# Best Cloud Compliance Software for Medium-Sized Businesses - Page 2

## How Many Cloud Compliance Software Products Does G2 Track?

**Total Products under this Category:** 154

### Category Stats (Jul 2026)

- **Average Rating:** 4.55/5 (↓0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** Progress Chef (+1.45%) - Among all products in this category, Progress Chef recorded the largest rating increase compared to last month

_Last updated: July 25, 2026_

## How Does G2 Rank Cloud Compliance Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 15,900+ Authentic Reviews
- 154+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Cloud Compliance Software
 ![G2 Grid® for Cloud Compliance Software plotting products by satisfaction and market presence](https://www.g2.com/categories/cloud-compliance/grids.png?focus%5B%5D=123611&focus%5B%5D=146504&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=167976&focus%5B%5D=52233&focus%5B%5D=20460&focus%5B%5D=1285967)

Highlighted products: Vanta, Wiz, Drata, Sprinto, Scrut Automation, Microsoft Defender for Cloud, Sysdig Secure, and SentinelOne Singularity Cloud Security.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-compliance/grids.json?focus%5B%5D=vanta&focus%5B%5D=wiz-wiz&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=scrut-automation&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=sysdig-sysdig-secure&focus%5B%5D=sentinelone-singularity-cloud-security&segment=mid-market)

**Sponsored**

### Scrut Automation

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1861&secure%5Bchosen_at%5D=2026-07-30T06%3A59%3A43Z&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=167976&secure%5Bresource_id%5D=1861&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fcloud-compliance%2Fmid-market%3Fpage%3D2&secure%5Btoken%5D=97f1ad9bbc299194058c7a9d48dff6a860cf2364ef36e2c9e65a1a2ccf9d3bca&secure%5Burl%5D=https%3A%2F%2Fwww.scrut.io%2Fproducts%2Fscrut-platform&secure%5Burl_type%5D=paid_promos)

### [TrendAI Vision One - Cloud Security](https://www.g2.com/products/trendai-vision-one-cloud-security/reviews)

In today's complex digital landscape, securing your cloud environment is paramount. The management and security of your hybrid and multi-cloud setup pose increasing challenges. TrendAI's Cloud Security provides essential visibility, allowing you and your teams to secure every aspect of your transformation and eliminate disruptive security silos. Automate security policies, deployments, monitoring, and compliance audits seamlessly from a single console, ensuring the automatic protection of all workloads from both known and unknown threats. With Cloud-Native Application Protection and robust platform capabilities, TrendAI empowers you to proactively address vulnerabilities and defend against threats. Gain centralized visibility, continuous asset discovery, and contextualized risk assessments, equipping your team with everything necessary to stay ahead of potential cloud security risks.

**Average Rating:** 4.5/5.0

**Total Reviews:** 181

#### How Do G2 Users Rate TrendAI Vision One - Cloud Security?

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.1/10 (Category avg: 9.1/10)
- **Auditing:** 9.0/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 9.1/10 (Category avg: 8.6/10)

#### Who Is the Company Behind TrendAI Vision One - Cloud Security?

- **Seller:** [TrendAI](https://www.g2.com/sellers/trendai)
- **Year Founded:** 1988
- **HQ Location:** Tokyo
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=454c2fb5d9ffdec950c31f62cc45f1b76a4b9ce72ef5e5a91b06fad1ee8584b7&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4312%2F&secure%5Burl_type%5D=linkedin_company_website)  
8,040 employees on LinkedIn®
- **Ownership:** OTCMKTS:TMICY
- **Total Revenue (USD mm):** $1,515

#### Who Uses This Product?

- **Who Uses This:** Cyber Security Associate, Cyber Security Engineer
- **Top Industries:** Computer & Network Security, Information Technology and Services
- **Company Size:** 43% Medium, 34% Large

#### What Do G2 Reviewers Say About TrendAI Vision One - Cloud Security?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **centralized management system** of TrendAI Vision One, which simplifies security configuration and monitoring.
- Users value the **robust multi-layered security** of TrendAI Vision One, effectively protecting diverse cloud workloads.
- Users value the **unified visibility** of TrendAI Vision One, streamlining compliance and security management across hybrid environments.
- Users value the **comprehensive coverage of both on-premise and cloud security** with TrendAI Vision One.
- Users appreciate the **comprehensive security** of TrendAI Vision One for effective monitoring and threat management across environments.

##### Cons

- Users find the product's **complexity** challenging, often requiring expert knowledge for effective security management.
- Users find the **complex setup** of TrendAI Vision One challenging, requiring significant technical expertise for proper configuration.
- Users find **feature complexity** in TrendAI Vision One challenging, requiring expert knowledge for effective setup and management.
- Users find the **learning curve steep** , making it challenging for beginners to navigate the initial setup and configuration.
- Users find **difficult learning** curves with TrendAI Vision One, requiring expert knowledge for effective setup and management.

#### What Are Recent G2 Reviews of TrendAI Vision One - Cloud Security?

**["Solid choice for teams juggling cloud and"](https://www.g2.com/survey_responses/trendai-vision-one-cloud-security-review-11405274)**

**Rating:** 4.0/5.0 stars

_— Kaushal K._

[Read full review](https://www.g2.com/survey_responses/trendai-vision-one-cloud-security-review-11405274)

**["Hybrid Cloud Security :Unified Protection with Powerful Feature."](https://www.g2.com/survey_responses/trendai-vision-one-cloud-security-review-11834984)**

**Rating:** 5.0/5.0 stars

_— ADITYA T._

[Read full review](https://www.g2.com/survey_responses/trendai-vision-one-cloud-security-review-11834984)

#### What Are G2 Users Discussing About TrendAI Vision One - Cloud Security?

- [What is deep security software?](https://www.g2.com/discussions/trend-micro-hybrid-cloud-security-what-is-deep-security-software) - 1 upvote
- [What is Trend Micro in information security?](https://www.g2.com/discussions/what-is-trend-micro-in-information-security) - 1 upvote
- [Is Trend Micro cloud based?](https://www.g2.com/discussions/is-trend-micro-cloud-based)
- [What is deep security software?](https://www.g2.com/discussions/what-is-deep-security-software)
- [What does Trend Micro Deep Security do?](https://www.g2.com/discussions/trend-micro-hybrid-cloud-security-solution-what-does-trend-micro-deep-security-do)

### [Tenable Cloud Security](https://www.g2.com/products/tenable-tenable-cloud-security/reviews)

Tenable Cloud Security is an actionable cloud security platform that exposes and closes priority security gaps caused by misconfigurations, risky entitlements and vulnerabilities. Organizations use its intuitive UI to unify siloed tools to secure the full cloud stack, achieving end-to-end visibility, prioritization and remediation across infrastructure, workloads, identities, data and AI services. Users can access the extensive knowledgebase of Tenable Research, reducing the risk of breaches with advanced prioritization that understands resource, identity and risk relationships. Tenable uses this context to pinpoint toxic combinations of risk most likely to be exploited. Take action, even if you only have 5 minutes, with guided remediations and code snippets that significantly reduce MTTR. With one click, report on compliance with industry benchmarks and regulatory requirements, e.g. SOC 2, GDPR & HIPAA. TCS is part of Tenable’s AI-powered exposure management platform, Tenable One.

**Average Rating:** 4.6/5.0

**Total Reviews:** 40

#### How Do G2 Users Rate Tenable Cloud Security?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.4/10 (Category avg: 9.1/10)
- **Auditing:** 8.1/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.8/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Tenable Cloud Security?

- **Seller:** [Tenable](https://www.g2.com/sellers/tenable)
- **Company Website:** www.tenable.com
- **HQ Location:** Columbia, MD
- **Twitter:** @TenableSecurity  
87,752 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=029266d223c06e6b09e6d209209f15aad3bbad59d05069b38d5ec2757e74adef&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F25452%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,350 employees on LinkedIn®
- **Ownership:** NASDAQ: TENB

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 57% Medium, 38% Large

#### What Do G2 Reviewers Say About Tenable Cloud Security?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **comprehensive compliance capabilities** of Tenable Cloud Security, effectively managing risks and misconfigurations.
- Users value the **comprehensive visibility** Tenable Cloud Security provides into misconfigurations and compliance risks across cloud platforms.
- Users value the **seamless integration with security tools** , enhancing their cloud security management and visibility.
- Users value the **unified visibility** Tenable Cloud Security provides, simplifying monitoring and managing cloud misconfigurations and compliance.
- Users value the **effective vulnerability detection** capabilities of Tenable Cloud Security for enhanced cloud environment protection.

##### Cons

- Users find the **complex setup** of Tenable Cloud Security time-consuming and in need of technical expertise for effective use.
- Users find the **pricing structure concerning** , especially for smaller organizations and teams looking for flexibility.
- Users often face a **difficult setup** process with Tenable Cloud Security, requiring significant technical expertise for integration.
- Users find the **implementation difficulty** of Tenable Cloud Security can be time-consuming and requires technical expertise.
- Users point out the **reporting and analytics limitations** in Tenable Cloud Security, indicating a need for clearer summaries.

#### What Are Recent G2 Reviews of Tenable Cloud Security?

**["Clear, Actionable Cloud Risk with Accurate Visibility and Prioritized Findings"](https://www.g2.com/survey_responses/tenable-cloud-security-review-13158563)**

**Rating:** 5.0/5.0 stars

_— Soumyajit D._

[Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-13158563)

**["Effective automation for security and compliance failures in the cloud"](https://www.g2.com/survey_responses/tenable-cloud-security-review-13139485)**

**Rating:** 4.0/5.0 stars

_— oscar R._

[Read full review](https://www.g2.com/survey_responses/tenable-cloud-security-review-13139485)

#### What Are G2 Users Discussing About Tenable Cloud Security?

- [What is Ermetic used for?](https://www.g2.com/discussions/what-is-ermetic-used-for) - 1 comment

### [Cortex Cloud](https://www.g2.com/products/cortex-cloud/reviews)

Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.

**Average Rating:** 4.1/5.0

**Total Reviews:** 124

#### How Do G2 Users Rate Cortex Cloud?

- **Has the product been a good partner in doing business?:** 8.0/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 8.5/10 (Category avg: 9.1/10)
- **Auditing:** 8.6/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.1/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Cortex Cloud?

- **Seller:** [Palo Alto Networks](https://www.g2.com/sellers/palo-alto-networks)
- **Company Website:** www.paloaltonetworks.com
- **Year Founded:** 2005
- **HQ Location:** Santa Clara, CA
- **Twitter:** @PaloAltoNtwks  
128,951 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=283fa006a7b7db5565e608e4d1bc1dafae45bdf4b312f2cd5bb208ac9271f81d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F30086%2F&secure%5Burl_type%5D=linkedin_company_website)  
22,313 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 38% Large, 31% Medium

#### What Do G2 Reviewers Say About Cortex Cloud?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Cortex Cloud to be **extremely easy to use** , appreciating its intuitive interface and seamless integration.
- Users value **strong cloud security** and appreciate the intuitive interface and effective compliance support of Cortex Cloud.
- Users value the **ease of managing cloud security** with Cortex Cloud, enhancing focus on critical threats efficiently.
- Users value the **clear visibility** provided by Cortex Cloud, enhancing their management of cloud security and team coordination.
- Users value the **ease of integration** with operations, enhancing the management of cloud security efficiently.

##### Cons

- Users find the **high cost** of Cortex Cloud to be a significant drawback, impacting budget for mid-sized organizations.
- Users find the **difficult learning** curve challenging, especially with complex features and insufficient documentation for beginners.
- Users find the **learning curve steep** due to time-intensive onboarding and a cluttered user interface.
- Users express concerns about **pricing issues** with Cortex Cloud, as costs can rise significantly in larger setups.
- Users find the **complex setup** of Cortex Cloud to be time-consuming and challenging to navigate effectively.

#### What Are Recent G2 Reviews of Cortex Cloud?

**["Cortex Cloud earned it's place before every release."](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)**

**Rating:** 5.0/5.0 stars

_— Johanna K._

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-13089470)

**["Cortex Cloud Unifies Cloud Security with Real-Time Protection and Smart Prioritization"](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)**

**Rating:** 4.0/5.0 stars

_— Galateya M._

[Read full review](https://www.g2.com/survey_responses/cortex-cloud-review-12997786)

### [Copla](https://www.g2.com/products/copla/reviews)

Copla is a governance, risk, and compliance (GRC) and compliance automation platform founded in 2023 and focused on companies operating in Europe. It is built for organizations that need to meet a growing set of regulatory and security requirements, including DORA, NIS2, ISO 27001, and SOC 2. Rather than treating compliance as a one-time certification exercise, Copla is designed to keep organizations continuously compliant and audit-ready. The platform combines automation and AI with guidance from in-house CISO experts to manage the full GRC cycle in a single system. Core capabilities include framework compliance across multiple standards, where controls are mapped once and reused across frameworks; third-party and vendor risk management, which helps teams assess and monitor the risk introduced by suppliers and service providers; and multi-entity oversight, which lets organizations manage compliance across several entities or subsidiaries from one place. Copla also supports control monitoring, risk registers, and audit preparation, replacing the spreadsheets and disconnected tools that many teams rely on. Copla is intended to reduce the manual work involved in compliance while keeping the focus on real risk reduction rather than only satisfying framework checklists. Controls are tied to the risks they address, which helps keep a compliance program defensible during audits and reviews. Because each control and register adapts to how an organization actually operates, the platform reflects real business processes instead of applying a generic template. The result is a continuously maintained compliance posture that organizations can demonstrate to auditors, regulators, and customers at any time. Copla is typically used by mid-sized and enterprise companies in regulated sectors such as financial services, fintech, insurance, and IT, along with the third-party providers that support them. Compliance evidence is automatically stored in a central location, making audits faster and always regulator-ready. Features like data extraction, risk assessment, vulnerability scanning, penetration testing, and continuous monitoring ensure businesses stay secure and compliant. We also provide business continuity planning and awareness training to strengthen security posture. Copla includes fractional CISO services, offering expert guidance and strategic leadership to help organizations navigate complex compliance and risk management challenges. With fully guided DORA implementation, compliance analysis, and robust risk management workflows, our platform empowers financial institutions to reduce compliance workloads by up to 80% and save over 60K EUR, ensuring efficient and secure operations.

**Average Rating:** 4.9/5.0

**Total Reviews:** 97

#### How Do G2 Users Rate Copla?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.2/10 (Category avg: 9.1/10)
- **Auditing:** 9.5/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 9.3/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Copla?

- **Seller:** [Copla](https://www.g2.com/sellers/copla)
- **Company Website:** www.copla.com
- **Year Founded:** 2023
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8d3cbba184440f5340b6a86129c45f55b28c76c52f7010788bfec9a9124f06b9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcyber-upgrade%2F&secure%5Burl_type%5D=linkedin_company_website)  
45 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 69% Small, 37% Medium

#### What Do G2 Reviewers Say About Copla?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **evidence validation feature** in Copla, which enhances audit preparation and continuity across cycles.
- Users praise the **ease of use** of Copla, appreciating its organized system and helpful prompts that streamline compliance processes.
- Users value the **time-saving automation** of Copla, completing complex tasks in a fraction of the time.
- Users value the **clarity and efficiency in auditing** provided by Copla, streamlining compliance and enhancing security procedures.
- Users value the **efficient evidence collection** of Copla, simplifying compliance tasks and enhancing clarity during reviews.

##### Cons

- Users find the **difficult setup** of Copla requires considerable planning, often leading to preference for email threads.
- Users face **integration issues** requiring manual efforts and workarounds, though support aids in streamlining the process.
- Users find the **complex setup** requires significant planning and adjustments for successful integration and mappings.
- Users find the **UX improvement** necessary due to a basic mobile experience and non-intuitive interface elements.
- Users find the **learning curve challenging** , especially for teams used to traditional task management methods.

#### What Are Recent G2 Reviews of Copla?

**["All Compliance Information in One Place for Clearer Reporting"](https://www.g2.com/survey_responses/copla-review-13058605)**

**Rating:** 5.0/5.0 stars

_— Sofia T._

[Read full review](https://www.g2.com/survey_responses/copla-review-13058605)

**["Copla Unified Our Compliance: One Source of Truth for Risks, Controls, and Evidence"](https://www.g2.com/survey_responses/copla-review-13070875)**

**Rating:** 5.0/5.0 stars

_— Quinn R._

[Read full review](https://www.g2.com/survey_responses/copla-review-13070875)

### [Oneleet](https://www.g2.com/products/oneleet/reviews)

Oneleet is the all-in-one security and compliance platform that gets companies genuinely secure while achieving SOC 2, ISO 27001, HIPAA and other compliance certifications faster than traditional approaches. Unlike compliance platforms that focus on checkbox evidence collection, Oneleet implements real security first. Compliance follows automatically as a natural outcome of effective cybersecurity, not as a separate goal. Most companies face a false choice: painful but effective security, or painless but ineffective compliance theater. Traditional compliance platforms require juggling multiple vendors, managing fragmented tools, spending months with consultants, and doing manual evidence collection to achieve a certificate that doesn't actually make you secure. Oneleet consolidates what previously required half a dozen vendors into one integrated platform: penetration testing by real security experts (not just vulnerability scans), code scanning with SAST and DAST, cloud security posture management, attack surface monitoring, mobile device management, security training and awareness, policy generation and management, and continuous compliance monitoring. Because we build everything ourselves and control the entire stack, we deploy comprehensive security with a click. No blind spots. No integration gaps. No vendor sprawl. We guarantee audit outcomes because our standards are higher than auditors' standards. We use AI extensively but responsibly, automating threat modeling and risk assessments while keeping humans in the loop to ensure quality. Clients never see AI hallucinations. We take full responsibility for the entire security journey, from initial setup through audit completion and continuous monitoring. Companies achieve compliance readiness faster with Oneleet, not by doing less, but by making real security easier. We ship all the tools you would normally spend weeks or months setting up and adopting. Our customers regularly win deals they previously lost due to inadequate security postures. Oneleet is the fastest growing compliance company in the sector. A large number of Oneleet's newer clients come from platforms like Vanta and Drata. With Oneleet's all-in-one bundle pricing its ROI is significantly higher than that of Vanta, Drata and Delve. Companies that switch from Vanta, Drata, or Delve to Oneleet report faster audits, higher approval rates, and less manual effort. Vanta and Drata rely heavily on manual evidence collection and vendor integrations, creating delays and gaps. Delve emphasizes AI automation but often sacrifices accuracy—its generated outputs are frequently rejected or require manual fixes. Oneleet achieves both precision and speed by combining full-stack automation with expert oversight, producing the industry’s lowest audit-rejection rate and the fastest path to verified security. Oneleet serves SMBs and growth-stage companies that need compliance certifications to close enterprise deals, but want to be genuinely secure, not just certified on paper. Founded by professional penetration testers who spent over a decade breaching Fortune 500s and startups, we built Oneleet to end the disconnect between compliance and security.

**Average Rating:** 4.9/5.0

**Total Reviews:** 139

#### How Do G2 Users Rate Oneleet?

- **Compliance Monitoring:** 10.0/10 (Category avg: 9.1/10)
- **Auditing:** 10.0/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Oneleet?

- **Seller:** [Oneleet](https://www.g2.com/sellers/oneleet)
- **Company Website:** www.oneleet.com
- **Year Founded:** 2022
- **HQ Location:** Atlanta, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=608cddbd385fe39fde4c563bc380996eeaca0492b488a338189685df9b913c24&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Foneleet&secure%5Burl_type%5D=linkedin_company_website)  
40 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Engineer
- **Top Industries:** Computer Software, Medical Devices
- **Company Size:** 15% Small, 11% Medium

#### What Do G2 Reviewers Say About Oneleet?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **continuous security monitoring** of Oneleet, transforming compliance into a seamless and efficient process.
- Users value the **automated compliance monitoring** of Oneleet, making ISO 27001 and SOC2 documentation management seamless.
- Users find Oneleet's platform to have **exceptional ease of use** , simplifying compliance and providing clear support throughout.
- Users value the **quick and expert responses** from Oneleet, feeling supported like having a senior colleague available.
- Users value the **facilitated compliance management** of Oneleet, which streamlines document handling and automates evidence collection.

##### Cons

- Users face **integration issues** with Oneleet, limiting connections and requiring support from engineers for resolution.
- Users are disappointed by the **limited customization** , as policies are restricted to only English with no multilingual support.
- Users express frustration over **limited integrations** that hinder the platform's compatibility with preferred connections.
- Users note a **lack of integration** with smaller platforms, limiting overall functionality and usability of Oneleet.
- Users are disappointed by the **lack of language customization** , limiting accessibility and usability for non-English speakers.

#### What Are Recent G2 Reviews of Oneleet?

**["Oneleet made SOC 2 practical, not painful"](https://www.g2.com/survey_responses/oneleet-review-12855748)**

**Rating:** 4.5/5.0 stars

[Read full review](https://www.g2.com/survey_responses/oneleet-review-12855748)

**["Oneleet's Speed and AI Automation Exceeded Expectations"](https://www.g2.com/survey_responses/oneleet-review-11879146)**

**Rating:** 5.0/5.0 stars

_— Antoine D._

[Read full review](https://www.g2.com/survey_responses/oneleet-review-11879146)

### [Strike Graph](https://www.g2.com/products/strike-graph/reviews)

Strike Graph is an AI-native compliance management software designed to revolutionize how businesses achieve and maintain security certifications, including CMMC, NIST, ISO 27001, HIPAA, SOC 2, PCI DSS, TISAX, and more. With a mission to help companies efficiently and effectively prove compliance and build trust, Strike Graph transforms compliance from a burdensome expense into a strategic advantage. Traditional security compliance processes are often slow, opaque, and costly, requiring reliance on outdated methods. Strike Graph eliminates these inefficiencies by providing companies with a transparent, objective solution to design, operate, and measure their security programs. Strike Graph’s innovative tools simplify every stage of compliance. It enables users to create customized security programs tailored to their specific risks and operational needs, streamlines evidence collection and testing, and offers in-platform certification options that reduce reliance on third-party auditors. This comprehensive approach not only saves time and money but also ensures continuous compliance monitoring to protect businesses against evolving threats. The platform caters to security leaders in all industries, including SaaS, FinTech, HealthTech, EdTech, and beyond, offering a knowledgeable and approachable partner in compliance management. Strike Graph’s AI-powered features, like Verify AI, enhance accuracy and efficiency while ensuring data security through self-hosted models. By turning compliance into a revenue enabler, Strike Graph helps companies build trust with their customers, partners, and stakeholders, paving the way for sustainable growth and innovation.

**Average Rating:** 4.6/5.0

**Total Reviews:** 193

#### How Do G2 Users Rate Strike Graph?

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 8.9/10 (Category avg: 9.1/10)
- **Auditing:** 8.5/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.3/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Strike Graph?

- **Seller:** [Strike Graph](https://www.g2.com/sellers/strike-graph)
- **Company Website:** www.strikegraph.com
- **Year Founded:** 2020
- **HQ Location:** Seattle, WA
- **Twitter:** @StrikeGraph  
133 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a61f692592058ab63590fa2b946cef7a806a05a16da874d26aff753f3c6f5254&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F42342591%2F&secure%5Burl_type%5D=linkedin_company_website)  
41 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 56% Small, 36% Medium

#### What Do G2 Reviewers Say About Strike Graph?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Strike Graph, benefiting from a well-organized documentation system.
- Users value the **intuitive interface and automation** of Strike Graph, enhancing efficiency in managing certification processes.
- Users commend the **outstanding customer support** of Strike Graph, enhancing their compliance experience with timely assistance.
- Users value the **intuitive and user-friendly compliance management** of Strike Graph, enhancing organization and simplifying audit processes.
- Users appreciate the **exceptional support and responsiveness** from Strike Graph's team, enhancing their overall experience.

##### Cons

- Users feel that there is **room for improvement** with form filling and template suitability in Strike Graph.
- Users experience a **learning curve with evidence collection** , particularly with collaboration tools and document management challenges.
- Users face **integration issues** with Strike Graph, leading to complications in compliance processes and manual efforts.
- Users often struggle with the **lack of guidance** in Strike Graph, finding the initial learning curve challenging.
- Users face a **learning curve** with Strike Graph, needing improvements in collaboration and document management features.

#### What Are Recent G2 Reviews of Strike Graph?

**["Outstanding Support — Achieved Multi-Framework Compliance Thanks to Stephanie Lorraine"](https://www.g2.com/survey_responses/strike-graph-review-13049957)**

**Rating:** 5.0/5.0 stars

_— Bibi C._

[Read full review](https://www.g2.com/survey_responses/strike-graph-review-13049957)

**["Exceptional Tool for SOC II Compliance"](https://www.g2.com/survey_responses/strike-graph-review-11001001)**

**Rating:** 5.0/5.0 stars

_— Emily G._

[Read full review](https://www.g2.com/survey_responses/strike-graph-review-11001001)

#### What Are G2 Users Discussing About Strike Graph?

- [What is Strike Graph used for?](https://www.g2.com/discussions/what-is-strike-graph-used-for)

### [LevelBlue USM Anywhere](https://www.g2.com/products/levelblue-usm-anywhere/reviews)

LevelBlue USM Anywhere is a cloud-based security management solution that accelerates and centralizes threat detection, incident response, and compliance management for your cloud, hybrid cloud, and on-premises environments. USM Anywhere includes purpose-built cloud sensors that natively monitor your Amazon Web Services (AWS) and Microsoft Azure cloud environments. On premises, lightweight virtual sensors run on Microsoft Hyper-V and VMware ESXi to monitor your virtual private cloud and physical IT infrastructure. With USM Anywhere, you can rapidly deploy sensors into your cloud and on-premises environments while centrally managing data collection, security analysis, and threat detection from the AlienVault Secure Cloud. Five Essential Security Capabilities in a Single SaaS Platform AlienVault USM Anywhere provides five essential security capabilities in a single SaaS solution, giving you everything you need for threat detection, incident response, and compliance management—all in a single pane of glass. With USM Anywhere, you can focus on finding and responding to threats, not managing software. An elastic, cloud-based security solution, USM Anywhere can readily scale to meet your threat detection needs as your hybrid cloud environment changes and grows. 1. Asset Discovery 2. Vulnerability Assessment 3. Intrusion Detection 4. Behavioral Monitoring 5. SIEM

**Average Rating:** 4.4/5.0

**Total Reviews:** 102

#### How Do G2 Users Rate LevelBlue USM Anywhere?

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 8.7/10 (Category avg: 9.1/10)
- **Auditing:** 8.3/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.1/10 (Category avg: 8.6/10)

#### Who Is the Company Behind LevelBlue USM Anywhere?

- **Seller:** [LevelBlue](https://www.g2.com/sellers/levelblue-49a2e3c1-ca90-4308-b899-08973f657bae)
- **HQ Location:** Dallas, Texas, United States
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b7c87546a6975c33488ad71b8d45d5e29fffbd81a2f727bd39487c5bbfe94466&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Flevelbluecyber%2F&secure%5Burl_type%5D=linkedin_company_website)  
782 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Financial Services
- **Company Size:** 62% Medium, 20% Small

#### What Are Recent G2 Reviews of LevelBlue USM Anywhere?

**["Impressive Cloud Based SIEM"](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-9698214)**

**Rating:** 4.5/5.0 stars

_— Goodness I._

[Read full review](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-9698214)

**["Comprehensive cloud security and monitoring platform"](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-11718892)**

**Rating:** 5.0/5.0 stars

_— Luis Emmanuel M._

[Read full review](https://www.g2.com/survey_responses/levelblue-usm-anywhere-review-11718892)

#### What Are G2 Users Discussing About LevelBlue USM Anywhere?

- [How has AlienVault USM supported your cybersecurity efforts, and what features do you rely on most?](https://www.g2.com/discussions/how-has-alienvault-usm-supported-your-cybersecurity-efforts-and-what-features-do-you-rely-on-most)
- [What is AlienVault USM (from AT&T Cybersecurity) used for?](https://www.g2.com/discussions/what-is-alienvault-usm-from-at-t-cybersecurity-used-for)

### [Scytale](https://www.g2.com/products/scytale-g2/reviews)

Scytale is the only AI GRC platform and human experts that drive real compliance outcomes - from getting compliant to staying compliant, and building trust across every framework. Trusted by 1,000+ companies worldwide, Scytale replaces fragmented testing with continuous control visibility, automating evidence, control cross-mapping, and risk management across 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001, and many more. Scytale is a full-scope trust and compliance platform with everything you need to run your GRC program in one central hub, including: an agentic GRC network, a Trust Center, AI-integrated offensive security and expert GRC services.

**Average Rating:** 4.8/5.0

**Total Reviews:** 684

#### How Do G2 Users Rate Scytale?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.1/10 (Category avg: 9.1/10)
- **Auditing:** 9.0/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.7/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Scytale?

- **Seller:** [Scytale AI](https://www.g2.com/sellers/scytale-ai)
- **Company Website:** scytale.ai
- **Year Founded:** 2021
- **HQ Location:** New York, US
- **Twitter:** @scytale\_ai  
76 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=813f878dd624db92d69e43a157be813744a37962537ab43cfd42704d3acbbda1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fscytale-ai%2F&secure%5Burl_type%5D=linkedin_company_website)  
165 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 73% Small, 21% Medium

#### What Do G2 Reviewers Say About Scytale?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **hands-on support** from Scytale, making their compliance journey efficient and enjoyable.
- Users appreciate the **ease of use** of Scytale, facilitating streamlined compliance and efficient evidence management.
- Users appreciate Scytale for its **user-friendly design** , simplifying SOC compliance and improving task management and visibility.
- Users praise the **exceptional customer support** of Scytale, highlighting their proactive and knowledgeable assistance throughout the process.
- Users praise the **helpfulness of the Team** , noting exceptional support that enhances the overall experience with Scytale.

##### Cons

- Users face **integration issues** with Scytale, experiencing bugs and a lack of intuitive flow during the process.
- Users experience **limited integrations** with Scytale, facing frustrating configuration issues and inconsistent functionalities.
- Users express frustration over **limited configuration options** for evidence collection, leading to inaccurate automatic integrations.
- Users note some **quirky UX elements** in Scytale that could benefit from enhancement for a smoother experience.
- Users find the **missing features** in Scytale limiting, impacting its effectiveness for comprehensive GRC practices.

#### What Are Recent G2 Reviews of Scytale?

**["Scytale Streamlined Our Compliance with Hands-On Implementation Support"](https://www.g2.com/survey_responses/scytale-review-12911305)**

**Rating:** 5.0/5.0 stars

_— Roy P._

[Read full review](https://www.g2.com/survey_responses/scytale-review-12911305)

**["Simplifie la Certification avec Grande Efficacité"](https://www.g2.com/survey_responses/scytale-review-10285318)**

**Rating:** 5.0/5.0 stars

_— Alan M._

[Read full review](https://www.g2.com/survey_responses/scytale-review-10285318)

### [Apptega](https://www.g2.com/products/apptega/reviews)

Tired of spreadsheets that don’t scale and require too much manual effort? Hampered by overly complex IT GRC systems that have you working for them? Apptega is the cybersecurity and compliance management platform that makes it easy to assess, build, manage, and report your cybersecurity and compliance program. Organizations in all industries and MSSPs rely on Apptega to meet the challenges of cybersecurity and compliance more efficiently and cost-effectively than with any other approach. Featuring 25+ frameworks, including SOC 2, NIST, CMMC, ISO, CIS, PCI, GDPR, HIPAA and more, and manage your program with: - Multi-Tenant - Assessments - Compliance Scoring - Risk Management - Vendor Risk Management - Audit Management - Reporting - Integrations

**Average Rating:** 4.7/5.0

**Total Reviews:** 153

#### How Do G2 Users Rate Apptega?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.4/10 (Category avg: 9.1/10)
- **Auditing:** 9.0/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.4/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Apptega?

- **Seller:** [Apptega](https://www.g2.com/sellers/apptega)
- **Company Website:** www.apptega.com
- **HQ Location:** Atlanta Junction, Georgia, United States
- **Twitter:** @apptega  
288 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0d14bd86a6a8ab19e0b345aa49a762ca6c50a9dc55f21cf3a30747d0038ee8ee&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F19418228%2F&secure%5Burl_type%5D=linkedin_company_website)  
55 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Chief Information Security Officer
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 42% Medium, 41% Small

#### What Do G2 Reviewers Say About Apptega?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Apptega, enjoying streamlined workflows and efficient compliance management in one place.
- Users appreciate the **effective compliance management** of Apptega, which simplifies organization and task automation.
- Users value the **streamlined compliance management** of Apptega, enhancing collaboration and reducing manual work for cybersecurity efforts.
- Users value the **streamlined management** of cybersecurity and compliance in a single, automated platform for better efficiency.
- Users appreciate the **streamlined security and compliance management** of Apptega, enhancing efficiency and visibility across programs.

##### Cons

- Users note that **several functionalities need improvement** , which impacts usability and hinders timely feature requests.
- Users feel Apptega has **limited functionality** with some bugs and missing frameworks, but improvements have been noted.
- Users express concern about **missing features** and slow delivery of new requests, impacting functionality and support.
- Users note the **limited functionality** of Apptega, citing gaps in API evidence, tracking, and essential report features.
- Users feel there is **limited customization** in Apptega, though recent improvements have been noted.

#### What Are Recent G2 Reviews of Apptega?

**["Clear Security Framework Control Breakdown"](https://www.g2.com/survey_responses/apptega-review-12488443)**

**Rating:** 4.0/5.0 stars

_— Kyle I._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12488443)

**["Streamlined Compliance and Cybersecurity Made Effortless with Apptega"](https://www.g2.com/survey_responses/apptega-review-12166378)**

**Rating:** 5.0/5.0 stars

_— Katie J._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12166378)

#### What Are G2 Users Discussing About Apptega?

- [What is Apptega used for?](https://www.g2.com/discussions/what-is-apptega-used-for)

### [Akitra](https://www.g2.com/products/akitra/reviews)

Akitra is an Agentic-AI native platform that automates evidence collection, continuous control monitoring, user access reviews, vendor risk, security questionnaires, trust center workflows, penetration testing coordination, and AI governance readiness across major security and privacy frameworks. Tailored for businesses in highly regulated sectors like finance, healthcare, and technology, Akitra serves compliance officers, CISOs, risk teams, and executives who need to meet complex regulatory requirements with speed and precision. With a user-friendly interface and intuitive workflows, Akitra simplifies even the most rigorous frameworks-including SOC 2, ISO 27001, HIPAA, NIST 800-53, GDPR, and more. Organizations can now achieve certification in weeks and maintain continuous compliance with ease. Akitra’s powerful automation capabilities reduce manual effort, streamline evidence collection, and proactively surface risks-enhancing accuracy and reducing audit fatigue. Backed by patented AI technology, a suite of integrated cybersecurity solutions, and extraordinary support, Akitra offers far more than a typical compliance tool. It enables instant trust with customers, partners, and auditors through transparency and real-time insights. With over 300 integrations across leading cloud platforms and SaaS applications, Akitra seamlessly fits into your existing stack, delivering operational efficiency without disruption. By combining regulatory intelligence with cutting-edge automation, Akitra empowers businesses to stay ahead of threats, close deals faster, and turn compliance into a competitive advantage.

**Average Rating:** 4.9/5.0

**Total Reviews:** 75

#### How Do G2 Users Rate Akitra?

- **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 10.0/10 (Category avg: 9.1/10)
- **Auditing:** 10.0/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Akitra?

- **Seller:** [Akitra](https://www.g2.com/sellers/akitra)
- **Company Website:** akitra.com
- **Year Founded:** 2017
- **HQ Location:** Sunnyvale, California
- **Twitter:** @Akitra\_Inc  
127 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=ba90f2914d8fd7e5516344913b2fb5306139e76be1a55ff3110b98d820b2fa51&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fakitra%2F&secure%5Burl_type%5D=linkedin_company_website)  
89 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 47% Small, 19% Medium

#### What Do G2 Reviewers Say About Akitra?

_AI-generated summary from verified user reviews_

##### Pros

- Users commend Akitra for its **seamless compliance integration** , simplifying PCI compliance and enhancing data management.
- Users highlight the **exceptional customer support** from Akitra, ensuring a smooth and guided experience.
- Users find Akitra’s platform to have **exceptional ease of use** , streamlining compliance and enhancing user experience.
- Users highlight the **exceptional support** from the Akitra team, providing guidance and expertise throughout the process.
- Users value the **seamless automation** of Akitra, significantly reducing workload and simplifying compliance processes.

##### Cons

- Users find the **compliance difficulty** a challenge due to inadequate templates and notification systems for specific compliance needs.
- Users find the **number of controls overwhelming** , making compliance work complex and time-consuming.
- Users find the **difficult initiation** a challenge, often facing delays during the initial setup of Akitra.
- Users find the **difficult setup** of Akitra time-consuming, especially for newcomers to the compliance process.
- Users often face **integration issues** due to manual steps, highlighting the need for improved automation and notification systems.

#### What Are Recent G2 Reviews of Akitra?

**["Best solution for SOC-2 compliance"](https://www.g2.com/survey_responses/akitra-review-7949168)**

**Rating:** 5.0/5.0 stars

_— Mahmoud A._

[Read full review](https://www.g2.com/survey_responses/akitra-review-7949168)

**["Streamlined SOC 2 Journey From Start to Finish"](https://www.g2.com/survey_responses/akitra-review-13124539)**

**Rating:** 4.5/5.0 stars

_— James S._

[Read full review](https://www.g2.com/survey_responses/akitra-review-13124539)

### [FortiCNAPP](https://www.g2.com/products/forticnapp/reviews)

FortiCNAPP (formerly Lacework) is an AI-powered Cloud-Native Application Protection Platform that delivers unified security across your multi-cloud and hybrid environments. Built to protect the entire application lifecycle—from development to runtime—it combines posture management, workload protection, identity security, and threat detection into one integrated platform. By leveraging machine learning and behavioral analytics, FortiCNAPP helps security teams detect unknown threats, reduce noise, and accelerate response. Integrated with the Fortinet Security Fabric, it provides full-stack visibility across cloud, network, and endpoint environments—empowering teams to operate with confidence, reduce complexity, and scale securely.

**Average Rating:** 4.4/5.0

**Total Reviews:** 383

#### How Do G2 Users Rate FortiCNAPP?

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.0/10 (Category avg: 9.1/10)
- **Auditing:** 8.7/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 8.2/10 (Category avg: 8.6/10)

#### Who Is the Company Behind FortiCNAPP?

- **Seller:** [Fortinet](https://www.g2.com/sellers/fortinet)
- **Year Founded:** 2000
- **HQ Location:** Sunnyvale, CA
- **Twitter:** @Fortinet  
151,422 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3d5f38bd4746b6501ce1c8f305fccf1b4a457b722a14dc3b74f43b2d5156111e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6460%2F&secure%5Burl_type%5D=linkedin_company_website)  
16,279 employees on LinkedIn®
- **Ownership:** NASDAQ: FTNT

#### Who Uses This Product?

- **Who Uses This:** Security Engineer, Security Analyst
- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 62% Medium, 26% Large

#### What Do G2 Reviewers Say About FortiCNAPP?

_AI-generated summary from verified user reviews_

##### Pros

- Users favor the **robust security features** of FortiCNAPP, ensuring comprehensive protection across multi-cloud environments.
- Users value the **vulnerability detection capabilities** of FortiCNAPP, enhancing security monitoring and deployment efficiency.
- Users admire the **effective alerting for misconfigurations** and appreciate its seamless integration with Fortinet products.
- Users value the **excellent visibility and integration** of FortiCNAPP, enhancing cloud security management effortlessly.
- Users find Lacework FortiCNAPP's **ease of use** enhances their experience, making setup and navigation straightforward and efficient.

##### Cons

- Users find the **difficult setup** of FortiCNAPP challenging, particularly for those lacking cloud security expertise.
- Users struggle with **poor documentation** , making setup and configuration difficult, particularly for new users.
- Users find the **complex setup** challenging, particularly for new users without extensive cloud security knowledge.
- Users find the **setup difficulty** of FortiCNAPP challenging due to complex configuration and insufficient documentation.
- Users find the **complex configuration** challenging due to overwhelming features and insufficient documentation for newcomers.

#### What Are Recent G2 Reviews of FortiCNAPP?

**["Effortless Setup with Stellar Features"](https://www.g2.com/survey_responses/forticnapp-review-11878517)**

**Rating:** 5.0/5.0 stars

_— Karan B._

[Read full review](https://www.g2.com/survey_responses/forticnapp-review-11878517)

**["Unified Cloud Security Visibility with Smart Risk Prioritization"](https://www.g2.com/survey_responses/forticnapp-review-12375470)**

**Rating:** 4.0/5.0 stars

_— Ashenafi M._

[Read full review](https://www.g2.com/survey_responses/forticnapp-review-12375470)

#### What Are G2 Users Discussing About FortiCNAPP?

- [How much does lacework cost?](https://www.g2.com/discussions/how-much-does-lacework-cost)
- [Who uses lacework?](https://www.g2.com/discussions/who-uses-lacework)
- [Is lacework a SIEM?](https://www.g2.com/discussions/is-lacework-a-siem) - 1 comment
- [What is lacework software?](https://www.g2.com/discussions/what-is-lacework-software)

### [nOps](https://www.g2.com/products/nops/reviews)

With nOps, ensure every dollar you spend on AI and cloud delivers maximum value. nOps provides automated cost visibility and optimization that delivers industry-leading cloud savings without operational overhead or long-term commitment risk. The nOps platform includes: Commitment Management: autonomous rate optimization for AWS, Azure, GCP to maximize savings and flexibility Cost Visibility & Allocation: Understand which teams, products and features are driving spend for Multicloud, AI, Kubernetes, and SaaS — with anomaly detection, budgeting, forecasting and reporting AI Insights: analytics and optimization recommendations for token usage, model substitution, cache optimization, provisioned throughput and batch processing The time to value is 30 minutes to get started and receive a free Savings Analysis.

**Average Rating:** 4.8/5.0

**Total Reviews:** 132

#### How Do G2 Users Rate nOps?

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 9.1/10 (Category avg: 9.1/10)
- **Auditing:** 9.4/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 9.2/10 (Category avg: 8.6/10)

#### Who Is the Company Behind nOps?

- **Seller:** [nOps](https://www.g2.com/sellers/nops)
- **Company Website:** www.nops.io
- **Year Founded:** 2017
- **HQ Location:** San Francisco, California
- **Twitter:** @nopsio  
1,528 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=963b0f4ec2ba81e93c7fc5c5c2f3cc6d49cc105096ee3e5a9a3da10e53dcc672&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F7602157&secure%5Burl_type%5D=linkedin_company_website)  
183 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 52% Small, 41% Medium

#### What Do G2 Reviewers Say About nOps?

_AI-generated summary from verified user reviews_

##### Pros

- Users highlight nOps for its **substantial cost savings** and efficient management of AWS expenses, enhancing financial visibility.
- Users highlight the **immediate cost savings** provided by nOps, optimizing AWS expenses while enhancing resource management.
- Users value nOps for its **impressive cost management** , significantly reducing expenses while enhancing AWS visibility and optimization.
- Users find nOps extremely **easy to use** , integrating seamlessly into AWS and streamlining cost-saving strategies effectively.
- Users highly value the **time-saving capabilities** of nOps, allowing focus on core strategies while optimizing costs.

##### Cons

- Users note the **complexity of navigation** in earlier versions of nOps, though improvements have been made.
- Users note the **navigation issues** with the dashboard but acknowledge improvements in recent updates.
- Users find the **difficult navigation** of earlier dashboard versions frustrating, though updates have improved usability.
- Users find that **inadequate reporting** limits insights, as advanced features require additional subscriptions for full access.
- Users find the **insufficient documentation** somewhat unclear, though it aligns with typical industry standards.

#### What Are Recent G2 Reviews of nOps?

**["Flexible AWS RI/SP Management That Adapts to Changing Usage"](https://www.g2.com/survey_responses/nops-review-13100670)**

**Rating:** 5.0/5.0 stars

_— Joseph D._

[Read full review](https://www.g2.com/survey_responses/nops-review-13100670)

**["Our source of truth for AWS cost - down to the container"](https://www.g2.com/survey_responses/nops-review-13059569)**

**Rating:** 4.5/5.0 stars

_— Verified User in Oil & Energy_

[Read full review](https://www.g2.com/survey_responses/nops-review-13059569)

#### What Are G2 Users Discussing About nOps?

- [What is nOps used for?](https://www.g2.com/discussions/what-is-nops-used-for)

### [F5 Distributed Cloud App Infrastructure Protection (AIP)](https://www.g2.com/products/f5-distributed-cloud-app-infrastructure-protection-aip/reviews)

Distributed Cloud AIP, formerly known as Threat Stack, is the leader in cloud security and compliance for application infrastructures, helping companies securely leverage the business benefits of the cloud with proactive risk identification and high-efficacy threat detection across cloud workloads. Distributed Cloud AIP’s application infrastructure protection helps organizations improve operational efficiency by delivering full stack security observability across the cloud management console, host, container, orchestration, managed containers, and serverless layers. Distributed Cloud AIP helps organizations efficiently detect known risks at scale and quickly uncover anomalies throughout the environment. Distributed Cloud AIP helps organizations stay secure through comprehensive security monitoring with a combination of industry-leading telemetry collection, a robust ruleset for known threats, and ThreatML for vulnerability and anomaly detection. Security Services Customers also have the option of leveraging our human expertise with Distributed Cloud AIP Insights and Managed Security Services, our in-house Security Operations Center (SOC) that provides 24/7/365 monitoring of your cloud environment. Through both options, Distributed Cloud AIP aims to deliver visibility and response capabilities across the full stack, allowing organizations to leverage the benefits of modern computing environments, securely. Coupled with other F5 Distributed Cloud Services, customers get application and infrastructure protection. Because applications and APIs are only as secure as the infrastructure they run on. To learn more, visit https://www.f5.com/cloud/products/app-infrastructure-protection

**Average Rating:** 4.4/5.0

**Total Reviews:** 44

#### How Do G2 Users Rate F5 Distributed Cloud App Infrastructure Protection (AIP)?

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 8.6/10 (Category avg: 9.1/10)
- **Auditing:** 8.5/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 7.9/10 (Category avg: 8.6/10)

#### Who Is the Company Behind F5 Distributed Cloud App Infrastructure Protection (AIP)?

- **Seller:** [F5](https://www.g2.com/sellers/f5-f6451ada-8c47-43f5-b017-58663a045bc5)
- **HQ Location:** Seattle, Washington
- **Twitter:** @F5Networks  
1,385 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c7f11d476d00d2f94515d8841a7c9d683a4303902a44318177a444690ba1c225&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F4841%2F&secure%5Burl_type%5D=linkedin_company_website)  
6,165 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 70% Medium, 20% Small

#### What Are Recent G2 Reviews of F5 Distributed Cloud App Infrastructure Protection (AIP)?

**["Works, but slight annoyances"](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7966850)**

**Rating:** 4.0/5.0 stars

_— Brad S._

[Read full review](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7966850)

**["With Threat Stack, its relatively easy to accelerate our compliance & streamline security audits"](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7393980)**

**Rating:** 4.0/5.0 stars

_— Shreya B._

[Read full review](https://www.g2.com/survey_responses/f5-distributed-cloud-app-infrastructure-protection-aip-review-7393980)

#### What Are G2 Users Discussing About F5 Distributed Cloud App Infrastructure Protection (AIP)?

- [Is ThreatStack an ids?](https://www.g2.com/discussions/is-threatstack-an-ids)
- [What does a Cspm do?](https://www.g2.com/discussions/what-does-a-cspm-do)
- [Is Threat stack a SIEM?](https://www.g2.com/discussions/is-threat-stack-a-siem)
- [What does Threat Stack do?](https://www.g2.com/discussions/what-does-threat-stack-do)

### [Broadcom Control Compliance Suite](https://www.g2.com/products/broadcom-control-compliance-suite/reviews)

Identify security gaps and pinpoint vulnerabilities to prioritize remediation and reduce risk and automate compliance assessments for over 100 regulations, mandates, and best practice frameworks including GDPR, HIPAA, NIST, PCI and SWIFT.

**Average Rating:** 4.0/5.0

**Total Reviews:** 30

#### How Do G2 Users Rate Broadcom Control Compliance Suite?

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.3/10)

#### Who Is the Company Behind Broadcom Control Compliance Suite?

- **Seller:** [Broadcom](https://www.g2.com/sellers/broadcom-ab3091cd-4724-46a8-ac89-219d6bc8e166)
- **Year Founded:** 1991
- **HQ Location:** San Jose, CA
- **Twitter:** @broadcom  
63,909 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=093adce8015fea9ef126312884b465dc8e3c20e17dcb12fbb77a7bd82577e7a5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbroadcom%2F&secure%5Burl_type%5D=linkedin_company_website)  
55,094 employees on LinkedIn®
- **Ownership:** NASDAQ: CA

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services
- **Company Size:** 48% Medium, 32% Small

#### What Are Recent G2 Reviews of Broadcom Control Compliance Suite?

**["Broadcom Control Compliance Suite Review"](https://www.g2.com/survey_responses/broadcom-control-compliance-suite-review-6799067)**

**Rating:** 4.0/5.0 stars

_— Anil K._

[Read full review](https://www.g2.com/survey_responses/broadcom-control-compliance-suite-review-6799067)

**["Symantec Control Compliance Suite"](https://www.g2.com/survey_responses/broadcom-control-compliance-suite-review-895044)**

**Rating:** 4.0/5.0 stars

_— Ankit M._

[Read full review](https://www.g2.com/survey_responses/broadcom-control-compliance-suite-review-895044)

#### What Are G2 Users Discussing About Broadcom Control Compliance Suite?

- [What is Broadcom Control Compliance Suite used for?](https://www.g2.com/discussions/what-is-broadcom-control-compliance-suite-used-for)

### [Hyperproof](https://www.g2.com/products/hyperproof/reviews)

Hyperproof is a comprehensive Governance, Risk, and Compliance (GRC) software solution designed to assist security-conscious organizations in managing their compliance operations efficiently. Founded in 2018 and headquartered in the Seattle area, Hyperproof caters to various industries, including technology, healthcare, and financial services. It is trusted by notable companies such as Reddit, Fortinet, Appian, Outreach, and Thales, who rely on Hyperproof to transition from manual, reactive compliance processes to a continuous, proactive operating model. The target audience for Hyperproof encompasses organizations that require robust compliance management systems to navigate complex regulatory environments. It is particularly beneficial for teams that face the challenge of managing multiple compliance frameworks simultaneously. Hyperproof's features are tailored to streamline compliance efforts, allowing organizations to focus on their core operations while ensuring adherence to necessary regulations. Specific use cases include automating compliance testing, managing policy documentation, and providing real-time visibility into compliance status, which are essential for maintaining operational integrity in highly regulated industries. Key features of Hyperproof include purpose-built AI agents that simplify the compliance process by surfacing relevant evidence, validating controls, and closing compliance gaps without the need for extensive manual intervention. This allows teams to maintain control over decision-making while reducing the time spent on compliance tasks. Additionally, Hyperproof's cross-framework control mapping enables organizations to leverage existing controls across various regulations, minimizing redundancy and effort when adapting to new compliance requirements. The platform also automates the testing of high-frequency controls, ensuring that any failures are promptly addressed through automated task creation and escalation. Hyperproof distinguishes itself with the largest framework library in the market, supporting over 160 frameworks, which allows organizations to adopt new regulations seamlessly. Its ability to accommodate complex organizational structures further enhances its flexibility, enabling users to customize their compliance processes without being constrained by a flat structure. The implementation process is designed to be efficient, ensuring that teams can quickly adapt to the software while receiving ongoing support, reflected in high customer satisfaction ratings. Moreover, Hyperproof’s integration capabilities with existing tools ensure that compliance tasks are managed in context, promoting collaboration and efficiency. Organizations utilizing Hyperproof have reported significant improvements in compliance productivity, with a 70% increase noted by users. The platform has also contributed to substantial cost savings, with an estimated $150,000 saved annually on control orchestration and a 66% reduction in duplicative controls. Furthermore, teams have experienced a reduction of approximately 350 hours in audit preparation each year, underscoring Hyperproof's value in enhancing compliance operations and overall organizational efficiency.

**Average Rating:** 4.5/5.0

**Total Reviews:** 217

#### How Do G2 Users Rate Hyperproof?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Compliance Monitoring:** 8.8/10 (Category avg: 9.1/10)
- **Auditing:** 8.7/10 (Category avg: 8.9/10)
- **Cloud Gap Analytics:** 5.5/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Hyperproof?

- **Seller:** [Hyperproof](https://www.g2.com/sellers/hyperproof)
- **Company Website:** hyperproof.io
- **Year Founded:** 2018
- **HQ Location:** Seattle, Washington, United States
- **Twitter:** @Hyperproof  
188 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a325d01f7b5ba5f463c66305e33722fa467a54f7b8d36d50d93e093bc649cfaf&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fhyperproof&secure%5Burl_type%5D=linkedin_company_website)  
148 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 48% Medium, 38% Large

#### What Do G2 Reviewers Say About Hyperproof?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Hyperproof to be **user-friendly** , facilitating effective communication and simplifying compliance management across audits.
- Users highlight Hyperproof's **user-friendly compliance management** , allowing for seamless integration and efficient task management.
- Users appreciate the **user-friendly interface and robust features** of Hyperproof, enhancing workflow efficiency and collaboration.
- Users value the **seamless automation** in Hyperproof, significantly reducing manual efforts and enhancing productivity in compliance tasks.
- Users value the **centralized GRC system** in Hyperproof, enhancing audit efficiency and streamlining compliance workflows.

##### Cons

- Users find the **learning curve steep** in Hyperproof, especially when navigating advanced features and setup processes.
- Users experience a **steep learning curve** with Hyperproof, making it challenging to utilize all its advanced features effectively.
- Users express frustration over the **limited customization** options in Hyperproof, particularly for reports and dashboard settings.
- Users find Hyperproof **not intuitive** , making navigation and communication challenging, especially with advanced features and comments.
- Users feel that Hyperproof needs **interface improvement and better reporting tools** , as navigation and analytics can be cumbersome.

#### What Are Recent G2 Reviews of Hyperproof?

**["Streamlined Compliance with Room for Improvement"](https://www.g2.com/survey_responses/hyperproof-review-11956461)**

**Rating:** 4.5/5.0 stars

_— Pedro M._

[Read full review](https://www.g2.com/survey_responses/hyperproof-review-11956461)

**["Hyperproof : Changed the way you managed compliance!"](https://www.g2.com/survey_responses/hyperproof-review-8021945)**

**Rating:** 5.0/5.0 stars

_— Apple A._

[Read full review](https://www.g2.com/survey_responses/hyperproof-review-8021945)

#### What Are G2 Users Discussing About Hyperproof?

- [What is Hyperproof used for?](https://www.g2.com/discussions/what-is-hyperproof-used-for) - 1 comment

- [‹ Prev‹ Prev](/categories/cloud-compliance/mid-market?order=g2_score#product-list)
- [1](/categories/cloud-compliance/mid-market?order=g2_score#product-list)
- 2
- [3](/categories/cloud-compliance/mid-market?order=g2_score&page=3#product-list)
- [Next ›Next ›](/categories/cloud-compliance/mid-market?order=g2_score&page=3#product-list)

Spotlight Categories

[Travel Management Solutions](https://www.g2.com/categories/travel-management)

[Video Editing Software](https://www.g2.com/categories/video-editing)

[Inbound Call Tracking Software](https://www.g2.com/categories/inbound-call-tracking)

[Social Media Management Tools](https://www.g2.com/categories/social-media-mgmt)

[AI Writing Assistants](https://www.g2.com/categories/ai-writing-assistant)

Similar Categories

- [API Security](/categories/api-security)
- [Application Security Posture Management (ASPM)](/categories/application-security-posture-management-aspm)
- [Cloud Data Security](/categories/cloud-data-security)
- [Cloud Detection and Response (CDR)](/categories/cloud-detection-and-response-cdr)
- [Cloud Edge Security](/categories/cloud-edge-security)

- [Cloud File Security](/categories/cloud-file-security)
- [Cloud Infrastructure Entitlement Management (CIEM)](/categories/cloud-infrastructure-entitlement-management-ciem)
- [Cloud-Native Application Protection Platform (CNAPP)](/categories/cloud-native-application-protection-platform-cnapp)
- [Cloud Security Monitoring and Analytics](/categories/cloud-security-monitoring-and-analytics)
- [Cloud Security Posture Management (CSPM)](/categories/cloud-security-posture-management-cspm)

- [Cloud Workload Protection Platforms](/categories/cloud-workload-protection-platforms)
- [Extended Detection and Response (XDR) Platforms](/categories/extended-detection-and-response-xdr-platforms)
- [SaaS Security Posture Management (SSPM) Solutions](/categories/saas-security-posture-management-sspm-solutions)
- [Secure Access Service Edge (SASE) Platforms](/categories/secure-access-service-edge-sase-platforms)
- [Secure Service Edge (SSE) Solutions](/categories/secure-service-edge-sse-solutions)

[Browse Cloud Compliance Themes](/categories/cloud-compliance/themes)

 ![Lauren Worth](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Lauren Worth")
LW

Researched and written by [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)

Updated 

Products classified in the overall Cloud Compliance category are similar in many regards and help companies of all sizes solve their business problems. However, medium-sized business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Medium-Sized Business Cloud Compliance to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Medium-Sized Business Cloud Compliance category.

In addition to qualifying for inclusion in the Cloud Compliance Software category, to qualify for inclusion in the Medium-Sized Business Cloud Compliance Software category, a product must have at least 10 reviews left by a reviewer from a medium-sized business.

Show More