Best IT Risk Management Software - Page 3

How Many IT Risk Management Software Products Does G2 Track?

Total Products under this Category: 190

Category Stats (Oct 2026)

  • Average Rating: 4.5/5 (↑0.01 vs Sep 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Pirani (+0.09%) - Among all products in this category, Pirani recorded the largest rating increase compared to last month

Last updated: October 24, 2026

How Does G2 Rank IT Risk Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 11,100+ Authentic Reviews
  • 190+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for IT Risk Management Software

G2 Grid® for IT Risk Management Software plotting products by satisfaction and market presence

Highlighted products: TeamMate, UpGuard Vendor Risk, Sprinto, Thoropass, Scrut Automation, RealCISO vCISO & GRC Platform, Optro, and SecurityScorecard.

Underlying data: [Grid® JSON](https://www.g2.com/categories/it-risk-management/grids.json?focus%5B%5D=teammate&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=sprinto-inc&focus%5B%5D=thoropass&focus%5B%5D=scrut-automation&focus%5B%5D=realciso-vciso-grc-platform&focus%5B%5D=optro&focus%5B%5D=securityscorecard)

ZenGRC

ZenGRC offers an established solution to elevate your company's risk and compliance program to the highest infosec standards. The cloud-based SaaS solution fits your existing GRC program and also evolves to guide you throughout your maturity roadmap. With ZenGRC as the central platform for your organization's entire infosec ecosystem, you can achieve continuous monitoring and efficient audit management capabilities, as well as customizable, end-to-end risk management that's built-in — not bolted on. Companies from SMB all the way to Enterprise use ZenGRC for... — Minimized manual effort through automation — Shortened, simplified audit cycles — Risk management that’s built-in—not bolted on — Increased visibility and reporting with dashboards — Direct integrations with ServiceNow, AWS, Qualys, Slack, JIRA, and more.

Average Rating: 4.4/5.0

Total Reviews: 102

How Do G2 Users Rate ZenGRC?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Ease of Use: 8.2/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.6/10 (Category avg: 8.6/10)
  • Quality of Support: 9.0/10 (Category avg: 9.1/10)

Who Is the Company Behind ZenGRC?

  • Seller: Zengrc
  • Year Founded: 2009
  • HQ Location: San Francisco, CA
  • Twitter: @riskoptics
    589 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    66 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 55% Medium, 38% Large

What Do G2 Reviewers Say About ZenGRC?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of ZenGRC, streamlining audits and enhancing efficiency across compliance initiatives.
  • Users love the centralized management of ZenGRC, streamlining audits and simplifying compliance initiatives effectively.
  • Users appreciate the ease of use of ZenGRC, streamlining compliance management and audit coordination effortlessly.
  • Users appreciate the efficient evidence management of ZenGRC, streamlining audits and improving compliance interactions.
  • Users value how ZenGRC simplifies audit management, streamlining processes and enhancing collaboration with external auditors.
Cons
  • Users find ZenGRC's inadequate reporting limits effectiveness, often necessitating external tools for data analysis.
  • Users find ZenGRC's limited reporting capabilities frustrating, often needing to develop custom solutions for better insights.
  • Users find poor reporting in ZenGRC, leading many to create custom solutions for their complex needs.
  • Users find ZenGRC's reporting issues limiting, prompting them to seek alternative solutions like PowerBI for better functionality.
  • Users find ZenGRC's complex implementation challenging, particularly for workflows requiring specialized reporting.

What Are Recent G2 Reviews of ZenGRC?

What Are G2 Users Discussing About ZenGRC?

Riskonnect GRC solutions

Riskonnect GRC software gives organizations a unified platform to identify, assess, and respond to risk across governance, risk, and compliance functions — replacing disconnected spreadsheets, tools, and siloed processes with a single source of truth. The platform spans enterprise risk management, compliance, policy management, internal controls, IT risk, third-party risk, and internal audit. Risk data connects across all disciplines so that a compliance gap surfaces as a risk, a risk without a mapped control triggers a remediation workflow, and leadership receives a consolidated view of organizational exposure rather than disconnected reports from each function. AI-assisted capabilities identify emerging risk patterns, recommend controls based on specific risk context, model probability and impact, and monitor regulatory changes. Configurable workflows, real-time KRI monitoring, and automated alerts reduce time spent on manual data collection and coordination.

Average Rating: 4.4/5.0

Total Reviews: 68

How Do G2 Users Rate Riskonnect GRC solutions?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Ease of Use: 8.5/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.6/10)
  • Quality of Support: 9.1/10 (Category avg: 9.1/10)

Who Is the Company Behind Riskonnect GRC solutions?

  • Seller: Riskonnect
  • HQ Location: Atlanta, US
  • Twitter: @Riskonnect
    1,235 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,073 employees on LinkedIn®
  • Ownership: Private

Who Uses This Product?

  • Top Industries: Government Administration, Gambling & Casinos
  • Company Size: 54% Medium, 28% Large

What Do G2 Reviewers Say About Riskonnect GRC solutions?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Riskonnect GRC solutions, making transitions and adaptations seamless and efficient.
  • Users highlight the intuitive and flexible system of Riskonnect GRC, making it easy and efficient to use.
  • Users value the user-friendly interface and comprehensive features of Riskonnect GRC solutions for effective risk management.
  • Users praise the implementation ease of Riskonnect GRC solutions, noting seamless integration and professional support throughout the process.
  • Users value the adaptability of Riskonnect GRC solutions, which effectively meet their unique business needs.
Cons
  • Users experience slow loading times, especially when updating project risks frequently, impacting their research efficiency.
  • Users find the navigation confusing initially, though they appreciate other aspects of CAMMS.Risk.
  • Users find difficult customization with Riskonnect GRC solutions, though support is available for tailored needs.
  • Users might struggle with difficult navigation initially in Riskonnect GRC solutions, but overall satisfaction remains high.
  • Users find the inefficient risk management troublesome due to slow updates, though a solution is expected soon.

What Are Recent G2 Reviews of Riskonnect GRC solutions?

What Are G2 Users Discussing About Riskonnect GRC solutions?

VulScan

Automated Vulnerability Scanning. Affordably Priced For Everyone! With almost 70 new hidden vulnerabilities identified every day, you would need to be a super hero with X-ray vision to find them all. Or, you can let VulScan do it for you. VulScan is purpose-built for MSPs and for IT Departments that handle their own IT security. It has all the features you need for both internal and external vulnerability management, but without all the complexity found in older solutions. Best of all, VulScan is priced so that cost is no longer a barrier to scanning as many assets as you need, as frequently as you want. That’s why our slogan is “Vulnerability Management For The Rest of Us! VulScan is an affordable cloud-based vulnerability management platform. It includes the software needed to spin up an unlimited number of virtual network scanner appliances using Hyper-V or VMWare, and a cloud-based portal to control the scanners and manage the discovered issues. For internal network scanning, the appliances can be installed on any existing computer that has excess capacity on the network, or installed on a dedicated box to be permanently installed. You can add multiple scanners and configure them each to scan separate parts of the network to get even faster results pushed into the same client site dashboard at no additional cost. For external scanning, the appliances are installed on the MSP’s data center or other remote location and “pointed” to the public facing IP addresses of the target network.

Average Rating: 4.1/5.0

Total Reviews: 121

How Do G2 Users Rate VulScan?

  • Has the product been a good partner in doing business?: 8.2/10 (Category avg: 9.2/10)
  • Ease of Use: 8.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.9/10 (Category avg: 8.6/10)
  • Quality of Support: 8.1/10 (Category avg: 9.1/10)

Who Is the Company Behind VulScan?

  • Seller: Kaseya
  • Company Website:
  • Year Founded: 2000
  • HQ Location: Miami, FL
  • Twitter: @KaseyaCorp
    17,411 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    5,483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 66% Small, 32% Medium

What Do G2 Reviewers Say About VulScan?

AI-generated summary from verified user reviews

Pros
  • Users find VulScan's ease of use exceptional, appreciating its simplicity in scheduling scans and generating reports.
  • Users appreciate the ease of deployment and integration of VulScan, enhancing simplicity and efficiency in vulnerability management.
  • Users appreciate the ease of reporting with VulScan, benefiting from automated scans and consolidated reports.
  • Users appreciate the easy-to-generate reports from VulScan, enhancing their efficiency and customer satisfaction.
  • Users commend VulScan for its scanning efficiency, enabling automated and scheduled vulnerability scans with ease.
Cons
  • Users find the inadequate reporting of VulScan overwhelming and unclear, lacking meaningful insights and necessary detail.
  • Users find the dated UI and lack of modern UX features frustrating, impacting their overall experience with VulScan.
  • Users find the difficult setup of VulScan to be a hindrance, requiring extensive configuration and proper hardware.
  • Users are frustrated by the limited reporting features of VulScan, hindering their ability to track vulnerabilities effectively.
  • Users are frustrated by the poor customer support from VulScan, facing difficulty in obtaining timely assistance.

What Are Recent G2 Reviews of VulScan?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

CIMCON Software

CIMCON Software is the leading provider of Model risk and EUC risk management software. Our solutions help to minimize the likelihood of errors and sensitive data loss in end-user controlled applications (EUC or UDA). This includes Excel spreadsheets, Access databases and other modeling tools. CIMCON Software has been consistently recognized as the industry standard in end-user controlled computing risk management & compliance, helping hundreds of the world’s largest organizations.

Average Rating: 4.7/5.0

Total Reviews: 19

How Do G2 Users Rate CIMCON Software?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Ease of Use: 9.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.6/10)
  • Quality of Support: 9.8/10 (Category avg: 9.1/10)

Who Is the Company Behind CIMCON Software?

  • Seller: CIMCON Software
  • Year Founded: 1988
  • HQ Location: MA, USA
  • Twitter: @CIMCONSoftware
    162 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    138 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking
  • Company Size: 58% Large, 37% Medium

What Are Recent G2 Reviews of CIMCON Software?

What Are G2 Users Discussing About CIMCON Software?

Soterion

Soterion is an international leading provider of Governance, Risk and Compliance (GRC) and FUE Licensing solutions for organisations running SAP. Soterion's user-friendly GRC solutions provide SAP customers with in-depth access risk reporting to allow organisations to effectively manage their access risk exposure. Soterion is passionate about simplifying the GRC processes, with a focus on translating this complexity into a business-friendly language to enhance better decision making and business accountability. The software provides immediate integration into the SAP environment allowing organisations to keep up with the market while effectively managing risk. Our easy-to-learn, plug-and-play software is S/4HANA ready, offers a beautiful graphical user interface and boasts an award-winning user experience. As access risk is business risk, Soterion believes that effective GRC is measured by how well the business users can carry out their access risk management activities. Our business-friendly GRC solution enhances the organisation's overall risk awareness by empowering business buy-in and accountability of access risk. Soterion's GRC & FUE Licensing Software Suite: Access Risk Manager Basis Review Manager Central Identity Manager Continuous Controls Manager Data Privacy Manager Elevated Rights Manager Periodic Review Manager Password Self-Service Manager SAP License Manager Soterion's Services: Access Risk Assessments SAP Licensing Assessments SAP Security & Role Designs Rule Set Customisation Control Effectiveness Reviews SAP Security Advisory Services A team of expert consultants with vast knowledge in SAP security, risk and controls across multiple SAP platforms (ECC, S/4HANA, SuccessFactors and more) assist our customers in securing their SAP environments, striving towards SAP security utopia. For more information, email us at info@soterion.com or visit our website: https://soterion.com/

Average Rating: 4.9/5.0

Total Reviews: 21

How Do G2 Users Rate Soterion?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.2/10)
  • Ease of Use: 9.7/10 (Category avg: 8.7/10)
  • Ease of Admin: 9.3/10 (Category avg: 8.6/10)
  • Quality of Support: 9.9/10 (Category avg: 9.1/10)

Who Is the Company Behind Soterion?

  • Seller: Soterion
  • Year Founded: 2010
  • HQ Location: Cape Town, ZA
  • Twitter: @Soteriontech
    941 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    31 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 45% Medium, 41% Large

What Are Recent G2 Reviews of Soterion?

What Are G2 Users Discussing About Soterion?

MasterControl Quality Management System

MasterControl Quality Excellence (Qx) is the #1 Quality Management System (QMS) in life sciences. Built on an AI-driven platform, it enables life-sciences companies to enable flexible quality event management, simplified document management, and automated training management—that all work seamlessly together to close the loop on quality. Qx is trusted by more than 1,300 pharmaceutical, biotech, and medical device companies. Qx is an electronic quality management system (eQMS) purpose-built for regulated manufacturers that must comply with FDA 21 CFR Part 11, EU GMP Annex 11, ISO 13485, GxP, and other global quality requirements, including EMA, MHRA, Health Canada, TGA, and PMDA jurisdictions. Qx connects document control, change control, training, quality event management (including CAPA), audits, and risk in a single closed-loop system, so information moves automatically between processes instead of through manual handoffs. When a document changes, training assignments trigger automatically. When a quality event opens, related CAPAs launch with context already populated. Every action generates an immutable, audit-ready record — so instead of assembling evidence before an inspection, teams retrieve it in seconds. Qx's patented Validation Excellence Tool (VxT) and Validation on Demand (VoD) reduce computer system validation from a months-long project to a process measured in minutes, aligned with FDA Computer Software Assurance (CSA) guidance — more than 90% of VxT customers perform no additional formal testing. Compliant, purpose-built AI tools accelerate document review, exam creation, and quality event summarization while keeping humans in control. Used by pharmaceutical, biotech, and medical device manufacturers across North America, Europe, Asia-Pacific, and other global regulated markets, Qx scales from single-site startups to global, multi-site enterprises on one validated platform — no re-platforming required as organizations grow. Natively connected to MasterControl Manufacturing Excellence (Mx) and Asset Excellence (Ax), Qx extends quality directly to the shop floor and into asset management, creating one source of truth across the entire regulated operation.

Average Rating: 4.3/5.0

Total Reviews: 540

How Do G2 Users Rate MasterControl Quality Management System?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Ease of Use: 7.8/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.6/10)
  • Quality of Support: 8.6/10 (Category avg: 9.1/10)

Who Is the Company Behind MasterControl Quality Management System?

  • Seller: MasterControl
  • Company Website:
  • Year Founded: 1993
  • HQ Location: Salt Lake City, UT
  • Twitter: @MCMasterControl
    6,258 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    690 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Quality Assurance Specialist, Quality Engineer
  • Top Industries: Pharmaceuticals, Medical Devices
  • Company Size: 65% Medium, 25% Large

What Do G2 Reviewers Say About MasterControl Quality Management System?

AI-generated summary from verified user reviews

Pros
  • Users highlight the user-friendly interface of MasterControl, which simplifies quality management and enhances operational efficiency.
  • Users appreciate the centralized document management of MasterControl, enhancing collaboration and streamlining compliance processes.
  • Users appreciate the user-friendly training system that integrates seamlessly with other quality management functions.
  • Users value the integration and efficiency of MasterControl's document control, enhancing compliance and process management.
  • Users value the consistency and ease of use of MasterControl, enhancing efficiency and adaptability for teams.
Cons
  • Users find MasterControl's interface not intuitive, as it can be complicated and intimidating for new users.
  • Users find a learning curve with MasterControl, requiring time to acclimate and fully utilize the system's features.
  • Users find difficult usability in MasterControl's Quality Management System, struggling with report creation and navigation.
  • Users find the MasterControl interface not user-friendly, especially for newcomers struggling with its complexity.
  • Users find the complex setup of MasterControl can lead to manual updates and training gaps for trainees.

What Are Recent G2 Reviews of MasterControl Quality Management System?

What Are G2 Users Discussing About MasterControl Quality Management System?

6clicks

Transform your approach to cyber risk and compliance with 6clicks, a leading AI-powered Governance, Risk & Compliance (GRC) platform. Designed for service providers, enterprises and governments, 6clicks streamlines building resilient cyber programs that go beyond tick-box compliance. Our unique Hub & Spoke deployment model and powerful AI engine connect distributed teams, systems, and data, providing comprehensive oversight and control. With 6clicks, you can: ➡️ Balance control and autonomy with our Hub & Spoke deployment model, ideal for managing distributed GRC programs across various divisions, functions, geographies, or projects. ➡️ Utilize Hailey, our AI engine, to automate security compliance, IT risk management, vendor management, incident response and more. ➡️ Leverage our transparent licensing model with unlimited users and access to all our modules and the most in-demand security frameworks, like ISO27001, NIST, SOC 2, Cyber Essentials, CMMC, and DORA. ➡️ Access our vast Content Library, including turn-key security frameworks and regulations, audit and assessment templates, control sets and policies, and risk and issue libraries. We also offer advisors and managed service providers a white-labelled, turn-key GRC platform designed to increase client retention, unlock new revenue streams and streamline and scale service delivery.

Average Rating: 4.4/5.0

Total Reviews: 21

How Do G2 Users Rate 6clicks?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Ease of Use: 8.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.5/10 (Category avg: 8.6/10)
  • Quality of Support: 8.6/10 (Category avg: 9.1/10)

Who Is the Company Behind 6clicks?

  • Seller: 6clicks
  • Year Founded: 2019
  • HQ Location: Carlton, Victoria, Australia
  • Twitter: @6clicksOfficial
    129 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    87 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 50% Medium, 32% Small

What Are Recent G2 Reviews of 6clicks?

DORA REGISTER

DORA REGISTER supports financial entities meet Digital Operational Resilience Act (DORA) requirements by maintaining a complete and accurate register of information about ICT third-party service providers. Data Integrity & Accuracy: The platform ensures data consistency across all records by automatically linking related information (e.g., supplier names, contract details) and updating them across the system when changes are made. Time-Saving Features: - Eliminates manual data entry in complex Excel sheets. - Automatically populates related fields and reports. - Reduces errors through built-in validation and code dictionaries. https://doraregister.io/ Third-Party Risk Management: It supports the classification and monitoring of ICT providers, helping institutions manage risks and prepare for audits or inspections. It is integrated with GLEIF. Regulatory Reporting: Generates structured reports that are ready for submission to EU supervisory authorities, ensuring transparency and accountability. Integration & Scalability: It can function as a standalone tool or be integrated into broader risk management system RED INTO GREEN that support compliance with other requirements of Digital Operational Resilience Act (DORA).

Average Rating: 4.8/5.0

Total Reviews: 10

How Do G2 Users Rate DORA REGISTER?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.2/10)
  • Ease of Use: 9.5/10 (Category avg: 8.7/10)
  • Ease of Admin: 9.0/10 (Category avg: 8.6/10)
  • Quality of Support: 9.8/10 (Category avg: 9.1/10)

Who Is the Company Behind DORA REGISTER?

Who Uses This Product?

  • Company Size: 50% Medium, 40% Large

What Do G2 Reviewers Say About DORA REGISTER?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of DORA REGISTER, appreciating its intuitive interface and efficient reporting capabilities.
  • Users appreciate the efficient management capabilities of DORA REGISTER, enhancing their experience in dealing with ICT contracts.
  • Users appreciate the intuitive design of DORA REGISTER, facilitating quick understanding and efficient management of tasks.
  • Users commend the comprehensive management capabilities of DORA REGISTER, ensuring efficient reporting and tailored support.
  • Users highly value the amazing customer support from DORA REGISTER, praising the team's helpfulness and professionalism.

What Are Recent G2 Reviews of DORA REGISTER?

GlobalSuite

GlobalSuite is a comprehensive Governance, Risk, and Compliance (GRC) software solution designed to assist organizations in managing their risk, compliance, audit, security, and business continuity needs within a unified platform. Headquartered in Spain, GlobalSuite has established a significant presence across Latin America and Europe, serving over 2,000 organizations in more than 30 countries. Currently available in its Quantum version, GlobalSuite leverages advanced artificial intelligence to enhance its functionalities, making it a robust tool for modern enterprises. The platform is tailored for a diverse audience, including compliance officers, risk managers, auditors, and security professionals who seek to streamline their governance processes. GlobalSuite addresses a wide range of use cases, from managing third-party risk management (TPRM) and privacy concerns to ensuring adherence to environmental, social, and governance (ESG) standards. By integrating preconfigured frameworks and regulatory catalogs such as ISO 31000, ISO 27001, and GDPR, GlobalSuite enables organizations to navigate complex compliance landscapes efficiently. Key features of GlobalSuite include automatic heat maps and dashboards that provide real-time insights into risk exposure and compliance status. The platform supports customizable working papers and workflows with automated calculations, allowing teams to focus on decision-making rather than manual data entry. Additionally, executive dashboards and automated reporting capabilities in formats like Word and Excel facilitate effective communication of findings and recommendations to stakeholders. The incorporation of AI throughout the platform enhances its analytical capabilities, enabling users to draft, verify, and prioritize tasks seamlessly. GlobalSuite distinguishes itself by offering a single, integrated environment that eliminates the need for disparate spreadsheets and siloed systems. This holistic approach ensures full traceability across risks, controls, plans, evidence, and ownership, allowing organizations to maintain a clear overview of their governance efforts. The platform's implementation timeline of 3–6 months, coupled with expert consultative support tailored to each organization's unique operational and regulatory context, positions GlobalSuite as a valuable asset for organizations aiming to optimize their GRC processes and achieve a strong return on investment.

Average Rating: 4.4/5.0

Total Reviews: 104

How Do G2 Users Rate GlobalSuite?

  • Has the product been a good partner in doing business?: 8.4/10 (Category avg: 9.2/10)
  • Ease of Use: 8.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.6/10)
  • Quality of Support: 9.0/10 (Category avg: 9.1/10)

Who Is the Company Behind GlobalSuite?

  • Seller: GlobalSuite Solutions
  • Company Website:
  • Year Founded: 2006
  • HQ Location: Madrid
  • Twitter: @global_suite
    846 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    135 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Consulting, Financial Services
  • Company Size: 42% Medium, 29% Large

What Do G2 Reviewers Say About GlobalSuite?

AI-generated summary from verified user reviews

Pros
  • Users find GlobalSuite very user-friendly, streamlining processes and enhancing efficiency in ERM and GRC tasks.
  • Users value the user-friendly automation and robust reporting features of GlobalSuite, significantly enhancing their efficiency and compliance efforts.
  • Users value the effective risk management capabilities of GlobalSuite, enabling streamlined ERM processes and enhanced compliance.
  • Users appreciate the efficiency of GlobalSuite, enabling streamlined processes and effective management in their organizations.
  • Users value the efficiency improvement of GlobalSuite, enhancing focus and streamlining processes for better results.
Cons
  • Users find GlobalSuite's interface to be not intuitive, making the learning curve challenging initially despite its powerful features.
  • Users find the complexity of GlobalSuite challenging initially, with a steep learning curve and overwhelming menu options.
  • Users find the initial learning curve of GlobalSuite challenging, requiring time and effort to master the platform.
  • Users find the difficult learning curve of GlobalSuite challenging, requiring time and effort to master its features.
  • Users find GlobalSuite not user-friendly, citing complications in workflow and a lack of intuitive features.

What Are Recent G2 Reviews of GlobalSuite?

SureCloud

SureCloud is the most intelligent GRC platform, enabling organisations to take centralised command of their risk, compliance and audit activities. Built for established teams managing complex environments, SureCloud offers a single, scalable solution that connects all GRC domains while fostering collaboration across your business units. Powered by event-sourced architecture, SureCloud provides a real-time, intelligent view of every risk so you understand how they have impacted you and what really matters to your business. See how risks evolve, track control performance, and link issues directly to outcomes while AI-driven insights help inform your next steps. SureCloud simplifies GRC complexity through a modular, no-code platform that is easy to configure without developer input. Collaboration is built in from role-based dashboards to automated approval workflows ensuring alignment and accountability no matter the business unit. Whether you are managing ISO 27001 compliance, improving your vendor assessments or driving data privacy, SureCloud gives you confidence to improve your posture and build lasting resilience. Highlights: - The Most Intelligent GRC Platform: SureCloud event-based architecture powers deep insights across your compliance and risk activities, capturing context over time instead of just static snapshots. Unlike other platforms, this enables you to track real changes, drive better decision-making, and gain clarity across your risks, controls, and even third-party interactions. - Clever compliance driven by ready automation: By automating manual human tasks such as evidence collection and controls monitoring, SureCloud dramatically reduces preparation time and ensures continued adherence to frameworks like ISO 27001, SOC 2 and GDPR. Get time back for teams to focus on your more important strategic decisions, uplifted by AI to inform improvements and next steps. - Total collaboration for enterprise success: Operate at scale without reliance on distributed toolsets, people and data by linking entities and projects. Clear task management and staged reviewing create accountability throughout the execution process so you deliver faster and without error, letting you improve your overall risk posture.

Average Rating: 4.2/5.0

Total Reviews: 56

How Do G2 Users Rate SureCloud?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Ease of Use: 8.1/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.0/10 (Category avg: 8.6/10)
  • Quality of Support: 9.4/10 (Category avg: 9.1/10)

Who Is the Company Behind SureCloud?

  • Seller: SureCloud
  • Company Website:
  • Year Founded: 2006
  • HQ Location: London, United Kingdom
  • Twitter: @SureCloud
    748 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    64 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Retail
  • Company Size: 58% Large, 30% Medium

What Do G2 Reviewers Say About SureCloud?

AI-generated summary from verified user reviews

Pros
  • Users find SureCloud helpful and user-friendly, with efficient incident logging and impressive reporting features.
  • Users praise the responsive customer support of SureCloud, consistently providing quick and effective solutions.
  • Users find SureCloud to be intuitive and user-friendly, making adoption and implementation a smooth experience.
  • Users highlight the intuitive navigation of SureCloud, allowing quick adoption and seamless implementation across teams.
  • Users appreciate the effective reporting features in SureCloud, finding it easy to log incidents and visualize data.
Cons
  • Users find the interface not intuitive, requiring excessive clicks and complicating navigation and functionality.
  • Users find the limited functionality of SureCloud challenging, particularly with navigation and bulk upload restrictions.
  • Users find the inadequate reporting of SureCloud frustrating, wishing for more configurable and accessible reporting features.
  • Users find limited customization in SureCloud frustrating, as it hampers usability and requires backend support for simple tasks.
  • Users express frustration with limited reporting in SureCloud, preferring more customizable and direct options for data analysis.

What Are Recent G2 Reviews of SureCloud?

Diligent One Platform

Diligent One Platform (formerly HighBond) revolutionizes the way boards, committees, and executives navigate risk. Consolidate all your solutions on the broadest platform for GRC applications designed to deliver comprehensive insights into a single view of risk and associated controls. Helping free you from the unnecessary costs and frustrations of point solutions. The Diligent One Platform is built to deliver risk insights in a clear and consistent format. Control what information is presented to the board with a comprehensive and ever-expanding set of pre-built and customizable templates and dashboards.

Average Rating: 4.3/5.0

Total Reviews: 153

How Do G2 Users Rate Diligent One Platform?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Ease of Use: 7.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.1/10 (Category avg: 8.6/10)
  • Quality of Support: 8.9/10 (Category avg: 9.1/10)

Who Is the Company Behind Diligent One Platform?

  • Seller: Diligent Corporation
  • Company Website:
  • Year Founded: 2001
  • HQ Location: New York, NY
  • Twitter: @diligenthq
    4,519 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,094 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Senior Internal Auditor
  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 50% Large, 26% Medium

What Do G2 Reviewers Say About Diligent One Platform?

AI-generated summary from verified user reviews

Pros
  • Users commend the ease of use of Diligent One Platform, appreciating its intuitive interface and streamlined workflows.
  • Users appreciate the effective compliance management features of Diligent One Platform, simplifying workflows and enhancing accountability.
  • Users value the easy and efficient risk management capabilities of Diligent One, simplifying governance for compliance teams.
  • Users value the effective audit tracking in Diligent One, simplifying risk management and enhancing organizational efficiency.
  • Users value the flexibility and integration capabilities of Diligent One Platform, enhancing governance, risk, and compliance management.
Cons
  • Users note the limited features of Diligent One Platform, impacting its overall effectiveness for basic needs.
  • Users note the limited functionality of Diligent One Platform, leading to confusion and challenges with configuration.
  • Users face challenges due to missing features that limit functionality and customization on the Diligent One Platform.
  • Users find the difficulty in navigation and inflexible modules to be a primary issue with Diligent One Platform.
  • Users indicate improvement needed in Diligent One Platform due to internet dependency and a steep learning curve for new users.

What Are Recent G2 Reviews of Diligent One Platform?

What Are G2 Users Discussing About Diligent One Platform?

Ostendio

Welcome to the next generation of security. Ostendio is the only GRC (Governance, Risk & Compliance) platform that leverages the strength of your greatest asset. Your people. Ostendio delivers an easy-to-use, cost-effective platform that allows you to assess risk, create and manage critical policies and procedures, educate and empower your people to be secure with security awareness training, and monitor continuous compliance across 300+ security frameworks. With deep customization, advanced intelligence, and flexible controls, you’re always audit-ready, always secure, and always able to take on what’s next. www.ostendio.com.

Average Rating: 4.8/5.0

Total Reviews: 40

How Do G2 Users Rate Ostendio?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Ease of Use: 8.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.6/10)
  • Quality of Support: 9.4/10 (Category avg: 9.1/10)

Who Is the Company Behind Ostendio?

  • Seller: Ostendio
  • Year Founded: 2013
  • HQ Location: McLean, Virginia
  • Twitter: @Ostendio
    867 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    19 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Health, Wellness and Fitness
  • Company Size: 57% Medium, 35% Small

What Do G2 Reviewers Say About Ostendio?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Ostendio, highlighting its intuitive workflows and seamless module integration.
  • Users value the flexible and comprehensive features of Ostendio, which enhance their security programs seamlessly.
  • Users highlight the excellent customer support and seamless integration of Ostendio, enhancing their security programs effectively.
  • Users value the audit efficiency of Ostendio, seamlessly tracking policy acknowledgment and compliance scores in one place.
  • Users value the efficient tracking of policy acknowledgment and compliance in a single repository with Ostendio.
Cons
  • Users find that Ostendio has non-intuitive features which complicate the user experience and navigation.
  • Users find the interface not intuitive, suggesting a need for simplification and better tuning for usability.

What Are Recent G2 Reviews of Ostendio?

What Are G2 Users Discussing About Ostendio?

Strongpoint

Netwrix Strongpoint is a native change management and compliance solution built directly inside NetSuite, with a sister product available for Salesforce. It starts by producing accurate, automated documentation of every customization in your account or org and the connections between them, then layers a suite of tools and pre-built controls on top to help you manage risk, save time, and gain confidence in a critical enterprise system. Key Features and Functionality: - Automated Documentation (Spider): Automatically catalogs custom fields, scripts, forms, searches, records, and workflows, and keeps that documentation current as your account changes. - Impact Analysis: Identify dependencies between customizations before you make a change, so you know what search, script, or workflow will break before you touch it. - Automated Change Detection: Continuously track changes to customizations with change logs showing what changed, how, when, and who made the change. - Change Request Management: Route changes through defined approval policies, with automatic classification of change risk based on object type and process. - Segregation of Duties (SoD): Detect and manage SoD conflicts with a customizable rule engine, blocking controls, and pre-approval workflows for exemptions. - User Access Review (UAR): Run structured membership and permission reviews on a defined cadence, with role ownership and audit-ready history. - Environment Comparison: Compare customizations across two NetSuite accounts to validate sandbox refreshes, migrations, and production deployments before and after go-live. - Clean Up Tools: Identify unused fields, searches, scripts, and other custom objects, then safely deprecate them with impact analysis built in. - Ticketing Integrations: Connect with Jira, ServiceNow, and Zendesk for ticket-level impact analysis, plus a public Integration API for custom workflows. - Agent (Financial Controls): Monitor and manage changes to critical financial records and settings, with automated alerts and control incident logging. - Flashlight: A free entry-level product for both NetSuite that provides customization documentation and a starter toolset for working with it, ahead of the enterprise-level products. On the Salesforce side, you will find many of the same features with a few differences: - Automated Documentation (Spider): Automatically catalogs custom fields, Apex code, Visualforce/Lightning components, Flows, reports, and records, and keeps that documentation current as your org changes. - Impact Analysis: Identify dependencies between customizations before you make a change, so you know what a Flow, Apex trigger, or report will break before you touch it. - Automated Change Detection: Continuously track changes to customizations with change logs showing what changed, how, when, and who made the change. - Change Request Management: Route changes through defined approval policies, with automatic classification of change risk based on object type and process. - Environment Comparison: Compare customizations across two Salesforce orgs to validate migrations and production deployments before and after go-live. - Clean Up Tools: Identify unused fields, reports, Apex code, and other custom objects, then safely deprecate them with impact analysis built in. - Ticketing Integrations: Connect with Jira, ServiceNow, and Zendesk for ticket-level impact analysis, plus a public Integration API for custom workflows. - Data Tracking: Extends change control to configuration data stored in custom objects — such as Salesforce CPQ (Configure, Price, Quote) pricing, discount, and approval rules — treating it with the same scrutiny as Apex metadata. Teams can put specific fields (e.g., on the Discount Schedule and Discount Tier objects) under change control and generate compliance logs whenever they're modified, cutting reliance on manual field history review for SOX and other audit requirements. Requires an Enterprise Compliance license. - Access Management Tools: Give compliance and security teams continuous visibility into who has access to what. Includes tracking of specific System Permission assignments across Permission Sets and Profiles, tracking access to specific fields via custom monitoring rules, and documentation of Report and Dashboard folder access. Pre-built Access Reports (Permissions by Object, Object Permission by Profile/PermSet, Users to Profiles/PermissionSets, System Permissions, Field Permissions, and more) pair with dedicated tools — Profile/Permission Set Comparison, Access Review Assistant, and User Activity — so teams can compare permissions side by side, review object/user/profile-level access, and check login activity before deactivating a user. Primary Value and User Solutions: NetSuite and Salesforce accounts accumulate customizations fast, and without documentation or dependency visibility, teams end up making changes blind, breaking Apex code, Flows, and workflows they didn't know were connected. Strongpoint closes that gap by documenting the environment automatically and surfacing impact before changes go live, not after something breaks. Change Request workflows and pre-built Change/Approval policies mean routine, low-risk changes clear automatically while risky changes get flagged for review, so teams aren't stuck manually approving every field edit. On NetSuite, SoD and UAR tools give compliance and audit teams a continuous, defensible record of who has access to what and why, instead of a scramble at audit time. On Salesforce, Access Management tools deliver that same continuous access visibility — tracking specific Permission Set/Profile assignments, field-level access, and Report/Dashboard folder access — backed by pre-built Access Reports and tools like Access Review Assistant and User Activity, so teams can review access and check login history before deactivating a user. Data Tracking extends that same change control to configuration data itself, such as Salesforce CPQ pricing and discount rules, closing a gap that field history reports alone can't cover. Environment Comparison and clean up tools reduce the risk of failed sandbox-to-production deployments and shrink the account by safely removing unused customizations. For teams already running change management through Jira, ServiceNow, or Zendesk, the integrations bring that same impact analysis and change reconciliation into the ticketing systems they already use. Flashlight for NS gives smaller teams and nonprofits a free way to get documentation and basic tooling in place, with a clear upgrade path to the enterprise products as compliance needs grow.

Average Rating: 4.4/5.0

Total Reviews: 22

How Do G2 Users Rate Strongpoint?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Ease of Use: 8.2/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.6/10 (Category avg: 8.6/10)
  • Quality of Support: 8.9/10 (Category avg: 9.1/10)

Who Is the Company Behind Strongpoint?

  • Seller: Netwrix
  • HQ Location: Irvine, CA
  • Twitter: @Netwrix
    2,912 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    757 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 65% Medium, 22% Large

What Do G2 Reviewers Say About Strongpoint?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the efficient compliance management capabilities of Strongpoint, ensuring data security and streamlined change tracking.
  • Users value the seamless connectivity of Strongpoint, enhancing integration and management within the Salesforce platform.
  • Users value the data accuracy of Strongpoint, ensuring compliance and efficient change management in Salesforce.
  • Users value the effective documentation management in Strongpoint, facilitating compliance and enhancing Salesforce integration.
  • Users appreciate the effective document management of Strongpoint, enhancing compliance and streamlining change tracking.
Cons
  • Users find the steep learning curve of Strongpoint challenging, impacting their adaptation to the system.
  • Users face data inaccuracy issues with Strongpoint, impacting change management due to incomplete Salesforce metadata.
  • Users face challenges due to inaccurate data, which impacts the effectiveness of Strongpoint's change management process.
  • Users find the learning curve steep, requiring a strong grasp of object-level and record-level security features.
  • Users find the steep learning curve challenging due to the need for understanding complex security features.

What Are Recent G2 Reviews of Strongpoint?

What Are G2 Users Discussing About Strongpoint?

Pathlock

A complete platform to automate the most challenging aspects of access governance. Pathlock does this by focusing on the areas which offer the most impact when it comes to efficiency gains and cost savings: *Access Risk Analysis [Automating the reporting and mitigation of SoD and Critical Access Risks across the business and IT] *Compliant Provisioning [Automating the process of role and user provisioning to ensure compliance with business and regulatory requirements ] *Access Certification [Automating user access reviews to continually refine entitlement assignments and reduce risk] *Emergency Access Management (PAM) [Managing temporary granting of privileged access with a domain specific workflow] *Role Design [Designing compliant roles compatible across all your business applications]

Average Rating: 4.3/5.0

Total Reviews: 15

How Do G2 Users Rate Pathlock?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Ease of Use: 7.9/10 (Category avg: 8.7/10)
  • Ease of Admin: 7.6/10 (Category avg: 8.6/10)
  • Quality of Support: 9.0/10 (Category avg: 9.1/10)

Who Is the Company Behind Pathlock?

  • Seller: Pathlock
  • Company Website:
  • Year Founded: 2004
  • HQ Location: Dallas, US
  • Twitter: @pathlock
    309 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    602 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 47% Large, 33% Medium

What Do G2 Reviewers Say About Pathlock?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the accessible knowledge-based files and resources, enhancing their experience and learning with Pathlock.
  • Users value the comprehensive view of Pathlock, benefiting from accessible resources and helpful support.
  • Users value the helpful customer support of Pathlock, noting speedy responses and accessible resources enhance their experience.
  • Users value the ease of use and comprehensive support offered by Pathlock's Device Management features.
  • Users value the accessible documentation of Pathlock, enhancing their experience with helpful resources and support.
Cons
  • Users find the confusing interface of Pathlock challenging, particularly due to unclear acronyms and tutorial shortcomings.
  • Users find the confusing terminology within Pathlock's software complicates their understanding and usage of the platform.
  • Users find the documentation lacking, particularly noting the absence of voice-overs in tutorials and unclear acronyms.
  • Users face challenges due to inadequate error handling, leading to confusion and difficulty during troubleshooting.
  • Users face insufficient information in Pathlock, particularly regarding tutorials and unclear acronyms hindering their experience.

What Are Recent G2 Reviews of Pathlock?

Apparity

Apparity helps efficiently manage EUC risk in one powerful platform backed by phenomenal customer support. Apparity is designed to reliably identify, inventory, risk assess and control the end user applications that support your most critical business processes. This includes spreadsheets, models, databases, programming language scripts, BI tools and more.

Average Rating: 4.7/5.0

Total Reviews: 16

How Do G2 Users Rate Apparity?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Ease of Use: 9.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.7/10 (Category avg: 8.6/10)
  • Quality of Support: 9.8/10 (Category avg: 9.1/10)

Who Is the Company Behind Apparity?

  • Seller: Apparity
  • Company Website:
  • Year Founded: 2009
  • HQ Location: Atlanta, GA
  • Twitter: @ApparityLLC
    50 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    8 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Banking
  • Company Size: 56% Medium, 38% Large

What Do G2 Reviewers Say About Apparity?

AI-generated summary from verified user reviews

Pros
  • Users praise the responsive customer support of Apparity, making onboarding and problem-solving seamless and effective.
  • Users commend the responsive customer support of Apparity, highlighting their helpfulness during onboarding and UAT.
  • Users appreciate the change comparison of spreadsheets in Apparity, praising its support during onboarding and UAT.
  • Users love the change comparison feature of Apparity, praising its ease of use and responsive support during onboarding.
  • Users value the tracking capabilities of Apparity, benefiting from efficient change comparisons in spreadsheets.
Cons
  • Users experience inefficiency with Apparity, particularly in large files which cause significant lag and processing delays.
  • Users experience slow loading with Apparity, particularly with larger files, causing significant delays in processing.
  • Users experience slow performance with Apparity, especially with larger files, resulting in significant lag and delays.

What Are Recent G2 Reviews of Apparity?

What Are G2 Users Discussing About Apparity?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024