Question
What IPs does SecurityScorecard scan? We want to whitelist them for our network.
Answer
SecurityScorecard is unable to provide a list of our scanner IP addresses because they are dynamic and constantly changing.
In addition, if a firewall or network configuration is blocking outside traffic from reaching sensitive end points, SecurityScorecard considers this a positive action and security measure.
While the SecurityScorecard platform will find many vulnerabilities that are unknown to an organization for the external attack surface, our signals are from the outside only and do not include internal penetration testing.
For additional signals, we can't provide the IP addresses in order to protect our sinkholes/honeypots used for data collection.
See Also