# Best IT Risk Management Software - Page 2

  *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)*

   IT risk management software protects business data against all risks associated with the use of software and hardware. This type of software is used to identify, assess, and mitigate IT risks across all business entities of a company. IT risk management solutions also help companies ensure the security and privacy of customer or supplier data. Organizations use IT risk management to comply with governmental regulations and internal policies related to data security. This type of software is implemented by IT departments and can be used by all employees. IT risk management can be deployed as part of a broader governance, risk, and compliance system.

IT risk management systems need to consolidate data from multiple sources and integrate with solutions for IT infrastructure, IT management, and security. When deployed as a standalone product, IT risk management software integrates with [governance, risk, and compliance software](https://www.g2.com/categories/governance-risk-compliance) and other risk management software.

To qualify for inclusion in the IT Risk Management category, a product must:

- Provide tools to identify, assess, and classify IT risks 
- Deliver scoring and ranking methods to track risk severity 
- Include standard templates for audits and other IT risk processes 
- Provide workflows to manage IT risk plans and tasks 
- Create IT risk tests such as vulnerability and penetration 
- Monitor the performance of the IT risk management activities 
- Include reports and documents for compliance purposes 




  
## How Many IT Risk Management Software Products Does G2 Track?
**Total Products under this Category:** 168

### Category Stats (May 2026)
- **Average Rating**: 4.49/5
- **New Reviews This Quarter**: 140
- **Buyer Segments**: Mid-Market 63% │ Small-Business 24% │ Enterprise 13%
- **Top Trending Product**: Portnox (+0.041)
*Last updated: May 25, 2026*

  
## How Does G2 Rank IT Risk Management Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 10,100+ Authentic Reviews
- 168+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

  
## Which IT Risk Management Software Is Best for Your Use Case?

- **Leader:** [Vendor Risk](https://www.g2.com/products/vendor-risk/reviews)
- **Highest Performer:** [RealCISO vCISO & GRC Platform](https://www.g2.com/products/realciso-vciso-grc-platform/reviews)
- **Easiest to Use:** [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)
- **Top Trending:** [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)
- **Best Free Software:** [Vendor Risk](https://www.g2.com/products/vendor-risk/reviews)

  
---

**Sponsored**

### Optro

Optro (Formerly AuditBoard) is a GRC software solution that helps enterprises manage audit, risk, and compliance workflows through an agentic system of action. By using GRC-trained AI, centralizing disparate data points, and automating manual processes, the platform enables organizations to transition from reactive risk management to proactive strategic planning. The platform functions as a comprehensive ecosystem for risk managers, assurance leaders, internal auditors, and compliance officers. It addresses the increasing complexity of modern regulatory environments by providing tools for real-time monitoring and reporting. Optro facilitates a streamlined flow of information between teams, ensuring that risk data is not siloed but instead used to inform high-level business decisions. Optro’s approach allows companies to identify emerging threats and operational vulnerabilities before they impact the bottom line, ultimately turning risk management into a driver of organizational opportunity.



[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1440&secure%5Bdisplayable_resource_id%5D=1440&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1440&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=20964&secure%5Bresource_id%5D=1440&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fit-risk-management%2Fsmall-business&secure%5Btoken%5D=fcc1e0ccce9c3277c16c4fe240919a42b0e304833833e6fdf21a7a4ab38db400&secure%5Burl%5D=https%3A%2F%2Foptro.ai%2Fcontact-us%2Frequest-demo%3Futm_source%3Dg2%26utm_medium%3Ddisplay%26utm_campaign%3Dpc-brand-campaign%26utm_content%3D2026&secure%5Burl_type%5D=book_demo)

---

  ## What Are the Top-Rated IT Risk Management Software Products in 2026?
### 1. [Portnox](https://www.g2.com/products/portnox/reviews)
  Portnox is a global leader in cloud-native enterprise access control for every identity, whether human or non-human entity. Its unified platform helps organizations secure and govern access across networks, applications, and infrastructure, delivering passwordless authentication, continuous policy enforcement, and real-time risk mitigation without additional hardware or complex deployments. By enabling organizations to identify risk, enforce policy, and isolate or revoke threats automatically, Portnox gives enterprises the scale to stay ahead of continually expanding attack surfaces. Securing more than one million devices worldwide, Portnox delivers unified, zero trust access control for every identity, everywhere. Forrester analysis of Portnox Cloud revealed: 40% reduction in networking technology costs 75% reduction in breach risk 80% faster end-user access to resources 287% ROI Less than 6-month payback period 90% faster time-to-value Portnox products: Portnox Cloud: Portnox Cloud secures and governs access across networks, applications, and infrastructure, delivering passwordless authentication, continuous policy enforcement, and real-time risk mitigation for every identity—human and non-human. NAC: Portnox NAC is a cloud-native network access control solution built for today's hybrid, distributed enterprises. Get real-time visibility into every device on your network, enforce risk-based access policies automatically, and maintain continuous compliance — all without deploying a single on-premises appliance. ZTNA: Portnox ZTNA delivers fast, posture-aware access to SaaS and private applications — without passwords, agents, or complexity. Replace overly permissive VPNs with granular, identity-driven enforcement that follows your users anywhere they work. Every session is verified. Every connection is earned. RADIUS: Portnox RADIUS is a fully cloud-hosted authentication service that eliminates the infrastructure burden of managing on-premises RADIUS servers. Centralize 802.1X authentication, issue and manage certificates at scale, and integrate seamlessly with your existing identity providers — all with the availability and simplicity that legacy solutions can't match. TACACS+: Portnox TACACS+ brings cloud-native command authorization and device administration to your network infrastructure. Control who can access routers, switches, and firewalls — and exactly what they can do once they're in. It replaces brittle on-premises servers with a resilient, always-on service that integrates with your identity stack and delivers the audit trails your compliance programs demand.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 120
**How Do G2 Users Rate Portnox?**

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.6/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.5/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.7/10 (Category avg: 9.0/10)

**Who Is the Company Behind Portnox?**

- **Seller:** [Portnox](https://www.g2.com/sellers/portnox)
- **Company Website:** https://www.portnox.com
- **Year Founded:** 2007
- **HQ Location:** Austin, Texas
- **Twitter:** @portnox (828 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/portnox/ (99 employees on LinkedIn®)

**Who Uses This Product?**
  - **Who Uses This:** Network Engineer
  - **Top Industries:** Information Technology and Services, Financial Services
  - **Company Size:** 40% Mid-Market, 37% Enterprise


#### What Are Portnox's Pros and Cons?

**Pros:**

- Ease of Use (24 reviews)
- Setup Ease (16 reviews)
- Implementation Ease (13 reviews)
- Customer Support (11 reviews)
- Cloud Services (10 reviews)

**Cons:**

- Performance Issues (13 reviews)
- Poor Interface Design (6 reviews)
- Connection Issues (5 reviews)
- Not Intuitive (5 reviews)
- Authentication Issues (4 reviews)

### 2. [ZenGRC](https://www.g2.com/products/zengrc/reviews)
  ZenGRC offers an established solution to elevate your company's risk and compliance program to the highest infosec standards. The cloud-based SaaS solution fits your existing GRC program and also evolves to guide you throughout your maturity roadmap. With ZenGRC as the central platform for your organization's entire infosec ecosystem, you can achieve continuous monitoring and efficient audit management capabilities, as well as customizable, end-to-end risk management that's built-in — not bolted on. Companies from SMB all the way to Enterprise use ZenGRC for... — Minimized manual effort through automation — Shortened, simplified audit cycles — Risk management that’s built-in—not bolted on — Increased visibility and reporting with dashboards — Direct integrations with ServiceNow, AWS, Qualys, Slack, JIRA, and more.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 103
**How Do G2 Users Rate ZenGRC?**

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.2/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.6/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.0/10 (Category avg: 9.0/10)

**Who Is the Company Behind ZenGRC?**

- **Seller:** [Zengrc](https://www.g2.com/sellers/zengrc)
- **Year Founded:** 2009
- **HQ Location:** San Francisco, CA
- **Twitter:** @riskoptics (590 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/842177/ (73 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services, Computer Software
  - **Company Size:** 55% Mid-Market, 38% Enterprise


#### What Are ZenGRC's Pros and Cons?

**Pros:**

- Automation (3 reviews)
- Compliance Management (3 reviews)
- Ease of Use (3 reviews)
- Evidence Management (3 reviews)
- Audit Management (2 reviews)

**Cons:**

- Inadequate Reporting (3 reviews)
- Limited Reporting (3 reviews)
- Poor Reporting (3 reviews)
- Reporting Issues (3 reviews)
- Complex Implementation (1 reviews)

### 3. [Resolver](https://www.g2.com/products/resolver/reviews)
  Resolver gathers all risk data and analyzes it in context—revealing the true business impact within every risk. Our Risk Intelligence Platform traces the extended implications of all types of risks —whether compliance or audit, incidents or threats—and translates those effects into quantifiable business metrics. Finally, risk becomes a key driver of opportunity instead of being disconnected from the business. Welcome to the new world of Risk Intelligence.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 178
**How Do G2 Users Rate Resolver?**

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.9/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.9/10 (Category avg: 9.0/10)

**Who Is the Company Behind Resolver?**

- **Seller:** [Resolver](https://www.g2.com/sellers/resolver)
- **Company Website:** https://www.resolver.com
- **HQ Location:** Toronto, Canada
- **Twitter:** @Resolver (4,957 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/932240/ (715 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Financial Services, Security and Investigations
  - **Company Size:** 47% Enterprise, 38% Mid-Market


#### What Are Resolver's Pros and Cons?

**Pros:**

- Ease of Use (65 reviews)
- Customization (41 reviews)
- Customer Support (40 reviews)
- Helpful (37 reviews)
- Customizability (36 reviews)

**Cons:**

- Complexity (34 reviews)
- Improvement Needed (23 reviews)
- Learning Curve (22 reviews)
- Limited Features (21 reviews)
- Poor Reporting (20 reviews)

### 4. [Riskonnect GRC solutions](https://www.g2.com/products/riskonnect/reviews)
  An Integrated Risk Management Information System (RMIS) brings together all areas of risk effectively and efficiently, reducing costs and enabling insights that have previously been unobtainable.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 68
**How Do G2 Users Rate Riskonnect GRC solutions?**

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.5/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.1/10 (Category avg: 9.0/10)

**Who Is the Company Behind Riskonnect GRC solutions?**

- **Seller:** [Riskonnect](https://www.g2.com/sellers/riskonnect)
- **HQ Location:** Atlanta, US
- **Twitter:** @Riskonnect (1,238 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/riskonnect-inc (1,044 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Government Administration, Gambling & Casinos
  - **Company Size:** 54% Mid-Market, 28% Enterprise


#### What Are Riskonnect GRC solutions's Pros and Cons?

**Pros:**

- Ease of Use (4 reviews)
- Features (4 reviews)
- Risk Management (4 reviews)
- Implementation Ease (3 reviews)
- Adaptability (2 reviews)

**Cons:**

- Slow Loading (2 reviews)
- Confusing Navigation (1 reviews)
- Difficult Customization (1 reviews)
- Difficult Navigation (1 reviews)
- Inefficient Risk Management (1 reviews)

### 5. [VulScan](https://www.g2.com/products/vulscan/reviews)
  Automated Vulnerability Scanning. Affordably Priced For Everyone! With almost 70 new hidden vulnerabilities identified every day, you would need to be a super hero with X-ray vision to find them all. Or, you can let VulScan do it for you. VulScan is purpose-built for MSPs and for IT Departments that handle their own IT security. It has all the features you need for both internal and external vulnerability management, but without all the complexity found in older solutions. Best of all, VulScan is priced so that cost is no longer a barrier to scanning as many assets as you need, as frequently as you want. That’s why our slogan is “Vulnerability Management For The Rest of Us! VulScan is an affordable cloud-based vulnerability management platform. It includes the software needed to spin up an unlimited number of virtual network scanner appliances using Hyper-V or VMWare, and a cloud-based portal to control the scanners and manage the discovered issues. For internal network scanning, the appliances can be installed on any existing computer that has excess capacity on the network, or installed on a dedicated box to be permanently installed. You can add multiple scanners and configure them each to scan separate parts of the network to get even faster results pushed into the same client site dashboard at no additional cost. For external scanning, the appliances are installed on the MSP’s data center or other remote location and “pointed” to the public facing IP addresses of the target network.


  **Average Rating:** 4.1/5.0
  **Total Reviews:** 121
**How Do G2 Users Rate VulScan?**

- **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.1/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.9/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.1/10 (Category avg: 9.0/10)

**Who Is the Company Behind VulScan?**

- **Seller:** [Kaseya](https://www.g2.com/sellers/kaseya)
- **Company Website:** https://www.kaseya.com/
- **Year Founded:** 2000
- **HQ Location:** Miami, FL
- **Twitter:** @KaseyaCorp (17,425 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/kaseya/ (5,512 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services, Computer & Network Security
  - **Company Size:** 67% Small-Business, 32% Mid-Market


#### What Are VulScan's Pros and Cons?

**Pros:**

- Ease of Use (42 reviews)
- Features (20 reviews)
- Reporting (17 reviews)
- Reporting Features (17 reviews)
- Scanning Efficiency (17 reviews)

**Cons:**

- Inadequate Reporting (10 reviews)
- UX Improvement (10 reviews)
- Difficult Setup (8 reviews)
- Limited Reporting (8 reviews)
- Poor Customer Support (8 reviews)

### 6. [Complyance](https://www.g2.com/products/complyance-complyance/reviews)
  Complyance is the innovation-driven, AI-first Enterprise GRC platform trusted by Fortune 500 companies. Designed for complex enterprise and government environments, Complyance uses secure, domain-tested automation and AI to cut manual GRC work by 70% and enable continuous, data-driven risk management. We combine five powerful modules, Controls, Risks, Vendors, Policies, and Trust, into one integrated platform that simplifies compliance operations and unlocks strategic insight. Whether you're navigating SOC 2, ISO 27001, HIPAA, or a custom framework, you stay in control. Our configurable AI agents adapt to your unique workflows, automating everything from evidence collection to risk monitoring. Instead of forcing your team into rigid templates, Complyance molds to how you already work, giving you automation with context, not chaos. We serve security and GRC teams that wear too many hats and deserve more leverage. You don’t need a bigger team to scale your program, you need better tools, like Complyance. Our platform integrates seamlessly with your existing stack (ServiceNow, GitHub, and more), auto-collects evidence, and provides real-time dashboards so you’re always audit-ready and never flying blind. We believe compliance is more than just passing the audit. It’s about peace of mind. Complyance helps you move from reactive checklists to proactive risk management that earns GRC a seat at the executive table. We give you time back, so you can focus on high-impact work that actually reduces risk, not just report on it. If your GRC team is small but mighty, Complyance is your force multiplier. We make it possible to scale trust, reduce risk, and demonstrate strategic impact with fewer manual hours and more confidence.


  **Average Rating:** 4.9/5.0
  **Total Reviews:** 45
**How Do G2 Users Rate Complyance?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.2/10 (Category avg: 8.7/10)
- **Quality of Support:** 10.0/10 (Category avg: 9.0/10)

**Who Is the Company Behind Complyance?**

- **Seller:** [Complyance](https://www.g2.com/sellers/complyance-82d2a82b-a191-4b4f-b9a2-61c87e09bc82)
- **Company Website:** https://complyance.com/
- **HQ Location:** N/A
- **LinkedIn® Page:** https://www.linkedin.com/company/complyancehq/ (28 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Hospital & Health Care, Information Technology and Services
  - **Company Size:** 47% Mid-Market, 36% Enterprise


#### What Are Complyance's Pros and Cons?

**Pros:**

- Ease of Use (22 reviews)
- Efficiency (16 reviews)
- Intuitive (13 reviews)
- Compliance (12 reviews)
- Compliance Management (12 reviews)

**Cons:**

- Integration Issues (3 reviews)
- Not User-Friendly (2 reviews)
- Evidence Collection (1 reviews)
- Expensive (1 reviews)
- Export Issues (1 reviews)

### 7. [ScalePad ControlMap](https://www.g2.com/products/scalepad-controlmap/reviews)
  Built for MSPs, ControlMap is a cybersecurity compliance automation platform designed to expedite the compliance journey for 50+ frameworks and standards. With turnkey tools, automation, and templates, ControlMap enables MSPs to offer Compliance as a Service (CaaS), increasing revenue streams and ensuring clients are compliant within highly regulated industries.  Designed to scale, ControlMap provides a multi-tenant solution that helps MSPs become the compliance expert their clients need - without having to take a single cybersecurity course. From robust reporting and policy templates to 40+ supported integrations, achieving compliance is accessible and frictionless.  It’s time to accelerate growth, boost resilience, and mitigate cybersecurity risks. Peace of mind is just a framework away.  Enabling MSPs to build and manage a cybersecurity compliance program, ControlMap streamlines compliance from start to audit and beyond. Say “goodbye” to endless spreadsheets and documents with a SaaS solution that simplifies the complexities in achieving and maintaining SOC 2, CMMC, FTC Safeguards, NIST CSF 2.0, CIS Controls, and many more standards. See firsthand how ControlMap can help at www.scalepad.com/control-map


  **Average Rating:** 4.6/5.0
  **Total Reviews:** 46
**How Do G2 Users Rate ScalePad ControlMap?**

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.6/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.1/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.3/10 (Category avg: 9.0/10)

**Who Is the Company Behind ScalePad ControlMap?**

- **Seller:** [ScalePad](https://www.g2.com/sellers/scalepad)
- **Company Website:** https://www.scalepad.com/
- **Year Founded:** 2015
- **HQ Location:** Vancouver, BC
- **Twitter:** @GoScalePad (986 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/scalepad/ (254 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services, Computer Software
  - **Company Size:** 55% Mid-Market, 36% Small-Business


#### What Are ScalePad ControlMap's Pros and Cons?

**Pros:**

- Ease of Use (3 reviews)
- Integrations (3 reviews)
- Compliance Management (2 reviews)
- Dashboard Usability (2 reviews)
- Evidence Collection (2 reviews)

**Cons:**

- Complex Setup (2 reviews)
- Learning Curve (2 reviews)
- Access Issues (1 reviews)
- Access Management (1 reviews)
- Complex Implementation (1 reviews)

### 8. [CIMCON Software](https://www.g2.com/products/cimcon-software/reviews)
  CIMCON Software is the leading provider of Model risk and EUC risk management software. Our solutions help to minimize the likelihood of errors and sensitive data loss in end-user controlled applications (EUC or UDA). This includes Excel spreadsheets, Access databases and other modeling tools. CIMCON Software has been consistently recognized as the industry standard in end-user controlled computing risk management & compliance, helping hundreds of the world’s largest organizations.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 19
**How Do G2 Users Rate CIMCON Software?**

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.1/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.7/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind CIMCON Software?**

- **Seller:** [CIMCON Software](https://www.g2.com/sellers/cimcon-software)
- **Year Founded:** 1988
- **HQ Location:** MA, USA
- **Twitter:** @CIMCONSoftware (162 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/89292/ (141 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Banking
  - **Company Size:** 58% Enterprise, 37% Mid-Market


### 9. [Soterion](https://www.g2.com/products/soterion/reviews)
  Soterion is an international leading provider of SAP Governance, Risk and Compliance (GRC) solutions. Soterion’s user-friendly GRC solutions provide SAP customers with in-depth access risk reporting to allow organisations to effectively manage their access risk exposure. Soterion is passionate about simplifying the GRC processes, with a focus on translating this complexity into a business-friendly language to enhance better decision making and business accountability. The software provides immediate integration into the SAP environment allowing organisations to keep up with the market while effectively managing risk. Our easy-to-learn, plug-and-play software is S/4HANA ready, offers a beautiful graphical user interface and boasts an award-winning user experience. As access risk is business risk, Soterion believes that effective GRC is measured by how well the business users can carry out their access risk management activities. Our business-friendly GRC solution enhances the organisation’s overall risk awareness by empowering business buy-in and accountability of access risk. Soterion's GRC software suite includes the following solutions: • Access Risk Manager • Basis Review Manager • Central Identity Manager • Continuous Controls Manager • Data Privacy Manager • Elevated Rights Manager • Periodic Review Manager • Password Self-Service • SAP License Manager Deployment options are as a subscription model or an outright purchase: • Soterion On-Premise: For customers looking for market leading on-premise access risk software. • Soterion Cloud: Soterion’s GRC suite hosted in Soterion’s data centres. • Soterion GRC as a Managed Service: For customers looking to combine ‘on-tap’ GRC expertise with Soterion’s GRC suite. A team of expert consultants with vast knowledge in SAP security, risk and controls across multiple SAP platforms (ECC, S4HANA, SuccessFactors etc) assist our customers in securing their SAP environments, striving towards SAP security utopia. For more information, email us at info@soterion.com or visit our website: https://soterion.com/


  **Average Rating:** 4.9/5.0
  **Total Reviews:** 21
**How Do G2 Users Rate Soterion?**

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.7/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.9/10 (Category avg: 9.0/10)

**Who Is the Company Behind Soterion?**

- **Seller:** [Soterion](https://www.g2.com/sellers/soterion)
- **Year Founded:** 2010
- **HQ Location:** Cape Town, ZA
- **Twitter:** @Soteriontech (940 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/soterion/ (30 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 45% Mid-Market, 41% Enterprise


### 10. [6clicks](https://www.g2.com/products/6clicks/reviews)
  Transform your approach to cyber risk and compliance with 6clicks, a leading AI-powered Governance, Risk & Compliance (GRC) platform. Designed for service providers, enterprises and governments, 6clicks streamlines building resilient cyber programs that go beyond tick-box compliance. Our unique Hub & Spoke deployment model and powerful AI engine connect distributed teams, systems, and data, providing comprehensive oversight and control. With 6clicks, you can: ➡️ Balance control and autonomy with our Hub & Spoke deployment model, ideal for managing distributed GRC programs across various divisions, functions, geographies, or projects. ➡️ Utilize Hailey, our AI engine, to automate security compliance, IT risk management, vendor management, incident response and more. ➡️ Leverage our transparent licensing model with unlimited users and access to all our modules and the most in-demand security frameworks, like ISO27001, NIST, SOC 2, Cyber Essentials, CMMC, and DORA. ➡️ Access our vast Content Library, including turn-key security frameworks and regulations, audit and assessment templates, control sets and policies, and risk and issue libraries. We also offer advisors and managed service providers a white-labelled, turn-key GRC platform designed to increase client retention, unlock new revenue streams and streamline and scale service delivery.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 21
**How Do G2 Users Rate 6clicks?**

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.9/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.5/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.6/10 (Category avg: 9.0/10)

**Who Is the Company Behind 6clicks?**

- **Seller:** [6clicks](https://www.g2.com/sellers/6clicks)
- **Year Founded:** 2019
- **HQ Location:** Carlton, Victoria, Australia
- **Twitter:** @6clicksOfficial (134 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/6clicks/ (88 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 50% Mid-Market, 32% Small-Business


### 11. [Diligent One Platform](https://www.g2.com/products/diligent-one-platform/reviews)
  Diligent One Platform (formerly HighBond) revolutionizes the way boards, committees, and executives navigate risk. Consolidate all your solutions on the broadest platform for GRC applications designed to deliver comprehensive insights into a single view of risk and associated controls. Helping free you from the unnecessary costs and frustrations of point solutions. The Diligent One Platform is built to deliver risk insights in a clear and consistent format. Control what information is presented to the board with a comprehensive and ever-expanding set of pre-built and customizable templates and dashboards.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 141
**How Do G2 Users Rate Diligent One Platform?**

- **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind Diligent One Platform?**

- **Seller:** [Diligent Corporation](https://www.g2.com/sellers/diligent-corporation-9db2bcc4-90ac-4d53-93d9-d0478f837d14)
- **Company Website:** https://www.diligent.com/
- **Year Founded:** 2001
- **HQ Location:** New York, NY
- **Twitter:** @diligenthq (4,522 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/101105/ (2,999 employees on LinkedIn®)

**Who Uses This Product?**
  - **Who Uses This:** Senior Internal Auditor
  - **Top Industries:** Financial Services, Information Technology and Services
  - **Company Size:** 48% Enterprise, 28% Mid-Market


#### What Are Diligent One Platform's Pros and Cons?

**Pros:**

- Ease of Use (10 reviews)
- Audit Management (6 reviews)
- Compliance Management (6 reviews)
- Features (6 reviews)
- Risk Management (6 reviews)

**Cons:**

- Limited Features (4 reviews)
- Difficulty (3 reviews)
- Learning Curve (3 reviews)
- Learning Difficulty (3 reviews)
- Limited Functionality (3 reviews)

### 12. [MasterControl Quality Management System](https://www.g2.com/products/mastercontrol-quality-management-system/reviews)
  MasterControl Quality Excellence is the #1 Quality Management System (QMS) in life sciences. Built on an AI-driven platform, it enables life-sciences companies to enable flexible quality event management, simplified document management, and automated training management—that all work seamlessly together to close the loop on quality. Targeted primarily at quality professionals within the life sciences industry, MasterControl Qx serves a diverse range of organizations, from pharmaceuticals to biotechnology and medical devices. These industries often face stringent regulatory requirements and complex quality assurance processes. MasterControl Qx offers a centralized platform that integrates various quality management functions, allowing users to manage quality events, documentation, training, and audits seamlessly. This integration not only enhances operational efficiency but also ensures that organizations remain compliant with industry standards. One of the standout features of MasterControl Qx is its intelligent automation capabilities. By automating routine quality management tasks, organizations can reduce manual errors and free up valuable time for quality professionals to focus on more strategic initiatives. Additionally, the platform provides robust data insights that empower users to make informed decisions based on real-time information. This data-driven approach enhances the ability to identify trends, monitor compliance, and drive continuous improvement within quality processes. Furthermore, MasterControl Qx is designed to foster collaboration across departments and teams. The platform's connected nature allows for easy sharing of information and documentation, ensuring that all stakeholders are aligned and informed. This collaborative environment not only enhances communication but also supports a culture of quality throughout the organization. By utilizing MasterControl Qx, companies can create a more agile and responsive quality management system that adapts to changing regulatory landscapes and market demands. Overall, MasterControl Quality Excellence (Qx) stands out in the QMS category by providing a holistic solution tailored to the specific needs of the life sciences industry. Its combination of intelligent automation, robust data insights, and collaborative features positions it as a valuable tool for organizations striving to maintain high-quality standards while navigating the complexities of regulatory compliance.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 520
**How Do G2 Users Rate MasterControl Quality Management System?**

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.6/10 (Category avg: 9.0/10)

**Who Is the Company Behind MasterControl Quality Management System?**

- **Seller:** [MasterControl](https://www.g2.com/sellers/mastercontrol)
- **Company Website:** https://www.mastercontrol.com?utm_source=linkedin&utm_medium=about&utm_campaign=l1nk3din-sm
- **Year Founded:** 1993
- **HQ Location:** Salt Lake City, UT
- **Twitter:** @MCMasterControl (6,262 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/23070/ (782 employees on LinkedIn®)

**Who Uses This Product?**
  - **Who Uses This:** Quality Assurance Specialist, Quality Engineer
  - **Top Industries:** Pharmaceuticals, Medical Devices
  - **Company Size:** 65% Mid-Market, 25% Enterprise


#### What Are MasterControl Quality Management System's Pros and Cons?

**Pros:**

- Ease of Use (115 reviews)
- Document Management (87 reviews)
- Training (65 reviews)
- Document Control (47 reviews)
- Features (44 reviews)

**Cons:**

- Not Intuitive (43 reviews)
- Learning Curve (42 reviews)
- Difficult Usability (32 reviews)
- Not User-Friendly (29 reviews)
- Complex Setup (27 reviews)

### 13. [DORA REGISTER](https://www.g2.com/products/dora-register/reviews)
  DORA REGISTER supports financial entities meet Digital Operational Resilience Act (DORA) requirements by maintaining a complete and accurate register of information about ICT third-party service providers. Data Integrity & Accuracy: The platform ensures data consistency across all records by automatically linking related information (e.g., supplier names, contract details) and updating them across the system when changes are made. Time-Saving Features: - Eliminates manual data entry in complex Excel sheets. - Automatically populates related fields and reports. - Reduces errors through built-in validation and code dictionaries. https://doraregister.io/ Third-Party Risk Management: It supports the classification and monitoring of ICT providers, helping institutions manage risks and prepare for audits or inspections. It is integrated with GLEIF. Regulatory Reporting: Generates structured reports that are ready for submission to EU supervisory authorities, ensuring transparency and accountability. Integration & Scalability: It can function as a standalone tool or be integrated into broader risk management system RED INTO GREEN that support compliance with other requirements of Digital Operational Resilience Act (DORA).


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 10
**How Do G2 Users Rate DORA REGISTER?**

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.5/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind DORA REGISTER?**

- **Seller:** [DAPR](https://www.g2.com/sellers/dapr)
- **HQ Location:** N/A
- **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 50% Mid-Market, 40% Enterprise


#### What Are DORA REGISTER's Pros and Cons?

**Pros:**

- Ease of Use (5 reviews)
- Efficiency Optimization (3 reviews)
- Intuitive (2 reviews)
- Comprehensive View (1 reviews)
- Customer Support (1 reviews)


### 14. [Ostendio](https://www.g2.com/products/ostendio/reviews)
  Welcome to the next generation of security. Ostendio is the only GRC (Governance, Risk & Compliance) platform that leverages the strength of your greatest asset. Your people. Ostendio delivers an easy-to-use, cost-effective platform that allows you to assess risk, create and manage critical policies and procedures, educate and empower your people to be secure with security awareness training, and monitor continuous compliance across 300+ security frameworks. With deep customization, advanced intelligence, and flexible controls, you’re always audit-ready, always secure, and always able to take on what’s next. www.ostendio.com.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 40
**How Do G2 Users Rate Ostendio?**

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.0/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.4/10 (Category avg: 9.0/10)

**Who Is the Company Behind Ostendio?**

- **Seller:** [Ostendio](https://www.g2.com/sellers/ostendio)
- **Year Founded:** 2013
- **HQ Location:** McLean, Virginia
- **Twitter:** @Ostendio (868 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/ostendio/ (19 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services, Health, Wellness and Fitness
  - **Company Size:** 57% Mid-Market, 35% Small-Business


#### What Are Ostendio's Pros and Cons?

**Pros:**

- Ease of Use (3 reviews)
- Features (2 reviews)
- Helpful (2 reviews)
- Audit Efficiency (1 reviews)
- Audit Management (1 reviews)

**Cons:**

- Non-Intuitive Features (1 reviews)
- Not Intuitive (1 reviews)

### 15. [SureCloud](https://www.g2.com/products/surecloud/reviews)
  SureCloud is the most intelligent GRC platform, enabling organisations to take centralised command of their risk, compliance and audit activities. Built for established teams managing complex environments, SureCloud offers a single, scalable solution that connects all GRC domains while fostering collaboration across your business units. Powered by event-sourced architecture, SureCloud provides a real-time, intelligent view of every risk so you understand how they have impacted you and what really matters to your business. See how risks evolve, track control performance, and link issues directly to outcomes while AI-driven insights help inform your next steps. SureCloud simplifies GRC complexity through a modular, no-code platform that is easy to configure without developer input. Collaboration is built in from role-based dashboards to automated approval workflows ensuring alignment and accountability no matter the business unit. Whether you are managing ISO 27001 compliance, improving your vendor assessments or driving data privacy, SureCloud gives you confidence to improve your posture and build lasting resilience. Highlights: - The Most Intelligent GRC Platform: SureCloud event-based architecture powers deep insights across your compliance and risk activities, capturing context over time instead of just static snapshots. Unlike other platforms, this enables you to track real changes, drive better decision-making, and gain clarity across your risks, controls, and even third-party interactions. - Clever compliance driven by ready automation: By automating manual human tasks such as evidence collection and controls monitoring, SureCloud dramatically reduces preparation time and ensures continued adherence to frameworks like ISO 27001, SOC 2 and GDPR. Get time back for teams to focus on your more important strategic decisions, uplifted by AI to inform improvements and next steps. - Total collaboration for enterprise success: Operate at scale without reliance on distributed toolsets, people and data by linking entities and projects. Clear task management and staged reviewing create accountability throughout the execution process so you deliver faster and without error, letting you improve your overall risk posture.


  **Average Rating:** 4.2/5.0
  **Total Reviews:** 48
**How Do G2 Users Rate SureCloud?**

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.0/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.4/10 (Category avg: 9.0/10)

**Who Is the Company Behind SureCloud?**

- **Seller:** [SureCloud](https://www.g2.com/sellers/surecloud)
- **Company Website:** https://www.surecloud.com
- **Year Founded:** 2006
- **HQ Location:** London, United Kingdom
- **Twitter:** @SureCloud (750 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/1107556/ (59 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Retail, Financial Services
  - **Company Size:** 63% Enterprise, 27% Mid-Market


#### What Are SureCloud's Pros and Cons?

**Pros:**

- Helpful (11 reviews)
- Customer Support (9 reviews)
- Ease of Use (9 reviews)
- Intuitive (5 reviews)
- Reporting (5 reviews)

**Cons:**

- Not Intuitive (6 reviews)
- Limited Functionality (5 reviews)
- Inadequate Reporting (4 reviews)
- Limited Customization (4 reviews)
- Limited Reporting (4 reviews)

### 16. [Netwrix Platform Governance (formerly Strongpoint)](https://www.g2.com/products/netwrix-platform-governance-formerly-strongpoint/reviews)
  Strongpoint is the only fully native solution for managing change and compliance in your NetSuite account or Salesforce Org. Our products start by producing accurate, up-to-date documentation of all customizations in your system — and the connections between them. From there, a suite of sophisticated tools and pre-built controls helps you manage risk, save time and increase confidence in your critical enterprise systems. What Can You Do With Strongpoint? — Get SOX-compliant reporting in as little as 30 days — Reduce the cost of audit prep by as much as 90% — Maintain a continuous compliance framework — Automate the time-consuming parts of change management — Pre-clear up to 80% of change requests — Integrate with JIRA/ServiceNow for ticket-level impact analysis — Reduce bottlenecks in the development cycle — Gain at-a-glance visibility into the customizations in your Org/account — Run cleanup projects to safely deprecate unused customizations Who Uses Strongpoint? Strongpoint customers range from small business and nonprofits, to publicly traded corporations with complex compliance requirements. Flashlight, our free product, is an ideal entry point that provides customization documentation and a suite of tools for working with it. Available for Salesforce and NetSuite. Strongpoint’s enterprise-level products build on what Flashlight offers, with powerful compliance, reporting and automation capabilities. Contact us for help finding the right product for you.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 22
**How Do G2 Users Rate Netwrix Platform Governance (formerly Strongpoint)?**

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.2/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.6/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.9/10 (Category avg: 9.0/10)

**Who Is the Company Behind Netwrix Platform Governance (formerly Strongpoint)?**

- **Seller:** [Strongpoint, now part of Netwrix](https://www.g2.com/sellers/strongpoint-now-part-of-netwrix)
- **Year Founded:** 2013
- **HQ Location:** Toronto, Ontario
- **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 65% Mid-Market, 22% Enterprise


#### What Are Netwrix Platform Governance (formerly Strongpoint)'s Pros and Cons?

**Pros:**

- Compliance Management (1 reviews)
- Connectivity (1 reviews)
- Data Accuracy (1 reviews)
- Documentation Management (1 reviews)
- Document Management (1 reviews)

**Cons:**

- Conflict Management (1 reviews)
- Data Inaccuracy (1 reviews)
- Inaccurate Data (1 reviews)
- Learning Curve (1 reviews)
- Steep Learning Curve (1 reviews)

### 17. [TruOps](https://www.g2.com/products/truops-truops/reviews)
  Created from three decades of expertise in security, risk, and compliance assurance, the TruOps governance, risk, and compliance platform transforms siloed risk functions into a comprehensive Risk Operations Center. Designed to intelligently integrate and automate critical GRC functions, TruOps simplifies the security, risk, and compliance processes organizations need to manage and control risk effectively and provides the "Mother" of all single-view dashboards. Capitalize on quick, accurate, risk-based decision-making backed by clear visibility and instant insight into your current risk and compliance postures. Drive efficiency and cost savings by embedding automated workflows across your organization, fostering a resilient governance, risk, and compliance (GRC) structure. TruOps delivers: ENHANCED VISIBILITY WITH AI Clark is an intelligent assistant that delivers instant insight and clear visibility into your compliance gaps, security, and third-party risk to a single pane of glass. MULTI-TENANT FUNCTIONALITY Multi-tenant functionality allows for consolidated risk management oversight for multiple locations or divisions of business. CUSTOMIZED REPORTING & DASHBOARDS Pose a question to Clark in plain, natural English and instantly receive a customized report of your risk and recommendations. REGULATION READINESS Identify, assess, and mitigate compliance and regulatory risk. IMMEDIATE VALUE Reduce costs and experience swift ROI through automation, collaboration, and simplified processes. CONTINUOUS CONTROLS MONITORING Real-Time Data empowers your security and compliance teams to manage and control your organization’s risk.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 17
**How Do G2 Users Rate TruOps?**

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.0/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.6/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.5/10 (Category avg: 9.0/10)

**Who Is the Company Behind TruOps?**

- **Seller:** [TruOps](https://www.g2.com/sellers/truops)
- **HQ Location:** Norwalk, Connecticut
- **LinkedIn® Page:** https://www.linkedin.com/company/truops-cyber-risk-management/ (10 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 47% Enterprise, 47% Mid-Market


#### What Are TruOps's Pros and Cons?

**Pros:**

- Customer Support (10 reviews)
- Ease of Use (8 reviews)
- Customizability (7 reviews)
- Customization (6 reviews)
- Integrations (5 reviews)

**Cons:**

- Complex Setup (3 reviews)
- Difficult Learning (3 reviews)
- Inadequate Reporting (3 reviews)
- Limited Reporting (3 reviews)
- Not Intuitive (3 reviews)

### 18. [Apparity](https://www.g2.com/products/apparity/reviews)
  Awarded InsuranceERM's End User Computing (EUC) Risk Management Solution of the Year, Apparity helps efficiently manage EUC risk in one powerful platform backed by phenomenal customer support. Apparity is designed to reliably identify, inventory, risk assess and control the end user applications that support your most critical business processes. This includes spreadsheets, models, databases, programming language scripts, BI tools and more.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 16
**How Do G2 Users Rate Apparity?**

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.3/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.7/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind Apparity?**

- **Seller:** [Apparity](https://www.g2.com/sellers/apparity)
- **Company Website:** https://apparity.com
- **Year Founded:** 2009
- **HQ Location:** Atlanta, GA
- **Twitter:** @ApparityLLC (57 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/apparity (7 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Financial Services, Banking
  - **Company Size:** 56% Mid-Market, 38% Enterprise


#### What Are Apparity's Pros and Cons?

**Pros:**

- Customer Experience (1 reviews)
- Customer Support (1 reviews)
- Data Discovery (1 reviews)
- Features (1 reviews)
- Tracking (1 reviews)

**Cons:**

- Inefficiency (1 reviews)
- Slow Loading (1 reviews)
- Slow Performance (1 reviews)

### 19. [Acuity STREAM](https://www.g2.com/products/acuity-stream/reviews)
  Acuity’s STREAM Integrated Risk Management platform provides a clear line of sight into cyber, IT and operational risk allowing businesses to make informed strategic decisions and build resilience. Through centralization and automation, STREAM eliminates guesswork, reduces manual processes, communicates risk in business terms and builds stakeholder confidence. Purpose-built by industry veterans, STREAM is designed to meet the complex and varied risk management and compliance needs of today’s leading companies. Sophisticated analytics, personalized dashboards, and unrivalled configurability empower companies to have better overall visibility. With SaaS and on-premise deployments available, STREAM is quick and practical to implement, delivering value within weeks.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 27
**How Do G2 Users Rate Acuity STREAM?**

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.1/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.5/10 (Category avg: 9.0/10)

**Who Is the Company Behind Acuity STREAM?**

- **Seller:** [Acuity Risk Management LLP](https://www.g2.com/sellers/acuity-risk-management-llp)
- **Year Founded:** 2005
- **HQ Location:** London, England
- **Twitter:** @acuityrm (871 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/acuity-risk-management/ (12 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 43% Mid-Market, 39% Enterprise


#### What Are Acuity STREAM's Pros and Cons?

**Pros:**

- Useful (2 reviews)
- Comprehensive Overview (1 reviews)
- Customer Support (1 reviews)
- Ease of Use (1 reviews)
- Efficiency (1 reviews)


### 20. [Lime](https://www.g2.com/products/lime/reviews)
  Lime Software puts your business back in control of your Oracle Licensing. Helping you understand your compliance position, manage your risks and maintain accurate reporting of actual usage of all Oracle Technology . Lime does not require any infrastructure to deploy, no middleware or databases are required. Inventory turn around in days not months (Zero Footprint)


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 10
**How Do G2 Users Rate Lime?**

- **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.8/10 (Category avg: 8.7/10)
- **Quality of Support:** 7.6/10 (Category avg: 9.0/10)

**Who Is the Company Behind Lime?**

- **Seller:** [LimeSoftware](https://www.g2.com/sellers/limesoftware)
- **Year Founded:** 2007
- **HQ Location:** Norwich, NORFOLK
- **Twitter:** @Lime_Software (243 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/lime-software/ (4 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 50% Small-Business, 40% Mid-Market


#### What Are Lime's Pros and Cons?

**Pros:**

- Efficiency Optimization (1 reviews)


### 21. [LogicManager](https://www.g2.com/products/logicmanager/reviews)
  LogicManager is an Enterprise Risk Management platform that helps organizations identify, assess, monitor, report, and improve risk management activities across the entire risk lifecycle. Since 2006, LogicManager has supported enterprise risk leaders, process owners, executives, and oversight teams in building risk-based programs that connect people, processes, controls, vendors, objectives, incidents, and reporting in one system. Unlike traditional GRC tools that often manage risks, controls, and compliance activities in isolation, LogicManager’s ERM approach is designed to show how risk moves across the business and how it affects performance, accountability, and decision-making. LogicManager is powered by Risk Ripple Intelligence, a connected risk model that helps organizations understand relationships between risks, controls, processes, departments, vendors, and objectives. This structure helps teams identify hidden dependencies, understand downstream impacts, and create a more complete view of their risk landscape. The platform supports oversight and separation of duties by helping organizations define ownership, assign responsibilities, manage approvals, track issues, monitor controls, and report results to leadership. LogicManager also includes out-of-the-box board reporting and configurable dashboards that help teams communicate risk information clearly to executives, boards, and oversight committees. LogicManager’s Risk Maturity Model provides an umbrella framework for building and maturing a risk program. Because most major risk, compliance, and governance frameworks share a common foundation, the RMM helps organizations address the approximately 90% of requirements that are common across frameworks, leaving teams to focus on the framework-specific 10%. This reduces duplicated effort and gives teams a structured foundation for continuous improvement. Key capabilities and value propositions include: - Manage the full risk lifecycle, from identification and assessment to monitoring, reporting, and program improvement. - Use Risk Ripple Intelligence to connect risks, controls, processes, vendors, departments, and objectives. - Support oversight, accountability, approvals, and separation of duties across risk activities. - Create board-ready visibility with out-of-the-box reports and configurable dashboards. - Accelerate program maturity with the Risk Maturity Model, guided onboarding, embedded expertise, and best-practice frameworks. LogicManager is designed for mid-market and enterprise organizations, especially regulated, complex, or highly distributed teams managing enterprise risk, operational resilience, third-party risk, business continuity, internal controls, issue management, cybersecurity risk, and executive reporting. With LogicManager Expert — LMX — users can access AI-powered guidance based on trusted LogicManager University content to help apply best practices, reduce manual follow-ups, and work more efficiently within their risk program.


  **Average Rating:** 4.2/5.0
  **Total Reviews:** 119
**How Do G2 Users Rate LogicManager?**

- **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.0/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.2/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.7/10 (Category avg: 9.0/10)

**Who Is the Company Behind LogicManager?**

- **Seller:** [LogicManager](https://www.g2.com/sellers/logicmanager)
- **Company Website:** https://www.logicmanager.com/
- **Year Founded:** 2005
- **HQ Location:** Boston, MA
- **LinkedIn® Page:** https://www.linkedin.com/company/1710850/ (58 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Banking, Financial Services
  - **Company Size:** 31% Mid-Market, 24% Enterprise


#### What Are LogicManager's Pros and Cons?

**Pros:**

- Ease of Use (25 reviews)
- Intuitive (14 reviews)
- Helpful (11 reviews)
- Navigation Ease (9 reviews)
- Organization (9 reviews)

**Cons:**

- Lack of Clarity (13 reviews)
- Not Intuitive (13 reviews)
- Missing Features (12 reviews)
- Learning Curve (10 reviews)
- Lack of Guidance (7 reviews)

### 22. [BC in the Cloud](https://www.g2.com/products/bc-in-the-cloud/reviews)
  The BC in the Cloud (BCIC) all-in-one resilience planning platform enables organizations to effectively identify impact and manage response across the entire lifecycle—before, during, and after a disruption. By unifying business continuity and disaster recovery, BC in the Cloud ensures compliance while uncovering hidden interdependencies and critical gaps that must be addressed throughout planning and testing activities. The intuitive, low-code platform supports rapid deployment, seamless collaboration, and full life-cycle automation—accelerating high velocity critical event management and freeing teams from repetitive tasks so they can know earlier, respond faster, and improve continuously when every moment matters.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 26
**How Do G2 Users Rate BC in the Cloud?**

- **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.4/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.7/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.9/10 (Category avg: 9.0/10)

**Who Is the Company Behind BC in the Cloud?**

- **Seller:** [Everbridge](https://www.g2.com/sellers/everbridge)
- **Year Founded:** 2002
- **HQ Location:** Vienna, VA
- **Twitter:** @Everbridge (4,776 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/33883 (1,580 employees on LinkedIn®)
- **Phone:** +1.888.366.4911

**Who Uses This Product?**
  - **Top Industries:** Financial Services
  - **Company Size:** 73% Enterprise, 12% Mid-Market


#### What Are BC in the Cloud's Pros and Cons?

**Pros:**

- Features (2 reviews)
- Centralization (1 reviews)
- Compliance (1 reviews)
- Customer Support (1 reviews)
- Customizability (1 reviews)

**Cons:**

- Difficult Customization (1 reviews)
- Difficult Learning (1 reviews)
- Expensive (1 reviews)
- Lack of Clarity (1 reviews)
- Limited Customization (1 reviews)

### 23. [Microsoft Secure Score](https://www.g2.com/products/microsoft-secure-score/reviews)
  Use intelligent insights and guidance to strengthen your organization’s security posture with Microsoft Secure Score.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 9
**How Do G2 Users Rate Microsoft Secure Score?**

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.6/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.6/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.6/10 (Category avg: 9.0/10)

**Who Is the Company Behind Microsoft Secure Score?**

- **Seller:** [Microsoft Secure Score](https://www.g2.com/sellers/microsoft-secure-score)
- **HQ Location:** N/A
- **Twitter:** @cloudworxs (14 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/No-Linkedin-Presence-Added-Intentionally-By-DataOps (1 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 50% Mid-Market, 40% Enterprise


#### What Are Microsoft Secure Score's Pros and Cons?

**Pros:**

- Recommendations (4 reviews)
- Security (3 reviews)
- Monitoring (2 reviews)
- Detailed Analysis (1 reviews)
- Ease of Use (1 reviews)

**Cons:**

- Not User-Friendly (2 reviews)
- Compatibility Issues (1 reviews)
- Complex Implementation (1 reviews)
- Complexity (1 reviews)
- Dashboard Issues (1 reviews)

### 24. [Riskify](https://www.g2.com/products/riskify/reviews)
  Riskify is an AI-powered non-financial risk intelligence platform that enables procurement, compliance, risk, and financial teams to identify and respond to company risks in real time. By fusing advanced AI analytics with multiple trusted data sources, Riskify delivers comprehensive and actionable insights across six key dimensions: News & Media, Employees, ESG, Cybersecurity, Regulatory, and Operational. Organizations use Riskify to instantly scan any company, set up automated monitoring, and proactively detect emerging non-financial risks—empowering them to protect operations, strengthen compliance, and make faster, more confident decisions.


  **Average Rating:** 4.9/5.0
  **Total Reviews:** 12
**How Do G2 Users Rate Riskify?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.9/10 (Category avg: 8.7/10)
- **Ease of Admin:** 10.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind Riskify?**

- **Seller:** [Riskify](https://www.g2.com/sellers/riskify)
- **Year Founded:** 2024
- **HQ Location:** Hong Kong, HK
- **Twitter:** @riskify_net (84 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/riskify-net/ (12 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 58% Small-Business, 42% Mid-Market


#### What Are Riskify's Pros and Cons?

**Pros:**

- Risk Management (4 reviews)
- Efficiency Improvement (2 reviews)
- Real-Time Analytics (2 reviews)
- Reporting (2 reviews)
- Accuracy (1 reviews)

**Cons:**

- Access Limitations (2 reviews)
- Limited Functionality (2 reviews)
- Connectivity Issues (1 reviews)
- Download Issues (1 reviews)
- Inefficient Risk Management (1 reviews)

### 25. [Aurex.ai](https://www.g2.com/products/aurex-ai/reviews)
  Aurex™ is a Governance, Risk, Compliance, Analytics, Business Continuity Management, and ESG solutions provider operating across the UK, US, and UAE. It offers greater assurance for complex, multifaceted organizations and enables businesses to proactively identify and mitigate risks in real time and alert the Board and Management. Aurex™ is empowered by AI-ML technology to automate processes and accelerate Digital Transformation. The primary goal of Aurex™ is to ensure organisational resilience and sustainability. The solutions offered by Aurex breaks down organisational silos, providing decision-makers with timely and accurate data for informed decision-making.


  **Average Rating:** 4.3/5.0
  **Total Reviews:** 16
**How Do G2 Users Rate Aurex.ai?**

- **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.4/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.8/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.8/10 (Category avg: 9.0/10)

**Who Is the Company Behind Aurex.ai?**

- **Seller:** [Aurex](https://www.g2.com/sellers/aurex)
- **Year Founded:** 2021
- **HQ Location:** San Francisco, California
- **Twitter:** @AurexInc (26 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/aurexofficial/ (14 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 63% Mid-Market, 31% Small-Business


#### What Are Aurex.ai's Pros and Cons?

**Pros:**

- Automation (7 reviews)
- Time-saving (7 reviews)
- Risk Management (6 reviews)
- Time-Saving (6 reviews)
- Compliance (4 reviews)

**Cons:**

- Learning Curve (9 reviews)
- Learning Difficulty (6 reviews)
- Complexity (5 reviews)
- Complex Setup (5 reviews)
- Feature Overload (5 reviews)


    ## What Is IT Risk Management Software?
  [Risk Assessment Software](https://www.g2.com/categories/risk-assessment)
  ## What Software Categories Are Similar to IT Risk Management Software?
    - [Audit Management Software](https://www.g2.com/categories/audit-management)
    - [Regulatory Change Management Software](https://www.g2.com/categories/regulatory-change-management)
    - [Security Compliance Software](https://www.g2.com/categories/security-compliance)