How Security Teams Use Vendor Security Ratings to Assess Third-Party Risk

Cybersecurity Business with Fexingo: Security Companies, Breaches, and Enterprise Defense · Jun 10, 2026 · 11m · transcript

Lucas and Luna explore how enterprises are using vendor security ratings — letter-grade scores from firms like SecurityScorecard and BitSight — to assess third-party risk before signing contracts. They walk through a real example: how a mid-sized bank used a rating of 'C' on a cloud storage vendor to push for remediation clauses, saving an estimated $2.3 million in potential breach costs. The episode covers why these ratings matter, how they're calculated (external scanning, breach databases, user behavior), and the controversy around false positives when a small vendor gets…