Cyber Risk Is a Business Metric: SecurityScorecard Data Shapes Forbes’ America’s Best Companies Ranking

Forbes taps SecurityScorecard to evaluate cybersecurity performance alongside financial results, customer sentiment, and employee ratings in Forbes’ evaluation of company quality.

NEW YORK--(BUSINESS WIRE)--SecurityScorecard, the global leader in threat-informed third-party risk management (TPRM), today announced its contribution as the exclusive cybersecurity data provider for Forbes’ America’s Best Companies 2027 ranking, published today.

SecurityScorecard’s data supports the ranking’s Cybersecurity category, which Forbes describes as evaluating network and application security, malware vulnerability, patching practices, the strength of cybersecurity departments and hacker discussions of potential exploits.

Forbes combines cybersecurity with financial results, customer sentiment, employee ratings and other measures to evaluate overall company quality. According to Forbes, the 2027 ranking draws on more than 120 metrics across 12 categories.

“Cybersecurity resilience belongs alongside profitability and EBITDA as a measure of corporate performance,” said Dr. Aleksandr Yampolskiy, CEO and Co-Founder of SecurityScorecard. “A company cannot truly succeed if it cannot protect its customers, operations, and reputation. As AI accelerates cyber threats, we believe SecurityScorecard is becoming a universal unit of trust: an objective measure of cyber resilience that businesses, investors, and customers can rely on. We're proud that Forbes is incorporating SecurityScorecard data into its evaluation of America's best companies.”

Forbes normalizes category scores, adjusts for sector comparisons where appropriate, and combines them into an overall ranking. Companies that have more than 5,000 employees and are headquartered in the United States or are foreign companies with a U.S. headquarters are eligible. Companies do not pay any fee to be considered or selected.

“SecurityScorecard has been an invaluable partner in our annual America’s Best Companies project, by providing unique and comprehensive data on companies’ security performance and risks,” said Alan Schwarz, the Forbes Assistant Managing Editor who oversaw the project. “Few issues these days are more vital to a company than cybersecurity, and Forbes working with SecurityScorecard is a key component to educating our readers.”

Independent Data for Cybersecurity Comparisons: Methodology

SecurityScorecard uses nonintrusive, outside-in analysis to evaluate externally observable security signals across internet-facing infrastructure. Its ratings account for digital footprint size so larger organizations are not marked down simply for operating more digital assets.

The company develops that intelligence through proprietary data collection, including its Driftnet, internet-scanning engine. SecurityScorecard collects and enriches 99% of its own data, supplemented by approximately 40 third-party sources.

Read Forbes’ full methodology.

About SecurityScorecard

SecurityScorecard is the global leader in threat-informed third-party risk management (TPRM), securing the world's supply chains. Its platform combines security ratings, threat intelligence and third-party risk management, using continuous visibility and AI-accelerated workflows to help organizations reduce third-party risk before incidents occur and respond with confidence when they do.

Trusted by 3,000 organizations, including over 70% of the Fortune 100, and recognized as a trusted resource by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), SecurityScorecard delivers end-to-end supply chain cybersecurity that safeguards business continuity. Protect the supply chain behind your business. Learn more at securityscorecard.com.