# Best IT Risk Management Software for Medium-Sized Businesses *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)* Products classified in the overall IT Risk Management category are similar in many regards and help companies of all sizes solve their business problems. However, medium-sized business features, pricing, setup, and installation differ from businesses of other sizes, which is why we match buyers to the right Medium-Sized Business IT Risk Management to fit their needs. Compare product ratings based on reviews from enterprise users or connect with one of G2's buying advisors to find the right solutions within the Medium-Sized Business IT Risk Management category. In addition to qualifying for inclusion in the IT Risk Management Software category, to qualify for inclusion in the Medium-Sized Business IT Risk Management Software category, a product must have at least 10 reviews left by a reviewer from a medium-sized business. ## Top IT Risk Management Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) | 4.5/5.0 (715 reviews) | Third-party risk questionnaires with continuous external scanning | "[Centralized and Efficient Vendor Risk Management](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)" | | 2 | [Sprinto](https://www.g2.com/products/sprinto-inc/reviews) | 4.8/5.0 (1,646 reviews) | Continuous cloud compliance with automated evidence collection | "[Fast path to SOC 2 Type 1 — great platform, outstanding support](https://www.g2.com/survey_responses/sprinto-review-12885389)" | | 3 | [Thoropass](https://www.g2.com/products/thoropass/reviews) | 4.7/5.0 (578 reviews) | SOC 2 compliance with integrated audit | "[Best compliance portal till date.](https://www.g2.com/survey_responses/thoropass-review-11011782)" | | 4 | [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) | 4.9/5.0 (1,310 reviews) | Compliance automation with AI questionnaire completion | "[Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency](https://www.g2.com/survey_responses/scrut-automation-review-13049695)" | | 5 | [RealCISO vCISO & GRC Platform](https://www.g2.com/products/realciso-vciso-grc-platform/reviews) | 4.8/5.0 (187 reviews) | Multi-framework compliance automation with cloud misconfiguration detection | "[Smooth AWS/Google Integration and a Unified Compliance Dashboard](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-12785900)" | | 6 | [Optro](https://www.g2.com/products/optro/reviews) | 4.6/5.0 (1,586 reviews) | Connected IT risk across GRC modules | "[Overall a great user experience and easy to administer](https://www.g2.com/survey_responses/optro-review-9615543)" | | 7 | [SAP Risk Management](https://www.g2.com/products/sap-risk-management/reviews) | 4.2/5.0 (77 reviews) | SAP-native risk and access control | "[Efficient Risk Tracking, Needs UI Improvement](https://www.g2.com/survey_responses/sap-risk-management-review-12208457)" | | 8 | [Apptega](https://www.g2.com/products/apptega/reviews) | 4.7/5.0 (153 reviews) | Multi-framework compliance with control crosswalking | "[Clear Security Framework Control Breakdown](https://www.g2.com/survey_responses/apptega-review-12488443)" | | 9 | [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews) | 4.6/5.0 (107 reviews) | Automated GRC workflows with multi-framework compliance | "[The best GRC Product on the Market](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)" | | 10 | [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews) | 4.2/5.0 (66 reviews) | Unified GRC workflows with Watson-powered automation | "[Automates Security Tasks, But Pricey](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)" | ## How Many IT Risk Management Software Products Does G2 Track? **Total Products under this Category:** 168 ### Category Stats (Jul 2026) - **Average Rating**: 4.5/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: CEEL (+0.37%) - Among all products in this category, CEEL recorded the largest rating increase compared to last month *Last updated: July 01, 2026* ## How Does G2 Rank IT Risk Management Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 10,200+ Authentic Reviews - 168+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. --- **Sponsored** ### Optro Optro (Formerly AuditBoard) is a GRC software solution that helps enterprises manage audit, risk, and compliance workflows through an agentic system of action. By using GRC-trained AI, centralizing disparate data points, and automating manual processes, the platform enables organizations to transition from reactive risk management to proactive strategic planning. The platform functions as a comprehensive ecosystem for risk managers, assurance leaders, internal auditors, and compliance officers. It addresses the increasing complexity of modern regulatory environments by providing tools for real-time monitoring and reporting. Optro facilitates a streamlined flow of information between teams, ensuring that risk data is not siloed but instead used to inform high-level business decisions. Optro’s approach allows companies to identify emerging threats and operational vulnerabilities before they impact the bottom line, ultimately turning risk management into a driver of organizational opportunity. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1440&secure%5Bdisplayable_resource_id%5D=1440&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1440&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=20964&secure%5Bresource_id%5D=1440&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fit-risk-management%2Fmid-market&secure%5Btoken%5D=2efb58e5a6a775ea08f621547c964bdad3d22156d652818e2618e8d0e8785025&secure%5Burl%5D=https%3A%2F%2Foptro.ai%2Fcontact-us%2Frequest-demo%3Futm_source%3Dg2%26utm_medium%3Ddisplay%26utm_campaign%3Dpc-brand-campaign%26utm_content%3D2026&secure%5Burl_type%5D=book_demo) --- ## What Are the Top-Rated IT Risk Management Software Products in 2026? ### 1. [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board. **Average Rating:** 4.5/5.0 **Total Reviews:** 715 **How Do G2 Users Rate UpGuard Vendor Risk?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.1/10 (Category avg: 8.7/10) - **Quality of Support:** 9.0/10 (Category avg: 9.0/10) **Who Is the Company Behind UpGuard Vendor Risk?** - **Seller:** [UpGuard](https://www.g2.com/sellers/upguard) - **Company Website:** https://upguard.com - **Year Founded:** 2012 - **HQ Location:** Mountain View, California - **Twitter:** @UpGuard (8,705 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/upguard/ (371 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Security Analyst, CISO - **Top Industries:** Financial Services, Information Technology and Services - **Company Size:** 47% Enterprise, 38% Mid-Market #### What Are UpGuard Vendor Risk's Pros and Cons? **Pros:** - Ease of Use (252 reviews) - Security (143 reviews) - Risk Management (133 reviews) - Time-saving (108 reviews) - Customer Support (101 reviews) **Cons:** - Lack of Clarity (52 reviews) - Expensive (38 reviews) - Limited Functionality (32 reviews) - Improvement Needed (26 reviews) - Limited Customization (24 reviews) ### What Do G2 Reviewers Say About UpGuard Vendor Risk? *AI-generated summary from verified user reviews* **Pros:** - Users find UpGuard Vendor Risk to be **very easy to use** , significantly simplifying their daily work processes. - Users value the **user-friendly interface** of UpGuard, which facilitates efficient vendor data security and monitoring. - Users commend UpGuard for its **dynamic scoring system** , enabling efficient prioritization of patching and risk management. - Users value the **time-saving features** of UpGuard, simplifying processes and enhancing overall efficiency in security monitoring. - Users value UpGuard's **exceptional customer support** , enhancing efficiency and smooth resolution of tasks and queries. **Cons:** - Users find that the **lack of clarity in remediation recommendations** complicates implementation and decreases efficiency for IT teams. - Users find UpGuard Vendor Risk **expensive** , especially for smaller organizations with fewer vendors, limiting its accessibility. - Users note **limited functionality** in UpGuard, particularly in reporting and certain features compared to competing platforms. - Users feel that UpGuard needs to improve on **false positives** , as they complicate vulnerability management and reporting. - Users notice **limited customization** options in UpGuard Vendor Risk, affecting the adaptability of notifications and reporting features. #### What Are Recent G2 Reviews of UpGuard Vendor Risk? **"[Centralized and Efficient Vendor Risk Management](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)"** **Rating:** 5.0/5.0 stars *— Utkarsh K.* [Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780) --- **"[Efficient Risk Management with User-Friendly Interface](https://www.g2.com/survey_responses/upguard-vendor-risk-review-12971066)"** **Rating:** 4.5/5.0 stars *— Johnny N.* [Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-12971066) --- ### 2. [Sprinto](https://www.g2.com/products/sprinto-inc/reviews) Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations. **Average Rating:** 4.8/5.0 **Total Reviews:** 1,646 **How Do G2 Users Rate Sprinto?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.3/10 (Category avg: 8.7/10) - **Quality of Support:** 9.4/10 (Category avg: 9.0/10) **Who Is the Company Behind Sprinto?** - **Seller:** [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited) - **Company Website:** https://sprinto.com/ - **Year Founded:** 2020 - **HQ Location:** San Francisco, US - **Twitter:** @sprintoHQ (13,279 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/sprinto-com (424 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CTO, CEO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 57% Small-Business, 42% Mid-Market #### What Are Sprinto's Pros and Cons? **Pros:** - Ease of Use (384 reviews) - Customer Support (319 reviews) - Compliance (303 reviews) - Helpful (297 reviews) - Compliance Management (252 reviews) **Cons:** - Integration Issues (71 reviews) - Limited Customization (40 reviews) - Limited Integrations (40 reviews) - Unclear Guidance (38 reviews) - UX Improvement (37 reviews) ### What Do G2 Reviewers Say About Sprinto? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Sprinto, appreciating its straightforward deployment and supportive customer service. - Users commend Sprinto's **exceptional customer support** , highlighting their responsiveness and expertise in ensuring smooth deployments. - Users praise Sprinto for its **intuitive compliance management** , seamless automation, and exceptional support from knowledgeable account managers. - Users value the **exceptional customer support** provided by Sprinto, facilitating smooth deployment and effective compliance management. - Users highlight the **intuitive compliance management** of Sprinto, appreciating its visibility and automation features. **Cons:** - Users face **integration issues** with some niche tools, limiting functionality despite overall positive experience with Sprinto. - Users note **limited customization** options for features and reporting, suggesting improvements for a better experience. - Users report **limited integrations** causing some issues, but the team is responsive and continuously adding new options. - Users find the **guidance unclear** initially, leading to confusion about auditor accreditation and onboarding processes. - Users note **UI/UX issues** with navigation and syncing, which can complicate user experience despite recent updates. #### What Are Recent G2 Reviews of Sprinto? **"[Fast path to SOC 2 Type 1 — great platform, outstanding support](https://www.g2.com/survey_responses/sprinto-review-12885389)"** **Rating:** 5.0/5.0 stars *— Ignacio B.* [Read full review](https://www.g2.com/survey_responses/sprinto-review-12885389) --- **"[Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support](https://www.g2.com/survey_responses/sprinto-review-12898116)"** **Rating:** 5.0/5.0 stars *— Gayathri v.* [Read full review](https://www.g2.com/survey_responses/sprinto-review-12898116) --- ### 3. [RealCISO vCISO & GRC Platform](https://www.g2.com/products/realciso-vciso-grc-platform/reviews) RealCISO is a compliance intelligence platform — not compliance software. It compiles, tracks, and improves security posture over time through a connected compliance data graph. Used by 3,000+ organizations and enterprises to run assessments at scale, track maturity progression, and make compliance decisions based on real data. For MSPs, MSSPs, and vCISO consultants: RealCISO automates assessment delivery across your entire book of business. White-label the platform, manage multi-tenant client billing, and run portfolio intelligence across your clients—"Across your 60 healthcare clients, access control is the highest-variance category. 12 are below L2." Service providers report 40% faster assessment cycles and measurable increases in recurring compliance revenue. For enterprises and in-house teams: RealCISO replaces spreadsheets and point-in-time assessments with continuous compliance intelligence. Track maturity progression per control from L1 (Ad-hoc) to L5 (Optimizing) over time. Simulate impact before acting—"If I implement this control, how much does my risk score improve?" Run assessments against an infinite number of frameworks (NIST CSF 2.0, HIPAA 2.0, SOC 2, ISO 27001, CMMC, CIS Controls, PCI-DSS, FedRAMP) in a single project. One evidence set. Multiple frameworks simultaneously. The core difference: Every competitor stores flat question-and-answer rows. RealCISO builds a connected graph: Controls → Risks → Evidence → Vendors → Policies → People. The AI reasons over that structure. That's why "AI + a spreadsheet" cannot replace RealCISO, and why maturity trajectory, portfolio intelligence, and impact simulation are only possible here. Platform features available today: - L1-L5 maturity trajectory — track progression per control over time (no competitor tracks control-level maturity) - Impact simulation — rank open gaps by projected score improvement before acting ("what-if" analysis) - Multi-framework single project — assess HIPAA + NIST CSF simultaneously; one evidence set mapped to both - Bidirectional control-risk mapping — in production (competitors announced this; we shipped it) - Evidence expiration signals — automatically surface aging evidence ranked by risk impact - Portfolio intelligence — for partners: cross-client pattern recognition across your entire client base - Immutable report versioning — full audit trail; every change tracked to actor and timestamp - White-label — custom domains, logos, and billing models for partners - AI assessment engine — enterprise-grade, provider-agnostic; executes assessments, not just assists - Chat-integrated workflows — "Create 3 planner cards for my top gaps"; batch actions with context awareness Biggest gaps vs. Vanta/Drata: Evidence collection integrations (Drata has 200+, Vanta has 300+). RealCISO's focus is on the intelligence layer, not the integration layer. Continuous monitoring is on the roadmap for 2026. **Average Rating:** 4.8/5.0 **Total Reviews:** 187 **How Do G2 Users Rate RealCISO vCISO & GRC Platform?** - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10) - **Ease of Use:** 9.8/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.8/10 (Category avg: 8.7/10) - **Quality of Support:** 9.7/10 (Category avg: 9.0/10) **Who Is the Company Behind RealCISO vCISO & GRC Platform?** - **Seller:** [RealCISO](https://www.g2.com/sellers/realciso) - **Company Website:** https://realciso.io - **Year Founded:** 2020 - **HQ Location:** Boston, US - **Twitter:** @RealCISO (133 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/realciso-io (9 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** IT Compliance Manager, SOC Analyst - **Top Industries:** Retail, Chemicals - **Company Size:** 87% Mid-Market, 41% Small-Business #### What Are RealCISO vCISO & GRC Platform's Pros and Cons? **Pros:** - Ease of Use (53 reviews) - Compliance Management (35 reviews) - Compliance (33 reviews) - Automation (29 reviews) - Risk Management (27 reviews) **Cons:** - Integration Issues (24 reviews) - Limitations (13 reviews) - Limited Functionality (12 reviews) - Learning Curve (11 reviews) - Lack of Guidance (9 reviews) ### What Do G2 Reviewers Say About RealCISO vCISO & GRC Platform? *AI-generated summary from verified user reviews* **Pros:** - Users value the **clean and customizable dashboard** of RealCISO, enabling easy real-time monitoring and effective communication. - Users highlight the **effective compliance management** of RealCISO, simplifying ongoing risk evaluations and stakeholder communications. - Users value the **comprehensive compliance support** of RealCISO, simplifying security management with clear dashboards and automated analysis. - Users value the **automation of risk assessments** in RealCISO, streamlining compliance and security management effectively. - Users value the **organized risk management structure** of RealCISO, simplifying tracking and enhancing compliance management. **Cons:** - Users note that the **lack of integration** with other tools hinders overall functionality and collaboration within RealCISO. - Users face **integration limitations** that hinder scalability and require separate setups for regional evaluations. - Users find the **limited functionality** of RealCISO vCISO & GRC Platform restricts customization and efficiency in various settings. - Users find the **learning curve steep** due to advanced features and technical expertise requirements, impacting initial use. - Users desire more **contextual guidance** to understand recommendations better and to communicate effectively with stakeholders. #### What Are Recent G2 Reviews of RealCISO vCISO & GRC Platform? **"[RealCISO Simplifies Multi-Cloud Risk Tracking with Clear, Shareable Reports](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-12680412)"** **Rating:** 4.5/5.0 stars *— Daniela Z.* [Read full review](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-12680412) --- **"[Smooth AWS/Google Integration and a Unified Compliance Dashboard](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-12785900)"** **Rating:** 4.5/5.0 stars *— Wesley M.* [Read full review](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-12785900) --- ### 4. [Thoropass](https://www.g2.com/products/thoropass/reviews) Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators. **Average Rating:** 4.7/5.0 **Total Reviews:** 578 **How Do G2 Users Rate Thoropass?** - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.0/10 (Category avg: 8.7/10) - **Quality of Support:** 9.5/10 (Category avg: 9.0/10) **Who Is the Company Behind Thoropass?** - **Seller:** [Thoropass](https://www.g2.com/sellers/thoropass) - **Company Website:** https://thoropass.com/?utm_source=adwords&utm_medium=ppc&utm_campaign=Brand+NA&utm_term=b_thoropass - **Year Founded:** 2019 - **HQ Location:** New York - **Twitter:** @thoropass (379 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/thoropass/ (233 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CEO, CTO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 71% Small-Business, 26% Mid-Market #### What Are Thoropass's Pros and Cons? **Pros:** - Ease of Use (239 reviews) - Helpful (221 reviews) - Customer Support (171 reviews) - Compliance (157 reviews) - Team Helpfulness (115 reviews) **Cons:** - Lack of Clarity (39 reviews) - Integration Issues (34 reviews) - UX Improvement (33 reviews) - Audit Issues (32 reviews) - Improvements Needed (31 reviews) ### What Do G2 Reviewers Say About Thoropass? *AI-generated summary from verified user reviews* **Pros:** - Users praise Thoropass for its **ease of use** , with intuitive navigation and a user-friendly design enhancing their experience. - Users value the **exceptional support** and intuitive features of Thoropass, enhancing their audit experiences significantly. - Users highlight the **exceptional customer support** at Thoropass, enhancing their overall experience and satisfaction. - Users appreciate the **seamless integrations** of Thoropass, streamlining compliance processes and saving valuable time. - Users appreciate the **knowledgeable and responsive team** of Thoropass, making the process feel manageable and supportive. **Cons:** - Users find a **lack of clarity** in required items, impacting their compliance processes and understanding of scopes. - Users report **integration issues** with Thoropass, including unidirectional syncs and occasional reauthentication problems. - Users find the **UX improvement** necessary due to clunky features and disjointed navigation hindering their experience. - Users express frustration with the **duplicative document upload process** , which complicates the audit experience and slows down usability. - Users note significant **improvements needed** in Thoropass's design and functionality compared to competitors, showing a lack of flexibility. #### What Are Recent G2 Reviews of Thoropass? **"[Best compliance portal till date.](https://www.g2.com/survey_responses/thoropass-review-11011782)"** **Rating:** 5.0/5.0 stars *— Dushmanta s.* [Read full review](https://www.g2.com/survey_responses/thoropass-review-11011782) --- **"[Centralizes Compliance Tasks Efficiently](https://www.g2.com/survey_responses/thoropass-review-10958552)"** **Rating:** 5.0/5.0 stars *— Monica .* [Read full review](https://www.g2.com/survey_responses/thoropass-review-10958552) --- #### What Are G2 Users Discussing About Thoropass? - [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment ### 5. [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews) Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today. **Average Rating:** 4.9/5.0 **Total Reviews:** 1,310 **How Do G2 Users Rate Scrut Automation?** - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10) - **Ease of Use:** 9.5/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.6/10 (Category avg: 8.7/10) - **Quality of Support:** 9.7/10 (Category avg: 9.0/10) **Who Is the Company Behind Scrut Automation?** - **Seller:** [Scrut Automation](https://www.g2.com/sellers/scrut-automation) - **Company Website:** https://www.scrut.io/ - **Year Founded:** 2022 - **HQ Location:** Palo Alto, US - **Twitter:** @scrutsocial (120 Twitter followers) - **LinkedIn® Page:** https://in.linkedin.com/company/scrut-automation (233 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CTO, CEO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 50% Small-Business, 48% Mid-Market #### What Are Scrut Automation's Pros and Cons? **Pros:** - Ease of Use (289 reviews) - Customer Support (255 reviews) - Helpful (224 reviews) - Compliance Management (220 reviews) - Compliance (191 reviews) **Cons:** - Improvement Needed (68 reviews) - Missing Features (48 reviews) - Technical Issues (46 reviews) - Learning Curve (40 reviews) - Lack of Clarity (39 reviews) ### What Do G2 Reviewers Say About Scrut Automation? *AI-generated summary from verified user reviews* **Pros:** - Users find the **ease of use** of Scrut Automation invaluable for tracking and coordinating tasks efficiently. - Users praise Scrut Automation for its **exceptional customer support** , with dedicated team guidance during compliance training and audits. - Users highlight the **exceptional support** from the Scrut team, noting effective guidance throughout the compliance process. - Users value the **exceptional compliance management** of Scrut Automation, which simplifies the SOC 2 process significantly. - Users appreciate the **comprehensive compliance support** from Scrut Automation, which aids in successful audits and clarity. **Cons:** - Users find **improvement needed** in Scrut Automation, citing UI confusion, documentation issues, and small bugs in functionality. - Users note the **missing features** in Scrut Automation, particularly in risk management and report customization. - Users face **technical issues** that can overwhelm non-technical stakeholders and complicate usage of the platform. - Users find the **learning curve steep** , making it challenging for new users to navigate and understand the system. - Users experience a **lack of clarity** with test outcomes and feature purposes, leading to confusion and delays. #### What Are Recent G2 Reviews of Scrut Automation? **"[Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency](https://www.g2.com/survey_responses/scrut-automation-review-13049695)"** **Rating:** 4.0/5.0 stars *— Ravindra N.* [Read full review](https://www.g2.com/survey_responses/scrut-automation-review-13049695) --- **"[Transforming Compliance and Security Management with Scrut Automation](https://www.g2.com/survey_responses/scrut-automation-review-10499291)"** **Rating:** 5.0/5.0 stars *— Karan A.* [Read full review](https://www.g2.com/survey_responses/scrut-automation-review-10499291) --- #### What Are G2 Users Discussing About Scrut Automation? - [What is Scrut Automation used for?](https://www.g2.com/discussions/what-is-scrut-automation-used-for) - 1 upvote ### 6. [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews) OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies. **Average Rating:** 4.2/5.0 **Total Reviews:** 66 **How Do G2 Users Rate IBM OpenPages?** - **Has the product been a good partner in doing business?:** 7.9/10 (Category avg: 9.2/10) - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) - **Ease of Admin:** 7.3/10 (Category avg: 8.7/10) - **Quality of Support:** 8.4/10 (Category avg: 9.0/10) **Who Is the Company Behind IBM OpenPages?** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity (74,660 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (328,202 employees on LinkedIn®) - **Ownership:** SWX:IBM **Who Uses This Product?** - **Top Industries:** Banking, Information Technology and Services - **Company Size:** 39% Mid-Market, 34% Enterprise #### What Are IBM OpenPages's Pros and Cons? **Pros:** - Risk Management (12 reviews) - Time-saving (9 reviews) - Automation (7 reviews) - Ease of Use (7 reviews) - Security (7 reviews) **Cons:** - Complexity (3 reviews) - Expensive (3 reviews) - Improvement Needed (3 reviews) - Learning Curve (3 reviews) - Learning Difficulty (3 reviews) ### What Do G2 Reviewers Say About IBM OpenPages? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **effective risk management** capabilities of IBM OpenPages, enhancing compliance and streamlining processes. - Users value the **time-saving capabilities** of IBM OpenPages, streamlining activities and enhancing internal monitoring. - Users appreciate the **automation capabilities** of IBM OpenPages, enhancing efficiency with AI-driven insights and task management. - Users appreciate the **ease of use** of IBM OpenPages, highlighting its intuitive interface and supportive features. - Users value the **strong security and compliance visibility** of IBM OpenPages, enhancing risk management and trust during audits. **Cons:** - Users find **IBM OpenPages complex** , with a steep learning curve and challenging customization, hindering efficiency and usability. - Users find IBM OpenPages to be **expensive** , which may deter potential adopters despite its functionality. - Users indicate that **usability improvements** are necessary due to complexity and a steep learning curve for new users. - Users face a **steep learning curve** with IBM OpenPages, making it less accessible for new and occasional users. - Users find the **steep learning curve** of IBM OpenPages a challenge, impacting usability for occasional users. #### What Are Recent G2 Reviews of IBM OpenPages? **"[Automates Security Tasks, But Pricey](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)"** **Rating:** 4.0/5.0 stars *— Madhav B.* [Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480) --- **"[Transforms Risk Management and Compliance](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)"** **Rating:** 5.0/5.0 stars *— Charlotte W.* [Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779) --- #### What Are G2 Users Discussing About IBM OpenPages? - [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery) - [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool) - [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages) - [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson) ### 7. [Apptega](https://www.g2.com/products/apptega/reviews) Tired of spreadsheets that don’t scale and require too much manual effort? Hampered by overly complex IT GRC systems that have you working for them? Apptega is the cybersecurity and compliance management platform that makes it easy to assess, build, manage, and report your cybersecurity and compliance program. Organizations in all industries and MSSPs rely on Apptega to meet the challenges of cybersecurity and compliance more efficiently and cost-effectively than with any other approach. Featuring 25+ frameworks, including SOC 2, NIST, CMMC, ISO, CIS, PCI, GDPR, HIPAA and more, and manage your program with: - Multi-Tenant - Assessments - Compliance Scoring - Risk Management - Vendor Risk Management - Audit Management - Reporting - Integrations **Average Rating:** 4.7/5.0 **Total Reviews:** 153 **How Do G2 Users Rate Apptega?** - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10) - **Ease of Use:** 9.1/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.3/10 (Category avg: 8.7/10) - **Quality of Support:** 9.6/10 (Category avg: 9.0/10) **Who Is the Company Behind Apptega?** - **Seller:** [Apptega](https://www.g2.com/sellers/apptega) - **Company Website:** https://www.apptega.com - **HQ Location:** Atlanta Junction, Georgia, United States - **Twitter:** @apptega (288 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/19418228/ (55 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Chief Information Security Officer - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 42% Mid-Market, 41% Small-Business #### What Are Apptega's Pros and Cons? **Pros:** - Ease of Use (38 reviews) - Compliance Management (30 reviews) - Compliance (29 reviews) - Features (22 reviews) - Security (22 reviews) **Cons:** - Improvements Needed (12 reviews) - Limited Functionality (11 reviews) - Missing Features (8 reviews) - Limitations (7 reviews) - Limited Customization (7 reviews) ### What Do G2 Reviewers Say About Apptega? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Apptega, streamlining compliance management and enhancing team collaboration effortlessly. - Users value the **effective compliance management** capabilities of Apptega, enhancing organization and task assignment effortlessly. - Users value Apptega for its **streamlined compliance management** , significantly reducing manual work and improving risk communication. - Users value the **streamlined management** of cybersecurity and compliance efforts that Apptega provides in one platform. - Users value the **security management streamlining** of Apptega, leading to faster risk identification and improved compliance efficiency. **Cons:** - Users report that **multiple functionalities and slow support** require significant improvements for better usability of Apptega. - Users feel the platform has **limited functionality** , especially regarding frameworks and alignment with compliance standards. - Users report **missing features** , such as necessary frameworks and delays in new feature delivery, impacting usability. - Users identify **limited functionality** in Apptega, particularly regarding tracking and report generation, impacting usability. - Users express concern over **limited customization** capabilities in Apptega, although recent improvements show promise. #### What Are Recent G2 Reviews of Apptega? **"[Clear Security Framework Control Breakdown](https://www.g2.com/survey_responses/apptega-review-12488443)"** **Rating:** 4.0/5.0 stars *— Kyle I.* [Read full review](https://www.g2.com/survey_responses/apptega-review-12488443) --- **"[Streamlined Compliance and Cybersecurity Made Effortless with Apptega](https://www.g2.com/survey_responses/apptega-review-12166378)"** **Rating:** 5.0/5.0 stars *— Katie J.* [Read full review](https://www.g2.com/survey_responses/apptega-review-12166378) --- #### What Are G2 Users Discussing About Apptega? - [What is Apptega used for?](https://www.g2.com/discussions/what-is-apptega-used-for) ### 8. [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews) OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies.  **Average Rating:** 4.6/5.0 **Total Reviews:** 107 **How Do G2 Users Rate OneTrust Tech Risk & Compliance?** - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.7/10 (Category avg: 8.7/10) - **Quality of Support:** 8.9/10 (Category avg: 9.0/10) **Who Is the Company Behind OneTrust Tech Risk & Compliance?** - **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust) - **Company Website:** https://www.onetrust.com/ - **Year Founded:** 2016 - **HQ Location:** Atlanta, Georgia - **Twitter:** @OneTrust (6,566 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/10795459/ (2,487 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 46% Mid-Market, 40% Small-Business #### What Are OneTrust Tech Risk & Compliance's Pros and Cons? **Pros:** - Ease of Use (17 reviews) - Automation (15 reviews) - Compliance Management (12 reviews) - Risk Management (12 reviews) - Features (11 reviews) **Cons:** - Complex Implementation (6 reviews) - Difficult Setup (6 reviews) - Learning Curve (6 reviews) - Learning Difficulty (6 reviews) - Slow Loading (6 reviews) ### What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, simplifying risk management and enhancing visibility. - Users value the **automation features** of OneTrust, effectively streamlining risk management and policy processes. - Users value the **centralized platform** of OneTrust Tech Risk & Compliance for its ease in tracking and monitoring compliance. - Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance for simplifying risk and compliance management. - Users appreciate the **centralized platform** of OneTrust, enhancing efficiency and simplifying risk and compliance management. **Cons:** - Users find the **complex implementation** of OneTrust Tech Risk & Compliance to be time-consuming and challenging without sufficient guidance. - Users find the **difficult setup** of OneTrust Tech Risk & Compliance to be complex, time-consuming, and daunting without guidance. - Users find the **steep learning curve** of OneTrust Tech Risk & Compliance challenging, making initial setup daunting for newcomers. - Users find the **learning difficulty** of OneTrust Tech Risk & Compliance to be high, making initial setup frustrating for newcomers. - Users experience **slow loading** times with OneTrust Tech Risk & Compliance, especially when running multiple tasks simultaneously. #### What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance? **"[The best GRC Product on the Market](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)"** **Rating:** 5.0/5.0 stars *— Chinua K.* [Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011) --- **"[Powerful Automation, But Setup Challenges](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-11988415)"** **Rating:** 4.5/5.0 stars *— SONIA G.* [Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-11988415) --- #### What Are G2 Users Discussing About OneTrust Tech Risk & Compliance? - [What improvements would you suggest for OneTrust GRC to better meet your compliance needs?](https://www.g2.com/discussions/what-improvements-would-you-suggest-for-onetrust-grc-to-better-meet-your-compliance-needs) ### 9. [SecurityScorecard](https://www.g2.com/products/securityscorecard/reviews) Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics & Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard's technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes. **Average Rating:** 4.3/5.0 **Total Reviews:** 87 **How Do G2 Users Rate SecurityScorecard?** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Ease of Use:** 9.2/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.7/10 (Category avg: 8.7/10) - **Quality of Support:** 8.8/10 (Category avg: 9.0/10) **Who Is the Company Behind SecurityScorecard?** - **Seller:** [SecurityScorecard](https://www.g2.com/sellers/securityscorecard) - **Company Website:** https://securityscorecard.com - **Year Founded:** 2013 - **HQ Location:** New York, New York - **Twitter:** @security_score (8,115 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/5054644/ (616 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 47% Enterprise, 36% Mid-Market #### What Are SecurityScorecard's Pros and Cons? **Pros:** - Security (24 reviews) - Ease of Use (17 reviews) - Insights (10 reviews) - Customer Support (9 reviews) - Intuitive (8 reviews) **Cons:** - Lack of Clarity (4 reviews) - Limited Reporting (4 reviews) - Scoring Issues (4 reviews) - Improvement Needed (3 reviews) - Inefficient Risk Management (3 reviews) ### What Do G2 Reviewers Say About SecurityScorecard? *AI-generated summary from verified user reviews* **Pros:** - Users value the **insightful dashboards** and extensive features of SecurityScorecard for enhancing their security posture. - Users appreciate the **ease of use** in SecurityScorecard, valuing its intuitive interface and insightful dashboards. - Users find the **insightful dashboards** of SecurityScorecard invaluable for preparing for attacks and improving their scores. - Users praise the **unmatchable customer support** from SecurityScorecard, with prompt responses to all concerns. - Users appreciate the **intuitive design** of SecurityScorecard, finding it easy to understand and use effectively. **Cons:** - Users experience **lack of clarity** regarding score changes and relevant information, complicating their understanding of the platform. - Users find **limited reporting** flexibility in SecurityScorecard, hindering custom reports for presentations and audits. - Users face issues with **scoring inconsistencies** and false positives, complicating score interpretation and prioritization. - Users believe there is **improvement needed** in automated reporting due to false positives and vendor reliability issues. - Users highlight **inefficient risk management** due to false positives and subjective scoring, affecting overall satisfaction with SecurityScorecard. #### What Are Recent G2 Reviews of SecurityScorecard? **"[Essential for Third-Party Risk Management](https://www.g2.com/survey_responses/securityscorecard-review-11546891)"** **Rating:** 5.0/5.0 stars *— Tim U.* [Read full review](https://www.g2.com/survey_responses/securityscorecard-review-11546891) --- **"[External Vulnerability Management External Attack Surface](https://www.g2.com/survey_responses/securityscorecard-review-11547186)"** **Rating:** 5.0/5.0 stars *— Chris L.* [Read full review](https://www.g2.com/survey_responses/securityscorecard-review-11547186) --- #### What Are G2 Users Discussing About SecurityScorecard? - [What is SecurityScorecard used for?](https://www.g2.com/discussions/what-is-securityscorecard-used-for) - 1 comment - [How much does BitSight cost?](https://www.g2.com/discussions/how-much-does-bitsight-cost) - 1 comment - [What is IBM Watson used for?](https://www.g2.com/discussions/what-is-ibm-watson-used-for) - [Why SecurityScorecard?](https://www.g2.com/discussions/why-securityscorecard) - 1 comment - [What is SecurityScorecard?](https://www.g2.com/discussions/what-is-securityscorecard) ### 10. [SAI360](https://www.g2.com/products/sai360/reviews) SAI360's Platform brings together ethics, governance, risk, and compliance management for a more powerful perspective. Leverage the most connected platform and industry-leading content to manage risk from every angle. • Start quick with solutions built upon industry best practices • Scale as needed with the ability to customize • Gain insight and share easily with analytics and reporting • Engage employees with interactive training • Offer training in the flow of work for maximum impact • Access support from an industry leader with 25+ years of expertise Insights from the SAI360 team: https://www.sai360.com/ **Average Rating:** 4.2/5.0 **Total Reviews:** 117 **How Do G2 Users Rate SAI360?** - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.2/10) - **Ease of Use:** 7.6/10 (Category avg: 8.7/10) - **Ease of Admin:** 7.0/10 (Category avg: 8.7/10) - **Quality of Support:** 8.3/10 (Category avg: 9.0/10) **Who Is the Company Behind SAI360?** - **Seller:** [SAI360](https://www.g2.com/sellers/sai360) - **Company Website:** https://www.sai360.com/ - **Year Founded:** 2003 - **HQ Location:** Chicago, US - **Twitter:** @SAI_Compliance (2,036 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/sai360/ (442 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Hospital & Health Care, Financial Services - **Company Size:** 66% Enterprise, 30% Mid-Market #### What Are SAI360's Pros and Cons? **Pros:** - Ease of Use (12 reviews) - Customer Support (9 reviews) - Customizability (8 reviews) - Risk Management (8 reviews) - Features (7 reviews) **Cons:** - Expensive (7 reviews) - Difficult Learning (6 reviews) - Learning Curve (6 reviews) - Pricing Issues (6 reviews) - Steep Learning Curve (6 reviews) ### What Do G2 Reviewers Say About SAI360? *AI-generated summary from verified user reviews* **Pros:** - Users find SAI360's **ease of use** outstanding, appreciating quick onboarding and seamless integration for efficient workflows. - Users praise the **responsive customer support** of SAI360, appreciating quick assistance and effective issue resolution. - Users love the **high level of customizability** in SAI360, allowing tailored solutions for their organization's needs. - Users value the **integrated features** of SAI360, enhancing their compliance and risk management experience significantly. - Users appreciate the **wide range of integrated features** in SAI360, enhancing compliance and risk management connections. **Cons:** - Users find SAI360 to be **expensive** , often struggling with its high costs and the effort needed for effective use. - Users struggle with the **difficult learning** curve of SAI360, finding it complex and time-consuming to master. - Users find the **steep learning curve** of SAI360 challenging, requiring significant time for setup and onboarding. - Users feel the **pricing issues** with SAI360 make it challenging to justify its value and manage functionalities. - Users experience a **steep learning curve** with SAI360, making onboarding and feature mastery challenging for newcomers. #### What Are Recent G2 Reviews of SAI360? **"[Seamless Risk Management, Slight Learning Curve](https://www.g2.com/survey_responses/sai360-review-12932006)"** **Rating:** 4.0/5.0 stars *— Ruth P.* [Read full review](https://www.g2.com/survey_responses/sai360-review-12932006) --- **"[Centralized Third-Party Risk Management with Strong Heat Maps and Dashboards](https://www.g2.com/survey_responses/sai360-review-13030364)"** **Rating:** 5.0/5.0 stars *— Andres C.* [Read full review](https://www.g2.com/survey_responses/sai360-review-13030364) --- #### What Are G2 Users Discussing About SAI360? - [What are the benefits and challenges of using SAI360 for governance, risk, and compliance management?](https://www.g2.com/discussions/what-are-the-benefits-and-challenges-of-using-sai360-for-governance-risk-and-compliance-management) - [What is SAI360 used for?](https://www.g2.com/discussions/what-is-sai360-used-for) ### 11. [Optro](https://www.g2.com/products/optro/reviews) Optro (Formerly AuditBoard) is a GRC software solution that helps enterprises manage audit, risk, and compliance workflows through an agentic system of action. By using GRC-trained AI, centralizing disparate data points, and automating manual processes, the platform enables organizations to transition from reactive risk management to proactive strategic planning. The platform functions as a comprehensive ecosystem for risk managers, assurance leaders, internal auditors, and compliance officers. It addresses the increasing complexity of modern regulatory environments by providing tools for real-time monitoring and reporting. Optro facilitates a streamlined flow of information between teams, ensuring that risk data is not siloed but instead used to inform high-level business decisions. Optro’s approach allows companies to identify emerging threats and operational vulnerabilities before they impact the bottom line, ultimately turning risk management into a driver of organizational opportunity. **Average Rating:** 4.6/5.0 **Total Reviews:** 1,586 **How Do G2 Users Rate Optro?** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.4/10 (Category avg: 8.7/10) - **Quality of Support:** 8.6/10 (Category avg: 9.0/10) **Who Is the Company Behind Optro?** - **Seller:** [Optro](https://www.g2.com/sellers/optro) - **Company Website:** https://optro.ai/ - **Year Founded:** 2014 - **HQ Location:** Cerritos, California - **Twitter:** @optrohq (2,975 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/optro/ (722 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Internal Audit Manager, Senior Internal Auditor - **Top Industries:** Financial Services, Accounting - **Company Size:** 59% Enterprise, 20% Mid-Market #### What Are Optro's Pros and Cons? **Pros:** - Ease of Use (243 reviews) - Audit Management (150 reviews) - Intuitive (113 reviews) - Features (100 reviews) - Audit Efficiency (84 reviews) **Cons:** - Limited Functionality (71 reviews) - Improvement Needed (63 reviews) - Limited Customization (54 reviews) - Not Intuitive (54 reviews) - Limitations (51 reviews) ### What Do G2 Reviewers Say About Optro? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Optro, making basic audit functions and assessments straightforward and efficient. - Users value the **efficiencies** of Optro, praising its ease of use for comprehensive audit management. - Users love the **intuitive interface** of AuditBoard, noting its versatility and ease of use when configured properly. - Users love the **versatile modules** of Optro, appreciating the ease of use and centralized functionality. - Users appreciate the **audit efficiency** of Optro, seamlessly linking workpapers and controls for streamlined processes. **Cons:** - Users find the **limited functionality** of Optro frustrating, particularly with inconsistent analytics access and restrictive controls. - Users express frustration over the **improvement needed** in conducting audits and accessing helpful resources on Optro. - Users find **limited customization** challenging, particularly with complex roles and a steep learning curve for dashboards. - Users find the interface **not intuitive** , facing challenges in navigating features and adapting to changes. - Users struggle with the **limited formatting options** in Optro, affecting organization and overall usability. #### What Are Recent G2 Reviews of Optro? **"[Overall a great user experience and easy to administer](https://www.g2.com/survey_responses/optro-review-9615543)"** **Rating:** 4.5/5.0 stars *— Verified User in Accounting* [Read full review](https://www.g2.com/survey_responses/optro-review-9615543) --- **"[Optro, the great ally in Risk Management, Controls, and Audits](https://www.g2.com/survey_responses/optro-review-10064397)"** **Rating:** 5.0/5.0 stars *— Marco Polo M.* [Read full review](https://www.g2.com/survey_responses/optro-review-10064397) --- #### What Are G2 Users Discussing About Optro? - [What is AuditBoard used for?](https://www.g2.com/discussions/what-is-auditboard-used-for) - 1 comment - [What is the best audit software?](https://www.g2.com/discussions/what-is-the-best-audit-software) - [What is audit management software?](https://www.g2.com/discussions/what-is-audit-management-software) - 1 comment - [What is Soxhub?](https://www.g2.com/discussions/what-is-soxhub) - 1 comment - [What is AuditBoard?](https://www.g2.com/discussions/what-is-auditboard) ### 12. [Fastpath](https://www.g2.com/products/fastpath/reviews) Fastpath is a cloud-based access orchestration platform. It allows organizations to manage and automate the processes around access governance and security, quickly and efficiently. Customizable, quick to implement and deploy means you get value right away. And it works with all major enterprise software in multi-site, multi-application environments. Fastpath helps to identify, quantify and manage data access risk, so you can be confident that the right people are accessing the right information for the right reasons. Make informed strategic business decisions confidently, knowing your organization is secure and compliant. **Unrivalled Integrations** Fastpath integrates out-of-the-box, working across multi-application environments and custom-made software to deliver insight into your security risks. **Rapid Time to Value** We’re easy to implement and quick to deploy, and with no expensive customization required, you can immediately reap ROI. **Frictionless Automation** Effortlessly automate processes like onboarding, testing and proving controls to continuously identify, quantify, and eliminate risk. **Improved Efficiency** Ease of use and out-of-the-box content allow security teams to get up to speed fast, focus on what matters, and save valuable time. **Average Rating:** 4.7/5.0 **Total Reviews:** 106 **How Do G2 Users Rate Fastpath?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Ease of Use:** 8.9/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.9/10 (Category avg: 8.7/10) - **Quality of Support:** 9.7/10 (Category avg: 9.0/10) **Who Is the Company Behind Fastpath?** - **Seller:** [Delinea](https://www.g2.com/sellers/delinea) - **Year Founded:** 2004 - **HQ Location:** San Francisco - **Twitter:** @DelineaInc (897 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/delinea/ (1,328 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 55% Enterprise, 43% Mid-Market #### What Are Fastpath's Pros and Cons? **Pros:** - Ease of Use (20 reviews) - Customer Support (17 reviews) - Helpful (10 reviews) - Reporting (10 reviews) - Reporting Features (10 reviews) **Cons:** - Missing Features (6 reviews) - Poor Reporting (5 reviews) - Learning Curve (4 reviews) - Poor Customer Support (4 reviews) - Inadequate Reporting (3 reviews) ### What Do G2 Reviewers Say About Fastpath? *AI-generated summary from verified user reviews* **Pros:** - Users find Fastpath **easy to use** and appreciate the excellent support, making it a seamless experience. - Users praise Fastpath for its **excellent customer support** , highlighting quick responses and a friendly account manager. - The **exceptional support team** at Fastpath is responsive and knowledgeable, facilitating a smooth user experience. - Users find Fastpath's **reporting capabilities** excellent for SOX controls and detailed risk analysis. - Users appreciate the **reporting capabilities** of Fastpath, finding them user-friendly and essential for audits and approvals. **Cons:** - Users highlight the need for **missing features** like custom reports and streamlined role copying for improved efficiency. - Users express concerns about **poor reporting** capabilities in Fastpath, hindering audit tracking and report generation. - Users often face a **steep learning curve** with Fastpath, as solutions are frequently deferred to training documentation rather than direct support. - Users express frustration with **slow and unhelpful customer support** , hindering their ability to resolve issues effectively. - Users are frustrated by **inadequate reporting** capabilities, making essential data analysis challenging and time-consuming. #### What Are Recent G2 Reviews of Fastpath? **"[Fastpath makes my life easier](https://www.g2.com/survey_responses/fastpath-review-8523252)"** **Rating:** 5.0/5.0 stars *— Stephen O.* [Read full review](https://www.g2.com/survey_responses/fastpath-review-8523252) --- **"[Fastpath has been super beneficial](https://www.g2.com/survey_responses/fastpath-review-9593924)"** **Rating:** 5.0/5.0 stars *— Jackie H.* [Read full review](https://www.g2.com/survey_responses/fastpath-review-9593924) --- #### What Are G2 Users Discussing About Fastpath? - [What do you recommend for companies considering Fastpath for access control and compliance management?](https://www.g2.com/discussions/what-do-you-recommend-for-companies-considering-fastpath-for-access-control-and-compliance-management) - [How much does Fastpath cost?](https://www.g2.com/discussions/how-much-does-fastpath-cost) - [What is fastpath GRC?](https://www.g2.com/discussions/what-is-fastpath-grc) - [What does Fastpath do?](https://www.g2.com/discussions/what-does-fastpath-do) - [What is fastpath assure?](https://www.g2.com/discussions/what-is-fastpath-assure) ### 13. [Network Detective Pro](https://www.g2.com/products/network-detective-pro/reviews) Network Detective Pro is the non-intrusive IT assessment and reporting tool that automates data collection across the entire network to easily identify risks and issues. With it, MSPs, IT Service Providers, VARs and multi-functional IT Professionals can quickly and easily capture a vast amount of network assets, users, configurations, and issues, on-premises and in the cloud, without installing any software, probes, or agents. Network Detective Pro’s unique architecture automates data collection through a variety of built-in tools – non-intrusive network data collectors, lightweight discovery agents, cloud data — and does the heavy lifting to turn disorganized data into meaningful – and actionable – output. Be in the know. Performing on-going IT assessments and reporting is the at the core of every cybersecurity framework, and the only way to stay on top of risks and issues in ever-changing IT environments. This web-based platform is designed to transform the way MSPs, and network administrators conduct IT assessments, bringing a suite of advanced tools and features to your fingertips. It’s designed to elevate your service offerings, enhance your operational efficiency, and provide comprehensive insights into the networks you manage. Network Detective Pro allows its users to access and manage network assessments from anywhere, at any time. Network Detective Pro automatically collects a massive amount of network, cloud, asset and user data on a scheduled basis. The data is then immediately analyzed, filtered and instantly delivered through online dashboards, and can be presented in more than 100 different reports based on what you need to know . . . and show. **Average Rating:** 4.1/5.0 **Total Reviews:** 89 **How Do G2 Users Rate Network Detective Pro?** - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.2/10) - **Ease of Use:** 7.7/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.1/10 (Category avg: 8.7/10) - **Quality of Support:** 7.9/10 (Category avg: 9.0/10) **Who Is the Company Behind Network Detective Pro?** - **Seller:** [Kaseya](https://www.g2.com/sellers/kaseya) - **Company Website:** https://www.kaseya.com/ - **Year Founded:** 2000 - **HQ Location:** Miami, FL - **Twitter:** @KaseyaCorp (17,411 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/kaseya/ (5,471 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 66% Small-Business, 32% Mid-Market #### What Are Network Detective Pro's Pros and Cons? **Pros:** - Ease of Use (27 reviews) - Reporting Features (19 reviews) - Product Quality (17 reviews) - Features (15 reviews) - Comprehensive View (9 reviews) **Cons:** - Expensive (10 reviews) - Missing Features (9 reviews) - Setup Difficulty (9 reviews) - Learning Curve (7 reviews) - Limited Functionality (7 reviews) ### What Do G2 Reviewers Say About Network Detective Pro? *AI-generated summary from verified user reviews* **Pros:** - Users find the **ease of use** of Network Detective Pro enhances data gathering and onboarding efficiency. - Users praise the **excellent reporting features** of Network Detective Pro for clear insights and security assessments. - Users value the **excellent product quality** of Network Detective Pro for its comprehensive reporting and security insights. - Users commend the **insightful features** of Network Detective Pro, making it easy to gather essential network information. - Users value the **comprehensive view** Network Detective Pro provides for effective network discovery and vulnerability management. **Cons:** - Users find the **expensive pricing** of Network Detective Pro challenging, especially for small businesses or startups. - Users criticize the **missing features** in Network Detective Pro, highlighting limitations in customization and network insight. - Users report that the **setup difficulty** of Network Detective Pro can be time-consuming and cumbersome to navigate. - Users find the **learning curve quite steep** , requiring significant training and support to fully utilize Network Detective Pro. - Users find **limited functionality** in Network Detective Pro, with missing features compared to competitors causing frustration. #### What Are Recent G2 Reviews of Network Detective Pro? **"[Time-Saving Automated Reports in a Clean, Client-Ready Format](https://www.g2.com/survey_responses/network-detective-pro-review-12817955)"** **Rating:** 4.5/5.0 stars *— Denuka R.* [Read full review](https://www.g2.com/survey_responses/network-detective-pro-review-12817955) --- **"[A solid asset for any IT Tech Analyst's toolkit. However, it's not perfect.](https://www.g2.com/survey_responses/network-detective-pro-review-11398765)"** **Rating:** 4.0/5.0 stars *— Josh .* [Read full review](https://www.g2.com/survey_responses/network-detective-pro-review-11398765) --- ### 14. [Portnox](https://www.g2.com/products/portnox/reviews) Implement zero trust access control to networks, applications, and infrastructure without the need for extra appliances or long-term projects. Portnox's cloud-native access control platform closes the gaps across each access plane for human and non-human identities. Portnox Cloud brings together network access control (NAC), cloud RADIUS, passwordless authentication, Zero Trust Network Access (ZTNA), and TACACS+ capabilities that give IT and security teams complete visibility and control over their environment. No on-premises appliances to maintain, no complex deployment cycles. Core capabilities include: Cloud RADIUS and NAC (on-prem RADIUS backup option); certificate-based, passwordless authentication; 802.1x enforcement across wired switch ports and wireless networks; IoT and BYOD device segmentation; zero trust network and application access, granular policy controls, and continuous device compliance posture checks tied to real-time policy enforcement. Portnox integrates with the tools you already use (including Azure AD / Entra ID, Okta) and works with your existing network appliances, (such as Meraki, Fortinet, and more), and many other identity and network infrastructure tools. Portnox is designed for distributed organizations that need to manage access across employees, contractors, service accounts, managed devices, unmanaged devices, IoT, network infrastructure, SaaS applications, private applications, and AI agents. The platform helps reduce reliance on on-premises appliances, legacy VPNs, and fragmented access tools by centralizing access policy enforcement from a single cloud-native policy engine. With Portnox, organizations can: - Discover and assess users, devices, and identities connecting to corporate resources - Enforce risk-based access policies across networks, applications, and infrastructure - Support passwordless authentication, device posture checks, and continuous access enforcement - Control administrative access to routers, switches, firewalls, and other network devices - Improve audit readiness with visibility, access logs, and policy-based compliance controls Portnox NAC provides cloud-native network access control using cloud RADIUS to help teams identify devices on the network, evaluate device posture, and enforce access policies without deploying additional hardware appliances. Portnox ZTNA provides identity- and posture-aware access to SaaS and private applications. It helps organizations replace broad VPN access with more granular controls that verify each user, device, and session before allowing access. Portnox TACACS+ provides cloud-native command authorization and network device administration. It helps teams manage who can access critical infrastructure, what commands they can run, and how administrative activity is logged for compliance and audit purposes. Independent Forrester analysis found customers achieved a 75% reduction in breach risk, and 40% lower networking infrastructure costs — with a payback period of under 6 months. Portnox actively manages over 1 million devices worldwide, authenticating 40 million sessions and blocking over 1 million unauthorized access attempts every day. **Average Rating:** 4.4/5.0 **Total Reviews:** 120 **How Do G2 Users Rate Portnox?** - **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.2/10) - **Ease of Use:** 8.6/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.5/10 (Category avg: 8.7/10) - **Quality of Support:** 8.7/10 (Category avg: 9.0/10) **Who Is the Company Behind Portnox?** - **Seller:** [Portnox](https://www.g2.com/sellers/portnox) - **Company Website:** https://www.portnox.com - **Year Founded:** 2007 - **HQ Location:** Austin, Texas - **Twitter:** @portnox (829 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/portnox/ (99 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Network Engineer - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 40% Mid-Market, 37% Enterprise #### What Are Portnox's Pros and Cons? **Pros:** - Ease of Use (24 reviews) - Setup Ease (16 reviews) - Implementation Ease (13 reviews) - Customer Support (11 reviews) - Cloud Services (10 reviews) **Cons:** - Performance Issues (13 reviews) - Poor Interface Design (6 reviews) - Connection Issues (5 reviews) - Not Intuitive (5 reviews) - Authentication Issues (4 reviews) ### What Do G2 Reviewers Say About Portnox? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Portnox, praising its straightforward setup and efficient management of network access. - Users love the **easy initial setup** of Portnox, enabling quick and efficient deployment for security measures. - Users appreciate the **implementation ease** of Portnox, finding it intuitive and scalable for large deployments. - Users appreciate the **helpful and responsive customer support** of Portnox, enhancing overall user satisfaction and ease of deployment. - Users value the **cloud-based infrastructure** of Portnox, enabling easier management and enhanced security without on-prem requirements. **Cons:** - Users face **performance issues** with Portnox, including misrepresentation, rigid setup, and mysterious authentication problems. - Users find the **poor interface design** of Portnox challenging, particularly for new admins and workflow intuitiveness. - Users face **connection issues** including WiFi portal problems and RADIUS timeouts, complicating device identification and access. - Users find the **interface not intuitive** , making it challenging for new admins to navigate effectively. - Users experience **authentication issues** with Portnox, including SAML integration and timeouts on RADIUS for remote locations. #### What Are Recent G2 Reviews of Portnox? **"[Effortless Network Security with Seamless Intune Integration](https://www.g2.com/survey_responses/portnox-review-12321622)"** **Rating:** 5.0/5.0 stars *— Aaron B.* [Read full review](https://www.g2.com/survey_responses/portnox-review-12321622) --- **"[100% SaaS NAC with Real-Time Device Visibility and Compliance Alignment](https://www.g2.com/survey_responses/portnox-review-12756407)"** **Rating:** 4.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/portnox-review-12756407) --- ### 15. [VGS Platform](https://www.g2.com/products/very-good-security-vgs-platform/reviews) Very Good Security (“VGS”) makes it easy for customers to collect, protect and share sensitive financial data in a way that accelerates revenue, eliminates risk, ensures compliance, and drives profitability. VGS secures that information in an encrypted token vault; enabling our customers to de-risk their technical environment and achieve compliance certifications like PCI DSS, SOC 2, GDPR, and more, faster. VGS delivers a modern solution to collect, protect, and exchange sensitive data that spans from data privacy to payment acceptance and card issuance; providing businesses with tokenization, PCI compliance, data security, processor optionality, and the ability to operate on that data without compromising their security posture. VGS delivers a modern payments security solution that gives businesses ownership and control over critically valuable customer data, granting them maximum portability, operationality, and value extraction. VGS customers decouple the value and utility of data from the associated security and compliance risks and allow customers to achieve continuous PCI DSS compliance 16x faster, at 25% the cost of a DIY approach. **Average Rating:** 4.7/5.0 **Total Reviews:** 46 **How Do G2 Users Rate VGS Platform?** - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) - **Ease of Use:** 9.4/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.3/10 (Category avg: 8.7/10) - **Quality of Support:** 9.3/10 (Category avg: 9.0/10) **Who Is the Company Behind VGS Platform?** - **Seller:** [Very Good Security](https://www.g2.com/sellers/very-good-security) - **Year Founded:** 2015 - **HQ Location:** San Francisco, California - **Twitter:** @getvgs (1,437 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/18142614/ (452 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer - **Top Industries:** Financial Services, Banking - **Company Size:** 51% Mid-Market, 45% Small-Business #### What Are Recent G2 Reviews of VGS Platform? **"[Straight-forward integration (integrate with ease)](https://www.g2.com/survey_responses/vgs-platform-review-5286241)"** **Rating:** 5.0/5.0 stars *— Vu K.* [Read full review](https://www.g2.com/survey_responses/vgs-platform-review-5286241) --- **"[Excellent Security and Compliance Solution](https://www.g2.com/survey_responses/vgs-platform-review-9887631)"** **Rating:** 5.0/5.0 stars *— Luiz Gustavo F.* [Read full review](https://www.g2.com/survey_responses/vgs-platform-review-9887631) --- #### What Are G2 Users Discussing About VGS Platform? - [What is VGS Platform used for?](https://www.g2.com/discussions/what-is-vgs-platform-used-for) ### 16. [Hyperproof](https://www.g2.com/products/hyperproof/reviews) Hyperproof is a modern, AI-powered GRC platform that empowers IT, security, and compliance teams to manage controls at scale, integrate their risk operations, and build trust with customers. With Hyperproof, you can scale compliance across your business, automate many controls and orchestrate the rest, connect controls to risks to protect your business, and unlock new business by automating security questionnaires and trust management. Leading organizations like Reddit, Fortinet, Appian, Outreach, and Thales trust Hyperproof. **Average Rating:** 4.5/5.0 **Total Reviews:** 216 **How Do G2 Users Rate Hyperproof?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Ease of Use:** 8.8/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.1/10 (Category avg: 8.7/10) - **Quality of Support:** 9.4/10 (Category avg: 9.0/10) **Who Is the Company Behind Hyperproof?** - **Seller:** [Hyperproof](https://www.g2.com/sellers/hyperproof) - **Company Website:** https://hyperproof.io/ - **Year Founded:** 2018 - **HQ Location:** Seattle, Washington, United States - **Twitter:** @Hyperproof (188 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/hyperproof (148 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 48% Mid-Market, 38% Enterprise #### What Are Hyperproof's Pros and Cons? **Pros:** - Ease of Use (67 reviews) - Compliance Management (37 reviews) - Features (35 reviews) - Automation (33 reviews) - Compliance (32 reviews) **Cons:** - Learning Curve (17 reviews) - Learning Difficulty (13 reviews) - Limited Customization (13 reviews) - Not Intuitive (13 reviews) - Improvement Needed (12 reviews) ### What Do G2 Reviewers Say About Hyperproof? *AI-generated summary from verified user reviews* **Pros:** - Users find Hyperproof to be incredibly **user-friendly** , significantly enhancing collaboration and efficiency in managing compliance evidence. - Users value the **user-friendly interface** of Hyperproof, which simplifies complex compliance tasks and enhances productivity. - Users value Hyperproof for its **user-friendly interface and extensive features** , enhancing daily workflows and compliance management. - Users love the **automation features** of Hyperproof that streamline processes and significantly reduce manual efforts. - Users value the **centralized GRC** of Hyperproof, enhancing audit efficiency and streamlining compliance tasks significantly. **Cons:** - Users experience a **steep learning curve** with Hyperproof, especially with advanced features and a heavy interface during navigation. - Users experience a **steep learning curve** with Hyperproof, requiring extra time to master advanced features and processes. - Users express frustration over **limited customization** options in Hyperproof, impacting dashboard and reporting effectiveness. - Users find the interface **not intuitive** , often struggling to navigate and locate important features effectively. - Users find that **improvement is needed** in Hyperproof's intuitive interface and reporting flexibility due to a steep learning curve. #### What Are Recent G2 Reviews of Hyperproof? **"[Streamlined Compliance with Room for Improvement](https://www.g2.com/survey_responses/hyperproof-review-11956461)"** **Rating:** 4.5/5.0 stars *— Pedro M.* [Read full review](https://www.g2.com/survey_responses/hyperproof-review-11956461) --- **"[Streamlined Compliance Management with Centralized Audits, Evidence, and Automation](https://www.g2.com/survey_responses/hyperproof-review-12882951)"** **Rating:** 4.5/5.0 stars *— Luciana S.* [Read full review](https://www.g2.com/survey_responses/hyperproof-review-12882951) --- #### What Are G2 Users Discussing About Hyperproof? - [What is Hyperproof used for?](https://www.g2.com/discussions/what-is-hyperproof-used-for) - 1 comment ### 17. [Whistic](https://www.g2.com/products/whistic/reviews) Whistic is the fastest and most efficient way to exchange, evaluate, and manage security information — whether you’re assessing third-party vendors or responding to customer questionnaires. Designed for today’s fast-moving security and compliance teams, Whistic helps organizations build trust faster, reduce manual work, and move at the speed of business. Unlike other TPRM solutions that focus on just one side of the process, Whistic bridges both. Our platform combines AI-powered automation with the Trust Center Exchange™, a dynamic network where companies proactively publish and share their security posture. This eliminates repetitive back-and-forth communication, accelerates due diligence, and ensures transparency across the entire vendor ecosystem. With Whistic Assessment AI, teams can automate up to 90% of manual tasks, cut assessment time from weeks to minutes, and refocus valuable resources on high-impact security initiatives — all without increasing headcount. The result is a modern, scalable Third-Party Risk Management (TPRM) program that strengthens trust, enhances visibility, and transforms risk management from a roadblock into a competitive advantage. **Average Rating:** 4.5/5.0 **Total Reviews:** 53 **How Do G2 Users Rate Whistic?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.1/10 (Category avg: 8.7/10) - **Quality of Support:** 9.5/10 (Category avg: 9.0/10) **Who Is the Company Behind Whistic?** - **Seller:** [Whistic](https://www.g2.com/sellers/whistic) - **Company Website:** https://www.whistic.com - **Year Founded:** 2015 - **HQ Location:** Pleasant Grove, Utah - **Twitter:** @Whistic_Inc (1,210 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/6611250/ (50 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 47% Mid-Market, 34% Enterprise #### What Are Whistic's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Vendor Management (6 reviews) - Customer Support (4 reviews) - Documentation (4 reviews) - Efficiency (4 reviews) **Cons:** - Non-Intuitive Features (4 reviews) - Improvement Needed (3 reviews) - Not Intuitive (3 reviews) - UX Improvement (3 reviews) - Inefficient Risk Management (2 reviews) ### What Do G2 Reviewers Say About Whistic? *AI-generated summary from verified user reviews* **Pros:** - Users find Whistic's **ease of use** remarkable, allowing quick learning and efficient vendor management. - Users appreciate the **efficient vendor management** process in Whistic, allowing for easy evaluations and cost savings. - Users praise Whistic for its **top-tier customer support** , highlighting its personable assistance and swift problem resolution. - Users find the **documentation accessibility** in Whistic invaluable for efficient vendor risk management and compliance tracking. - Users praise Whistic for its **efficiency in risk assessments** , enabling quicker results and improving vendor management processes. **Cons:** - Users find the **non-intuitive features** of Whistic frustrating, as they complicate navigation and overall usability. - Users suggest **improvements in organization and user interface** to enhance the overall experience with Whistic. - Users find the **interface not intuitive** , leading to confusion and a steep learning curve when using Whistic. - Users find the **UX improvements necessary** due to confusing navigation and a steep learning curve. - Users find the **inefficient risk management** due to manual processes hinders the overall effectiveness of Whistic. #### What Are Recent G2 Reviews of Whistic? **"[Streamlined Vendor Assessments with Time-Saving Features](https://www.g2.com/survey_responses/whistic-review-12966187)"** **Rating:** 4.0/5.0 stars *— Korey K.* [Read full review](https://www.g2.com/survey_responses/whistic-review-12966187) --- **"[Simple Overview of Supplier Documentation](https://www.g2.com/survey_responses/whistic-review-12291639)"** **Rating:** 4.5/5.0 stars *— Kino V.* [Read full review](https://www.g2.com/survey_responses/whistic-review-12291639) --- #### What Are G2 Users Discussing About Whistic? - [What does Whistic do?](https://www.g2.com/discussions/what-does-whistic-do) - [How much does Whistic cost?](https://www.g2.com/discussions/how-much-does-whistic-cost) - [How does risk recon work?](https://www.g2.com/discussions/how-does-risk-recon-work) - [Who owns Whistic?](https://www.g2.com/discussions/who-owns-whistic) ### 18. [VulScan](https://www.g2.com/products/vulscan/reviews) Automated Vulnerability Scanning. Affordably Priced For Everyone! With almost 70 new hidden vulnerabilities identified every day, you would need to be a super hero with X-ray vision to find them all. Or, you can let VulScan do it for you. VulScan is purpose-built for MSPs and for IT Departments that handle their own IT security. It has all the features you need for both internal and external vulnerability management, but without all the complexity found in older solutions. Best of all, VulScan is priced so that cost is no longer a barrier to scanning as many assets as you need, as frequently as you want. That’s why our slogan is “Vulnerability Management For The Rest of Us! VulScan is an affordable cloud-based vulnerability management platform. It includes the software needed to spin up an unlimited number of virtual network scanner appliances using Hyper-V or VMWare, and a cloud-based portal to control the scanners and manage the discovered issues. For internal network scanning, the appliances can be installed on any existing computer that has excess capacity on the network, or installed on a dedicated box to be permanently installed. You can add multiple scanners and configure them each to scan separate parts of the network to get even faster results pushed into the same client site dashboard at no additional cost. For external scanning, the appliances are installed on the MSP’s data center or other remote location and “pointed” to the public facing IP addresses of the target network. **Average Rating:** 4.1/5.0 **Total Reviews:** 121 **How Do G2 Users Rate VulScan?** - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10) - **Ease of Use:** 8.1/10 (Category avg: 8.7/10) - **Ease of Admin:** 7.9/10 (Category avg: 8.7/10) - **Quality of Support:** 8.1/10 (Category avg: 9.0/10) **Who Is the Company Behind VulScan?** - **Seller:** [Kaseya](https://www.g2.com/sellers/kaseya) - **Company Website:** https://www.kaseya.com/ - **Year Founded:** 2000 - **HQ Location:** Miami, FL - **Twitter:** @KaseyaCorp (17,411 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/kaseya/ (5,471 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer & Network Security - **Company Size:** 66% Small-Business, 32% Mid-Market #### What Are VulScan's Pros and Cons? **Pros:** - Ease of Use (24 reviews) - Implementation Ease (10 reviews) - Simple (10 reviews) - Features (9 reviews) - Reporting Features (9 reviews) **Cons:** - Difficult Setup (6 reviews) - Inadequate Reporting (5 reviews) - Poor Customer Support (5 reviews) - Confusing Interface (4 reviews) - Limited Features (4 reviews) ### What Do G2 Reviewers Say About VulScan? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of VulScan, enjoying its straightforward deployment and automated scanning features. - Users praise the **intuitive interface and automated vulnerability scanning** of VulScan, making implementation and reporting effortless. - Users appreciate the **easy report generation** in VulScan, enjoying straightforward scheduling and integration with existing solutions. - Users value the **seamless integrations** of VulScan, enhancing efficiency in documentation and vulnerability management. - Users appreciate the **ease of reporting** with VulScan, benefiting from automated scans and consolidated reports. **Cons:** - Users find the **difficult setup** of VulScan frustrating, requiring extensive documentation and troubleshooting for initial deployment. - Users find **inadequate reporting** in VulScan, lacking detailed insights and customization for effective vulnerability management. - Users highlight **poor customer support** from Kaseya, causing billing issues and unfulfilled promises regarding product features. - Users are frustrated by the **limited reporting** features of VulScan, hindering their ability to track vulnerabilities effectively. - Users face **setup difficulties** with VulScan, finding implementation across networks complicated and requiring specific configurations. #### What Are Recent G2 Reviews of VulScan? **"[Clear, Easy Security Visibility That Cuts Manual Busywork](https://www.g2.com/survey_responses/vulscan-review-12884652)"** **Rating:** 5.0/5.0 stars *— Sheila K.* [Read full review](https://www.g2.com/survey_responses/vulscan-review-12884652) --- **"[Great addonfor NMAP](https://www.g2.com/survey_responses/vulscan-review-8143727)"** **Rating:** 4.5/5.0 stars *— Viswajith R.* [Read full review](https://www.g2.com/survey_responses/vulscan-review-8143727) --- ### 19. [ZenGRC](https://www.g2.com/products/zengrc/reviews) ZenGRC offers an established solution to elevate your company's risk and compliance program to the highest infosec standards. The cloud-based SaaS solution fits your existing GRC program and also evolves to guide you throughout your maturity roadmap. With ZenGRC as the central platform for your organization's entire infosec ecosystem, you can achieve continuous monitoring and efficient audit management capabilities, as well as customizable, end-to-end risk management that's built-in — not bolted on. Companies from SMB all the way to Enterprise use ZenGRC for... — Minimized manual effort through automation — Shortened, simplified audit cycles — Risk management that’s built-in—not bolted on — Increased visibility and reporting with dashboards — Direct integrations with ServiceNow, AWS, Qualys, Slack, JIRA, and more. **Average Rating:** 4.4/5.0 **Total Reviews:** 102 **How Do G2 Users Rate ZenGRC?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Ease of Use:** 8.2/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.6/10 (Category avg: 8.7/10) - **Quality of Support:** 9.0/10 (Category avg: 9.0/10) **Who Is the Company Behind ZenGRC?** - **Seller:** [Zengrc](https://www.g2.com/sellers/zengrc) - **Year Founded:** 2009 - **HQ Location:** San Francisco, CA - **Twitter:** @riskoptics (589 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/842177/ (69 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 55% Mid-Market, 38% Enterprise #### What Are ZenGRC's Pros and Cons? **Pros:** - Automation (3 reviews) - Compliance Management (3 reviews) - Ease of Use (3 reviews) - Evidence Management (3 reviews) - Audit Management (2 reviews) **Cons:** - Inadequate Reporting (3 reviews) - Limited Reporting (3 reviews) - Poor Reporting (3 reviews) - Reporting Issues (3 reviews) - Complex Implementation (1 reviews) ### What Do G2 Reviewers Say About ZenGRC? *AI-generated summary from verified user reviews* **Pros:** - Users love the **automation capabilities** of ZenGRC, which streamline workflows and improve audit efficiency significantly. - Users appreciate the **centralized compliance management** of ZenGRC, simplifying audits and enhancing workflow efficiency. - Users highlight the **ease of use** of ZenGRC, simplifying compliance management and streamlining audit processes efficiently. - Users value the **efficient evidence management** of ZenGRC, streamlining audits and enhancing compliance program effectiveness. - Users appreciate the **streamlined audit management** of ZenGRC, simplifying compliance and enhancing collaboration with auditors effectively. **Cons:** - Users find ZenGRC's **inadequate reporting** undermines its utility, often resorting to external tools for better insights. - Users find ZenGRC's **limited reporting capabilities** frustrating, prompting some to create custom solutions for better insights. - Users find ZenGRC's **poor reporting** capabilities inadequate for complex workflows, leading to the need for custom solutions. - Users find that **reporting issues** in ZenGRC hinder complex workflows and require external solutions for adequate reporting. - Users find ZenGRC's **complex implementation** challenging, particularly for specialized reporting and intricate workflows. #### What Are Recent G2 Reviews of ZenGRC? **"[How a 2-person team manages enterprise-level compliance](https://www.g2.com/survey_responses/zengrc-review-12141112)"** **Rating:** 4.5/5.0 stars *— Christian L.* [Read full review](https://www.g2.com/survey_responses/zengrc-review-12141112) --- **"[It's a useful tool, but it isn't very user-friendly at all.](https://www.g2.com/survey_responses/zengrc-review-11399118)"** **Rating:** 4.0/5.0 stars *— Kyle M.* [Read full review](https://www.g2.com/survey_responses/zengrc-review-11399118) --- #### What Are G2 Users Discussing About ZenGRC? - [What are the benefits and drawbacks of using ZenGRC for governance, risk, and compliance management?](https://www.g2.com/discussions/what-are-the-benefits-and-drawbacks-of-using-zengrc-for-governance-risk-and-compliance-management) - [What is ZenGRC used for?](https://www.g2.com/discussions/what-is-zengrc-used-for) ### 20. [Riskonnect GRC solutions](https://www.g2.com/products/riskonnect/reviews) An Integrated Risk Management Information System (RMIS) brings together all areas of risk effectively and efficiently, reducing costs and enabling insights that have previously been unobtainable. **Average Rating:** 4.4/5.0 **Total Reviews:** 68 **How Do G2 Users Rate Riskonnect GRC solutions?** - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.3/10 (Category avg: 8.7/10) - **Quality of Support:** 9.1/10 (Category avg: 9.0/10) **Who Is the Company Behind Riskonnect GRC solutions?** - **Seller:** [Riskonnect](https://www.g2.com/sellers/riskonnect) - **HQ Location:** Atlanta, US - **Twitter:** @Riskonnect (1,235 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/riskonnect-inc (1,060 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Government Administration, Gambling & Casinos - **Company Size:** 54% Mid-Market, 28% Enterprise #### What Are Riskonnect GRC solutions's Pros and Cons? **Pros:** - Ease of Use (4 reviews) - Features (4 reviews) - Risk Management (4 reviews) - Implementation Ease (3 reviews) - Adaptability (2 reviews) **Cons:** - Slow Loading (2 reviews) - Confusing Navigation (1 reviews) - Difficult Customization (1 reviews) - Difficult Navigation (1 reviews) - Inefficient Risk Management (1 reviews) ### What Do G2 Reviewers Say About Riskonnect GRC solutions? *AI-generated summary from verified user reviews* **Pros:** - Users highlight the **intuitive and seamless ease of use** of Riskonnect GRC solutions, enhancing their experience significantly. - Users value the **intuitive and flexible system** of Riskonnect GRC, ensuring a seamless and professional user experience. - Users appreciate the **user-friendly interface** of Riskonnect GRC solutions, enhancing their risk management practices effectively. - Users commend the **implementation ease** of Riskonnect GRC solutions, noting a seamless and efficient onboarding process. - Users value the **adaptability** of Riskonnect GRC solutions, effectively customized to fit their specific business needs. **Cons:** - Users experience **slow loading** times when researching data and updating project risks, impacting overall efficiency. - Users find the **confusing navigation** of Riskonnect GRC solutions challenging initially, overshadowing their overall experience. - Users experience **difficult customization** that limits configuration options, though support is available to find suitable solutions. - Users may struggle with **difficult navigation** in Camms.Risk, though overall, they find it quite functional. - Users find the **inefficient risk management** in Riskonnect GRC solutions delays updates on rapidly changing project risks. #### What Are Recent G2 Reviews of Riskonnect GRC solutions? **"[Great system with excellent UX design, project team fantastic to work with](https://www.g2.com/survey_responses/riskonnect-grc-solutions-review-10672349)"** **Rating:** 5.0/5.0 stars *— Alison C.* [Read full review](https://www.g2.com/survey_responses/riskonnect-grc-solutions-review-10672349) --- **"[Streamlined, Practical, and Accessible](https://www.g2.com/survey_responses/riskonnect-grc-solutions-review-11090529)"** **Rating:** 4.0/5.0 stars *— Ansar P.* [Read full review](https://www.g2.com/survey_responses/riskonnect-grc-solutions-review-11090529) --- #### What Are G2 Users Discussing About Riskonnect GRC solutions? - [What is risk management software?](https://www.g2.com/discussions/what-is-risk-management-software) - 1 comment ### 21. [ScalePad ControlMap](https://www.g2.com/products/scalepad-controlmap/reviews) Built for MSPs, ControlMap is a cybersecurity compliance automation platform designed to expedite the compliance journey for 50+ frameworks and standards. With turnkey tools, automation, and templates, ControlMap enables MSPs to offer Compliance as a Service (CaaS), increasing revenue streams and ensuring clients are compliant within highly regulated industries.  Designed to scale, ControlMap provides a multi-tenant solution that helps MSPs become the compliance expert their clients need - without having to take a single cybersecurity course. From robust reporting and policy templates to 40+ supported integrations, achieving compliance is accessible and frictionless.  It’s time to accelerate growth, boost resilience, and mitigate cybersecurity risks. Peace of mind is just a framework away.  Enabling MSPs to build and manage a cybersecurity compliance program, ControlMap streamlines compliance from start to audit and beyond. Say “goodbye” to endless spreadsheets and documents with a SaaS solution that simplifies the complexities in achieving and maintaining SOC 2, CMMC, FTC Safeguards, NIST CSF 2.0, CIS Controls, and many more standards. See firsthand how ControlMap can help at www.scalepad.com/control-map **Average Rating:** 4.6/5.0 **Total Reviews:** 48 **How Do G2 Users Rate ScalePad ControlMap?** - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Ease of Use:** 8.5/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.1/10 (Category avg: 8.7/10) - **Quality of Support:** 9.3/10 (Category avg: 9.0/10) **Who Is the Company Behind ScalePad ControlMap?** - **Seller:** [ScalePad](https://www.g2.com/sellers/scalepad) - **Company Website:** https://www.scalepad.com/ - **Year Founded:** 2015 - **HQ Location:** Vancouver, BC - **Twitter:** @GoScalePad (981 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/scalepad/ (235 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Computer Software - **Company Size:** 55% Mid-Market, 37% Small-Business #### What Are ScalePad ControlMap's Pros and Cons? **Pros:** - Ease of Use (3 reviews) - Integrations (3 reviews) - Compliance Management (2 reviews) - Dashboard Usability (2 reviews) - Evidence Collection (2 reviews) **Cons:** - Complex Setup (2 reviews) - Learning Curve (2 reviews) - Access Issues (1 reviews) - Access Management (1 reviews) - Complex Implementation (1 reviews) ### What Do G2 Reviewers Say About ScalePad ControlMap? *AI-generated summary from verified user reviews* **Pros:** - Users find ScalePad ControlMap to be **easy to use** , streamlining their IT management in one accessible platform. - Users value the **secure API integrations** in ScalePad ControlMap, enhancing connectivity with popular vendors and cloud applications. - Users appreciate the **time-saving compliance management** features of ScalePad ControlMap, simplifying governance and risk processes effectively. - Users appreciate the **easy-to-navigate dashboard** of ScalePad ControlMap, enhancing efficiency in compliance management and risk oversight. - Users value the **efficient evidence collection** in ScalePad ControlMap, enhancing their GRC management with streamlined processes. **Cons:** - Users find the **setup process overly complex** , encountering issues with SSO login that complicate access for teams. - Users find the **learning curve steep** , especially when handling extensive information and locating features efficiently. - Users face **access issues** with SSO login, complicating the experience across multiple platforms and requiring additional setup. - Users face challenges with **SSO login experience** when managing both MSP and organizational tenants, complicating access management. - Users find the **complex implementation** of ScalePad ControlMap to be more challenging than anticipated during pre-sales discussions. #### What Are Recent G2 Reviews of ScalePad ControlMap? **"[Awesome and effective GRC coverage](https://www.g2.com/survey_responses/scalepad-controlmap-review-13024181)"** **Rating:** 4.0/5.0 stars *— Verified User in Computer & Network Security* [Read full review](https://www.g2.com/survey_responses/scalepad-controlmap-review-13024181) --- **"[Agile Compliance Solution with Seamless Integration](https://www.g2.com/survey_responses/scalepad-controlmap-review-12842212)"** **Rating:** 5.0/5.0 stars *— Robert D.* [Read full review](https://www.g2.com/survey_responses/scalepad-controlmap-review-12842212) --- ### 22. [GlobalSuite](https://www.g2.com/products/globalsuite/reviews) The smartest way to manage GRC Risk management, security, continuity, audit and compliance: We take care of making your business stronger, while you dedicate yourself to making it bigger. GlobalSuite® is a GRC solution that optimizes the risk management, security, continuity, auditing and compliance of your business. GlobalSuite® automates, configures and monitors each process, ensuring that everything is done correctly. - Adaptable to any regulations or standards. Ready to go - Traceability of all actions - Monitoring Continuously. Relevant reports and metrics - Integration of all modules The most flexible all-in-one GRC platform, fastest to implement with the highest return on investment. The software includes the following modules: GlobalSuite® Risk Management The solution that helps organisations manage uncertainty and mitigate risks. GlobalSuite® Security Optimised, automated management so you can focus on what really matters: Keep threats under control. GlobalSuite® Business Continuity Optimises your business continuity system, from BIAs to crisis management. GlobalSuite® Compliance Management Optimise your Corporate Compliance System's management with monitoring and assessment. GlobalSuite® Privacy Data Protection Ensure compliance with data protection and diligent management of them and users’ rights. GlobalSuite® Audit Management Ensures time and cost savings when carrying out audit work in a collaborative environment with complete follow-up GlobalSuite® Whistleblowing channel A place of trust is a space of productivity. Irregular behavior in the company? Let us manage them simply, confidentially and with a total guarantee of success. **Average Rating:** 4.4/5.0 **Total Reviews:** 94 **How Do G2 Users Rate GlobalSuite?** - **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.2/10) - **Ease of Use:** 8.3/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.5/10 (Category avg: 8.7/10) - **Quality of Support:** 8.9/10 (Category avg: 9.0/10) **Who Is the Company Behind GlobalSuite?** - **Seller:** [GlobalSuite Solutions](https://www.g2.com/sellers/globalsuite-solutions) - **Company Website:** https://www.globalsuitesolutions.com/ - **Year Founded:** 2006 - **HQ Location:** Madrid - **Twitter:** @global_suite (846 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/globalsuite (134 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Consulting, Financial Services - **Company Size:** 42% Mid-Market, 29% Enterprise #### What Are GlobalSuite's Pros and Cons? **Pros:** - Ease of Use (15 reviews) - Features (12 reviews) - Risk Management (11 reviews) - Efficiency (10 reviews) - Efficiency Improvement (8 reviews) **Cons:** - Not Intuitive (8 reviews) - Complexity (6 reviews) - Learning Curve (6 reviews) - Difficult Learning (5 reviews) - Not User-Friendly (4 reviews) ### What Do G2 Reviewers Say About GlobalSuite? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of GlobalSuite, enabling efficient processes and streamlined reporting for ERM teams. - Users appreciate the **user-friendly automation and robust reporting features** of GlobalSuite, greatly enhancing efficiency and organization. - Users value the **ease of risk management** in GlobalSuite, enhancing focus on critical compliance and reporting tasks. - Users value the **efficiency** of GlobalSuite, as it streamlines processes and enhances organizational effectiveness. - Users commend GlobalSuite for its **efficiency improvement** , significantly streamlining processes and enhancing organizational focus. **Cons:** - Users find GlobalSuite **not intuitive** , facing challenges with its complexity and learning curve initially. - Users find the **complexity of the interface** challenging, especially during the initial learning phase of GlobalSuite. - Users find the **learning curve** of GlobalSuite somewhat complicated, requiring time and training to navigate effectively. - Users find the **difficult learning** curve of GlobalSuite challenging, requiring time and training to grasp the platform fully. - Users find GlobalSuite **not user-friendly** , as the interface and workflows can be complicated and unintuitive. #### What Are Recent G2 Reviews of GlobalSuite? **"[A powerful tool for centralizing compliance, despite a slight learning curve](https://www.g2.com/survey_responses/globalsuite-review-13049397)"** **Rating:** 4.5/5.0 stars *— Javier R.* [Read full review](https://www.g2.com/survey_responses/globalsuite-review-13049397) --- **"[Transformed Our Workflow: Intuitive, Fast, Global Suite](https://www.g2.com/survey_responses/globalsuite-review-13051941)"** **Rating:** 5.0/5.0 stars *— Vianey L.* [Read full review](https://www.g2.com/survey_responses/globalsuite-review-13051941) --- ### 23. [Resolver](https://www.g2.com/products/resolver/reviews) Resolver, a Kroll Business, stands at the forefront of risk intelligence, safeguarding over $6.5 trillion in market cap for more than 1,000 global companies. Leveraging AI with deep human expertise, our innovative Risk Intelligence Platform provides comprehensive visibility into enterprise-wide risks, enabling prioritized, timely, and agile responses. Go beyond tracking and managing risk to transforming complex data into clear insights and highly effective mitigating actions. By harnessing our integrated capabilities, businesses of all sizes can reduce crises, recover swiftly, and emerge stronger — protecting their operations, brand, and bottom line. Discover how we're shaping a safer, more resilient world at Resolver.com. See Risk. Build Resilience. **Average Rating:** 4.3/5.0 **Total Reviews:** 178 **How Do G2 Users Rate Resolver?** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Ease of Use:** 7.9/10 (Category avg: 8.7/10) - **Ease of Admin:** 7.3/10 (Category avg: 8.7/10) - **Quality of Support:** 8.9/10 (Category avg: 9.0/10) **Who Is the Company Behind Resolver?** - **Seller:** [Resolver](https://www.g2.com/sellers/resolver) - **Company Website:** https://www.resolver.com - **HQ Location:** Toronto, Canada - **Twitter:** @Resolver (4,951 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/932240/ (718 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Security and Investigations - **Company Size:** 47% Enterprise, 38% Mid-Market #### What Are Resolver's Pros and Cons? **Pros:** - Ease of Use (65 reviews) - Customer Support (40 reviews) - Helpful (37 reviews) - Customizability (36 reviews) - Customization (36 reviews) **Cons:** - Complexity (34 reviews) - Difficult Learning (23 reviews) - Improvement Needed (23 reviews) - Learning Curve (22 reviews) - Poor Reporting (20 reviews) ### What Do G2 Reviewers Say About Resolver? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Resolver, highlighting its user-friendly interface and customization options. - Users commend the **responsive customer support** of Resolver, enhancing their experience and module integration efficiency. - Users praise the **robust structure and flexibility** of Resolver, significantly enhancing operational efficiency and collaboration. - Users appreciate the **customizability** of Resolver, enabling it to meet diverse incident reporting needs effectively. - Users value the **customization options** in Resolver, allowing tailored reporting and agile adaptation to their specific needs. **Cons:** - Users find the **complexity of customization** in Resolver daunting, especially for first-time users navigating numerous options. - Users find **difficult learning** curves in customizing Resolver, often feeling overwhelmed without prior IT experience. - Users note a need for **improvement in flexibility** with staging, deployment, and overall usability of Resolver. - Users find the **learning curve steep for customization** , often needing assistance despite Resolver's powerful capabilities. - Users report **poor reporting** capabilities, facing challenges like formatting issues and confusion over incident categories. #### What Are Recent G2 Reviews of Resolver? **"[Centralized Platform Simplifies Risk Management](https://www.g2.com/survey_responses/resolver-review-12300935)"** **Rating:** 4.0/5.0 stars *— Rafik V.* [Read full review](https://www.g2.com/survey_responses/resolver-review-12300935) --- **"[Centralised Risk Management with Great Visualisations](https://www.g2.com/survey_responses/resolver-review-12209680)"** **Rating:** 4.0/5.0 stars *— Helen C.* [Read full review](https://www.g2.com/survey_responses/resolver-review-12209680) --- #### What Are G2 Users Discussing About Resolver? - [What do you like most about Resolver for risk management, and what could be improved?](https://www.g2.com/discussions/what-do-you-like-most-about-resolver-for-risk-management-and-what-could-be-improved) - 1 comment - [How much does resolver cost?](https://www.g2.com/discussions/how-much-does-resolver-cost) - [What is resolver core?](https://www.g2.com/discussions/what-is-resolver-core) - [What is resolver audit?](https://www.g2.com/discussions/what-is-resolver-audit) - [What is a software resolver?](https://www.g2.com/discussions/what-is-a-software-resolver) ### 24. [Pirani](https://www.g2.com/products/pirani/reviews) Pirani is a comprehensive GRC (Governance, Risk, and Compliance) and Audit management platform designed to streamline risk management for organizations of all sizes. This innovative solution addresses the complexities often associated with traditional risk management software, offering a user-friendly experience that enables teams to transition from manual spreadsheets to an automated risk culture in just a matter of days. By simplifying the risk management process, Pirani allows organizations to focus on their core operations while effectively managing their risks. The platform serves a diverse target audience, including businesses in various sectors that require robust governance and compliance frameworks. Pirani covers the entire risk lifecycle, encompassing Operational Risk, Compliance, Information Security, Anti-Money Laundering (AML), and Internal Audits. By integrating these critical processes, Pirani helps organizations protect their assets and maintain operational resilience through informed, data-driven decisions. This holistic approach to risk management ensures that all aspects of governance and compliance are addressed cohesively. Pirani offers several key features that set it apart in the GRC landscape. One of the standout benefits is its zero-friction access, allowing users to start utilizing the platform immediately with a free version, requiring no credit card information. This enables prospective users to experience the software's value without any upfront commitment. Furthermore, Pirani aligns with global compliance standards, ensuring organizations remain compliant with international regulations such as ISO 31000, ISO 27001, and COSO. Another significant advantage of Pirani is its focus on automation and error reduction. By automating workflows and centralizing data, the platform reduces human errors by up to 30% and decreases operational workload by 60%. This shift from manual and fragmented processes to an automated system enhances efficiency and accuracy in risk management. Additionally, Pirani streamlines internal audit processes, allowing organizations to plan, execute, and follow up on findings and remediation plans within the same ecosystem where risks are managed. The platform also features seamless integrations with existing tech stacks, facilitating a fluid exchange of information and preventing data silos. Real-time reporting and dynamic dashboards provide users with comprehensive visibility into their risk landscape, enabling the generation of boardroom-ready insights with just a few clicks. By democratizing risk management, Pirani empowers every member of the organization to engage in a proactive risk culture, fostering an environment where sustainable growth can thrive. **Average Rating:** 4.6/5.0 **Total Reviews:** 330 **How Do G2 Users Rate Pirani?** - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Ease of Use:** 9.0/10 (Category avg: 8.7/10) - **Ease of Admin:** 9.4/10 (Category avg: 8.7/10) - **Quality of Support:** 9.5/10 (Category avg: 9.0/10) **Who Is the Company Behind Pirani?** - **Seller:** [Pirani](https://www.g2.com/sellers/pirani) - **Company Website:** https://www.piranirisk.com - **Year Founded:** 2011 - **HQ Location:** Miami, Florida - **LinkedIn® Page:** https://www.linkedin.com/company/9302616 (144 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Banking - **Company Size:** 38% Mid-Market, 15% Small-Business #### What Are Pirani's Pros and Cons? **Pros:** - Ease of Use (11 reviews) - Risk Management (8 reviews) - User Interface (7 reviews) - Intuitive (6 reviews) - Security (5 reviews) **Cons:** - Slow Performance (6 reviews) - Limited Customization (4 reviews) - Complexity (2 reviews) - Control Issues (2 reviews) - Limited Flexibility (2 reviews) ### What Do G2 Reviewers Say About Pirani? *AI-generated summary from verified user reviews* **Pros:** - Users find Pirani to be **easy to use** , appreciating its clean interface and many management options. - Users find the **user-friendly interface** of Pirani enhances risk management, facilitating easy team collaboration and decision-making. - Users appreciate Pirani's **clean and user-friendly interface** , simplifying risk management and enhancing team collaboration. - Users appreciate the **intuitive dashboard** of Pirani, which simplifies risk management and enhances overall usability. - Users commend the **robust security measures** in Pirani, ensuring effective risk management and fraud detection capabilities. **Cons:** - Users experience **slow performance** when handling large datasets, leading to frustration during use and loading delays. - Users find the **limited customization** options in Pirani restricts their ability to adapt to specific reporting needs. - Users find the **complexity of advanced features** in Pirani overwhelming, hindering a smooth onboarding experience. - Users find **control issues** with Pirani, requiring manual processes and lacking flexibility in customization and reporting. - Users find the **limited flexibility** in Pirani's system restricts customization for complex risk management needs. #### What Are Recent G2 Reviews of Pirani? **"[Serfinanza ISMS](https://www.g2.com/survey_responses/pirani-review-12685513)"** **Rating:** 4.5/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/pirani-review-12685513) --- **"[Serfinanza - ISMS](https://www.g2.com/survey_responses/pirani-review-12685512)"** **Rating:** 5.0/5.0 stars *— Verified User in Financial Services* [Read full review](https://www.g2.com/survey_responses/pirani-review-12685512) --- ### 25. [MasterControl Quality Management System](https://www.g2.com/products/mastercontrol-quality-management-system/reviews) MasterControl Quality Excellence is the #1 Quality Management System (QMS) in life sciences. Built on an AI-driven platform, it enables life-sciences companies to enable flexible quality event management, simplified document management, and automated training management—that all work seamlessly together to close the loop on quality. Targeted primarily at quality professionals within the life sciences industry, MasterControl Qx serves a diverse range of organizations, from pharmaceuticals to biotechnology and medical devices. These industries often face stringent regulatory requirements and complex quality assurance processes. MasterControl Qx offers a centralized platform that integrates various quality management functions, allowing users to manage quality events, documentation, training, and audits seamlessly. This integration not only enhances operational efficiency but also ensures that organizations remain compliant with industry standards. One of the standout features of MasterControl Qx is its intelligent automation capabilities. By automating routine quality management tasks, organizations can reduce manual errors and free up valuable time for quality professionals to focus on more strategic initiatives. Additionally, the platform provides robust data insights that empower users to make informed decisions based on real-time information. This data-driven approach enhances the ability to identify trends, monitor compliance, and drive continuous improvement within quality processes. Furthermore, MasterControl Qx is designed to foster collaboration across departments and teams. The platform's connected nature allows for easy sharing of information and documentation, ensuring that all stakeholders are aligned and informed. This collaborative environment not only enhances communication but also supports a culture of quality throughout the organization. By utilizing MasterControl Qx, companies can create a more agile and responsive quality management system that adapts to changing regulatory landscapes and market demands. Overall, MasterControl Quality Excellence (Qx) stands out in the QMS category by providing a holistic solution tailored to the specific needs of the life sciences industry. Its combination of intelligent automation, robust data insights, and collaborative features positions it as a valuable tool for organizations striving to maintain high-quality standards while navigating the complexities of regulatory compliance. **Average Rating:** 4.3/5.0 **Total Reviews:** 521 **How Do G2 Users Rate MasterControl Quality Management System?** - **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10) - **Ease of Use:** 7.8/10 (Category avg: 8.7/10) - **Ease of Admin:** 8.0/10 (Category avg: 8.7/10) - **Quality of Support:** 8.6/10 (Category avg: 9.0/10) **Who Is the Company Behind MasterControl Quality Management System?** - **Seller:** [MasterControl](https://www.g2.com/sellers/mastercontrol) - **Company Website:** https://www.mastercontrol.com?utm_source=linkedin&utm_medium=about&utm_campaign=l1nk3din-sm - **Year Founded:** 1993 - **HQ Location:** Salt Lake City, UT - **Twitter:** @MCMasterControl (6,258 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/23070/ (742 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Quality Assurance Specialist, Quality Engineer - **Top Industries:** Pharmaceuticals, Medical Devices - **Company Size:** 65% Mid-Market, 25% Enterprise #### What Are MasterControl Quality Management System's Pros and Cons? **Pros:** - Ease of Use (115 reviews) - Document Management (87 reviews) - Training (65 reviews) - Document Control (47 reviews) - Features (44 reviews) **Cons:** - Not Intuitive (43 reviews) - Learning Curve (42 reviews) - Difficult Usability (32 reviews) - Not User-Friendly (29 reviews) - Complex Setup (27 reviews) ### What Do G2 Reviewers Say About MasterControl Quality Management System? *AI-generated summary from verified user reviews* **Pros:** - Users find MasterControl QMS highly **user-friendly** , allowing easy customization and integration for various quality management tasks. - Users appreciate the **centralized document management** capabilities of MasterControl, enhancing compliance and user experience significantly. - Users appreciate the **user-friendly interface and centralized system** for efficient training and compliance management. - Users value the **efficient document control** in MasterControl, appreciating centralized access and prompt upgrades. - Users value the **customizable and easy-to-navigate features** of MasterControl, enhancing productivity and quality management. **Cons:** - Users find the **interface not intuitive** , leading to confusion and difficulty in navigating the system effectively. - Users experience a **steep learning curve** with MasterControl, especially during setup and navigating extensive features. - Users find **difficult usability** in MasterControl, particularly in report creation and complex initial setups, slowing productivity. - Users find the **end-user interface challenging** , complicating navigation and leading to a frustrating experience overall. - Users find the **complex setup** challenging, requiring extensive training and customization to navigate effectively. #### What Are Recent G2 Reviews of MasterControl Quality Management System? **"[A wonderful tool for Life Sciences in an organization!](https://www.g2.com/survey_responses/mastercontrol-quality-management-system-review-8510804)"** **Rating:** 5.0/5.0 stars *— Liz K.* [Read full review](https://www.g2.com/survey_responses/mastercontrol-quality-management-system-review-8510804) --- **"[Integrated, Compliant QMS That Streamlines Regulated Workflows](https://www.g2.com/survey_responses/mastercontrol-quality-management-system-review-12851642)"** **Rating:** 5.0/5.0 stars *— Yoohan L.* [Read full review](https://www.g2.com/survey_responses/mastercontrol-quality-management-system-review-12851642) --- #### What Are G2 Users Discussing About MasterControl Quality Management System? - [What is MasterControl Quality Management System used for?](https://www.g2.com/discussions/what-is-mastercontrol-quality-management-system-used-for) - 1 comment - [What is MasterControl Customer Complaints used for?](https://www.g2.com/discussions/what-is-mastercontrol-customer-complaints-used-for) ## What Is IT Risk Management Software? [Risk Assessment Software](https://www.g2.com/categories/risk-assessment) ## What Software Categories Are Similar to IT Risk Management Software? - [Audit Management Software](https://www.g2.com/categories/audit-management) - [Enterprise Risk Management (ERM) Software](https://www.g2.com/categories/enterprise-risk-management-erm) - [Security Compliance Software](https://www.g2.com/categories/security-compliance)