SecurityScorecard Acquires Driftnet

SecurityScorecard has acquired Driftnet, a UK-based internet scanning and threat intelligence startup, to enhance its third-party risk management platform [1]. The acquisition brings Driftnet's high-fidelity internet discovery engine into SecurityScorecard's TITAN AI platform, providing real-time intelligence to find and fix third-party risks before attackers exploit them.

What drove the move

The acquisition is aimed at bolstering SecurityScorecard's third-party risk management platform with real-time global internet visibility [2]. Driftnet's proprietary internet scanning capabilities, including non-standard port enumeration, advanced fingerprinting, and IPv6 dominance, surface hidden, misconfigured infrastructure that creates third-party exposure. The company's threat intelligence team recently used the Driftnet engine to identify over 816,000 internet-exposed deployments of the OpenClaw AI agent framework, many of which had already been correlated with prior breaches [1].

The competitive picture

SecurityScorecard's TITAN AI platform, launched in March, is an artificial intelligence-driven third-party risk management product that automates vendor risk workflows, including questionnaire validation and risk prioritization [2]. With Driftnet's scanning layered in, SecurityScorecard claims it can now index 40% more internet-exposed hosts than any rival intelligence provider. The combined platform is intended to surface vendor exposures before they translate into breaches, particularly in cases involving non-standard ports, exposed credentials, or shadow deployments of AI tooling.

What to watch

• The integration of Driftnet's engine into SecurityScorecard's TITAN AI platform and its impact on the company's ability to identify and mitigate third-party risks
• The potential for SecurityScorecard to expand its partnerships with US, EU, and UK CERTs and academic researchers on internet measurement studies
• The development of new threat intelligence capabilities and their application to real-time, high-fidelity intelligence for TPRM, Security Operations, and threat hunting teams

The acquisition of Driftnet by SecurityScorecard highlights the growing importance of threat-informed third-party risk management in the face of increasing AI agentic automation and connected supply chain tools across enterprise environments [3]. As SecurityScorecard CEO and co-founder Dr. Aleksandr Yampolskiy noted, "The threat landscape has fundamentally changed" [1]. The real significance of this acquisition lies in its potential to provide security leaders with the depth and speed to get ahead of threats, rather than just reacting to them.