Best Enterprise Risk Management (ERM) Software - Page 2

How Many Enterprise Risk Management (ERM) Software Products Does G2 Track?

Total Products under this Category: 197

Category Stats (Nov 2026)

  • Average Rating: 4.47/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Drova (+1.18%) - Among all products in this category, Drova recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Enterprise Risk Management (ERM) Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 9,000+ Authentic Reviews
  • 197+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Enterprise Risk Management (ERM) Software

G2 Grid® for Enterprise Risk Management (ERM) Software plotting products by satisfaction and market presence

Highlighted products: Optro, ServiceNow Governance, Risk, and Compliance (GRC), TeamMate, Workiva, Hyperproof, Onspring, SAP Risk Management, and LogicGate.

Underlying data: [Grid® JSON](https://www.g2.com/categories/enterprise-risk-management-erm/grids.json?focus%5B%5D=optro&focus%5B%5D=servicenow-governance-risk-and-compliance-grc&focus%5B%5D=teammate&focus%5B%5D=workiva-workiva&focus%5B%5D=hyperproof&focus%5B%5D=onspring&focus%5B%5D=sap-risk-management&focus%5B%5D=logicgate&segment=enterprise)

ZenGRC

ZenGRC offers an established solution to elevate your company's risk and compliance program to the highest infosec standards. The cloud-based SaaS solution fits your existing GRC program and also evolves to guide you throughout your maturity roadmap. With ZenGRC as the central platform for your organization's entire infosec ecosystem, you can achieve continuous monitoring and efficient audit management capabilities, as well as customizable, end-to-end risk management that's built-in — not bolted on. Companies from SMB all the way to Enterprise use ZenGRC for... — Minimized manual effort through automation — Shortened, simplified audit cycles — Risk management that’s built-in—not bolted on — Increased visibility and reporting with dashboards — Direct integrations with ServiceNow, AWS, Qualys, Slack, JIRA, and more.

Average Rating: 4.4/5.0

Total Reviews: 102

How Do G2 Users Rate ZenGRC?

  • Validation Rules: 7.2/10 (Category avg: 8.4/10)
  • Impact Analysis: 7.5/10 (Category avg: 8.4/10)
  • Supplier Scoring: 7.8/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)

Who Is the Company Behind ZenGRC?

  • Seller: Zengrc
  • Year Founded: 2009
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    66 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 55% Medium, 38% Large

What Do G2 Reviewers Say About ZenGRC?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of ZenGRC, streamlining audits and enhancing efficiency across compliance initiatives.
  • Users love the centralized management of ZenGRC, streamlining audits and simplifying compliance initiatives effectively.
  • Users appreciate the ease of use of ZenGRC, streamlining compliance management and audit coordination effortlessly.
  • Users appreciate the efficient evidence management of ZenGRC, streamlining audits and improving compliance interactions.
  • Users value how ZenGRC simplifies audit management, streamlining processes and enhancing collaboration with external auditors.
Cons
  • Users find ZenGRC's inadequate reporting limits effectiveness, often necessitating external tools for data analysis.
  • Users find ZenGRC's limited reporting capabilities frustrating, often needing to develop custom solutions for better insights.
  • Users find poor reporting in ZenGRC, leading many to create custom solutions for their complex needs.
  • Users find ZenGRC's reporting issues limiting, prompting them to seek alternative solutions like PowerBI for better functionality.
  • Users find ZenGRC's complex implementation challenging, particularly for workflows requiring specialized reporting.

What Are Recent G2 Reviews of ZenGRC?

What Are G2 Users Discussing About ZenGRC?

Origami Risk

Origami Risk is a highly configurable, integrated SaaS platform for insurance, risk, safety, and compliance management. Origami Risk provides organizations with a centralized system to automate critical workflows, collect data, leverage analytics, and engage with stakeholders. Origami’s P&C Insurance solution includes policy administration, rating, and billing; claims administration; loss control; analytics, dashboards, and reporting. Origami's Risk Management solution unifies insurable and non-insurable risk data and automates risk, audit, compliance, health & safety processes, helping you achieve control, visibility, improved efficiency, and the power to proactively manage your complete risk environment. The most experienced service team in the industry ensures that client success is our central focus.

Average Rating: 4.4/5.0

Total Reviews: 42

How Do G2 Users Rate Origami Risk?

  • Validation Rules: 10.0/10 (Category avg: 8.4/10)
  • Impact Analysis: 10.0/10 (Category avg: 8.4/10)
  • Supplier Scoring: 10.0/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Origami Risk?

  • Seller: Origami Risk
  • Company Website:
  • Year Founded: 2009
  • HQ Location: Chicago, US
  • LinkedIn® Page: www.linkedin.com
    990 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 40% Large, 37% Medium

What Do G2 Reviewers Say About Origami Risk?

AI-generated summary from verified user reviews

Pros
  • Users benefit from the automation capabilities of Origami Risk, enhancing workflow efficiency and improving customer communication.
  • Users value the centralized platform of Origami Risk, which streamlines service request management and enhances communication.
  • Users value the centralized management of Origami Risk, enhancing efficiency in service request tracking and communication.
  • Users value the efficient communication features of Origami Risk, which enhance visibility and streamline issue resolution.
  • Users value the communication efficiency of Origami Risk, enhancing workflow and streamlining customer issue resolution.

What Are Recent G2 Reviews of Origami Risk?

What Are G2 Users Discussing About Origami Risk?

Essential ERM

Essential ERM® is an easy and cost-effective web-based risk management tool used by organizations in over 20 sectors and 70 countries. It can be activated, configured and used productively in minutes. You access it through a web browser, and there is nothing for your IT team to install or support. Risk management experience is not required, as the tool guides business users through the risk identification and management process. The tool distributes work among your management team and aggregates input to generate reports automatically. Essential ERM® is easy and intuitive for both users and system administrators. The system follows a practical approach to risk management – providing powerful features and aligning with COSO and ISO risk frameworks, while limiting and/or masking complexity for system users. The system provides dynamic reporting and the ability export data to Excel and other reporting tools.

Average Rating: 4.8/5.0

Total Reviews: 41

How Do G2 Users Rate Essential ERM?

  • Validation Rules: 10.0/10 (Category avg: 8.4/10)
  • Impact Analysis: 9.2/10 (Category avg: 8.4/10)
  • Supplier Scoring: 10.0/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 9.9/10 (Category avg: 9.2/10)

Who Is the Company Behind Essential ERM?

Who Uses This Product?

  • Top Industries: Management Consulting
  • Company Size: 36% Large, 33% Medium

What Do G2 Reviewers Say About Essential ERM?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive customer support of Essential ERM, enhancing their overall risk management experience effectively.
  • Users rave about the intuitive interface of Essential ERM, making risk management accessible for all skill levels.
  • Users value the intuitive interface and strong connectivity of Essential ERM, enhancing their risk management processes effectively.
  • Users commend the user-friendly interface and quick implementation of Essential ERM, enhancing their risk management capabilities.
  • Users find Essential ERM to be a must-have tool for easy risk management and intuitive navigation.
Cons
  • Users note that improvement is needed in Essential ERM for more granular control ratings and dedicated action plan dashboards.
  • Users face document management issues due to the lack of file upload support, relying on SharePoint as a workaround.
  • Users find the inadequate risk management in Essential ERM limits their ability to assess control effectiveness precisely.
  • Users find the limited features in Essential ERM restrict their ability to evaluate control effectiveness thoroughly.
  • Users find the limited functionality in rating control effectiveness frustrating and insufficient for their needs.

What Are Recent G2 Reviews of Essential ERM?

What Are G2 Users Discussing About Essential ERM?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

LogicManager

LogicManager is enterprise risk management (ERM) software that helps organizations identify, assess, prioritize, monitor, manage, and report on risk across the enterprise. The platform connects risks with the controls, processes, policies, vendors, and strategic objectives to eliminate "unknown knowns"—critical operational risks trapped in organizational silos, giving leadership a centralized, board-ready system of record to fulfill their fiduciary duties of oversight and protect business performance. LogicManager takes a cross-functional, Program-centric approach to risk management. Instead of restricting collaboration through traditional seat-based pricing, LogicManager licenses distinct risk domains as Programs with unlimited user seats, ensuring that every stakeholder can actively participate in the risk lifecycle to enforce Separation of Duties (SoD) and drive more informed, accountable decisions. At the center of the platform is Risk Ripple Assurance, LogicManager's connected risk model. Risk Ripple maps relationships between risks, controls, processes, vendors, and objectives so teams can see how weaknesses in one area propagate downstream. By integrating with IAM systems via SCIM, this logical graph serves as an active oversight layer to detect accumulated privileges, identify hidden dependencies, and provide a complete view of enterprise risk. LogicManager supports enterprise risk management activities through preconfigured Licensed Programs, including: -Enterprise Risk & Maturity Benchmarking -Risk identification, prioritization, monitoring, and reporting -Internal controls over Financial Reporting (ICFR) & SOX -Third-Party & Vendor Risk Management (TPRM) -Business Continuity (BCP) & Operational Resilience -Policy and Compliance Management -Issue, Incident, and Remediation Management -Cybersecurity, IT Governance, & Security Risk (SOC 2, ISO) -Enforceable Separation of Duties (SoD) & Task Handoffs -Executive dashboards and board risk reporting LogicManager helps organizations move from fragmented spreadsheets to a centralized enterprise risk system of record. The platform synchronizes organizational changes, reassigns orphaned tasks, and flags compliance drifts. This automation can reduce recurring program maintenance cycle times by up to 50% while continuously generating time-stamped proof of due care. The platform also helps organizations build and mature their ERM programs using the LogicManager Risk Maturity Model (RMM)™. Developed by LogicManager in 2006, the RMM™ is the industry's only maturity framework independently validated by peer-reviewed academic research to correlate with a 25% premium in enterprise market value. Through guided onboarding and embedded best practices, organizations can reliably measure progress and prove program value. LogicManager Expert (LMX) provides advanced, context-aware AI guidance based on trusted LogicManager University (LMU) content. LMX acts as a real-time practitioner facilitator, translating unstructured natural-language inputs into structured, policy-aligned risk objectives and routing work through human-in-the-loop, SoD-compliant approval workflows to preserve accountability and program integrity. LogicManager is designed for mid-market and enterprise organizations, particularly regulated, complex, and distributed institutions that require accountability to protect value, prove compliance, and fulfill their board-level fiduciary oversight responsibilities.

Average Rating: 4.2/5.0

Total Reviews: 132

How Do G2 Users Rate LogicManager?

  • Validation Rules: 8.3/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.2/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.3/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)

Who Is the Company Behind LogicManager?

  • Seller: LogicManager
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    42 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 33% Medium, 24% Large

What Do G2 Reviewers Say About LogicManager?

AI-generated summary from verified user reviews

Pros
  • Users love the ease of use in LogicManager, enabling quick understanding and efficient task management with minimal training.
  • Users find LogicManager to have an intuitive interface, making it easy to use with minimal training required.
  • Users find LogicManager's helpful support team essential for implementing controls and enhancing overall user experience.
  • Users value the navigation ease of LogicManager, finding it intuitive and efficient for their busy schedules.
  • Users value the centralized organization of LogicManager, facilitating clear communication and alignment across departments.
Cons
  • Users express concerns about the lack of clarity in LogicManager, affecting their understanding and navigation of the platform.
  • Users find the workflow section unintuitive, struggling with navigation and clarity as new users.
  • Users are frustrated by the missing features in LogicManager, such as limited attachment slots and a lack of training resources.
  • Users find the learning curve challenging, wishing for clearer guidance and training resources to enhance their experience.
  • Users report a lack of guidance, finding the learning process difficult due to insufficient training resources.

What Are Recent G2 Reviews of LogicManager?

NAVEX One

NAVEX One is an AI-powered GRC software platform that unifies your entire risk and compliance program. Powered by Nira, the NAVEX One AI agent, your teams can automate routine work, uncover insights faster and make more confident decisions. When your GRC data lives in disconnected systems, risks get missed, reporting slows down and the value of compliance to your bottom line gets muddied. NAVEX One brings everything together on one GRC platform, on one invoice. Hours saved – Spend more time strategizing and less time on manual tasks and troubleshooting Convenience – Get what you need to manage risk and compliance, without the multi-tool clutter Better experiences – Know every touchpoint with your employees and third-parties reflects your values Risk visibility – Remove uncertainty with real-time regulatory alerts and instant insights into risk status and activity Deeper insights –Make better business decisions by connecting intelligence across your business From solving today’s most urgent risk and compliance problem to building tomorrow’s resilient enterprise, NAVEX One is the GRC software platform that grows with you. More than 88 million employees worldwide rely on NAVEX AI-powered software and solutions for reporting, training, policy management, regulatory change and risk oversight. This global reach powers the world’s largest whistleblowing and case management database – delivering unmatched and interconnected insight that helps organizations benchmark performance and strengthen their compliance programs with pioneering data intelligence capabilities. We proudly serve more than 13,000 customers across 150+ countries, including 77% of the Fortune 100

Average Rating: 3.8/5.0

Total Reviews: 86

How Do G2 Users Rate NAVEX One?

  • Validation Rules: 8.3/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.8/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.3/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 7.3/10 (Category avg: 9.2/10)

Who Is the Company Behind NAVEX One?

  • Seller: NAVEX
  • Company Website:
  • Year Founded: 2012
  • HQ Location: Lake Oswego, OR
  • LinkedIn® Page: www.linkedin.com
    1,478 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Hospital & Health Care, Information Technology and Services
  • Company Size: 52% Large, 33% Medium

What Do G2 Reviewers Say About NAVEX One?

AI-generated summary from verified user reviews

Pros
  • Users enjoy the ease of use in NAVEX One, thanks to its clear explanations and intuitive dashboards.
  • Users appreciate the user-friendly interface of NAVEX One, enhancing ease of navigation and cross-department collaboration.
  • Users find NAVEX One's navigation ease remarkable, highlighting its user-friendly interface and efficient search functionality.
  • Users benefit from automation that reduces manual effort, streamlining compliance and risk management efficiently.
  • Users value the centralized compliance management of NAVEX One, enabling efficient oversight and informed decision-making.
Cons
  • Users report poor customer support with NAVEX One, facing challenges in contacting representatives and receiving timely assistance.
  • Users experience a difficult setup, facing challenges with initial configuration and lengthy implementation processes.
  • Users find NAVEX One's pricing structure to be expensive and complex, making it a considerable investment for smaller businesses.
  • Users report a steep learning curve for NAVEX One, requiring significant time and support for advanced features.
  • Users report a steep learning curve for NAVEX One's advanced features, complicating initial setup and usage.

What Are Recent G2 Reviews of NAVEX One?

What Are G2 Users Discussing About NAVEX One?

IBM OpenPages

IBM OpenPages is a software designed to centralize siloed risk management functions into a single, scalable GRC environment accessible across any cloud infrastructure. The software provides AI-guided workflows, risk classification suggestions, and real-time virtual assistant support by leveraging an AI-powered engine that reduces the knowledge gap for users across risk and compliance taxonomies. It automates incident reporting and risk mitigation classification and reduces human error by surfacing AI-suggested categories and accuracy checks throughout the user experience. IBM OpenPages addresses the challenge of inconsistent GRC adoption across organizations by promoting a culture where compliance is accessible, inclusive, and transparent for all users regardless of technical background. The software supports enterprise and mid-market organizations in banking and information technology with configurable risk management, compliance monitoring, and audit-ready reporting.

Average Rating: 4.2/5.0

Total Reviews: 66

How Do G2 Users Rate IBM OpenPages?

  • Validation Rules: 8.8/10 (Category avg: 8.4/10)
  • Impact Analysis: 9.1/10 (Category avg: 8.4/10)
  • Supplier Scoring: 8.7/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 7.9/10 (Category avg: 9.2/10)

Who Is the Company Behind IBM OpenPages?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM
  • Phone: 1-866-277-7488

Who Uses This Product?

  • Top Industries: Banking, Information Technology and Services
  • Company Size: 39% Medium, 34% Large

What Do G2 Reviewers Say About IBM OpenPages?

AI-generated summary from verified user reviews

Pros
  • Users value the visibility into risk and compliance that IBM OpenPages offers, enhancing proactive management and structured processes.
  • Users value the time-saving automation of IBM OpenPages, enhancing efficiency in workflow and decision-making processes.
  • Users value the automation capabilities of IBM OpenPages, enhancing control and accelerating decision-making in compliance management.
  • Users find IBM OpenPages to be easy to use, enabling smoother workflows and improved decision-making once familiar with it.
  • Users value the enhanced security and risk visibility provided by IBM OpenPages, improving decision-making and compliance processes.
Cons
  • Users find the complexity of IBM OpenPages challenging, especially during onboarding and when making necessary customizations.
  • Users find IBM OpenPages to be too expensive, complicating their ability to justify the investment.
  • Users find the usability needing improvement due to complexity and challenges with customization and reporting.
  • Users face a steep learning curve with IBM OpenPages, finding it complex, especially for occasional users or teams.
  • Users find the learning difficulty of IBM OpenPages challenging, with a steep learning curve for new users.

What Are Recent G2 Reviews of IBM OpenPages?

What Are G2 Users Discussing About IBM OpenPages?

SureCloud

SureCloud is the most intelligent GRC platform, enabling organisations to take centralised command of their risk, compliance and audit activities. Built for established teams managing complex environments, SureCloud offers a single, scalable solution that connects all GRC domains while fostering collaboration across your business units. Powered by event-sourced architecture, SureCloud provides a real-time, intelligent view of every risk so you understand how they have impacted you and what really matters to your business. See how risks evolve, track control performance, and link issues directly to outcomes while AI-driven insights help inform your next steps. SureCloud simplifies GRC complexity through a modular, no-code platform that is easy to configure without developer input. Collaboration is built in from role-based dashboards to automated approval workflows ensuring alignment and accountability no matter the business unit. Whether you are managing ISO 27001 compliance, improving your vendor assessments or driving data privacy, SureCloud gives you confidence to improve your posture and build lasting resilience. Highlights: - The Most Intelligent GRC Platform: SureCloud event-based architecture powers deep insights across your compliance and risk activities, capturing context over time instead of just static snapshots. Unlike other platforms, this enables you to track real changes, drive better decision-making, and gain clarity across your risks, controls, and even third-party interactions. - Clever compliance driven by ready automation: By automating manual human tasks such as evidence collection and controls monitoring, SureCloud dramatically reduces preparation time and ensures continued adherence to frameworks like ISO 27001, SOC 2 and GDPR. Get time back for teams to focus on your more important strategic decisions, uplifted by AI to inform improvements and next steps. - Total collaboration for enterprise success: Operate at scale without reliance on distributed toolsets, people and data by linking entities and projects. Clear task management and staged reviewing create accountability throughout the execution process so you deliver faster and without error, letting you improve your overall risk posture.

Average Rating: 4.2/5.0

Total Reviews: 56

How Do G2 Users Rate SureCloud?

  • Validation Rules: 7.2/10 (Category avg: 8.4/10)
  • Impact Analysis: 8.3/10 (Category avg: 8.4/10)
  • Supplier Scoring: 7.9/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)

Who Is the Company Behind SureCloud?

  • Seller: SureCloud
  • Company Website:
  • Year Founded: 2006
  • HQ Location: London, United Kingdom
  • LinkedIn® Page: www.linkedin.com
    64 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Retail
  • Company Size: 58% Large, 30% Medium

What Do G2 Reviewers Say About SureCloud?

AI-generated summary from verified user reviews

Pros
  • Users commend the excellent support team of SureCloud for their helpfulness and prompt responses to queries.
  • Users appreciate the excellent customer support from SureCloud, making their experience smooth and efficient.
  • Users find SureCloud to be simple to navigate, making it easy to view assessments and manage data efficiently.
  • Users find SureCloud's interface to be intuitive and easy to navigate, enhancing their overall experience while using the platform.
  • Users value the excellent reporting capabilities of SureCloud, appreciating its ease of use and helpful support team.
Cons
  • Users find the interface not intuitive, often requiring multiple clicks and facing navigation difficulties.
  • Users find limited functionality with SureCloud, especially regarding updates, navigation, and self-serve options.
  • Users find the reporting inadequate, preferring more intuitive options rather than relying on Excel for key stats.
  • Users find the limited customization options hinder efficiency and make the front-end system feel clunky.
  • Users find the limited reporting capabilities challenging, wishing for more effective insights directly within SureCloud.

What Are Recent G2 Reviews of SureCloud?

Archer

Archer helps organizations manage risk in the digital era—uniting stakeholders, integrating technologies and transforming risk into reward.

Average Rating: 3.6/5.0

Total Reviews: 17

How Do G2 Users Rate Archer?

  • Validation Rules: 7.8/10 (Category avg: 8.4/10)
  • Impact Analysis: 3.3/10 (Category avg: 8.4/10)
  • Supplier Scoring: 5.8/10 (Category avg: 8.4/10)
  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)

Who Is the Company Behind Archer?

Who Uses This Product?

  • Company Size: 80% Large, 25% Medium

What Do G2 Reviewers Say About Archer?

AI-generated summary from verified user reviews

Pros
  • Users find the ease of use of Archer particularly beneficial for seamless integration with other software.
  • Users value the easy integrations with other software in Archer, enhancing their overall user experience.
  • Users appreciate the seamless integrations of Archer, finding it easy to use with other software.
Cons
  • Users find the difficult customization of Archer disappointing, as custom designs often lead to frustration.
  • Users note the inadequate reporting features of Archer, which fall short compared to competitors' offerings.
  • Users often express disappointment due to limitations on custom design options that restrict modifications beyond standard features.
  • Users express disappointment with the limited customization options in Archer, hindering personal design preferences.
  • Users find the limited reporting capabilities of Archer insufficient compared to competing products in the market.

What Are Recent G2 Reviews of Archer?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated