Wondering if that mobile app is safe? There’s a score for that. If that business partner takes security seriously? There’s a score for that too.
A wave of companies have launched services aimed at giving their customers a better understanding of the risks associated with different components of the business supply chain, from transactions to applications and from cloud services to partners. ThreatMetrix, for example, uses information gleaned from visitors to its customers’ Web sites to place a risk score on transactions that can be used to decide if a transaction is fraudulent. Startup BitSight mines public security data–such as blacklists, fast-flux domain lists and other indicators of compromise–to assign a rating to its clients’ partners.