: New York, Luxembourg
- Founded: 2013
- LinkedIn: https://www.linkedin.com/company/security-scorecard

## Edge & Hosting

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Cloudflare](https://www.runsonwhat.com/reverse/cloudflare) | CDN & Edge | DNS records, Website code |  |
| [Amazon CloudFront](https://www.runsonwhat.com/reverse/cloudfront) | CDN & Edge | Custom domain |  |
| [WP Engine](https://www.runsonwhat.com/reverse/wpengine) | Hosting & Cloud | Website code |  |

## Application

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Fonts](https://www.runsonwhat.com/reverse/google-fonts) | Media & UI | Website code |  |
| [YouTube](https://www.runsonwhat.com/reverse/youtube) | Media & UI | Website code |  |
| [GSAP](https://www.runsonwhat.com/reverse/gsap) | Media & UI | Website code |  |
| [Anthropic](https://www.runsonwhat.com/reverse/anthropic) | AI | DNS verification records |  |
| [Vue.js](https://www.runsonwhat.com/reverse/vue) | Frontend | Website code |  |
| [OpenAI](https://www.runsonwhat.com/reverse/openai) | AI | DNS verification records |  |
| [Twilio](https://www.runsonwhat.com/reverse/twilio) | Backend & Database | DNS verification records |  |

## Data & Observability

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Analytics](https://www.runsonwhat.com/reverse/ga) | Analytics | Website code |  |
| [Google Tag Manager](https://www.runsonwhat.com/reverse/gtm) | Analytics | Website code |  |
| [Microsoft Clarity](https://www.runsonwhat.com/reverse/clarity) | Analytics | Website code |  |
| [Sentry](https://www.runsonwhat.com/reverse/sentry) | Monitoring | Website code |  |
| [Crazy Egg](https://www.runsonwhat.com/reverse/crazyegg) | Analytics | Website code |  |
| [VWO](https://www.runsonwhat.com/reverse/vwo) | Flags & Experiments | Website code |  |
| [Atlassian Statuspage](https://www.runsonwhat.com/reverse/statuspage) | Monitoring | Custom domain | 2019-09 |
| [Heap](https://www.runsonwhat.com/reverse/heap) | Analytics | Website code |  |
| [Dreamdata](https://www.runsonwhat.com/reverse/dreamdata) | Analytics | Website code |  |
| [Marketo Measure](https://www.runsonwhat.com/reverse/marketo-measure) | Analytics | Website code |  |

## Go-to-market

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [WordPress](https://www.runsonwhat.com/reverse/wordpress) | Website & CMS | Website code |  |
| [Google Ads](https://www.runsonwhat.com/reverse/google-ads) | Ads & Pixels | Website code |  |
| [Yoast SEO](https://www.runsonwhat.com/reverse/yoast) | Website & CMS | Website code |  |
| [Microsoft Ads](https://www.runsonwhat.com/reverse/bing-ads) | Ads & Pixels | Website code |  |
| [LinkedIn Insight Tag](https://www.runsonwhat.com/reverse/linkedin-insight) | Ads & Pixels | Website code |  |
| [Zendesk](https://www.runsonwhat.com/reverse/zendesk) | Support & Docs | Custom domain | 2021-03 |
| [X Ads](https://www.runsonwhat.com/reverse/x-ads) | Ads & Pixels | Website code |  |
| [Marketo](https://www.runsonwhat.com/reverse/marketo) | Marketing | Email records, Website code |  |
| [6sense](https://www.runsonwhat.com/reverse/sixsense) | Sales & CRM | Website code |  |
| [Qualified](https://www.runsonwhat.com/reverse/qualified) | Sales & CRM | Website code |  |
| [TechTarget](https://www.runsonwhat.com/reverse/techtarget) | Sales & CRM | Website code |  |
| [Gainsight](https://www.runsonwhat.com/reverse/gainsight) | Sales & CRM | Custom domain | 2024-08 |
| [Zuddl](https://www.runsonwhat.com/reverse/zuddl) | Marketing | Custom domain | 2024-10 |

## Company Ops

| Tool | Category | Evidence | Since |
|---|---|---|---|
| [Google Workspace](https://www.runsonwhat.com/reverse/google-workspace) | Workspace | Email records, Website code |  |
| [Cookiebot](https://www.runsonwhat.com/reverse/cookiebot) | Security & Compliance | Website code |  |
| [Atlassian](https://www.runsonwhat.com/reverse/atlassian) | Dev Tools | DNS verification records |  |
| [Mailchimp Transactional](https://www.runsonwhat.com/reverse/mandrill) | Email Delivery | Email records |  |
| [Valimail](https://www.runsonwhat.com/reverse/valimail) | Security & Compliance | Email records |  |
| [MailChannels](https://www.runsonwhat.com/reverse/mailchannels) | Email Delivery | Email records |  |
| [Slack](https://www.runsonwhat.com/reverse/slack) | Collaboration | DNS verification records |  |
| [Have I Been Pwned](https://www.runsonwhat.com/reverse/hibp) | Security & Compliance | DNS verification records |  |
| [Loom](https://www.runsonwhat.com/reverse/loom) | Collaboration | DNS verification records |  |
| [Insomnia](https://www.runsonwhat.com/reverse/insomnia) | Dev Tools | DNS verification records |  |

## FAQ

### What tools does SecurityScorecard use?

As of October 2026, runsonwhat has found 45 tools at SecurityScorecard (securityscorecard.com) in public records. Edge & Hosting: Cloudflare, Amazon CloudFront and WP Engine. Application: Google Fonts, YouTube and GSAP. Data & Observability: Google Analytics, Google Tag Manager and Microsoft Clarity. Go-to-market: WordPress, Google Ads and Yoast SEO. Company Ops: Google Workspace, Cookiebot and Atlassian. Last checked October 10, 2026.

### What cloud does SecurityScorecard run on?

SecurityScorecard uses WP Engine for hosting and cloud infrastructure, according to runsonwhat (October 2026). runsonwhat found WP Engine through WP Engine code on securityscorecard.com. WP Engine is used by 50,640 companies runsonwhat tracks.

### What sales tools does SecurityScorecard use?

The sales tools runsonwhat has found at SecurityScorecard are 6sense, Qualified, TechTarget and Gainsight (October 2026); no CRM shows up in SecurityScorecard's public records. runsonwhat found 6sense through 6sense code on securityscorecard.com.

### What email provider does SecurityScorecard use?

SecurityScorecard uses Google Workspace for email and office software, according to runsonwhat (October 2026). runsonwhat found Google Workspace through email records that authorize Google Workspace and code on securityscorecard.com. Google Workspace is used by 397,578 companies runsonwhat tracks.

### What does SecurityScorecard use for customer support?

SecurityScorecard uses Zendesk for customer support and documentation, according to runsonwhat (October 2026). runsonwhat found Zendesk through a subdomain that points at Zendesk, and SecurityScorecard has used it since at least March 2021. Zendesk is used by 40,926 companies runsonwhat tracks.

### What analytics tools does SecurityScorecard use?

SecurityScorecard uses Google Analytics for analytics, alongside Google Tag Manager, Microsoft Clarity and Crazy Egg, according to runsonwhat (October 2026). runsonwhat found Google Analytics through Google Analytics code on securityscorecard.com. Google Analytics is used by 852,708 companies runsonwhat tracks.

### How long has SecurityScorecard used Atlassian Statuspage?

SecurityScorecard has used Atlassian Statuspage since at least September 2019, going by the first public certificate of the securityscorecard.com subdomain that points at Atlassian Statuspage. Other long-running tools at SecurityScorecard include Zendesk (since March 2021), Gainsight (since August 2024) and Zuddl (since October 2024).

### Does SecurityScorecard use Google Fonts?

Yes. runsonwhat found Google Fonts at SecurityScorecard through Google Fonts code on securityscorecard.com. Google Fonts is a Media & UI tool used by 791,171 companies runsonwhat tracks.

### Does SecurityScorecard use AI tools?

Yes. runsonwhat has found Anthropic and OpenAI at SecurityScorecard; Anthropic, for example, through a DNS verification record for Anthropic. AI services called only from servers leave no public trace, so SecurityScorecard may use more AI tools than these.

### Which companies have a tech stack similar to SecurityScorecard's?

The companies with the stacks most like SecurityScorecard's are Zip, Figma, Recorded Future and CrowdStrike, according to runsonwhat (October 2026). Each shares 10 to 14 tools with SecurityScorecard, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

### How does runsonwhat know what SecurityScorecard uses?

runsonwhat reads public records only. Of the 45 tools at SecurityScorecard, 24 were found through code on securityscorecard.com, 10 through DNS records, 5 through email records, 5 through subdomains that point at the vendor and 1 through website configuration files. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and securityscorecard.com about monthly.


---

Source: runsonwhat, https://www.runsonwhat.com/company/securityscorecard.com (updated October 2026). Counts are companies with direct public evidence of the tool (DNS records, certificates, website code, a real-browser crawl, subprocessor lists), so they are lower bounds. Methodology: https://www.runsonwhat.com/methodology.
