Best IT Risk Management Software - Page 6

How Many IT Risk Management Software Products Does G2 Track?

Total Products under this Category: 186

Category Stats (Oct 2026)

  • Average Rating: 4.49/5 (↓0.01 vs Sep 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Whistic (+0.31%) - Among all products in this category, Whistic recorded the largest rating increase compared to last month

Last updated: October 07, 2026

How Does G2 Rank IT Risk Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 11,000+ Authentic Reviews
  • 186+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for IT Risk Management Software

G2 Grid® for IT Risk Management Software plotting products by satisfaction and market presence

Highlighted products: UpGuard Vendor Risk, TeamMate, Sprinto, Thoropass, RealCISO vCISO & GRC Platform, Scrut Automation, Optro, and SAP Risk Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/it-risk-management/grids.json?focus%5B%5D=upguard-vendor-risk&focus%5B%5D=teammate&focus%5B%5D=sprinto-inc&focus%5B%5D=thoropass&focus%5B%5D=realciso-vciso-grc-platform&focus%5B%5D=scrut-automation&focus%5B%5D=optro&focus%5B%5D=sap-risk-management)

TrustMAPP

TrustMAPP delivers continuous Cybersecurity Performance Management, giving CISOs a real-time view of the effectiveness of their cybersecurity program. TrustMAPP tells you where you are, where you’re going, and what it will take to get there. From a single source of data, an organization’s security posture is visible based on stakeholder perspectives: CISO, C-Suite, and Board. TrustMAPP gives organizations the ability to manage security as a business, quantifying and prioritizing remediation actions and costs. TrustMAPP helps leaders solve 5 key challenges: 1. Create consistent metrics, KPI's and KRI's 2. Establish a meaningful business narrative around cybersecurity for non-technical audiences 3. Prioritization of Human Resources and financial budget to areas of most significant impact 4. Align cybersecurity maturity with identified risks to drive improvement in meaningful areas while creating a story around risk appetite 5. Provide trending analysis over time and across multiple assessments, business units, geographic regions, or products For a demo please visit: https://trustmapp.com/contactus Save time preparing your board report and tell the board what they want to know. Download our FREE Board Reporting Toolkit here: https://trustmapp.com/board-reporting-toolkit/

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate TrustMAPP?

  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Quality of Support: 8.3/10 (Category avg: 9.0/10)

Who Is the Company Behind TrustMAPP?

Who Uses This Product?

  • Company Size: 50% Large, 50% Small

What Are Recent G2 Reviews of TrustMAPP?

What Are G2 Users Discussing About TrustMAPP?

ZenGRC Pro

Focus on Strategic Priorities with IT and Cyber Risk Management The ZenGRC Pro solution gives you the ability to see, understand and act on IT and cyber risk, automate compliance and communicate the impact on your organization’s top priorities. With a unified, real-time view of risk and compliance—framed around your business priorities—you’ll have the contextual insight needed to communicate the business impact to key stakeholders and make strategic, risk-informed decisions to protect your organization, systems and data and earn the trust of your customers, partners and employees.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate ZenGRC Pro?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 10.0/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.6/10)
  • Quality of Support: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind ZenGRC Pro?

  • Seller: Zengrc
  • Year Founded: 2009
  • HQ Location: San Francisco, CA
  • Twitter: @riskoptics
    589 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    66 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Are Recent G2 Reviews of ZenGRC Pro?

Alsid DSC

Alsid directory security compliance (DSC) provides a rich set of functionalities to tackle the hardest security challenges.

Average Rating: 5.0/5.0

Total Reviews: 1

Who Is the Company Behind Alsid DSC?

  • Seller: Alsid
  • HQ Location: Columbia, Maryland, United States
  • LinkedIn® Page: www.linkedin.com
    2,361 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of Alsid DSC?

What Are G2 Users Discussing About Alsid DSC?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Broadcom Auditor for z/OS

CA Auditor is a comprehensive software package that can perform an automated technical review of the system, hardware and software environment and identify integrity exposures

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate Broadcom Auditor for z/OS?

  • Ease of Use: 10.0/10 (Category avg: 8.7/10)
  • Quality of Support: 8.3/10 (Category avg: 9.0/10)

Who Is the Company Behind Broadcom Auditor for z/OS?

  • Seller: Broadcom
  • Year Founded: 1991
  • HQ Location: San Jose, CA
  • Twitter: @broadcom
    63,909 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    44,602 employees on LinkedIn®
  • Ownership: NASDAQ: CA

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Broadcom Auditor for z/OS?

EGERIE

Founded in 2016, Egerie is the European pioneer in industrializing cyber risk analysis. The company has transformed an artisanal approach into an integrated Cyber GRC management platform, enabling large organizations to continuously govern their risk exposure, regulatory compliance, and cybersecurity performance in a collaborative and data-driven manner. Today, Egerie supports more than 500 clients, including 30% of CAC 40 companies, relies on an ecosystem of 90+ strategic partners, and has received several Gartner recognitions.

Average Rating: 4.0/5.0

Total Reviews: 1

How Do G2 Users Rate EGERIE?

  • Ease of Use: 6.7/10 (Category avg: 8.7/10)
  • Quality of Support: 8.3/10 (Category avg: 9.0/10)

Who Is the Company Behind EGERIE?

  • Seller: Egerie
  • Year Founded: 2016
  • HQ Location: Toulon, FR
  • LinkedIn® Page: www.linkedin.com
    92 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of EGERIE?

eramba

eramba is an open enterprise-class IT Governance, Risk & Compliance application.

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind eramba?

  • Seller: eramba
  • Year Founded: 2011
  • HQ Location: London, GB
  • LinkedIn® Page: www.linkedin.com
    12 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of eramba?

What Are G2 Users Discussing About eramba?

fuentis Suite

The fuentis Suite is a comprehensive compliance and security platform designed to automate your processes and maximize your business efficiency. With the integrated fuentis Suite, you can effortlessly achieve international standards such as ISO 27001, TISAX®, SOC2, and BSI IT-Grundschutz, allowing you to implement your compliance goals faster and easier than ever before. Benefit from software that automates the compliance process, giving you more time for your business-critical tasks.

Average Rating: 4.0/5.0

Total Reviews: 1

How Do G2 Users Rate fuentis Suite?

  • Ease of Use: 5.0/10 (Category avg: 8.7/10)
  • Quality of Support: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind fuentis Suite?

Who Uses This Product?

  • Company Size: 100% Small

What Do G2 Reviewers Say About fuentis Suite?

AI-generated summary from verified user reviews

Pros
  • Users value the highly responsive support of fuentis Suite, ensuring compliance in complex and regulated environments.
  • Users value the comprehensive support from fuentis Suite, enhancing efficiency in managing ISMS processes effectively.
  • Users commend the responsive and helpful customer support at fuentis Suite, enhancing project efficiency and compliance.
  • Users appreciate the customizability of fuentis Suite, allowing tailored solutions for various regulated environments and standards.
  • Users value the customization options of fuentis Suite, enhancing its alignment with specific organizational needs.
Cons
  • Users find the learning curve challenging, particularly those unfamiliar with ISMS processes, impacting their overall experience.

What Are Recent G2 Reviews of fuentis Suite?

Isora GRC

Isora GRC is the collaborative GRC Assessment Platform™ that gives security teams one shared workspace to run assessments, manage vendors and assets, track live risks, and publish audit-ready reports. Built specifically for information security teams, Isora replaces fragmented spreadsheets and bloated enterprise GRC tools with a focused, fast-to-deploy platform that teams actually adopt. With structured workflows for risk and compliance assessments, connected inventories, and real-time visibility, security teams can operationalize their programs without the chaos. ❇️ Assessment Management Launch and track security assessments across departments, vendors, and frameworks in one centralized dashboard. See real-time progress, identify bottlenecks, and organize assessment campaigns by compliance goal. Every assessment stays connected to risks, owners, and evidence, creating a single source of truth for audit readiness. ❇️ Questionnaires & Surveys Deploy structured, user-friendly questionnaires to evaluate controls, collect evidence, and identify gaps. Built for collaboration, Isora's questionnaires let multiple contributors add responses, upload documents, and complete assessments without manual handoffs. Apply custom logic, weighted scoring, and pre-built templates for frameworks like NIST CSF, CIS, HIPAA, and GLBA. ❇️ Scorecards & Reports Generate automated scorecards and audit-ready reports that roll up assessment results, risks, and remediation into clear, actionable insights. Compare performance across targets, drill down into individual responses, and visualize high-risk areas with risk matrix reports. Export reports in PDF or CSV for external sharing, audits, and compliance documentation. ❇️ Inventory Management Maintain a complete, connected inventory of vendors, assets, and applications with custom metadata, deployment tracking, and assessment links. Search, filter, and export inventory data to support risk analysis, vendor reviews, and regulatory reporting. Keep inventory up to date with collaborative updates and automated enrichment. ❇️ Exception Management Track policy exceptions with clear accountability, expiration dates, and contextual links to affected assets and vendors. Create exceptions manually or via API, assign them to specific units, and search or filter for efficient oversight. Ensure timely reviews and minimize the risk of overlooked or outdated exceptions. ❇️ Risk Management Centralize risk tracking with a collaborative risk register that connects directly to assessment findings, owners, and remediation plans. Track risks with detailed attributes, custom fields, and risk scoring. Use interactive risk matrix widgets to visualize and prioritize high-impact risks, then export or import risk data for audit and compliance purposes.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate Isora GRC?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.6/10)
  • Quality of Support: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind Isora GRC?

  • Seller: SaltyCloud
  • Year Founded: 2017
  • HQ Location: Austin, US
  • LinkedIn® Page: linkedin.com
    18 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Large, 50% Medium

What Do G2 Reviewers Say About Isora GRC?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the excellent customer support from Isora GRC, highlighting the responsive and helpful team.
  • Users commend Isora GRC for its ease of use and excellent support, making vendor management efficient and responsive.
  • Users praise the quick response time of Isora GRC, ensuring excellent support for their needs and training.
  • Users love the responsive support of Isora GRC, appreciating quick assistance and effective training for their needs.
  • Users find Isora GRC to be easy to use, complemented by great support and a responsive team.

What Are Recent G2 Reviews of Isora GRC?

MetricStream IT and Cyber Risk Management

MetricStream IT and Cyber Risk Management empowers organizations to adopt a focused, business-driven approach to managing and mitigating IT and cyber risks. Built on the M7 Integrated Risk Platform -intelligent by design, it enables users to conduct risk assessments, implement controls and take necessary mitigation actions. Advanced cyber risk quantification capabilities help quantify cyber risks in monetary value. Sophisticated analytics and reports transform raw risk data into actionable IT risk intelligence, providing clear visibility into the top cyber risks affecting the enterprise.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate MetricStream IT and Cyber Risk Management?

  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Quality of Support: 8.3/10 (Category avg: 9.0/10)

Who Is the Company Behind MetricStream IT and Cyber Risk Management?

  • Seller: MetricStream
  • Year Founded: 1999
  • HQ Location: San Jose, CA
  • Twitter: @MetricStream
    4,383 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,205 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of MetricStream IT and Cyber Risk Management?

Powertech Compliance Monitor for IBM i

A Key Part of Fortra (the new face of HelpSystems) Powertech is proud to be part of Fortra’s comprehensive cybersecurity portfolio. Fortra simplifies today’s complex cybersecurity landscape by bringing complementary products together to solve problems in innovative ways. These integrated, scalable solutions address the fast-changing challenges you face in safeguarding your organization. With the help of the powerful protection from Powertech Compliance Monitor for IBM i and others, Fortra is your relentless ally, here for you every step of the way throughout your cybersecurity journey.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate Powertech Compliance Monitor for IBM i?

  • Ease of Use: 6.7/10 (Category avg: 8.7/10)
  • Quality of Support: 6.7/10 (Category avg: 9.0/10)

Who Is the Company Behind Powertech Compliance Monitor for IBM i?

  • Seller: Fortra
  • Year Founded: 1982
  • HQ Location: Eden Prairie, Minnesota
  • Twitter: @fortraofficial
    2,773 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,784 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Powertech Compliance Monitor for IBM i?

What Are G2 Users Discussing About Powertech Compliance Monitor for IBM i?

Resilience

Resilience is a cyber risk management platform that helps organizations identify vulnerabilities across their applications, networks, and cloud services, quantify the financial impact of those vulnerabilities, and prioritize remediation based on expected dollar loss. The platform integrates real-time threat intelligence, security posture data, and insurance claims data to produce risk models that use machine learning to rank vulnerabilities by their likelihood of causing financial harm. The platform is built on the Threatonomics Risk Graph, a proprietary AI-powered engine that ingests security control data from an organization's existing tools (EDR, SIEM, vulnerability scanners, cloud security), enriches it with live threat intelligence and aggregated loss data from Resilience's insurance portfolio, and outputs financially quantified risk assessments. These assessments express cyber risk in dollar terms rather than abstract severity scores. Resilience is available in two packages: Resilience Edge is designed for individual enterprises. It includes continuous security posture assessment, a financially prioritized Cyber Action Plan with projected ROI for each remediation, breach and attack simulation powered by AttackIQ, vendor risk reports, and board-ready reporting with peer benchmarks. The Risk Operations Center provides ongoing monitoring of threat activity, delivering expert-validated alerts on industry-specific threats, active ransomware campaigns, and vulnerabilities under active exploitation. Resilience Arc is designed for multi-entity organizations such as holding companies, private equity portfolios, and multinationals. It includes everything in Edge plus automated risk assessments across every subsidiary and business unit, a portfolio-level dashboard that stack-ranks entities by financial risk exposure, and centralized monitoring across all entities from a single interface. Resilience also provides integrated cyber insurance, connecting risk quantification directly to coverage decisions. The platform's risk models are trained and continuously validated against actual insurance claims outcomes from Resilience's underwriting portfolio, creating a feedback loop between security controls and real-world loss data. Primary users include CISOs and security leaders (for vulnerability prioritization and security investment planning), CFOs and boards (for financial visibility into cyber exposure), and risk managers (for balancing security investment against insurance coverage). The platform serves mid-market and enterprise organizations across manufacturing, financial services, healthcare, technology, construction, energy, transportation, and the public sector. Resilience serves 800+ enterprise clients, including more than 10% of US-based companies with revenue over $1 billion. The platform is recognized in Gartner's Hype Cycle for Cyber Risk Management. The company is headquartered in San Francisco and backed by over $200M in venture funding.

Average Rating: 4.5/5.0

Total Reviews: 1

How Do G2 Users Rate Resilience?

  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Quality of Support: 8.3/10 (Category avg: 9.0/10)

Who Is the Company Behind Resilience?

  • Seller: Resilience
  • Year Founded: 2016
  • HQ Location: New York, New York, United States
  • Twitter: @ResilienceSays
    352 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    294 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Do G2 Reviewers Say About Resilience?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the automation features of Resilience, simplifying cyber risk management and insurance integration.
  • Users value the integration of cyber risk insurance and management in Resilience, enhancing overall usability and efficiency.
  • Users value the integration of cyber risk insurance and risk management in Resilience, enhancing their experience and convenience.
Cons
  • Users often face complex setup issues with Resilience, making the initial integration challenging and frustrating.
  • Users often face integration issues and a complex initial setup that detracts from the overall experience.
  • Users often face integration challenges and complex initial setup, leading to frustration during the onboarding process.

What Are Recent G2 Reviews of Resilience?

The Quantivate Platform

Since 2005, Quantivate has been helping organizations efficiently manage their governance, risk, and compliance (GRC) initiatives. Quantivate’s scalable technology and service solutions equip organizations of all sizes to make more strategic decisions, improve performance, and reduce costs.

Average Rating: 4.6/5.0

Total Reviews: 6

How Do G2 Users Rate The Quantivate Platform?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.2/10)
  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 8.3/10 (Category avg: 8.6/10)
  • Quality of Support: 9.2/10 (Category avg: 9.0/10)

Who Is the Company Behind The Quantivate Platform?

  • Seller: Ncontracts
  • Year Founded: 2009
  • HQ Location: Brentwood, TN
  • Twitter: @Ncontracts
    1,794 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    475 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 67% Small, 17% Medium

What Do G2 Reviewers Say About The Quantivate Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the customization options of the Quantivate Platform, enhancing usability and real-time complaint tracking.
  • Users appreciate the ease of use of The Quantivate Platform, noting its friendly and clear interface for navigation.
  • Users appreciate the intuitive design of The Quantivate Platform, finding it simple and easy to navigate.
  • Users appreciate the easy navigation of The Quantivate Platform, finding its interface user-friendly and intuitive.
  • Users value the easy navigation and real-time tracking features of The Quantivate Platform, enhancing their experience.
Cons
  • Users find the slow loading of the Quantivate Platform inconvenient, especially during critical troubleshooting moments.

What Are Recent G2 Reviews of The Quantivate Platform?

What Are G2 Users Discussing About The Quantivate Platform?

ThreatBook TIP

ThreatBook TIP is a microstep online intelligence management platform that helps corporate security personnel to unify multi-source information formats and customize information management.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate ThreatBook TIP?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Ease of Use: 8.3/10 (Category avg: 8.7/10)
  • Ease of Admin: 10.0/10 (Category avg: 8.6/10)
  • Quality of Support: 10.0/10 (Category avg: 9.0/10)

Who Is the Company Behind ThreatBook TIP?

  • Seller: ThreatBook
  • Year Founded: 2015
  • HQ Location: Singapore, SG
  • Twitter: @ThreatBookLabs
    4,576 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    115 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Do G2 Reviewers Say About ThreatBook TIP?

AI-generated summary from verified user reviews

Pros
  • Users commend the unparalleled coverage of APT threats by ThreatBook TIP, benefiting from actionable threat indicators.
  • Users praise the unmatched coverage of APT threats in ThreatBook TIP, offering valuable actionable threat indicators.
Cons
  • Users find the visualization interface lacking, which negatively impacts their overall experience with ThreatBook TIP.

What Are Recent G2 Reviews of ThreatBook TIP?

Validify

It's a struggle for FDA regulated companies to stay compliant: Salesforce and app updates make it even harder. Validify provides the first automated CSV/CSA solution, and turns weeks of work for your team into just a few hours. Assess risks, generate documents automatically, reduce human effort and errors. With each and every update, Validify helps you stay in control of your readiness. Best for FDA-regulated companies using Salesforce for product-related processes. Pharma Medical device Cannabis Tobacco Cosmetics Food and beverage

Average Rating: 4.0/5.0

Total Reviews: 1

Who Is the Company Behind Validify?

  • Seller: Validify
  • Year Founded: 2019
  • HQ Location: Ness Ziona, IL
  • LinkedIn® Page: www.linkedin.com
    5 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of Validify?

What Are G2 Users Discussing About Validify?

WolfPAC

WolfPAC's online suite of enterprise risk assessment tools and risk management plans incorporate risks into a single, integrated solution.

Average Rating: 5.0/5.0

Total Reviews: 1

Who Is the Company Behind WolfPAC?

  • Seller: WolfPAC
  • HQ Location: Boston, US
  • Twitter: @WolfPACSolution
    225 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of WolfPAC?

What Are G2 Users Discussing About WolfPAC?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024