Best Risk-Based Vulnerability Management Software - Page 2

How Many Risk-Based Vulnerability Management Software Products Does G2 Track?

Total Products under this Category: 222

Category Stats (Nov 2026)

  • Average Rating: 4.5/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: BMC Helix Remediate (+17.94%) - Among all products in this category, BMC Helix Remediate recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Risk-Based Vulnerability Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,300+ Authentic Reviews
  • 222+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Risk-Based Vulnerability Management Software

G2 Grid® for Risk-Based Vulnerability Management Software plotting products by satisfaction and market presence

Highlighted products: Ivanti Autonomous Endpoint Management, Tenable Vulnerability Management, Arctic Wolf, H1 Platform, RiskProfiler - External Threat Exposure Management, Pentera, YesWeHack, and Check Point Exposure Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/risk-based-vulnerability-management/grids.json?focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=arctic-wolf&focus%5B%5D=h1-platform&focus%5B%5D=riskprofiler-external-threat-exposure-management&focus%5B%5D=pentera&focus%5B%5D=yeswehack&focus%5B%5D=check-point-exposure-management)

Cisco Vulnerability Management (formerly Kenna.VM)

Cisco Vulnerability Management (formerly Kenna.VM), the original SaaS risk-based vulnerability management platform, prioritizes vulnerabilities that pose a real risk, enabling Security and IT teams to focus their limited resources and remediate more efficiently. Cisco’s data science-driven prioritization evaluates both enterprise data and a wealth of data on real-world exploit activity and translates that context into actionable intelligence to guide remediation.

Average Rating: 4.3/5.0

Total Reviews: 200

How Do G2 Users Rate Cisco Vulnerability Management (formerly Kenna.VM)?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Reporting: 8.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.7/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Cisco Vulnerability Management (formerly Kenna.VM)?

  • Seller: Cisco
  • Year Founded: 1984
  • HQ Location: San Jose, CA
  • LinkedIn® Page: www.linkedin.com
    95,294 employees on LinkedIn®
  • Ownership: NASDAQ:CSCO
  • Phone: 847-678-6600

Who Uses This Product?

  • Who Uses This: Software Engineer
  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 76% Large, 17% Medium

What Are Recent G2 Reviews of Cisco Vulnerability Management (formerly Kenna.VM)?

What Are G2 Users Discussing About Cisco Vulnerability Management (formerly Kenna.VM)?

Semperis Purple Knight

Community-driven hybrid Active Directory security assessment tool. Purple Knight is an identity system security assessment tool used by thousands of organizations to quickly identify vulnerabilities in AD, Entra ID, and Okta environments and receive prioritized, expert remediation guidance.

Average Rating: 4.7/5.0

Total Reviews: 11

How Do G2 Users Rate Semperis Purple Knight?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Reporting: 8.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Semperis Purple Knight?

  • Seller: Semperis
  • Year Founded: 2015
  • HQ Location: Hoboken, New Jersey
  • LinkedIn® Page: www.linkedin.com
    693 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 45% Small, 45% Medium

What Do G2 Reviewers Say About Semperis Purple Knight?

AI-generated summary from verified user reviews

Pros
  • Users value the immediate and prioritized identification of security gaps provided by Semperis Purple Knight for Active Directory.
  • Users praise the ease of use of Semperis Purple Knight, appreciating its straightforward and actionable security insights.
  • Users value the immediate identification of security gaps provided by Semperis Purple Knight, enhancing their Active Directory protection.
  • Users value the immediate and actionable insights provided by Semperis Purple Knight for securing Active Directory.
  • Users find Semperis Purple Knight easy to implement, with straightforward integration and effective guidance throughout the process.
Cons
  • Users face challenges with the static assessment limitations of Semperis Purple Knight, lacking continuous monitoring and automation.
  • Users point out the lack of automation, requiring manual remediation and complicating ongoing threat management.
  • Users find the difficult learning curve due to overwhelming reports and lack of automation for remediation tasks.
  • Users find the difficult setup of Semperis Purple Knight complicates usage and integration in hybrid environments.
  • Users find the inadequate reporting limits insight, lacking advanced features like real-time alerts and automated remediation.

What Are Recent G2 Reviews of Semperis Purple Knight?

Bitsight

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

Average Rating: 4.5/5.0

Total Reviews: 76

How Do G2 Users Rate Bitsight?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 7.4/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.4/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 7.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Bitsight?

  • Seller: Bitsight
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    694 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Hospital & Health Care
  • Company Size: 71% Large, 24% Medium

What Do G2 Reviewers Say About Bitsight?

AI-generated summary from verified user reviews

Pros
  • Users value the simple daily security score from BitSight, providing clear insights into cyber risk management.
  • Users appreciate the simple daily "security score" for cyber risk, enhancing safety and risk management easily.
  • Users appreciate the ease of use of BitSight, finding it straightforward and user-friendly for managing security risks.
  • Users value the powerful insights from BitSight's AI features and comprehensive risk monitoring capabilities.
  • Users commend the responsive customer support of Bitsight, ensuring quick assistance and effective use of the platform.
Cons
  • Users express concerns about missing features in Bitsight, particularly regarding transparency and proactive remediation management.
  • Users are frustrated by the lack of clarity in Bitsight's scoring mechanism and accuracy of findings.
  • Users experience poor notifications from Bitsight, with alerts being untimely and often missing critical information.
  • Users experience slow performance with Bitsight, facing lag and delayed updates on remediation efforts and scores.
  • Users report delay issues with BitSight's response times and vulnerability updates, impacting their overall experience.

What Are Recent G2 Reviews of Bitsight?

What Are G2 Users Discussing About Bitsight?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

ZeroFox

ZeroFox is the solution used to illuminate threat actor intent, mitigate threats and exposures, remove threats from the internet, and preemptively safeguard your reputation. ZeroFox uniquely fuses the core capabilities of Cyber Threat Intelligence, Brand and Domain Protection, Attack Surface Intelligence, Executive Protection and Physical Security Intelligence in one platform packed with intelligence you’ll actually use. ZeroFox defends your business from the everyday attacks that impact revenue, erode trust, and frustrate teams by: Discovering exposed assets, brands, domains, accounts, and emerging threats Validating the risks that matter most to you and your digital estate Disrupting attacks before they harm your business, your customers, and your people Our continuous cycle—Discover, Validate, Disrupt—delivers outcomes and helps organizations achieve deeper threat contextualization, faster detection and response times, and longer-term cost savings by anticipating, understanding, and mitigating external digital threats at scale. Join thousands of customers, including some of the largest public sector organizations and leaders in finance, media, technology, retail, and healthcare, and let ZeroFox deliver timely, personal, and usable intelligence so you can stay ahead of what’s next and reclaim what’s right.

Average Rating: 4.4/5.0

Total Reviews: 176

How Do G2 Users Rate ZeroFox?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 9.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.8/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind ZeroFox?

  • Seller: ZeroFox
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Baltimore, MD
  • LinkedIn® Page: www.linkedin.com
    856 employees on LinkedIn®
  • Ownership: NASDAQ: ZFOX

Who Uses This Product?

  • Who Uses This: Cyber Security Analyst
  • Top Industries: Financial Services, Banking
  • Company Size: 51% Large, 29% Medium

What Do G2 Reviewers Say About ZeroFox?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the intuitive dashboard of ZeroFox, facilitating quick assessments and high adoption rates within teams.
  • Users value the timely and relevant alerts from ZeroFox, significantly saving team time and improving efficiency.
  • Users value the effective threat detection features of ZeroFox, enhancing security and simplifying alert management processes.
  • Users value the timely and relevant alert notifications from ZeroFox, enhancing their threat awareness and response efficiency.
  • Users value the timely and relevant alerts from ZeroFox, saving time and enhancing threat management efficiency.
Cons
  • Users express frustration with inefficient alerts, citing excessive noise and delays in actioning relevant threats.
  • Users experience false alarms with irrelevant alerts from ZeroFox, complicating threat management and causing unnecessary noise.
  • Users experience slow performance with ZeroFox, facing delays in takedowns and overwhelming volumes of alerts.
  • Users frequently face false positive alerts from ZeroFox, leading to irrelevant notifications and wasted time on noise.
  • Users face an inefficient alert system in ZeroFox, struggling with irrelevant alerts and slow response to threats.

What Are Recent G2 Reviews of ZeroFox?

What Are G2 Users Discussing About ZeroFox?

Cortex Cloud

Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.

Average Rating: 4.1/5.0

Total Reviews: 128

How Do G2 Users Rate Cortex Cloud?

  • Has the product been a good partner in doing business?: 8.0/10 (Category avg: 9.2/10)
  • Reporting: 7.8/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.5/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Cortex Cloud?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®
  • Ownership: NYSE: PANW

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 37% Large, 33% Medium

What Do G2 Reviewers Say About Cortex Cloud?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Cortex Cloud, promoting faster performance monitoring and streamlined decision-making.
  • Users appreciate the centralized data and analytics of Cortex Cloud, enhancing efficiency and decision-making across security operations.
  • Users appreciate the centralized security management of Cortex Cloud, streamlining workload management and enhancing operational efficiency.
  • Users appreciate the centralized visibility of Cortex Cloud, enhancing data monitoring and facilitating better decision-making.
  • Users value the seamless integration of Cortex Cloud, enhancing efficiency in managing resources across different environments.
Cons
  • Users note the expensive pricing of Cortex Cloud, making it less accessible for smaller teams or businesses.
  • Users find the difficult learning curve of Cortex Cloud can slow down adoption for new teams and users.
  • Users find the steep learning curve of Cortex Cloud challenging, especially for those unfamiliar with its advanced features.
  • Users express concerns over high and unclear pricing, which complicates budgeting and can escalate with scaling needs.
  • Users experience a complex setup with Cortex Cloud, often struggling with intuitive navigation and steep learning curves.

What Are Recent G2 Reviews of Cortex Cloud?

DeCYFIR by CYFIRMA

DeCYFIR is an AI-powered preemptive External Threat Landscape Management platform engineered to help organizations predict and prevent cyberattacks before they occur. Adopting a hacker's perspective, it delivers early warnings, prioritized insights, and actionable intelligence across the full external threat landscape. Built on a proprietary 9-pillar architecture — spanning Attack Surface Discovery & Intelligence, Vulnerability Intelligence & Threat Prioritization, Brand & Online Exposure Management, Digital Risk & Identity Protection, Third Party Risk Management, Situational Awareness & Emerging Threats, Predictive Threat Intelligence, Threat Adaptive Awareness & Training, and Sector Tailored Deception Intelligence. DeCYFIR correlates signals across all pillars to cut through noise, surface what is truly critical, and empower security teams to stay decisively ahead of emerging threats.

Average Rating: 4.8/5.0

Total Reviews: 52

How Do G2 Users Rate DeCYFIR by CYFIRMA?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind DeCYFIR by CYFIRMA?

  • Seller: CYFIRMA
  • Year Founded: 2017
  • HQ Location: Singapore, SG
  • LinkedIn® Page: www.linkedin.com
    135 employees on LinkedIn®
  • Phone: marketing@cyfirma.com

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 50% Medium, 25% Small

What Do G2 Reviewers Say About DeCYFIR by CYFIRMA?

AI-generated summary from verified user reviews

Pros
  • Users value the clear outside-in view of threats provided by DeCYFIR, enhancing their understanding of vulnerabilities.
  • Users value the timely and actionable threat intelligence from DeCYFIR, enhancing their understanding and decision-making on risks.
  • Users appreciate DeCYFIR for its clear and proactive threat intelligence, enhancing their security strategies and decision-making.
  • Users value the outside-in view of threats DeCYFIR offers, enhancing understanding and proactive protection against cyber risks.
  • Users value DeCYFIR for its proactive threat insights, which significantly enhance organizational security and decision-making.
Cons
  • Users find the not user-friendly interface challenging, especially for first-time interactions and custom API creation.
  • Users find DeCYFIR's interface to have a complexity that overwhelms new users and lacks intuitive customization options.
  • Users find the platform complex and overwhelming, particularly without proper training in threat intelligence workflows.
  • Users find the limited customization of DeCYFIR's dashboards to be a barrier for effective usage and understanding.
  • Users find DeCYFIR to have a complex setup that can overwhelm new users unfamiliar with threat intelligence workflows.

What Are Recent G2 Reviews of DeCYFIR by CYFIRMA?

Palo Alto Cortex XSIAM

Product Description: Palo Alto Networks' Cortex XSIAM is an AI-driven security operations platform designed to transform traditional Security Operations Centers by integrating and automating key functions such as data centralization, threat detection, and incident response. By leveraging machine learning and automation, it enables organizations to detect and respond to threats more efficiently, reducing manual workloads and improving overall security posture. Key Features and Functionality: - Data Centralization: Aggregates data from various sources into a unified platform, providing comprehensive visibility across the enterprise. - AI-Powered Threat Detection: Utilizes machine learning algorithms to identify anomalies and potential threats in real-time. - Automated Incident Response: Streamlines response processes through automation, enabling rapid mitigation of security incidents. - Integrated SOC Capabilities: Combines functions such as Extended Detection and Response , Security Orchestration, Automation, and Response , Attack Surface Management , and Security Information and Event Management into a cohesive platform, eliminating the need for multiple disparate tools. - Scalability: Designed to handle large volumes of data and adapt to the evolving needs of modern enterprises. Primary Value and Problem Solved: Cortex XSIAM addresses the challenges of disjointed data, weak threat defense, and heavy reliance on manual work in traditional SOCs. By centralizing data and automating security operations, it simplifies processes, enhances threat detection accuracy, and accelerates incident response times. This transformation enables organizations to proactively outpace threats, reduce operational costs, and achieve a more robust security posture.

Average Rating: 4.4/5.0

Total Reviews: 112

How Do G2 Users Rate Palo Alto Cortex XSIAM?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Palo Alto Cortex XSIAM?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • LinkedIn® Page: www.linkedin.com
    23,492 employees on LinkedIn®
  • Ownership: NYSE: PANW

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 38% Large, 36% Medium

What Do G2 Reviewers Say About Palo Alto Cortex XSIAM?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Palo Alto Cortex XSIAM, benefiting from its intuitive interface and seamless integration.
  • Users value the advanced threat detection capabilities of Palo Alto Cortex XSIAM, ensuring both known and unknown threats are managed effectively.
  • Users value the seamless integrations of Palo Alto Cortex XSIAM, enhancing overall functionality across various platforms.
  • Users value the unified console of Palo Alto Cortex XSIAM for simplifying security management across endpoints, network, and cloud.
  • Users value the single console integration, highlighting its ease of use and reliability for threat detection.
Cons
  • Users find the Cortex XSIAM to be very expensive compared to other solutions, impacting overall satisfaction.
  • Users find the difficult learning curve of Palo Alto Cortex XSIAM a challenge due to its complexity and setup.
  • Users find the complexity of the console overwhelming, requiring significant time and expertise to navigate effectively.
  • Users report integration issues with Palo Alto Cortex XSIAM, facing challenges with non-native equipment and log maintenance.
  • Users find the UX improvement of Palo Alto Cortex XSIAM lacking in customization and intuitive design for features.

What Are Recent G2 Reviews of Palo Alto Cortex XSIAM?

What Are G2 Users Discussing About Palo Alto Cortex XSIAM?

Bugcrowd

Bugcrowd frees organizations with a low tolerance for risk from chronic talent shortages, noisy tools that breed false positives, and the fear of critical hidden or emerging vulnerabilities. Our SaaS platform provides access to the unlimited capacity and skills of the global ethical hacker/pentester community for deeper, proactive risk reduction and faster regulatory compliance. With 12+ years of experience and 1200+ customers in every industry (including OpenAI, National Australia Bank, Indeed, USAA, Twilio, and CISA), we know what long-term with crowdsourced security looks like.

Average Rating: 4.3/5.0

Total Reviews: 60

How Do G2 Users Rate Bugcrowd?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Reporting: 8.6/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Bugcrowd?

  • Seller: Bugcrowd
  • Year Founded: 2012
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    3,858 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 34% Large, 33% Small

What Do G2 Reviewers Say About Bugcrowd?

AI-generated summary from verified user reviews

Pros
  • Users value the high-quality reporting in Bugcrowd, enabling efficient tracking of vulnerabilities and enhanced security posture.
  • Users find Bugcrowd's platform to be easy to use, enhancing their efficiency and overall experience in vulnerability testing.
  • Users value the responsive customer support from Bugcrowd, enhancing their experience with timely assistance and solutions.
  • Users commend Bugcrowd for its consistent and transparent communication, enhancing the overall efficiency of their research experience.
  • Users value the diverse and skilled security research community in Bugcrowd, ensuring high-quality vulnerability findings.
Cons
  • Users express frustration with poor customer support, noting slow response times and inconsistent triaging processes.
  • Users experience slow performance in triage and report validation, leading to frustration and delays in updates.
  • Users experience slow response times and inconsistent triaging, which can lead to frustration and lack of clarity.
  • Users experience inadequate reporting with slow validations and delays, impacting timely resolutions and overall efficiency.
  • Users find the learning curve steep with Bugcrowd, making it challenging for beginners to navigate effectively.

What Are Recent G2 Reviews of Bugcrowd?

Armis

Armis is THE cyber exposure management and security solution designed to help organizations protect their entire attack surface and manage cyber risk exposure in real time. In an era where traditional perimeter defenses are becoming increasingly ineffective, Armis provides a comprehensive approach to cybersecurity that enables organizations to continuously monitor, secure, and manage all critical assets, whether on-premises or in the cloud. Armis' target audience includes a wide range of organizations, from Fortune 100, 200, and 500 companies to national governments and local entities. These organizations face unique challenges in safeguarding their critical infrastructure and sensitive data against evolving cyber threats. Armis is particularly beneficial for industries that rely heavily on connected devices and IoT (Internet of Things) technologies, as it offers visibility and protection across diverse environments. This capability is essential for organizations aiming to maintain operational continuity and protect their reputations in a landscape where cyber incidents can have far-reaching consequences. Key features of Armis include real-time visibility into all connected devices, automated risk assessment, and continuous monitoring of network activity. The platform uses advanced machine learning algorithms to detect anomalies and potential threats, allowing organizations to respond swiftly to emerging risks. Additionally, Armis seamlessly integrates with existing security tools, enhancing security posture without disrupting current workflows. This interoperability is crucial for organizations looking to strengthen their defenses without overhauling their entire security infrastructure. The benefits of using Armis extend beyond mere compliance; they encompass a proactive approach to cybersecurity that empowers organizations to anticipate and mitigate risks before they escalate into significant incidents. By providing a unified view of the attack surface, Armis enables security teams to prioritize their efforts and allocate resources effectively. This strategic focus not only enhances security measures, but also fosters a culture of cybersecurity awareness throughout the organization, ultimately contributing to a more resilient operational framework. In summary, Armis stands out in the cybersecurity landscape by offering a holistic solution that addresses the complexities of modern threats. Its ability to provide real-time insights and automate risk management processes makes it an invaluable tool for organizations striving to protect their critical assets and maintain a secure environment in an increasingly interconnected world.

Average Rating: 4.3/5.0

Total Reviews: 19

How Do G2 Users Rate Armis?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 9.2/10)
  • Reporting: 9.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.6/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 7.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Armis?

  • Seller: ServiceNow
  • Company Website:
  • Year Founded: 2004
  • HQ Location: Santa Clara, CA
  • LinkedIn® Page: www.linkedin.com
    35,078 employees on LinkedIn®
  • Ownership: NYSE:NOW

Who Uses This Product?

  • Top Industries: Hospital & Health Care
  • Company Size: 53% Large, 26% Small

What Do G2 Reviewers Say About Armis?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly design of Armis, enabling easy access to insights and efficient management of tasks.
  • Users find Armis beneficial for identifying system risks and managing assets effectively with its intuitive interface.
  • Users praise Armis for its intuitive user interface, making it easy to access insights and manage tasks efficiently.
  • Users appreciate the deep visibility Armis provides, uncovering insights and enhancing network security awareness.
  • Users appreciate the responsive customer support of Armis, enhancing their experience with effective assistance and guidance.
Cons
  • Users face integration issues with Armis, making it challenging to obtain reliable information despite eventual functionality.
  • Users find the additional costs for add-on modules to be quite high, affecting overall value for money.
  • Users find the complex setup challenging, as configurations can be difficult despite the functionality achieved afterward.
  • Users find the difficult setup of Armis challenging, despite its effective integrations once properly configured.
  • Users express concerns over excessive notifications, leading to information overload and the need for better integrations.

What Are Recent G2 Reviews of Armis?

What Are G2 Users Discussing About Armis?

Edgescan

What Is Edgescan? Edgescan is a cybersecurity company that helps organizations proactively identify, validate, and prioritize vulnerabilities across their applications, API’s and digital landscape. The company specializes in continuous vulnerability assessment, automated penetration testing, Attack Surface Management and Penetration Testing as a Service (PTaaS). Edgescan also delivers Autonomous Penetration Testing via "Edgescan Atomic". Atomic is an AI powered autonomous penetration testing capability available exclusively to Edgescan customers. Each Atomic Attack Credit provides an autonomous penetration test, allowing organizations to perform an additional autonomous penetration test when required Atomic complements PTaaS by providing another way to assess security as environments evolve. (Supercharge your security with AI) Edgescan combines advanced automation with certified security experts, including professionals holding credentials such as CREST and OSCP, to deliver highly accurate and actionable security testing. This hybrid approach allows organizations to move beyond traditional point-in-time penetration tests and operate a continuous proactive cybersecurity program. The Edgescan platform is designed primarily for web application and API security, enabling organizations to continuously assess their attack surface and identify vulnerabilities throughout the development lifecycle but also delivers “full stack” coverage to detect host layer CVE’s. With a client retention rate of over 90%, Edgescan has built long-term partnerships by delivering measurable improvements in security efficiency, risk visibility, and vulnerability management. Key Features and Capabilities of Edgescan Automated Penetration Testing Edgescan uses intelligent automation to continuously assess applications, APIs, hosts, and cloud environments for vulnerabilities. This enables frequent, scalable security testing across modern and distributed architectures. Human‑Validated Testing Findings are reviewed and manually validated by certified security experts to eliminate false positives and provide deeper insight into real‑world exploitability. Each result is accurate, contextual, and actionable. Penetration Testing as a Service (PTaaS) Edgescan’s PTaaS model extends beyond automated testing by allowing expert testers to focus on vulnerabilities that require human analysis, including: • Business logic flaws • Authentication and authorization weaknesses • Context-dependent exposures • Complex attack chains and privilege escalation paths Cyber Analytics and AI‑Assisted Validation AI-driven analysis enhances detection, verifies exploitability, and increases accuracy. This reduces noise and gives security teams a clearer picture of genuine threats. Integrated Threat Intelligence Edgescan correlates vulnerabilities with real-world threat intelligence, including known exploits and ransomware activity to help organizations prioritize the most dangerous exposures first. Risk‑Based Prioritization Findings are prioritized based on exploitability, severity, threat context, and business impact, ensuring teams focus on the issues that matter most. Primary Value: What Edgescan Solves for Clients Edgescan enables organizations to shift from reactive vulnerability management to a continuous, proactive security model. Traditional scanners and periodic penetration tests frequently produce large volumes of unvalidated findings. This creates noise and forces security teams to spend hours determining which issues are real and critical. Edgescan solves this by combining: Automation for continuous testing Human expertise for validation and complex analysis Cyber analytics and AI for accuracy and prioritization Key Benefits Significant efficiency gains: reducing thousands of hours spent on manual validation. Higher accuracy, thanks to expert‑validated findings and reduced false positives. Clear prioritization, using threat intelligence and ransomware insights to highlight the highest‑risk exposures. Continuous security improvement, enabling rapid detection, faster remediation, and scalable vulnerability management. By unifying automation, human expertise, AI, and threat intelligence, Edgescan empowers organizations to maintain a continuous cybersecurity program that strengthens overall security posture while dramatically reducing operational burden.

Average Rating: 4.6/5.0

Total Reviews: 58

How Do G2 Users Rate Edgescan?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Reporting: 9.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.5/10 (Category avg: 8.8/10)

Who Is the Company Behind Edgescan?

  • Seller: Edgescan
  • Company Website:
  • Year Founded: 2017
  • HQ Location: Dublin, Dublin
  • LinkedIn® Page: www.linkedin.com
    88 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 38% Large, 28% Medium

What Do G2 Reviewers Say About Edgescan?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Edgescan, enjoying its user-friendly interface and convenient access to essential information.
  • Users value the near false positive free vulnerability scanning of Edgescan, making web application testing efficient and reliable.
  • Users highly value the fantastic customer support from Edgescan, enhancing their overall experience significantly.
  • Users value the validated, near false positive free vulnerability scanning of Edgescan, enhancing their testing experience significantly.
  • Users appreciate the user-friendly console of Edgescan, as it offers easy access and comprehensive functionality for managing vulnerabilities.
Cons
  • Users find the complex UI of Edgescan challenging, leading to inefficiencies and difficulties in task navigation.
  • Users find the limited customization for hosts and filtering frustrating, impacting their ability to adapt to changes.
  • Users find the poor interface design of Edgescan frustrating, hindering efficient navigation and task completion.
  • Users experience slow performance with Edgescan, as scans can take longer due to thorough validation processes.
  • Users find the user interface challenging to navigate, leading to delays and difficulty performing common tasks.

What Are Recent G2 Reviews of Edgescan?

What Are G2 Users Discussing About Edgescan?

PlexTrac

PlexTrac is the leading AI-powered platform for pentest reporting and threat exposure management, trusted by Fortune 500 companies and top security providers. Built to help cybersecurity teams continuously manage and reduce threat exposure, PlexTrac centralizes security data, streamlines reporting, prioritizes risk, and automates remediation workflows—empowering teams to drive measurable risk reduction. The platform is ideal for enterprises & service providers looking to deliver a Continuous Threat Exposure Management (CTEM) framework across their business. With our suite of solutions, you can consolidate security data from tools and manual testing, automatically prioritize risks based on business impact, and automate remediation and retesting workflows for ongoing, more effective threat management.

Average Rating: 4.8/5.0

Total Reviews: 15

How Do G2 Users Rate PlexTrac?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 9.9/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 6.9/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind PlexTrac?

  • Seller: PlexTrac
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Boise, Idaho
  • LinkedIn® Page: www.linkedin.com
    80 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Consulting
  • Company Size: 40% Small, 40% Large

What Do G2 Reviewers Say About PlexTrac?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the intuitive design and extensive features of PlexTrac, enhancing reporting efficiency and user experience.
  • Users commend the amazing customer support of PlexTrac, noting quick and effective assistance for any issues.
  • Users find PlexTrac to have a clean and intuitive UI, making navigation and reporting significantly easier.
  • Users praise PlexTrac for its reporting efficiency, transforming tedious processes into streamlined, organized workflows for assessments.
  • Users value the seamless integrations with tools like Jira and Tenable that enhance efficiency and reduce manual effort.
Cons
  • Users note some missing features in PlexTrac's on-premise version, affecting functionality compared to SaaS options.
  • Users note some complexity in report formatting, requiring extra effort to achieve the desired presentation.
  • Users find the complex setup of PlexTrac challenging, especially for those new to security tools and automation platforms.
  • Users face a difficult learning curve with PlexTrac, though support is readily available for assistance.
  • Users desire more streamlined reporting options in PlexTrac for improved Threat Hunting and Incident Response plans.

What Are Recent G2 Reviews of PlexTrac?

Microsoft Defender Vulnerability Management

Defender Vulnerability Management delivers asset visibility, intelligent assessments, and built-in remediation tools for Windows, macOS, Linux, Android, iOS, and network devices. Leveraging Microsoft threat intelligence, breach likelihood predictions, business contexts, and devices assessments, Defender Vulnerability Management rapidly and continuously prioritizes the biggest vulnerabilities on your most critical assets and provides security recommendations to mitigate risk. Reduce risk with continuous vulnerability assessment, risk-based prioritization, and remediation. Defender Vulnerability Management is available for cloud workloads and endpoints. Defender for Endpoint Plan 2 customers can access advanced vulnerability management capabilities with the Defender Vulnerability Management add-on, now generally available.

Average Rating: 4.4/5.0

Total Reviews: 34

How Do G2 Users Rate Microsoft Defender Vulnerability Management?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.2/10)
  • Reporting: 8.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.8/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind Microsoft Defender Vulnerability Management?

  • Seller: Microsoft
  • Year Founded: 1975
  • HQ Location: Redmond, Washington
  • LinkedIn® Page: www.linkedin.com
    232,750 employees on LinkedIn®
  • Ownership: MSFT
  • Phone: +1 (877) 276-2464

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 41% Small, 35% Large

What Are Recent G2 Reviews of Microsoft Defender Vulnerability Management?

InsightVM (Nexpose)

InsightVM is Rapid7’s vulnerability risk management offering that advances security through cross-department clarity, a deeper understanding of risk, and measurable progress. By informing and aligning technical teams, security teams can remediate vulnerabilities and build Security into the core of the organization. With InsightVM, security teams can: Gain Clarity Into Risk and Across Teams Better understand the risk in your modern environment so you can work in lockstep with technical teams. Extend Security’s Influence Align traditionally siloed teams and drive impact with the shared view and common language of InsightVM. See Shared Progress Take a proactive approach to security with tracking and metrics that create accountability and recognize progress.

Average Rating: 4.4/5.0

Total Reviews: 72

How Do G2 Users Rate InsightVM (Nexpose)?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 8.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.1/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.5/10 (Category avg: 8.8/10)

Who Is the Company Behind InsightVM (Nexpose)?

  • Seller: Rapid7
  • Year Founded: 2000
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    8,746 employees on LinkedIn®
  • Ownership: NASDAQ:RPD
  • Total Revenue (USD mm): $411

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 51% Large, 33% Medium

What Do G2 Reviewers Say About InsightVM (Nexpose)?

AI-generated summary from verified user reviews

Pros
  • Users value the automation of remediation workflows, which significantly reduces time and effort in addressing vulnerabilities.
  • Users value the real-time visibility into vulnerabilities provided by InsightVM, enhancing network security and response times.
  • Users value the effective asset management features of InsightVM, enabling streamlined tracking and categorization of critical assets.
  • Users appreciate the clear, actionable risk scoring and live dashboards of InsightVM for effective risk management.
  • Users value InsightVM's clear prioritization of risks and actionable insights, enhancing their asset management and security posture.
Cons
  • Users find the setup and administration complex, making it challenging to manage InsightVM effectively at scale.
  • Users experience performance issues with heavy scans and slow support response, affecting overall efficiency.
  • Users note significant resource limitations with InsightVM, requiring ongoing management for optimal performance and efficiency.
  • Users report that memory consumption peaks, requiring careful resource management and optimization efforts during use.
  • Users find the time-consuming nature of custom reports and dashboards can hinder efficiency in InsightVM.

What Are Recent G2 Reviews of InsightVM (Nexpose)?

What Are G2 Users Discussing About InsightVM (Nexpose)?

SecureFlag

SecureFlag is a Developer Security Enablement Platform designed to assist organizations in mitigating application risk throughout the software development lifecycle (SDLC). By integrating automated threat modeling with practical secure coding training, SecureFlag addresses critical vulnerabilities that arise from insecure design decisions and inadequate secure coding skills among development teams. This platform empowers enterprises to identify potential security threats early in the design phase and cultivate a culture of secure coding, ultimately enhancing the overall security posture of their applications. Targeted primarily at enterprise engineering and application security teams, SecureFlag serves as a comprehensive solution for organizations looking to strengthen their security frameworks. The platform effectively tackles two fundamental issues: the need for proactive security measures during the design phase and the necessity for ongoing education in secure coding practices. By providing tools that facilitate early detection of vulnerabilities and hands-on training, SecureFlag enables teams to create more secure applications while fostering a knowledgeable workforce capable of addressing security challenges. One of the standout features of SecureFlag is its automated threat modeling tool powered by AI, ThreatCanvas. This innovative solution automates the generation of threat models during the design stage, allowing teams to visualize security risks before any code is written. This proactive approach reduces reliance on manual processes and ensures that security considerations are consistently integrated into design decisions as systems evolve. Additionally, SecureFlag's secure coding training platform offers hands-on labs in real development environments, allowing developers, DevOps, Cloud, and QA engineers to practice defensive programming in real-world scenarios. This practical training is designed to replace traditional multiple-choice assessments, providing immediate feedback on code changes and fostering skill development over time. SecureFlag also emphasizes compliance and integration, mapping its training and threat modeling capabilities to various industry standards such as PCI DSS, ISO 27001, SOC 2, HIPAA, and ASVS. This feature includes exportable evidence packs for audits, simplifying the compliance process for organizations. Furthermore, SecureFlag seamlessly integrates with popular developer workflows through tools like Jira and GitHub, enabling teams to address security issues within their existing engineering processes. The platform’s AppSec team dashboards provide continuous visibility into skill coverage, risk reduction, and training adoption, allowing organizations to track their progress and make informed decisions regarding their security initiatives. With over 300 organizations across more than 30 countries utilizing SecureFlag, the platform has demonstrated measurable outcomes in enhancing security and engineering efficiency. Users have reported a 27% reduction in the time required to fix vulnerabilities, a 21% decrease in new security tickets, and an average savings of 3,600 developer hours per 100 engineers annually. SecureFlag is also recognized as an OWASP Partner, providing valuable training resources for OWASP members alongside its enterprise offerings, further solidifying its commitment to advancing secure software development practices.

Average Rating: 4.8/5.0

Total Reviews: 43

How Do G2 Users Rate SecureFlag?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind SecureFlag?

  • Seller: SecureFlag
  • Company Website:
  • HQ Location: London, United Kingdom
  • LinkedIn® Page: www.linkedin.com
    71 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Computer Software
  • Company Size: 47% Medium, 28% Large

What Are Recent G2 Reviews of SecureFlag?

ThreatMon

ThreatMon is an AI-powered end-to-end cyber risk intelligence platform designed to assist organizations in identifying, analyzing, prioritizing, and responding to external cyber risks within their digital ecosystems. This comprehensive solution caters to security operations, threat intelligence, risk management, and executive teams, offering continuous visibility into exposed assets, emerging threats, threat actors, compromised data, and third-party risks from a unified environment. As a robust cyber risk intelligence platform, ThreatMon combines various capabilities to provide organizations with a thorough understanding of their external exposure and the evolving threat landscape. By collecting and analyzing threat data, the platform supports proactive risk identification, enabling informed security decisions that are crucial in today’s complex digital environment. This proactive approach is essential for organizations aiming to stay ahead of potential cyber threats and vulnerabilities. Key features of ThreatMon include Attack Surface Intelligence, which allows users to discover and monitor internet-facing assets, exposures, and vulnerabilities. Additionally, the platform offers Cyber Threat Intelligence and Dark Web Intelligence, enabling organizations to track threat actors, emerging threats, leaked credentials, and compromised data. Fraud Intelligence capabilities help identify phishing attempts, brand impersonation, and other external fraud-related risks, while Supply Chain Risk Management focuses on monitoring cyber risks associated with vendors and third-party ecosystems. The AI-driven analysis, risk prioritization, dashboards, alerts, and reporting features empower teams to transform complex threat data into actionable intelligence. By integrating these capabilities, ThreatMon provides security teams with a consolidated view of external cyber risks, reducing reliance on fragmented tools and enhancing operational efficiency. Continuous monitoring and contextual intelligence facilitate the identification of relevant threats, the investigation of exposures, and the prioritization of risks based on their potential impact. Furthermore, ThreatMon aids technical security teams in effectively communicating risk information to decision-makers through structured insights, dashboards, and reporting. This comprehensive visibility across the digital environment supports risk-based decision-making and fosters a more proactive, intelligence-driven approach to cyber risk management.

Average Rating: 4.9/5.0

Total Reviews: 33

How Do G2 Users Rate ThreatMon?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.2/10)
  • Reporting: 9.8/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.5/10 (Category avg: 8.8/10)

Who Is the Company Behind ThreatMon?

  • Seller: ThreatMon
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Sterling VA
  • LinkedIn® Page: www.linkedin.com
    43 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 42% Large, 39% Medium

What Do G2 Reviewers Say About ThreatMon?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the real-time monitoring capabilities of ThreatMon, enabling proactive management of cybersecurity threats and vulnerabilities.
  • Users value the advanced threat detection capabilities of ThreatMon, offering actionable insights and early warnings.
  • Users find ThreatMon incredibly easy to use, streamlining configuration and management with user-friendly dashboards and reports.
  • Users commend the detailed analysis of ThreatMon, enabling proactive identification of vulnerabilities and informed threat prioritization.
  • Users value the reliable threat intelligence of ThreatMon, enhancing security through proactive threat detection and response.
Cons
  • Users find the excessive notifications from ThreatMon create unnecessary work and can be overwhelming initially.
  • Users find the threat data overwhelming, making it challenging to effectively manage and understand the Mobile Application Monitoring Module.
  • Users find the limited reporting features restrictive, desiring more customization and clarity for specific needs.
  • Users find the inefficient alerts from ThreatMon create unnecessary work and can be challenging to manage.
  • Users face challenges with the inefficient alert system, finding too many alerts create unnecessary work and confusion.

What Are Recent G2 Reviews of ThreatMon?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024