Cloud Compliance Tools - Page 7

How Many Cloud Compliance Software Products Does G2 Track?

Total Products under this Category: 163

Category Stats (Sep 2026)

  • Average Rating: 4.56/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Flexera One (+1.44%) - Among all products in this category, Flexera One recorded the largest rating increase compared to last month

Last updated: September 01, 2026

How Does G2 Rank Cloud Compliance Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 16,200+ Authentic Reviews
  • 163+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Cloud Compliance Software

G2 Grid® for Cloud Compliance Software plotting products by satisfaction and market presence

Highlighted products: Vanta, Wiz, Sprinto, Drata, Microsoft Defender for Cloud, Scrut Automation, Secureframe, and Scytale.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-compliance/grids.json?focus%5B%5D=vanta&focus%5B%5D=wiz-wiz&focus%5B%5D=sprinto-inc&focus%5B%5D=drata&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=scrut-automation&focus%5B%5D=secureframe&focus%5B%5D=scytale-g2)

RegScale

RegScale is a Continuous Controls Monitoring (CCM) platform designed to be the operational risk tool for the CISO. Built on a compliance as code foundation, RegScale enables extreme automation with our API-first strategy, self-updating paperwork, and powerful AI agents that all but eliminate manual labor and make your program more proactive. Save money, accelerate time to market, and reduce risk in your operational environment.

Average Rating: 3.8/5.0

Total Reviews: 3

Who Is the Company Behind RegScale?

  • Seller: RegScale
  • Year Founded: 2021
  • HQ Location: McLean, Virginia, United States
  • LinkedIn® Page: www.linkedin.com
    68 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small, 33% Medium

What Do G2 Reviewers Say About RegScale?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the efficient compliance management of RegScale, allowing focus on essential initiatives and proactive risk mitigation.
  • Users value the effective risk management of RegScale, enabling focus on critical projects and proactive risk identification.
  • Users value the affordability of RegScale, praising its cost-effectiveness in managing compliance efficiently.
  • Users value the audit efficiency of RegScale, as it simplifies digitizing compliance artifacts and reduces costs.
  • Users find the automation of compliance record management remarkable, enabling proactive issue prevention and efficient organization.
Cons
  • Users find inadequate reporting in RegScale frustrating, as detailed reports often require external tools for proper analysis.
  • Users find customization difficult, often feeling overwhelmed by the cumbersome process of adapting reports and guidelines.
  • Users experience a bit of difficulty in usage with RegScale, indicating room for improvement in user experience.
  • Users find the export issues of RegScale limiting, often needing additional tools for detailed reports.
  • Users find the limited features of RegScale restrict their reporting capabilities, requiring external tools for detailed analysis.

What Are Recent G2 Reviews of RegScale?

Banyan Cloud

Banyan Cloud, Inc. is a U.S.-based cybersecurity company headquartered in San Jose, California. The company helps organizations strengthen cyber security, governance, compliance, and operational resilience across cloud, hybrid, multi-cloud, and on-premises environments through innovative AI-driven security and cloud management solutions. Product Overview Banyan Cloud delivers a unified AI-driven, SaaS-based Cloud-Native Application Protection Platform (CNAPP) that brings together cyber security, operations, governance, compliance, and cost optimization into a single platform. It enables organizations to secure, govern, optimize, and manage cloud, workload, database, and on-premises environments with complete visibility and control. Combining Cloud Security & Governance, CloudOps, AI-Driven FinOps, Workload Protection (Pre-Deployment & Runtime), Database Security & Governance, AI-Driven Cloud Detection & Response (CDR), Compliance Management, and Managed Security Services, Banyan Cloud delivers end-to-end visibility, continuous protection, operational excellence, and regulatory compliance across hybrid and multi-cloud environments. By converging security, operations, compliance, and cost management into a unified platform, Banyan Cloud eliminates tool sprawl, accelerates remediation, strengthens cyber resilience, and enables organizations to confidently scale their digital transformation initiatives.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate Banyan Cloud?

  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind Banyan Cloud?

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of Banyan Cloud?

CloudQuery

CloudQuery is a high-performance cloud asset inventory platform. CloudQuery supports multiple use cases including engineering, security, cloud security, marketing, sales, cloud infrastructure, and FinOps.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate CloudQuery?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 6.7/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind CloudQuery?

  • Seller: env zero
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Boston, MA
  • Twitter: @envzero
    1,832 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    34 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of CloudQuery?

Compaas

Compaas protects your cloud data against employee negligence.

Average Rating: 4.3/5.0

Total Reviews: 2

How Do G2 Users Rate Compaas?

  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind Compaas?

Who Uses This Product?

  • Company Size: 50% Large, 50% Small

What Are Recent G2 Reviews of Compaas?

Draftt

Draftt is the Operating System for continuous tech debt governance: an agentic, AI-first platform built to run proactively across your entire engineering stack. At its core, Draftt continuously identifies what is at risk, from end-of-life software and unrotated access keys to version drift and expiring certificates, then understands why each finding matters by adding the engineering and business context that makes it actionable: who owns it, what it breaks, and what it costs. Dozens of out-of-the-box and autonomous agents turn those findings into action, generating upgrade plans, routing each item to the team that owns it, and driving remediation to closure through the workflows you already use. Draftt operates on top of the tools you already run, connecting in minutes to your cloud accounts, registries, source control, and ticketing systems, with no agents to deploy and no code changes required. By eliminating the spreadsheet chasing, status meetings, and reactive firefighting that maintenance usually demands, Draftt empowers engineering teams to move beyond endless backlogs and govern their stack continuously, resolving tech debt before it becomes a cost, compliance, security, or reliability exposure.

Average Rating: 5.0/5.0

Total Reviews: 3

How Do G2 Users Rate Draftt?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind Draftt?

  • Seller: Draftt
  • Year Founded: 2024
  • HQ Location: New York, US
  • LinkedIn® Page: www.linkedin.com
    18 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Small, 33% Medium

What Are Recent G2 Reviews of Draftt?

Fidelis Halo

CloudPassage is a security and compliance automation platform designed to provide instant visibility and continuous protection for servers in any combination of data centers, private clouds and public clouds.

Average Rating: 4.8/5.0

Total Reviews: 3

How Do G2 Users Rate Fidelis Halo?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 6.7/10 (Category avg: 8.6/10)

Who Is the Company Behind Fidelis Halo?

Who Uses This Product?

  • Company Size: 67% Large, 33% Small

What Do G2 Reviewers Say About Fidelis Halo?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the real-time data intrusion detection of Fidelis Halo, ensuring robust protection for their critical assets.
  • Users value the real-time data intrusion detection of Fidelis Halo, ensuring critical asset protection effortlessly.
  • Users value the real-time data intrusion detection of Fidelis Halo, ensuring robust protection for sensitive assets.
  • Users appreciate the real-time data intrusion detection of Fidelis Halo, ensuring robust protection for critical assets.
  • Users value the real-time data intrusion detection of Fidelis Halo, ensuring robust protection for sensitive assets and compliance.

What Are Recent G2 Reviews of Fidelis Halo?

What Are G2 Users Discussing About Fidelis Halo?

Google Cloud Policy Intelligence

Security teams in cloud are faced with an overwhelming amount of information to process in order to keep their environments secure. Keeping up with everything manually is a difficult, never-ending task where failure can have high consequences. Google Cloud Policy Intelligence helps enterprises understand and manage their policies to reduce their risk. By providing more visibility and automation, customers can increase security without increasing their workload.

Average Rating: 3.8/5.0

Total Reviews: 2

Who Is the Company Behind Google Cloud Policy Intelligence?

  • Seller: Google
  • Year Founded: 1998
  • HQ Location: Mountain View, CA
  • Twitter: @google
    31,899,995 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    341,888 employees on LinkedIn®
  • Ownership: NASDAQ:GOOG

Who Uses This Product?

  • Company Size: 50% Small, 50% Large

What Are Recent G2 Reviews of Google Cloud Policy Intelligence?

What Are G2 Users Discussing About Google Cloud Policy Intelligence?

H2Cyber

At H2Cyber our product is designed for small businesses. We are teaching you the basic arithmetic of cybersecurity via our prioritized approach. This will allow your business to grow over time and move to a more robust cybersecurity framework if needed as all our controls are aligned to the five basic functions of the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, and Recovery). Our prioritized approach takes the guessing out of where to start. We have identified 77 controls and spread them out over 7 phases to help you easily manage your Cybersecurity program. Implementation times generally take between 17 and 35 weeks if you are starting from scratch.

Average Rating: 5.0/5.0

Total Reviews: 2

Who Is the Company Behind H2Cyber?

  • Seller: H2Cyber
  • Year Founded: 2009
  • HQ Location: Prosper, US
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of H2Cyber?

Uptycs

Uptycs unified CNAPP and XDR platform is a comprehensive security solution designed to protect the full spectrum of modern attack surfaces in your cloud, data centers, user devices, build pipelines, and containers. With a strong focus on DevSecOps, Uptycs offers a powerful combination of CNAPP capabilities, including Cloud Workload Protection Platform (CWPP), Kubernetes Security Posture Management (KSPM), Cloud Security Posture Management (CSPM), Cloud Infrastructure Entitlement Management (CIEM), and Cloud Detection and Response (CDR). With Uptycs you also get industry-leading eXtended Detection and Response (XDR) across macOS, Windows, and Linux endpoints, ensuring comprehensive protection, detection, and investigation. Uptycs delivers real-time threat detection, context-rich alerts, and maps detections to the MITRE ATT&CK framework for improved security insights. Uptycs performs scanning of containers for vulnerabilities throughout the CI/CD pipeline, promoting agile DevOps workflows, and reducing risk in production environments. Uptycs seamlessly integrates with existing tools and processes, streamlining operations and improving overall efficiency. Customers also benefit from the flexibility to choose between agent-based and agentless scanning options tailored to their unique cloud workload needs. Discover how Uptycs can transform your security posture with a comprehensive, flexible, and powerful security solution designed to meet the needs of today's complex and rapidly evolving cloud environments. Shift up with Uptycs. KEY DIFFERENTIATORS: 1. Unified & Comprehensive Platform: Uptycs offers a holistic security solution with CNAPP capabilities (CWPP, KSPM, CSPM, CIEM, and CDR) across data centers, laptops, build pipelines, containers, and cloud environments, reducing tool sprawl. 2. Advanced XDR: Industry-leading eXtended Detection and Response for endpoint protection across macOS, Windows, and Linux systems. 3. DevSecOps Focus: Enhanced security for container-based workloads and Kubernetes, supporting agile DevOps workflows. 4. Real-Time Threat Detection: Context-rich alerts and threat detection mapped to the MITRE ATT&CK framework for improved insights. 5. CI/CD Integration: Efficiently scan containers for vulnerabilities throughout the CI/CD pipeline, reducing risk in production. 6. Both agent-based and agentless scanning. Deploy agentless scanning for rapid, friction-free coverage to keep your data secure, and gain continuous runtime security, real-time investigations, and remediation with agent-based telemetry. 7. Rich API & Compatibility: Seamless integration with existing security tools and platforms, powered by osquery for broad compatibility. 8. Expert Support & Flexibility: Dedicated support from security experts and the best of both worlds with agent-based and agentless scanning options tailored to your needs.

Average Rating: 4.4/5.0

Total Reviews: 13

How Do G2 Users Rate Uptycs?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 7.5/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 6.7/10 (Category avg: 8.6/10)

Who Is the Company Behind Uptycs?

  • Seller: Uptycs
  • Year Founded: 2016
  • HQ Location: Waltham, US
  • Twitter: @uptycs
    1,483 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    134 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services
  • Company Size: 54% Medium, 38% Large

What Do G2 Reviewers Say About Uptycs?

AI-generated summary from verified user reviews

Pros
  • Users value the comparative analysis features of Uptycs, aiding in selecting the best cloud security tools.
  • Users appreciate the comparative analysis features of Uptycs, aiding them in selecting the best cloud security tools.
  • Users value the comparative analysis features of Uptycs for making informed decisions in cloud security tools.
  • Users value Uptycs for its compliance with CIS and PCI DSS standards, enhancing security monitoring capabilities.
  • Users value the compliance management of Uptycs, appreciating its adherence to CIS and PCI DSS standards.
Cons
  • Users regret the high fees of Uptycs, which impact their willingness to continue using the tool.
  • Users express concerns about high pricing, which makes continued use of Uptycs challenging for some.

What Are Recent G2 Reviews of Uptycs?

Anitian SecureCloud for Compliance Automation

Cloud Security Compliance Platform

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Anitian SecureCloud for Compliance Automation?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind Anitian SecureCloud for Compliance Automation?

  • Seller: Anitian
  • Year Founded: 2017
  • HQ Location: Palo Alto, California, United States
  • Twitter: @AnitianSecurity
    719 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    55 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Do G2 Reviewers Say About Anitian SecureCloud for Compliance Automation?

AI-generated summary from verified user reviews

Pros
  • Users value the automation capabilities of Anitian SecureCloud, which streamline compliance and enhance operational efficiency.
  • Users appreciate the quick and scalable compliance features of Anitian SecureCloud, simplifying security and audit processes.
  • Users appreciate the efficiency of Anitian SecureCloud, benefiting from quick implementation and seamless compliance automation.
  • Users value the seamless integrations of Anitian SecureCloud, enhancing efficiency in compliance and security automation.
  • Users value the quick implementation and scalable compliance of Anitian SecureCloud, streamlining their security processes effectively.
Cons
  • Users find the high cost of Anitian SecureCloud challenging, especially for small businesses trying to manage budgets.
  • Users feel the lack of customization in Anitian SecureCloud limits its effectiveness for their unique compliance needs.
  • Users note a challenging learning curve that can hinder effective adoption and utilization of Anitian SecureCloud.
  • Users find the limited customization options restrictive for adapting Anitian SecureCloud to their specific compliance needs.
  • Users find the high cost for small businesses to be a major barrier to adopting Anitian SecureCloud.

What Are Recent G2 Reviews of Anitian SecureCloud for Compliance Automation?

CloudFish FileSecure

Cloud-Fish software is optimized for Box, Microsoft OneDrive, Google Drive, and Dropbox for a seamless transfer of data between your systems and the Cloud, as well as, for clients with multiple cloud storage providers.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate CloudFish FileSecure?

  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.3/10 (Category avg: 8.6/10)

Who Is the Company Behind CloudFish FileSecure?

  • Seller: CloudFish
  • HQ Location: N/A
  • Twitter: @cloudfishent
    74 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of CloudFish FileSecure?

What Are G2 Users Discussing About CloudFish FileSecure?

DataGuard

Symmetry Systems DataGuard is a Data Security Posture Management solution for modern hybrid-cloud environments. It is designed to help CISO’s and senior IT and business decision makers develop a complete understanding of what data they have, where it is located, how it flows through the environment, who has access to it, how it is secured and in what manner it has been used. With full data visibility and pragmatic steps to remediate, security leaders use DataGuard to enact data security controls, practices and programs to protect their data. For organizations with stricter compliance requirements, enforcement of data protection policies can be automated through the platform.

Average Rating: 4.4/5.0

Total Reviews: 6

How Do G2 Users Rate DataGuard?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.3/10)

Who Is the Company Behind DataGuard?

Who Uses This Product?

  • Company Size: 83% Large, 17% Medium

What Do G2 Reviewers Say About DataGuard?

AI-generated summary from verified user reviews

Pros
  • Users value the backup ease of DataGuard, ensuring their data remains protected and recoverable at all times.
  • Users appreciate the strong compliance with industry standards of DataGuard, ensuring adherence to evolving regulations.
  • Users value the robust data protection of DataGuard, ensuring compliance with evolving privacy and security standards.
  • Users appreciate DataGuard's robust data security, ensuring compliance with ISO standards and evolving regulations.
  • Users value the compliance with ISO industry standards that ensures robust email security and privacy protection.
Cons
  • Users find the configuration process complex, which can lead to challenges in setting up DataGuard effectively.
  • Users find the configuration process for DataGuard to be somewhat complex, impacting their initial experience.
  • Users find the configuration complexity of DataGuard challenging, impacting their overall user experience.

What Are Recent G2 Reviews of DataGuard?

Data Theorem Cloud Secure

Data Theorem's Cloud Secure is an automated, continuous security service that integrates Cloud-Native Application Protection Platform (CNAPP) and Application Security (AppSec) capabilities across multi-cloud environments, encompassing both public and private assets. It offers a comprehensive, application-centric approach to cloud security, ensuring robust protection for cloud-native applications and infrastructure. Key Features and Functionality: - Monitoring: Implements Cloud Security Posture Management (CSPM) for continuous asset discovery, vulnerability assessments—including Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), Software Composition Analysis (SCA), and Infrastructure as Code (IaC) analysis—and Cloud Identity and Entitlement Management (CIEM). - Hacking: Utilizes innovative Hacker Toolkits that provide daily updates on security vulnerabilities and exploits, identifying potential external attack vectors and data breach risks within cloud environments. - Protection: Offers runtime protections designed to prevent data breaches across cloud-native APIs and applications, leveraging Data Theorem's Software Development Kit (SDK) libraries for real-time telemetry collection and policy-based blocking. Primary Value and Problem Solved: Cloud Secure addresses the critical need for comprehensive security in cloud-native applications by providing continuous monitoring, proactive vulnerability identification, and real-time protection mechanisms. By integrating CNAPP and AppSec functionalities, it enables organizations to effectively manage and secure their multi-cloud assets, thereby reducing the risk of data breaches and ensuring compliance with security standards. This holistic approach empowers businesses to maintain a strong security posture in the dynamic landscape of cloud computing.

Average Rating: 4.5/5.0

Total Reviews: 3

How Do G2 Users Rate Data Theorem Cloud Secure?

  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Data Theorem Cloud Secure?

  • Seller: Data Theorem
  • Year Founded: 2013
  • HQ Location: Palo Alto, California, United States
  • LinkedIn® Page: www.linkedin.com
    94 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Medium, 33% Small

What Are Recent G2 Reviews of Data Theorem Cloud Secure?

DigitSec S4

DigitSec provides a tool designed to assess the security of Salesforce code and customizations.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate DigitSec S4?

  • Compliance Monitoring: 8.3/10 (Category avg: 9.1/10)
  • Auditing: 8.3/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind DigitSec S4?

  • Seller: DigitSec
  • Year Founded: 2017
  • HQ Location: Seattle, US
  • Twitter: @DigitSec_Inc
    106 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    11 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of DigitSec S4?

HyTrust Cloud Control

CloudControl helps you protect your virtual infrastructure with authentication, authorization and auditing. Better visibility and control simplify compliance and accelerate further virtualization

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate HyTrust Cloud Control?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 8.3/10 (Category avg: 9.1/10)
  • Auditing: 10.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.3/10 (Category avg: 8.6/10)

Who Is the Company Behind HyTrust Cloud Control?

  • Seller: HyTrust
  • HQ Location: Minneapolis, Minnesota, United States
  • Twitter: @HyTrust
    1,578 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,812 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of HyTrust Cloud Control?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024