What does SecurityScorecard use?

As of October 2026, runsonwhat has found 57 tools at SecurityScorecard (securityscorecard.io) in public records. Edge & Hosting: Cloudflare, Amazon Route 53 and WP Engine. Application: YouTube, Anthropic and OpenAI. Data & Observability: Google Analytics, Google Tag Manager and Microsoft Clarity. Go-to-market: WordPress, Google Ads and Yoast SEO. Company Ops: Microsoft 365, Google Workspace and SendGrid. Last checked October 20, 2026.

SecurityScorecard uses WP Engine for hosting and cloud infrastructure, according to runsonwhat (October 2026). runsonwhat found WP Engine through WP Engine code on securityscorecard.io. WP Engine is used by 50,907 companies runsonwhat tracks.

The sales tools runsonwhat has found at SecurityScorecard are 6sense, Qualified and TechTarget (October 2026); no CRM shows up in SecurityScorecard's public records. runsonwhat found 6sense through 6sense code on securityscorecard.io.

SecurityScorecard uses Microsoft 365 for email and office software, alongside Google Workspace and Apple Business, according to runsonwhat (October 2026). runsonwhat found Microsoft 365 through a DNS verification record for Microsoft 365. Microsoft 365 is used by 706,441 companies runsonwhat tracks.

SecurityScorecard uses Zendesk for customer support and documentation, alongside Drift, according to runsonwhat (October 2026). runsonwhat found Zendesk through email records that authorize Zendesk. Zendesk is used by 41,380 companies runsonwhat tracks.

SecurityScorecard uses Stripe for payments and billing, according to runsonwhat (October 2026). runsonwhat found Stripe through a DNS verification record for Stripe. Stripe is used by 27,174 companies runsonwhat tracks.

SecurityScorecard has used Ory since at least May 2026, going by the first public certificate of the securityscorecard.io subdomain that points at Ory.

Yes. runsonwhat found Cloudflare at SecurityScorecard through Cloudflare code on securityscorecard.io. Cloudflare is a CDN & Edge tool used by 697,946 companies runsonwhat tracks.

Yes. runsonwhat has found Anthropic and OpenAI at SecurityScorecard; Anthropic, for example, through a DNS verification record for Anthropic. AI services called only from servers leave no public trace, so SecurityScorecard may use more AI tools than these.

The companies with the stacks most like SecurityScorecard's are Citymesh, Standard Insurance Company, Aya Healthcare and The Aspen Group, according to runsonwhat (October 2026). Each shares 12 to 28 tools with SecurityScorecard, and rare tools count for more than common ones like Google Workspace, so the match reflects real stack choices.

runsonwhat reads public records only. Of the 57 tools at SecurityScorecard, 29 were found through DNS records, 20 through code on securityscorecard.io, 6 through email records, 1 through website configuration files and 1 through subdomains that point at the vendor. A tool is listed only when a direct record backs it up; DNS is rechecked weekly and securityscorecard.io about monthly.