Scrut Scorecard

Score by criterion

• Framework coverage15% of total

  5/5

  70+ frameworks, including regional sets such as MAS TRM, SAMA and RBI. FedRAMP is not on the list.

  Level 5: All of level 3, plus three or more of ISO 42001, NIST CSF, NIST 800-53, FedRAMP or CMMC.

• Automated evidence20% of total

  3/5

  150+ integrations with continuous evidence checks.

  Level 3: 100 to 199 published integrations, with continuous automated control tests.

• Audit path15% of total

  2/5

  An Audit Center where auditors share and track evidence. A named audit partner network was not confirmed.

  Level 2: A named partner network of audit firms, or auditors can review evidence inside the platform.

• Pricing transparency10% of total

  0/5

  The pricing page returns a 404, and no plan details are published on scrut.io.

  Level 0: No price and no plan details published by the vendor.

• Trust and questionnaires10% of total

  4/5

  A trust center with automated questionnaire answering through Scrut's AI teammates.

  Level 4: Both, with AI-assisted questionnaire answering.

• Vendor risk management10% of total

  1/5

  A dedicated vendor risk product page. Its features beyond an inventory were not confirmed.

  Level 1: A vendor inventory only.

• Customisation10% of total

  5/5

  Custom frameworks, custom monitors, and a unified control framework mapped across standards.

  Level 5: Custom frameworks, custom automated tests, and control mapping across frameworks so one test satisfies several.

• User sentiment10% of total

  5/5

  4.9 out of 5 from 1,312 reviews on G2, the highest average in this set.

  Level 5: Average 4.5 or higher with 200 or more reviews.