Best Risk-Based Vulnerability Management Software - Page 3

How Many Risk-Based Vulnerability Management Software Products Does G2 Track?

Total Products under this Category: 222

Category Stats (Nov 2026)

  • Average Rating: 4.5/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: BMC Helix Remediate (+17.94%) - Among all products in this category, BMC Helix Remediate recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Risk-Based Vulnerability Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,300+ Authentic Reviews
  • 222+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Risk-Based Vulnerability Management Software

G2 Grid® for Risk-Based Vulnerability Management Software plotting products by satisfaction and market presence

Highlighted products: Ivanti Autonomous Endpoint Management, Tenable Vulnerability Management, Arctic Wolf, H1 Platform, RiskProfiler - External Threat Exposure Management, Pentera, YesWeHack, and Check Point Exposure Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/risk-based-vulnerability-management/grids.json?focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=arctic-wolf&focus%5B%5D=h1-platform&focus%5B%5D=riskprofiler-external-threat-exposure-management&focus%5B%5D=pentera&focus%5B%5D=yeswehack&focus%5B%5D=check-point-exposure-management)

Qualys VMDR

Qualys VMDR is an all-in-one risk-based vulnerability management solution that quantifies cyber risk. It gives organizations unprecedented insights into their risk posture and provides actionable steps to reduce risk. It also gives cybersecurity and IT teams a shared platform to collaborate, and the power to quickly align and automate no-code workflows to respond to threats with automated remediation and integrations with ITSM solutions such as ServiceNow.

Average Rating: 4.4/5.0

Total Reviews: 165

How Do G2 Users Rate Qualys VMDR?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.7/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.5/10 (Category avg: 8.8/10)

Who Is the Company Behind Qualys VMDR?

  • Seller: Qualys
  • Year Founded: 1999
  • HQ Location: Foster City, CA
  • LinkedIn® Page: www.linkedin.com
    3,637 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 51% Large, 29% Medium

What Do G2 Reviewers Say About Qualys VMDR?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive customer support of Qualys VMDR, enhancing their ability to manage vulnerabilities effectively.
  • Users value the robust security features of Qualys VMDR, enhancing security and streamlining asset management effectively.
  • Users value the efficacy of vulnerability detection in Qualys VMDR, enhancing security through swift identification and remediation.
  • Users value the swift identification of vulnerabilities in Qualys VMDR, enhancing their security and response efficiency.
  • Users value the real-time alerting system of Qualys VMDR for promptly notifying them of critical vulnerabilities.
Cons
  • Users find the initial complexity of Qualys VMDR challenging, especially new users navigating the interface.
  • Users find the interface complex, especially for newcomers, making initial navigation challenging.
  • Users find the complex setup of Qualys VMDR challenging, particularly for those unfamiliar with the interface.
  • Users find the difficult learning curve challenging, especially for new users adapting to the interface.
  • Users find the interface complex, particularly challenging for new users during initial stages of use.

What Are Recent G2 Reviews of Qualys VMDR?

What Are G2 Users Discussing About Qualys VMDR?

Strobes Security

Strobes is an AI-driven exposure management platform designed to help organizations streamline their security operations by unifying various security methodologies, including Attack Surface Management (ASM), Application Security Posture Management (ASPM), Risk-Based Vulnerability Management (RBVM), and Penetration Testing as a Service (PTaaS). This comprehensive solution provides users with a holistic view of their security posture, enabling them to identify, assess, and respond to potential risks and vulnerabilities effectively. Targeted primarily at security teams and IT professionals, Strobes caters to organizations of all sizes that require a robust approach to managing their security exposure. The platform is particularly beneficial for those who need to navigate the complexities of modern security environments, where multiple tools and processes can lead to fragmented insights. By consolidating various security functions into a single workflow, Strobes empowers users to make informed decisions based on a complete understanding of their risk landscape. One of the key features of Strobes is its extensive integration capabilities, boasting over 120 integrations with existing security tools and systems. This allows organizations to pull findings from disparate sources into a single view, enriching data with contextual information that enhances the relevance of insights. The platform's advanced correlation capabilities help identify relationships between different vulnerabilities and risks, enabling security teams to prioritize their remediation efforts effectively. The user-friendly dashboards in Strobes serve as a central hub for monitoring security activities, encompassing everything from asset discovery and vulnerability insights to Service Level Agreement (SLA) tracking and ticketing. This comprehensive visibility supports continuous prioritization and fix validation, allowing teams to address the most critical issues first. By automating triage processes, Strobes ensures that real risks and exposures are highlighted, facilitating a more efficient response to potential threats. Overall, Strobes stands out in the exposure management landscape by providing a cohesive and intelligent approach to security management. Its ability to unify various methodologies, coupled with powerful automation and integration features, positions it as a valuable tool for organizations seeking to enhance their security posture and effectively manage their exposure to risks.

Average Rating: 4.5/5.0

Total Reviews: 44

How Do G2 Users Rate Strobes Security?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Strobes Security?

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 42% Medium, 33% Large

What Do G2 Reviewers Say About Strobes Security?

AI-generated summary from verified user reviews

Pros
  • Users value the rapid vulnerability assessments that enhance security fixes significantly, boosting efficiency and prioritization.
  • Users appreciate the rapid vulnerability assessments and prioritized remediation that enhance their security processes significantly.
  • Users value the thorough security measures of Strobes Security, impressed by its attention to detail in vulnerability management.
  • Users value the responsive customer support of Strobes Security, enhancing the experience with timely and effective assistance.
  • Users find Strobes Security exceptionally easy to use, enjoying quick setup and intuitive dashboards for efficient workflows.
Cons
  • Users express dissatisfaction with the inadequate reporting in Strobes Security, citing lack of transparency and customization options.
  • Users find the limited customization options in Strobes Security hinder initial workflow setup and usability improvements.
  • Users find Strobes Security's poor usability challenging initially, with a steep learning curve and complex dashboard navigation.
  • Users find the reporting issues in Strobes Security limit transparency and hinder customization for effective analysis.
  • Users find the user interface complex, making initial customization and workflow setup a challenging experience.

What Are Recent G2 Reviews of Strobes Security?

DefenseStorm

DefenseStorm is a comprehensive cybersecurity platform specifically designed for financial institutions, focusing on cyber risk assessment, governance, security, and fraud prevention. This integrated solution addresses the unique challenges that banks and other financial entities face in maintaining cyber risk readiness amidst a complex landscape of regulations and technological demands. The platform is tailored to meet the stringent requirements of the banking sector, making it a vital resource for organizations seeking to enhance their cybersecurity posture. DefenseStorm's intelligent data engine, known as GRID ACTIVE, plays a crucial role in this process by providing real-time access to critical threat data. This capability allows financial institutions to analyze and respond to potential threats swiftly, ensuring they remain vigilant against evolving cyber risks. Targeted at banks and financial service providers, DefenseStorm offers a range of use cases that are essential for maintaining compliance and safeguarding sensitive data. The platform not only helps institutions assess their current cyber risk levels but also provides governance tools that facilitate adherence to regulatory requirements. By integrating security measures with fraud detection capabilities, DefenseStorm enables organizations to create a robust defense against both internal and external threats. One of the standout features of DefenseStorm is its Cyber Threat Surveillance Operations (CTS Ops) team, which provides round-the-clock support. This managed service ensures that financial institutions have access to expert resources at all times, allowing them to leverage specialized knowledge and experience in combating cyber threats. The continuous monitoring and proactive threat management offered by the CTS Ops team enhance the overall security framework of the institution, providing peace of mind to stakeholders. Overall, DefenseStorm's unique focus on the banking sector, combined with its advanced data analytics and dedicated support services, positions it as a critical tool for financial institutions aiming to navigate the complexities of cybersecurity. By equipping organizations with the necessary tools and expertise, DefenseStorm helps them not only to meet regulatory obligations but also to foster a culture of security that is essential in today's digital landscape.

Average Rating: 4.8/5.0

Total Reviews: 30

How Do G2 Users Rate DefenseStorm?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.2/10)
  • Reporting: 8.8/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.7/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind DefenseStorm?

  • Seller: DEFENSESTORM
  • Company Website:
  • Year Founded: 2014
  • HQ Location: Alpharetta, Georgia
  • LinkedIn® Page: www.linkedin.com
    85 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 80% Medium, 20% Small

What Do G2 Reviewers Say About DefenseStorm?

AI-generated summary from verified user reviews

Pros
  • Users commend the knowledgeable and helpful customer support of DefenseStorm, enhancing their cybersecurity experience significantly.
  • Users value the dedicated and knowledgeable team of DefenseStorm, enhancing security with 24/7 support and assistance.
  • Users find the ease of use of DefenseStorm makes implementing and monitoring cybersecurity effortless and efficient.
  • Users praise the knowledgeable and helpful staff of DefenseStorm, ensuring excellent support and seamless interactions.
  • Users value the 24/7 alert notifications from DefenseStorm, ensuring proactive responses to potential security issues.
Cons
  • Users face difficult navigation within DefenseStorm, making it hard to effectively utilize its features and dashboards.
  • Users suggest that training is required for effective use, with inadequate materials hindering user experience and reliance.
  • Users find the manual asset management process cumbersome and unreliable, despite appreciating other aspects of the product.
  • Users find executive reporting difficult due to complex dashboards, hindering effective interpretation for non-IT stakeholders.
  • Users find inadequate reporting in DefenseStorm, struggling to create clear executive summaries from complex dashboards.

What Are Recent G2 Reviews of DefenseStorm?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

AI-Native Continuous Offensive Security Platform

RidgeBot by Ridge Security is an AI-powered platform for continuous security validation that enables CISOs to minimize cyber risks from increasingly sophisticated and frequent cyberattacks by validating the cybersecurity posture and controls that protect attack surfaces. RidgeBot delivers continuous threat exposure management by automatically testing an organization’s entire Internet Protocol (IP)-based attack surfaces, including network infrastructure, applications, websites, IoT, and OT. RidgeBot pinpoints the most critical vulnerabilities using ethical hacking techniques. RidgeBot’s dynamic AI-powered decision-making capability supports many use cases, including DevSecOps, compliance, incident response verification, and custom attack simulations. RidgeBot maintains a library of over 36,000 plugins to launch complex penetration tests and attack simulations, with detailed reporting of results and remediation recommendation.

Average Rating: 4.5/5.0

Total Reviews: 98

How Do G2 Users Rate AI-Native Continuous Offensive Security Platform?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 8.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.1/10 (Category avg: 8.8/10)

Who Is the Company Behind AI-Native Continuous Offensive Security Platform?

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 51% Small, 45% Medium

What Do G2 Reviewers Say About AI-Native Continuous Offensive Security Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of RidgeBot, which efficiently streamline security validation and prioritization of threats.
  • Users find the ease of use exceptional, praising its intuitive interface and straightforward setup for security tasks.
  • Users appreciate the efficiency of automated pentesting with RidgeBot, significantly reducing manual validation and saving time.
  • Users value the autonomous vulnerability testing of RidgeBot, significantly enhancing efficiency and risk assessment in security processes.
  • Users appreciate the efficiency of RidgeBot in automating penetration testing and prioritizing critical vulnerabilities effectively.
Cons
  • Users find the platform's setup to be complex and challenging, especially in customized or legacy environments.
  • Users find the complex setup of the AI-Native platform challenging, particularly for newcomers and unique environments.
  • Users feel there are several missing features, like improved API testing and custom reporting templates for compliance.
  • Users find the customer support lacking, often leaving them to troubleshoot issues independently.
  • Users find the poor documentation challenging, making initial setup and troubleshooting difficult, especially for new admins.

What Are Recent G2 Reviews of AI-Native Continuous Offensive Security Platform?

Plerion

Plerion is a cloud security platform designed to assist organizations in managing and mitigating risks within their cloud environments. Unlike traditional security tools that inundate users with alerts, Plerion focuses on actionable insights, enabling teams to address vulnerabilities effectively. By streamlining the risk management process, Plerion transforms the way organizations approach cloud security, ensuring that the most critical threats are prioritized and resolved. The platform is tailored for IT security teams and cloud administrators across various industries that utilize cloud services such as AWS, Azure, and Google Cloud Platform (GCP). Plerion’s unique approach allows users to visualize their cloud infrastructure, identities, workloads, and code as a cohesive graph. This visualization helps users identify the approximately 1% of risks that are genuinely exploitable, eliminating the noise typically associated with security alerts. By presenting a concise, ranked list of vulnerabilities, Plerion empowers teams to focus their efforts where they matter most. At the heart of the Plerion platform is Pleri, an AI-driven cloud security engineer that mimics the investigative capabilities of a human security expert. Pleri assesses findings, verifies their exploitability in context, and traces risks back to the underlying code responsible for them. This automated process culminates in the creation of pull requests or Jira tickets for remediation, ensuring that every proposed change awaits human approval. This feature not only enhances accountability through full audit trails but also allows for easy rollbacks if necessary. Plerion’s comprehensive coverage includes cloud configuration, workloads, identity and permissions, data, code, and AI workloads, making it a versatile solution for diverse cloud environments. The platform also offers compliance mapping against a wide range of frameworks, linking each identified failure to specific corrective actions rather than merely generating reports. This capability significantly reduces the time and effort required for compliance management. Organizations using Plerion have reported substantial improvements in their security operations. For instance, Deputy achieved an 80% reduction in alerts and decreased their time-to-remediation from 30 days to just 4 hours. Similarly, Basis eliminated 40 hours of manual review each week, illustrating the platform's efficiency. With ISO 27001 certification, SOC 2 attestation, and the AWS Security Software Competency, Plerion ensures a high standard of security and reliability. By deploying in minutes rather than months, Plerion allows organizations to put their cloud security on autopilot while maintaining a human touch in the decision-making process.

Average Rating: 4.7/5.0

Total Reviews: 32

How Do G2 Users Rate Plerion?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Plerion?

  • Seller: Plerion
  • Company Website:
  • Year Founded: 2021
  • HQ Location: Sydney, AU
  • LinkedIn® Page: www.linkedin.com
    30 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Financial Services
  • Company Size: 52% Medium, 36% Small

What Do G2 Reviewers Say About Plerion?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the centralized security data in Plerion, which enhances visibility and effective risk management.
  • Users appreciate the ease of use of Pleri, enhancing collaboration and simplifying cloud security management seamlessly.
  • Users commend Plerion's stellar customer support, highlighting responsiveness and commitment to customer success in security management.
  • Users appreciate the centralized security data of Plerion, benefiting from immediate visibility and actionable advice.
  • Users appreciate how Plerion's effective prioritization simplifies cloud security, focusing on critical issues without overwhelming alerts.
Cons
  • Users feel that improvements are needed in trend reporting and Jira ticket creation for better long-term value visibility.
  • Users note that while Plerion shows improvement needed in trend reporting and ongoing value visibility over time.
  • Users find the missing features of Plerion frustrating, particularly regarding customization and cloud support limitations.
  • Users note the limited support for Google Cloud, wishing for better feature parity with other providers.
  • Users experience integration issues due to manual updates and limited coverage, creating deployment challenges with Plerion.

What Are Recent G2 Reviews of Plerion?

CloudBees

The Complete DevOps solution. CloudBees empowers your software delivery teams to transform your business. CloudBees solution brings together development, operations, IT, security, and business teams to: Create fast with scalable repeatable workflows. Continuously improve customer experiences by progressively delivering features with speed and control. Command everything with higher-order visibility, management, and intelligence across tools, teams, pipelines, and process... all at enterprise scale.

Average Rating: 4.4/5.0

Total Reviews: 596

How Do G2 Users Rate CloudBees?

  • Has the product been a good partner in doing business?: 8.5/10 (Category avg: 9.2/10)
  • Reporting: 9.6/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.8/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind CloudBees?

  • Seller: CloudBees
  • Company Website:
  • Year Founded: 2010
  • HQ Location: San Jose, CA
  • LinkedIn® Page: www.linkedin.com
    485 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, DevOps Engineer
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 48% Large, 41% Medium

What Do G2 Reviewers Say About CloudBees?

AI-generated summary from verified user reviews

Pros
  • Users admire the efficiency and scalability of CloudBees, enjoying streamlined processes and effective continuous delivery.
  • Users value the reliability of CloudBees, making CI/CD processes more organized and efficient for teams.
  • Users value the customization capabilities of CloudBees, allowing tailored workflows and seamless integration with other tools.
  • Users value the ease of use of CloudBees, simplifying complex CI/CD pipelines and enhancing team efficiency.
  • Users value the seamless integrations of CloudBees, enhancing workflow automation with major DevOps tools like GitHub.
Cons
  • Users face challenges with the complex interface of CloudBees, making understanding and configuration difficult.
  • Users find complexity in understanding and configuration of CloudBees to be a significant challenge affecting usability.
  • Users face complex setup challenges with CloudBees, requiring specialized knowledge and time for configuration and plugin management.
  • Users report a complex user interface that complicates understanding and configuration, hindering the overall experience.
  • Users face challenges with configuration issues, making it difficult to fully leverage CloudBees’ rich features.

What Are Recent G2 Reviews of CloudBees?

What Are G2 Users Discussing About CloudBees?

Fortra VM

Fortra VM is a proactive, risk-based vulnerability management solution that helps organizations identify, assess, and prioritize security weaknesses across their infrastructure. Beyond basic scanning, Fortra VM provides contextual risk prioritization through its Security GPA rating system, Peer Insight for industry benchmarking, and threat ranking to identify exploitation vectors that are used in real world attacks. Conveniently delivered via SAAS, Fortra VM creates easily understood reporting for efficient and effective remediation.

Average Rating: 4.3/5.0

Total Reviews: 67

How Do G2 Users Rate Fortra VM?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Reporting: 8.6/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.6/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.7/10 (Category avg: 8.8/10)

Who Is the Company Behind Fortra VM?

  • Seller: Fortra
  • Year Founded: 1982
  • HQ Location: Eden Prairie, Minnesota
  • LinkedIn® Page: www.linkedin.com
    1,784 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Banking
  • Company Size: 45% Medium, 35% Small

What Do G2 Reviewers Say About Fortra VM?

AI-generated summary from verified user reviews

Pros
  • Users value the reliability of Fortra VM, praising its consistent performance and excellent customer support over the years.
  • Users rave about the exceptional customer support of Fortra VM, enhancing their overall experience since 2020.
  • Users commend Fortra VM for its robust data security, effectively identifying vulnerabilities and guiding necessary remediations.
  • Users find Fortra VM to be lightweight and user-friendly, making their experience thoroughly enjoyable with excellent support.
  • Users value the incident management capabilities of Fortra VM for identifying and addressing critical security vulnerabilities effectively.

What Are Recent G2 Reviews of Fortra VM?

What Are G2 Users Discussing About Fortra VM?

Saner CVEM

Prevention-first Vulnerability and Exposure Management for unified visibility, prioritization, compliance, and remediation Saner Continuous Vulnerability and Exposure Management unifies asset exposure, posture anomaly detection, vulnerability assessment, compliance management, risk prioritization, patching, and endpoint actions in one dashboard. Saner CVEM is built to help teams continuously detect, assess, prioritize, and remediate vulnerabilities and other security risks from a unified console Why Choose Saner CVEM? • Unified dashboard with interactive views across visibility, detection, prioritization, and remediation for a single source of truth • Complete asset visibility across endpoint and non-endpoint devices, operating system applications, third-party applications, and lifecycle changes • Continuous risk discovery with rapid scans, daily-updated risk intelligence, and posture anomaly detection that helps surface outliers and misconfigurations faster • Context-driven prioritization with SSVC categories such as Act, Attend, Track, and Track* so teams can focus on the risks that deserve action first. • Continuous compliance management with built-in templates, customizable profiles, daily checks, and deviation tracking across common frameworks. • Integrated patching and remediation with vulnerability-to-patch mapping, automated deployment workflows, and endpoint actions from the same ecosystem. • Machine-learning-assisted analysis to identify deeper risk patterns, detect unusual posture, and support smarter remediation decisions. • Customizable, audit-ready reporting for security, IT, and compliance teams that need clearer evidence and easier tracking. • Flexible deployment on cloud or on-premises, with remediation support across Windows, Linux, macOS, and AIX environments.

Average Rating: 4.5/5.0

Total Reviews: 72

How Do G2 Users Rate Saner CVEM?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.4/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Saner CVEM?

  • Seller: SecPod
  • Company Website:
  • Year Founded: 2008
  • HQ Location: Redwood City, California
  • LinkedIn® Page: www.linkedin.com
    182 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 41% Small, 38% Medium

What Do G2 Reviewers Say About Saner CVEM?

AI-generated summary from verified user reviews

Pros
  • Users value the robust security features of Saner CVEM for effective endpoint management and vulnerability assessments.
  • Users appreciate the rich feature set of Saner CVEM, streamlining security management and enhancing vulnerability assessments efficiently.
  • Users commend the ease of use of Saner CVEM, allowing swift deployment and seamless management across diverse systems.
  • Users commend the exceptional customer support of Saner CVEM, providing assistance during critical deployments and compliance setups.
  • Users value the efficient compliance management of Saner CVEM, facilitating seamless audit preparation and vulnerability tracking.
Cons
  • Users note significant integration issues with Saner CVEM, requiring workarounds for smooth multi-tenant management and legacy software connections.
  • Users find the pricing structure expensive for small organizations, impacting their decision to choose Saner CVEM.
  • Users find the limited features of Saner CVEM restrict effective multi-tenant support and integration capabilities.
  • Users experience slow performance during initial loading and installation, impacting daily checks and onboarding efficiency.
  • Users experience slow scanning during initial dashboard loads and installation, affecting efficiency with large data sets.

What Are Recent G2 Reviews of Saner CVEM?

What Are G2 Users Discussing About Saner CVEM?

Ethiack

Ethiack is an autonomous offensive security platform that continuously tests and validates vulnerability exploitation across entire attack surfaces using agentic AI pentesting and hacker intelligence so security teams fix what matters before attackers strike. Traditional pentests give you a snapshot. Ethiack runs 24/7, combining agentic AI pentesting and human hacker intelligence to validate real-world risks with near-zero false positives. Stop triaging scanner noise. Know what attackers can actually exploit, right now. What you get: - Continuous Adversarial Exposure Validation (AEV) - 99.5% precision on exploitable vulnerabilities - 90% noise reduction - 80% faster remediation (MTTR) - <10 min setup, no installation required - Coverage across +200 vulnerability classes and +1500 technologies - Proof-of-exploit for every validated risk

Average Rating: 4.4/5.0

Total Reviews: 17

How Do G2 Users Rate Ethiack?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.5/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.7/10 (Category avg: 8.8/10)

Who Is the Company Behind Ethiack?

  • Seller: Ethiack
  • Year Founded: 2022
  • HQ Location: Coimbra, Coimbra, Portugal
  • LinkedIn® Page: www.linkedin.com
    56 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 41% Medium, 35% Small

What Do G2 Reviewers Say About Ethiack?

AI-generated summary from verified user reviews

Pros
  • Users commend the exceptional customer support of Ethiack, highlighting its responsiveness and ease of collaboration.
  • Users commend Ethiack for its exceptional cybersecurity, enhancing platform security through continuous insights and effective manual pentesting.
  • Users value the innovation of Ethiack, enhancing platform security through continuous updates and insights.
  • Users value the automation capabilities of Ethiack for efficiently identifying vulnerabilities and enhancing security measures.
  • Users value the real-time monitoring capabilities of Ethiack, enhancing security and integrating seamlessly into development processes.
Cons
  • Users express concern about the high costs and lack of support for iOS asset scrutiny, hindering scalability.
  • Users find the high cost of Ethiack makes scaling testing across critical assets challenging.
  • Users are frustrated by the lack of scheduling automation for scans, limiting their flexibility and efficiency.
  • Users feel that the limited features of Ethiack affect its overall maturity and reliability in functionality.
  • Users find the missing features in Ethiack limiting for enhancing API security in their applications.

What Are Recent G2 Reviews of Ethiack?

Flashpoint

Flashpoint is the leader and largest private provider of threat data and intelligence. We empower mission-critical businesses and governments worldwide to decisively confront complex security challenges, reduce risk, and improve operational resilience amid fast-evolving threats. Powered by Flashpoint Primary Source Collection, our proprietary approach to collecting intelligence directly from the digital spaces where threats originate, the Flashpoint Ignite platform delivers unmatched depth, speed, and relevance from open and hard-to-reach sources, enriched by human expertise and scaled by AI. Our solutions span cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud, and brand protection. Core Capabilities: → Identify and remediate cyber threats, fraud, vulnerabilities, physical security, and national security risks. → Access over 3.6 petabytes of continuously collected data from the internet’s open and difficult-to-access spaces. Add new channels and data sources in minutes to track sources as they surface. → Operationalize intelligence across your entire security stack with seamless integrations throughout the intelligence lifecycle. Our customers safeguard critical assets, avoid financial loss, and protect lives. Discover more at flashpoint.io.

Average Rating: 4.5/5.0

Total Reviews: 82

How Do G2 Users Rate Flashpoint?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.5/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 7.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Flashpoint?

Who Uses This Product?

  • Top Industries: Financial Services, Security and Investigations
  • Company Size: 64% Large, 23% Small

What Do G2 Reviewers Say About Flashpoint?

AI-generated summary from verified user reviews

Pros
  • Users find Flashpoint's ease of use invaluable, facilitating rapid access to threat intel across multiple sources and platforms.
  • Users value the timely bulletins and community communication from Flashpoint, enhancing their threat awareness significantly.
  • Users find Flashpoint to be easy to use, benefiting from excellent support and a wealth of data options.
  • Users value Flashpoint for its comprehensive threat intelligence, enabling proactive measures against fraud and enhancing operational readiness.
  • Users value the efficient search functionality of Flashpoint, enhancing navigation and alert systems for timely threat tracking.
Cons
  • Users are frustrated by the lack of features, such as limited communication options and under-developed investigation tools.
  • Users find complexity in navigation and UI, leading to challenges with features and budgeting effectively.
  • Users find the interface confusing, making it difficult to navigate certain features effectively during their investigations.
  • Users find the limited features of Flashpoint frustrating, particularly with under-developed investigation tools and bookmarks.
  • Users experience frustration due to alert noise and transition issues, impacting their overall effectiveness with Flashpoint.

What Are Recent G2 Reviews of Flashpoint?

What Are G2 Users Discussing About Flashpoint?

Nucleus

Nucleus Security is a vulnerability and asset management solution that automates processes and workflows, enabling organizations to mitigate vulnerabilities 10 times faster, using a fraction of the resources that it takes to perform these tasks today. Nucleus aggregates, cleans, correlates, and analyzes data from all sources of asset and vulnerability data and organizes it into a logical hierarchy. Once the data is organized, Nucleus streamlines operational processes with efficient workflows and time-saving automation that accelerate vulnerability management and response.

Average Rating: 4.5/5.0

Total Reviews: 31

How Do G2 Users Rate Nucleus?

  • Has the product been a good partner in doing business?: 8.9/10 (Category avg: 9.2/10)
  • Reporting: 8.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Nucleus?

Who Uses This Product?

  • Top Industries: Airlines/Aviation, Computer & Network Security
  • Company Size: 53% Large, 38% Medium

What Do G2 Reviewers Say About Nucleus?

AI-generated summary from verified user reviews

Pros
  • Users highly value the streamlined automation in Nucleus, significantly enhancing reporting efficiency and reducing manual tasks.
  • Users appreciate the customization options of Nucleus, enhancing reporting capabilities and streamlining workflow effectively.
  • Users value the advanced dashboard customization of Nucleus, enhancing efficiency in reporting and threat management.
  • Users commend the advanced dashboard features of Nucleus, facilitating efficient report management and streamlined workflows.
  • Users appreciate the advanced dashboard usability of Nucleus, making reporting and risk management efficient and streamlined.
Cons
  • Users suggest that the inadequate remediation capabilities need improvement for better handling of critical vulnerabilities.

What Are Recent G2 Reviews of Nucleus?

VulScan

Automated Vulnerability Scanning. Affordably Priced For Everyone! With almost 70 new hidden vulnerabilities identified every day, you would need to be a super hero with X-ray vision to find them all. Or, you can let VulScan do it for you. VulScan is purpose-built for MSPs and for IT Departments that handle their own IT security. It has all the features you need for both internal and external vulnerability management, but without all the complexity found in older solutions. Best of all, VulScan is priced so that cost is no longer a barrier to scanning as many assets as you need, as frequently as you want. That’s why our slogan is “Vulnerability Management For The Rest of Us! VulScan is an affordable cloud-based vulnerability management platform. It includes the software needed to spin up an unlimited number of virtual network scanner appliances using Hyper-V or VMWare, and a cloud-based portal to control the scanners and manage the discovered issues. For internal network scanning, the appliances can be installed on any existing computer that has excess capacity on the network, or installed on a dedicated box to be permanently installed. You can add multiple scanners and configure them each to scan separate parts of the network to get even faster results pushed into the same client site dashboard at no additional cost. For external scanning, the appliances are installed on the MSP’s data center or other remote location and “pointed” to the public facing IP addresses of the target network.

Average Rating: 4.1/5.0

Total Reviews: 121

How Do G2 Users Rate VulScan?

  • Has the product been a good partner in doing business?: 8.2/10 (Category avg: 9.2/10)
  • Reporting: 7.2/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.6/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 7.5/10 (Category avg: 8.8/10)

Who Is the Company Behind VulScan?

  • Seller: Kaseya
  • Company Website:
  • Year Founded: 2000
  • HQ Location: Miami, FL
  • LinkedIn® Page: www.linkedin.com
    5,483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 66% Small, 32% Medium

What Do G2 Reviewers Say About VulScan?

AI-generated summary from verified user reviews

Pros
  • Users love the ease of use of VulScan, praising its simple interface and intuitive scheduling for scanning and reporting.
  • Users value the thorough scanning and intuitive UI of VulScan, enhancing both ease of use and security insights.
  • Users value the detailed reporting features of VulScan, which provide actionable insights and facilitate client communication.
  • Users appreciate the in-depth reporting features of VulScan, enabling easy identification and justification of security vulnerabilities.
  • Users value the scanning efficiency of VulScan, appreciating its ease of use and comprehensive vulnerability reports.
Cons
  • Users criticize the inadequate reporting of VulScan, finding it overwhelming and lacking clear, actionable insights.
  • Users find the difficult UX of VulScan frustrating due to its outdated design and lack of organization features.
  • Users find the difficult setup of VulScan frustrating, with a confusing UI and cumbersome documentation requirements.
  • Users find the limited reporting options inadequate, complicating client communication and overall usability of VulScan.
  • Users are frustrated by the poor customer support from VulScan, experiencing delays and lack of resolution for issues.

What Are Recent G2 Reviews of VulScan?

Cyrisma

Cyrisma helps MSPs and MSSPs turn cyber risk and compliance into revenue. Its unified platform combines vulnerability management, data and asset discovery, compliance tracking, secure configuration, and dark web monitoring into one continuous experience - enabling partners to identify, prioritize, and remediate cyber risk efficiently. With executive-ready reporting, risk monetization insights, and elegant visuals, Cyrisma helps MSPs demonstrate measurable value, strengthen client relationships, and scale their security services profitably.

Average Rating: 4.6/5.0

Total Reviews: 60

How Do G2 Users Rate Cyrisma?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 8.2/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.8/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Cyrisma?

  • Seller: Cyrisma
  • Company Website:
  • Year Founded: 2018
  • HQ Location: Rochester, NY
  • LinkedIn® Page: www.linkedin.com
    14 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 75% Small, 22% Medium

What Do G2 Reviewers Say About Cyrisma?

AI-generated summary from verified user reviews

Pros
  • Users value Cyrisma for its time-saving capabilities, providing actionable insights that streamline vulnerability management efficiently.
  • Users find CYRISMA extremely easy to use, enabling effective risk management and seamless integration into existing environments.
  • Users value the responsive customer support of Cyrisma, ensuring prompt resolutions and effective communication throughout their experience.
  • Users highlight CYRISMA's intuitive design and valuable features, enhancing cybersecurity while reducing operational complexity.
  • Users appreciate the actionable vulnerability intelligence of Cyrisma, enabling quick identification and resolution of security issues.
Cons
  • Users find missing features in Cyrisma, particularly in UI/UX, data correlation, and limited scanning capabilities.
  • Users find Cyrisma to be not user-friendly, struggling with its unintuitive interface and cumbersome navigation.
  • Users face significant integration issues with Cyrisma, including broken data scans and delayed support responses.
  • Users find limited flexibility in Cyrisma, particularly regarding batch scanning and agent deployment, complicating the experience.
  • Users express frustration with poor customer support from CYRISMA, reporting unresponsive assistance and unresolved issues.

What Are Recent G2 Reviews of Cyrisma?

DefectDojo

DefectDojo unifies and automates vulnerability management, enabling security teams to focus on strategic, data-driven analysis. We help teams reduce time spent on manual tracking and consolidate vulnerabilities from existing tools for seamless vulnerability management.

Average Rating: 4.6/5.0

Total Reviews: 11

How Do G2 Users Rate DefectDojo?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)

Who Is the Company Behind DefectDojo?

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 64% Medium, 36% Small

What Are Recent G2 Reviews of DefectDojo?

What Are G2 Users Discussing About DefectDojo?

IBM QRadar EDR

IBM Security QRadar EDR (formerly ReaQta) combines automation and dashboards to minimize analyst workloads, detect anomalous endpoint behavior and remediate threats in near real time. IBM Security QRadar EDR is available on AWS Marketplace. With visibility across endpoints, it combines expected features, like MITRE ATT&CK mapping and attack visualizations, with dual-engine AI and automation. For teams that need extended support, managed detection and response (MDR) services offers 24/7 monitoring and response to help keep users protected. IBM Security QRadar EDR (formerly ReaQta) can be deployed as SaaS, on-premises and in air-gapped environments. For more information, visit https://www.ibm.com/products/qradar-edr

Average Rating: 4.2/5.0

Total Reviews: 45

How Do G2 Users Rate IBM QRadar EDR?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Reporting: 9.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.5/10 (Category avg: 8.8/10)

Who Is the Company Behind IBM QRadar EDR?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM
  • Phone: 1-866-277-7488

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 45% Small, 40% Medium

What Do G2 Reviewers Say About IBM QRadar EDR?

AI-generated summary from verified user reviews

Pros
  • Users commend the effective threat detection capabilities of IBM QRadar EDR, recognizing its reliability in identifying risks.
  • Users praise the ease of use of IBM QRadar EDR, noting its user-friendly interface and reliable integrations.
  • Users commend IBM QRadar EDR's robust cybersecurity measures, effectively detecting and responding to advanced threats in real time.
  • Users value the detection efficiency of IBM QRadar EDR, effectively identifying both known and unknown threats.
  • Users value the effective protection offered by IBM QRadar EDR, ensuring their data remains secure from threats.
Cons
  • Users find the cost prohibitive, especially for mid-range and small businesses struggling with expenses.
  • Users find the difficult learning curve due to complex features and the need for programming knowledge.
  • Users note the resource-intensive requirements of IBM QRadar EDR, necessitating high-end devices for optimal performance.
  • Users experience a high rate of false positives with QRadar EDR, requiring manual investigation and expertise.
  • Users find the high resource usage of IBM QRadar EDR a downside, requiring powerful devices for optimal performance.

What Are Recent G2 Reviews of IBM QRadar EDR?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024