# Best Risk-Based Vulnerability Management Software - Page 3

  *By [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)*

   Risk-based vulnerability management software is used to identify and prioritize vulnerabilities based on customizable risk factors. These tools are more advanced than traditional vulnerability management solutions, as they assist in the prioritization of issues and execution of remedies based on the results of machine learning algorithms.

Companies use risk-based vulnerability management solutions to analyze entire organizations’ IT systems, cloud services, and/or applications and identify priorities. Instead of manually identifying vulnerabilities and remediating them in order of discovery, an organization can automate that process to remediate vulnerabilities impacting critical business components first. From there, they can address issues as the system has ordered by impact and remediation time. Companies can customize these priorities as they see fit by weighing risk factors differently.

Risk-based vulnerability management solutions are primarily used by IT professionals and security staff. These teams will integrate system and application information, outline priorities, and analyze assets. Automation within these tools saves significant time; furthermore, addressing critical vulnerabilities first can significantly reduce the likelihood of security incidents, failover, and data loss.

There is some overlap between risk-based vulnerability management solutions and [security risk analysis software](https://www.g2.com/categories/security-risk-analysis), but there are a few key differences. Security risk analysis tools provide similar capabilities in identifying vulnerabilities and other security risks. But security risk analysis tools, aside from a few outlier products, will not utilize machine learning and automation to assist in the prioritization and execution of vulnerability remediation.

To qualify for inclusion in the Risk-Based Vulnerability Management category, a product must:

- Integrate threat intelligence and contextual data for analysis
- Analyze applications, networks, and cloud services for vulnerabilities
- Utilize risk factors and machine learning to prioritize vulnerabilities




  
## How Many Risk-Based Vulnerability Management Software Products Does G2 Track?
**Total Products under this Category:** 194

### Category Stats (May 2026)
- **Average Rating**: 4.51/5 (↓0.01 vs Apr 2026)
- **New Reviews This Quarter**: 49
- **Buyer Segments**: Enterprise 44% │ Small-Business 30% │ Mid-Market 27%
- **Top Trending Product**: ManageEngine Vulnerability Manager Plus (+0.167)
*Last updated: May 18, 2026*

  
## How Does G2 Rank Risk-Based Vulnerability Management Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 4,500+ Authentic Reviews
- 194+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

  
## Which Risk-Based Vulnerability Management Software Is Best for Your Use Case?

- **Leader:** [Arctic Wolf](https://www.g2.com/products/arctic-wolf/reviews)
- **Highest Performer:** [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)
- **Easiest to Use:** [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)
- **Top Trending:** [Pentera](https://www.g2.com/products/pentera/reviews)
- **Best Free Software:** [Cisco Vulnerability Management (formerly Kenna.VM)](https://www.g2.com/products/cisco-vulnerability-management-formerly-kenna-vm/reviews)

  
---

**Sponsored**

### Upwind

Upwind is the runtime-first cloud security platform that secures your deployments, configurations, and applications by providing real-time visibility from the inside out. We’ve built a unified fabric that maps your environment as it runs - revealing what’s truly at risk, what’s actively happening, and how to respond quickly and effectively. With Upwind, security, dev, and ops teams move faster, stay focused, and fix risks that matter most.



[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=2246&secure%5Bdisplayable_resource_id%5D=2246&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2246&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=1333227&secure%5Bresource_id%5D=2246&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Frisk-based-vulnerability-management%3Fpage%3D4&secure%5Btoken%5D=5a52c0ece704a9c11a4bafc36474f0395e8a6b9151656fae16844e0b60678ea9&secure%5Burl%5D=https%3A%2F%2Fwww.upwind.io&secure%5Burl_type%5D=custom_url)

---

  ## What Are the Top-Rated Risk-Based Vulnerability Management Software Products in 2026?
### 1. [Armis](https://www.g2.com/products/armis/reviews)
  Armis is THE cyber exposure management and security solution designed to help organizations protect their entire attack surface and manage cyber risk exposure in real time. In an era where traditional perimeter defenses are becoming increasingly ineffective, Armis provides a comprehensive approach to cybersecurity that enables organizations to continuously monitor, secure, and manage all critical assets, whether on-premises or in the cloud. Armis' target audience includes a wide range of organizations, from Fortune 100, 200, and 500 companies to national governments and local entities. These organizations face unique challenges in safeguarding their critical infrastructure and sensitive data against evolving cyber threats. Armis is particularly beneficial for industries that rely heavily on connected devices and IoT (Internet of Things) technologies, as it offers visibility and protection across diverse environments. This capability is essential for organizations aiming to maintain operational continuity and protect their reputations in a landscape where cyber incidents can have far-reaching consequences. Key features of Armis include real-time visibility into all connected devices, automated risk assessment, and continuous monitoring of network activity. The platform uses advanced machine learning algorithms to detect anomalies and potential threats, allowing organizations to respond swiftly to emerging risks. Additionally, Armis seamlessly integrates with existing security tools, enhancing security posture without disrupting current workflows. This interoperability is crucial for organizations looking to strengthen their defenses without overhauling their entire security infrastructure. The benefits of using Armis extend beyond mere compliance; they encompass a proactive approach to cybersecurity that empowers organizations to anticipate and mitigate risks before they escalate into significant incidents. By providing a unified view of the attack surface, Armis enables security teams to prioritize their efforts and allocate resources effectively. This strategic focus not only enhances security measures, but also fosters a culture of cybersecurity awareness throughout the organization, ultimately contributing to a more resilient operational framework. In summary, Armis stands out in the cybersecurity landscape by offering a holistic solution that addresses the complexities of modern threats. Its ability to provide real-time insights and automate risk management processes makes it an invaluable tool for organizations striving to protect their critical assets and maintain a secure environment in an increasingly interconnected world.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 13
**How Do G2 Users Rate Armis?**

- **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.3/10)
- **Reporting:** 9.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 8.6/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 7.9/10 (Category avg: 8.8/10)

**Who Is the Company Behind Armis?**

- **Seller:** [Armis Security](https://www.g2.com/sellers/armis-security)
- **Company Website:** https://www.armis.com
- **Year Founded:** 2015
- **HQ Location:** San Francisco, US
- **Twitter:** @ArmisSecurity (2,868 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/17905260 (1,298 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 46% Enterprise, 31% Small-Business


#### What Are Armis's Pros and Cons?

**Pros:**

- Ease of Use (4 reviews)
- Asset Management (3 reviews)
- User Interface (3 reviews)
- Visibility (3 reviews)
- Customer Support (2 reviews)

**Cons:**

- Integration Issues (2 reviews)
- Additional Costs (1 reviews)
- Complex Setup (1 reviews)
- Difficult Setup (1 reviews)
- Excessive Notifications (1 reviews)

### 2. [UncommonX](https://www.g2.com/products/uncommonx/reviews)
  Recently recognized by Crain's as one of Chicago's Most Innovative Companies 2025, UncommonX is an Exposure Management solution designed to help customers achieve comprehensive, real-time visibility across their entire network. This innovative platform uses AI-powered software and managed services to analyze and prioritize network risks and threats, enabling businesses to transition from a reactive incident response approach to a proactive cyber resilience strategy. By integrating seamlessly with hundreds of IT products, regardless of brand, UncommonX provides a holistic view of an organization’s security posture. UncommonX customers include Healthcare, Hospitality, Energy & Utilities, Financial Services, Manufacturing, Pharmaceuticals & Life Sciences, Professional Services & Private Equity Firms, SLED (State, Local, and Education), and Technology & SaaS companies. These organizations face unique challenges in managing their network security, and UncommonX addresses these needs by delivering actionable insights that empower decision-makers to mitigate risks effectively. The platform's ability to provide real-time visibility allows organizations to identify vulnerabilities before they can be exploited. Key features of UncommonX include its agentless discovery, and its advanced AI technology that enhances device profiling and anomaly detection. This combination allows for proactive risk prevention, ensuring that organizations can stay ahead of potential threats. The platform’s integration capabilities mean that it can work with existing IT infrastructures, making it a versatile solution for organizations looking to enhance their security measures without overhauling their current systems. Additionally, UncommonX's membership in the NVIDIA Inception Program underscores its commitment to leveraging cutting-edge technology to transform the landscape of network security. This partnership not only enhances the platform's capabilities but also positions UncommonX as a leader in the Exposure Management space. By providing organizations with the technology and services they need to see every vulnerability and secure every asset, UncommonX helps businesses maintain a strong security posture in an increasingly complex threat environment. Headquartered in Chicago, UncommonX is dedicated to equipping organizations with the insights necessary to navigate the evolving landscape of cyber risks. With its focus on real-time visibility and proactive risk management, UncommonX stands out as a crucial partner for organizations seeking to enhance their cybersecurity strategies. For more information, visit www.uncommonx.com.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 11
**How Do G2 Users Rate UncommonX?**

- **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.3/10)
- **Reporting:** 9.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 9.7/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.4/10 (Category avg: 8.8/10)

**Who Is the Company Behind UncommonX?**

- **Seller:** [UncommonX](https://www.g2.com/sellers/uncommonx)
- **Company Website:** https://www.uncommonx.com
- **Year Founded:** 2012
- **HQ Location:** Chicago, US
- **LinkedIn® Page:** https://www.linkedin.com/company/uncommonxinc (26 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 64% Mid-Market, 18% Enterprise


#### What Are UncommonX's Pros and Cons?

**Pros:**

- Compliance Management (4 reviews)
- Customer Support (4 reviews)
- Support Availability (4 reviews)
- Team Quality (4 reviews)
- Threat Detection (4 reviews)

**Cons:**

- Communication Issues (1 reviews)
- Reporting Issues (1 reviews)
- Slow Performance (1 reviews)

### 3. [DeCYFIR by CYFIRMA](https://www.g2.com/products/decyfir-by-cyfirma/reviews)
  DeCYFIR is an AI-powered preemptive External Threat Landscape Management platform engineered to help organizations predict and prevent cyberattacks before they occur. Adopting a hacker's perspective, it delivers early warnings, prioritized insights, and actionable intelligence across the full external threat landscape. Built on a proprietary 9-pillar architecture — spanning Attack Surface Discovery & Intelligence, Vulnerability Intelligence & Threat Prioritization, Brand & Online Exposure Management, Digital Risk & Identity Protection, Third Party Risk Management, Situational Awareness & Emerging Threats, Predictive Threat Intelligence, Threat Adaptive Awareness & Training, and Sector Tailored Deception Intelligence. DeCYFIR correlates signals across all pillars to cut through noise, surface what is truly critical, and empower security teams to stay decisively ahead of emerging threats.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 35
**How Do G2 Users Rate DeCYFIR by CYFIRMA?**

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 10.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind DeCYFIR by CYFIRMA?**

- **Seller:** [CYFIRMA](https://www.g2.com/sellers/cyfirma)
- **Year Founded:** 2017
- **HQ Location:** Singapore, SG
- **Twitter:** @cyfirma (1,005 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/cyfirma/ (124 employees on LinkedIn®)
- **Phone:** marketing@cyfirma.com

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services, Computer & Network Security
  - **Company Size:** 43% Mid-Market, 31% Small-Business


#### What Are DeCYFIR by CYFIRMA's Pros and Cons?

**Pros:**

- Threat Detection (12 reviews)
- Threat Intelligence (10 reviews)
- Cybersecurity (9 reviews)
- Features (7 reviews)
- Security (7 reviews)

**Cons:**

- Not User-Friendly (4 reviews)
- Complexity (3 reviews)
- Learning Curve (3 reviews)
- Limited Customization (3 reviews)
- Complex Setup (2 reviews)

### 4. [Ethiack](https://www.g2.com/products/ethiack/reviews)
  Ethiack - Autonomous Ethical Hacking. Our platform continuously tests your entire attack surface using a powerful combination of AI pentesting agents and human ethical hackers. While traditional pentests give you a snapshot, Ethiack runs 24/7—uncovering unknown vulnerabilities and validating real-world risks across external and internal assets.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 9
**How Do G2 Users Rate Ethiack?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 8.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 8.3/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.8/10 (Category avg: 8.8/10)

**Who Is the Company Behind Ethiack?**

- **Seller:** [Ethiack](https://www.g2.com/sellers/ethiack)
- **Year Founded:** 2022
- **HQ Location:** Coimbra, Coimbra, Portugal
- **LinkedIn® Page:** https://www.linkedin.com/company/ethiack (52 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 44% Enterprise, 33% Small-Business


#### What Are Ethiack's Pros and Cons?

**Pros:**

- Customer Support (4 reviews)
- Cybersecurity (3 reviews)
- Innovation (3 reviews)
- Automation (2 reviews)
- Real-time Monitoring (2 reviews)

**Cons:**

- Asset Management (2 reviews)
- Expensive (1 reviews)
- Lack of Automation (1 reviews)
- Limited Features (1 reviews)
- Missing Features (1 reviews)

### 5. [TruOps](https://www.g2.com/products/truops-truops/reviews)
  Created from three decades of expertise in security, risk, and compliance assurance, the TruOps governance, risk, and compliance platform transforms siloed risk functions into a comprehensive Risk Operations Center. Designed to intelligently integrate and automate critical GRC functions, TruOps simplifies the security, risk, and compliance processes organizations need to manage and control risk effectively and provides the "Mother" of all single-view dashboards. Capitalize on quick, accurate, risk-based decision-making backed by clear visibility and instant insight into your current risk and compliance postures. Drive efficiency and cost savings by embedding automated workflows across your organization, fostering a resilient governance, risk, and compliance (GRC) structure. TruOps delivers: ENHANCED VISIBILITY WITH AI Clark is an intelligent assistant that delivers instant insight and clear visibility into your compliance gaps, security, and third-party risk to a single pane of glass. MULTI-TENANT FUNCTIONALITY Multi-tenant functionality allows for consolidated risk management oversight for multiple locations or divisions of business. CUSTOMIZED REPORTING & DASHBOARDS Pose a question to Clark in plain, natural English and instantly receive a customized report of your risk and recommendations. REGULATION READINESS Identify, assess, and mitigate compliance and regulatory risk. IMMEDIATE VALUE Reduce costs and experience swift ROI through automation, collaboration, and simplified processes. CONTINUOUS CONTROLS MONITORING Real-Time Data empowers your security and compliance teams to manage and control your organization’s risk.


  **Average Rating:** 4.4/5.0
  **Total Reviews:** 17
**How Do G2 Users Rate TruOps?**

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.3/10)
- **Reporting:** 6.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 7.7/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 7.7/10 (Category avg: 8.8/10)

**Who Is the Company Behind TruOps?**

- **Seller:** [TruOps](https://www.g2.com/sellers/truops)
- **HQ Location:** Norwalk, Connecticut
- **LinkedIn® Page:** https://www.linkedin.com/company/truops-cyber-risk-management/ (10 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 47% Enterprise, 47% Mid-Market


#### What Are TruOps's Pros and Cons?

**Pros:**

- Customer Support (10 reviews)
- Ease of Use (8 reviews)
- Customizability (7 reviews)
- Customization (6 reviews)
- Integrations (5 reviews)

**Cons:**

- Complex Setup (3 reviews)
- Difficult Learning (3 reviews)
- Inadequate Reporting (3 reviews)
- Limited Reporting (3 reviews)
- Not Intuitive (3 reviews)

### 6. [Pathlock](https://www.g2.com/products/pathlock/reviews)
  A complete platform to automate the most challenging aspects of access governance. Pathlock does this by focusing on the areas which offer the most impact when it comes to efficiency gains and cost savings: \*Access Risk Analysis [Automating the reporting and mitigation of SoD and Critical Access Risks across the business and IT] \*Compliant Provisioning [Automating the process of role and user provisioning to ensure compliance with business and regulatory requirements] \*Access Certification [Automating user access reviews to continually refine entitlement assignments and reduce risk] \*Emergency Access Management (PAM) [Managing temporary granting of privileged access with a domain specific workflow] \*Role Design [Designing compliant roles compatible across all your business applications]


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 12
**How Do G2 Users Rate Pathlock?**

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.3/10)
- **Reporting:** 6.7/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 4.4/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 5.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind Pathlock?**

- **Seller:** [Pathlock](https://www.g2.com/sellers/pathlock)
- **Company Website:** https://www.pathlock.com
- **Year Founded:** 2004
- **HQ Location:** Dallas, US
- **Twitter:** @pathlock (310 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/pathlock (618 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 50% Enterprise, 25% Mid-Market


#### What Are Pathlock's Pros and Cons?

**Pros:**

- Accessibility (1 reviews)
- Comprehensive View (1 reviews)
- Customer Support (1 reviews)
- Device Management (1 reviews)
- Documentation (1 reviews)

**Cons:**

- Confusing Interface (1 reviews)
- Confusing Terminology (1 reviews)
- Documentation (1 reviews)
- Error Handling (1 reviews)
- Insufficient Information (1 reviews)

### 7. [ThreatConnect TI Ops](https://www.g2.com/products/threatconnect-ti-ops/reviews)
  TI Ops is the threat intelligence platform built for operations, not just centralization. It ingests hundreds of internal and external sources, enriches them with AI, and aligns them to your intelligence requirements and MITRE ATT&CK gaps. Analysts can instantly operationalize insights across the SOC, IR, hunt, and vulnerability teams — no swivel-chairing required. When combined with Polarity and Risk Quantifier, TI Ops helps teams act on intelligence faster and focus on the threats that truly matter to the business.


  **Average Rating:** 4.6/5.0
  **Total Reviews:** 14
**How Do G2 Users Rate ThreatConnect TI Ops?**

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.3/10)
- **Reporting:** 6.7/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 8.3/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.3/10 (Category avg: 8.8/10)

**Who Is the Company Behind ThreatConnect TI Ops?**

- **Seller:** [ThreatConnect](https://www.g2.com/sellers/threatconnect)
- **Year Founded:** 2011
- **HQ Location:** Arlington, US
- **Twitter:** @ThreatConnect (14,156 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/threatconnect-inc/about/ (155 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Information Technology and Services
  - **Company Size:** 57% Enterprise, 43% Mid-Market


#### What Are ThreatConnect TI Ops's Pros and Cons?

**Pros:**

- Features (5 reviews)
- Threat Detection (5 reviews)
- Ease of Use (4 reviews)
- Automation (3 reviews)
- Implementation Ease (3 reviews)

**Cons:**

- UX Improvement (2 reviews)
- Additional Costs (1 reviews)
- API Limitations (1 reviews)
- Difficult Learning Curve (1 reviews)
- Difficult Setup (1 reviews)

### 8. [8iSoft YODA](https://www.g2.com/products/8isoft-yoda/reviews)
  8iSoft YODA, the ultimate AI-powered vulnerability remediation platform for tech professionals. YODA provides a comprehensive solution to the challenges of vulnerability management, significantly reducing the time needed for vulnerability detection and remediation from months to just 7 days. This is achieved through automation of tasks such as scanning and continuous monitoring, complemented by detailed step-by-step solutions for each vulnerability. The intuitive dashboard offers a clear overview of vulnerabilities, asset health scores, and industry benchmarks, making progress monitoring effortless. YODA's unique feature set includes robust asset management, in-depth vulnerability information, and easily accessible solutions, setting it apart from any other scanner products. It also offers compliance-oriented reports and streamlines IT operations and procurement processes. With YODA, your IT team's efficiency soars, and procurement becomes hassle-free. YODA's unwavering commitment to quality and continuous improvement ensures ever-evolving solutions. It's not just about managing vulnerabilities; it's about achieving faster results, reducing costs, and enhancing the productivity of your IT team. Take action now and experience the transformative power of YODA.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 5
**How Do G2 Users Rate 8iSoft YODA?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 9.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 9.7/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.7/10 (Category avg: 8.8/10)

**Who Is the Company Behind 8iSoft YODA?**

- **Seller:** [8iSoft](https://www.g2.com/sellers/8isoft)
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **LinkedIn® Page:** https://www.linkedin.com/company/8isoftcorp/ (9 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 100% Small-Business


### 9. [Cytix](https://www.g2.com/products/cytix/reviews)
  Cytix continuously tests for vulnerability so that no issues go undetected and all results are validated, enriched and contextualised".Integration into your technologies and identifying changes that affect your organisation's security. These changes trigger a combination of human-led & platform-driven testing which is used to identify vulnerabilities. These vulnerabilities are then reported, via the Cytix portal, directly to your engineering teams, with unlimited support to treatment.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 11
**How Do G2 Users Rate Cytix?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 9.6/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.6/10 (Category avg: 8.8/10)

**Who Is the Company Behind Cytix?**

- **Seller:** [Cytix](https://www.g2.com/sellers/cytix)
- **Year Founded:** 2022
- **HQ Location:** Manchester
- **LinkedIn® Page:** https://www.linkedin.com/company/cytix/about/ (15 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 55% Small-Business, 36% Mid-Market


#### What Are Cytix's Pros and Cons?

**Pros:**

- Automation (3 reviews)
- Automated Testing (2 reviews)
- Clear Interface (2 reviews)
- Visibility (2 reviews)
- Customer Support (1 reviews)

**Cons:**

- Confusing Interface (1 reviews)
- Difficult Learning (1 reviews)
- Expensive (1 reviews)
- False Positives (1 reviews)
- Limited Customization (1 reviews)

### 10. [Endor Labs](https://www.g2.com/products/endor-labs/reviews)
  Endor Labs helps you build and ship secure software fast, whether it's written by humans and AI. While conventional code scanning tools drown teams in false positives, Endor Labs zeroes in on real risks, empowering developers without slowing them down. Trusted by OpenAI, Snowflake, Peloton, Robinhood, Dropbox, Rubrik, and more, Endor Labs is transforming AppSec. • 92% less alerts: Unify code scanning (SAST, SCA, container, secrets, malware, AI models) and automate security code reviews with AI. Pinpoint real vulnerabilities with function-level reachability, filtering out unreachable risks and letting developers fix what matters as they code. • 6X faster fixes: Skip the guesswork. Endor Labs guides developers towards safe OSS upgrades, and backports fixes for hard-to-update libraries. • Guardrails for AI coding assistants: Endor Labs natively integrates into AI coding assistants to help them produce code securely by default. Additionally, Endor Labs has built multiple agents to review the AI and human generated code for architecture and business-logic issues. • Compliance, streamlined: FedRAMP, PCI, NIST, and SLSA compliance is simplified with artifact signing, SBOM, VEX, and more—accelerating your path to secure, compliant code. Learn more at: www.endorlabs.com/demo-request


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 9
**How Do G2 Users Rate Endor Labs?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 6.7/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.3/10 (Category avg: 8.8/10)

**Who Is the Company Behind Endor Labs?**

- **Seller:** [Endor Labs](https://www.g2.com/sellers/endor-labs)
- **Company Website:** https://www.endorlabs.com/
- **Year Founded:** 2021
- **HQ Location:** Palo Alto, California, United States
- **Twitter:** @EndorLabs (573 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/endorlabs (200 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 78% Mid-Market, 22% Enterprise


#### What Are Endor Labs's Pros and Cons?

**Pros:**

- Features (5 reviews)
- Ease of Use (4 reviews)
- Accuracy of Findings (3 reviews)
- Customer Support (3 reviews)
- Integration Support (3 reviews)

**Cons:**

- UX Improvement (3 reviews)
- API Limitations (1 reviews)
- Difficult Setup (1 reviews)
- Integration Issues (1 reviews)
- Missing Features (1 reviews)

### 11. [Forescout Platform](https://www.g2.com/products/forescout-platform/reviews)
  Based in Silicon Valley, Forescout is your zero-trust partner. With 1000s of customers and decades of cyber leadership including threat research, Forescout has your back. Your journey to Universal Zero Trust Network Access starts with the Forescout 4D platform™: the only platform for UZTNA powered by agentic AI. Continuously identify, protect, and ensure the compliance of all assets – IT, IoT, IoMT and OT – regardless of location, automatically. Deliver cloud-native network security intelligence boosted by agentic workflows from the pioneer of traditional NAC. Shift from reactive firefighting to proactive risk management. Get continuous visibility into what’s actually exposed across every connected asset — managed or not, physical or virtual — then take control and automate compliance. The result? Priorities managed. Peace of mind.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 15
**How Do G2 Users Rate Forescout Platform?**

- **Has the product been a good partner in doing business?:** 8.6/10 (Category avg: 9.3/10)

**Who Is the Company Behind Forescout Platform?**

- **Seller:** [Forescout Technologies](https://www.g2.com/sellers/forescout-technologies)
- **Year Founded:** 2000
- **HQ Location:** San Jose, CA
- **Twitter:** @ForeScout (23,111 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/forescout-technologies (1,215 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Computer & Network Security
  - **Company Size:** 53% Enterprise, 29% Mid-Market


#### What Are Forescout Platform's Pros and Cons?

**Pros:**

- Security (4 reviews)
- Internet Security (3 reviews)
- IP Addressing (3 reviews)
- Monitoring (3 reviews)
- Customization (2 reviews)

**Cons:**

- Complex Implementation (2 reviews)
- Dependency Issues (2 reviews)
- Integration Issues (2 reviews)
- Performance Issues (2 reviews)
- Poor Customer Support (2 reviews)

### 12. [Hadrian](https://www.g2.com/products/hadrian/reviews)
  Hadrian is an agentless SaaS product that continuously maps exposed assets, discovers risks, and prioritizes remediation so that security teams can harden their external attack surfaces. Using passive data sources, active scanning techniques, and machine learning models, Hadrian identifies digital assets and complex attack paths that security teams are unaware of. It incorporates how misconfigurations, exposed secrets, permissions, and vulnerabilities impact an organization’s security posture. Context-aware testing uses only relevant modules and secrets in attack paths. This combination of context and risk discovery allows Hadrian to prioritize the same targets attackers will exploit. All of this is presented in an online dashboard to help security teams focus on what matters and make their attack surface more secure.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 4
**How Do G2 Users Rate Hadrian?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 9.2/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.4/10 (Category avg: 8.8/10)

**Who Is the Company Behind Hadrian?**

- **Seller:** [Hadrian](https://www.g2.com/sellers/hadrian)
- **Year Founded:** 2021
- **HQ Location:** Amsterdam, NL
- **LinkedIn® Page:** https://www.linkedin.com/company/hadriansecurity (110 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 75% Enterprise, 25% Mid-Market


### 13. [Qomplx](https://www.g2.com/products/qomplx/reviews)
  QOMPLX is a leading provider of identity-focused cybersecurity software solutions. Our technology continually monitors user activity across all points of access, including cloud and on-premise systems, to prevent harm to your network, detect suspicious behavior and anomalies, and provide contextualized recommendations to improve your overall cybersecurity. The QOMPLX data platform provides real-time alerts and visualizations for rapid response and to allow for a proactive stance against malicious actors. It also enables the capture and store of identity data for future analysis, allowing organizations to detect and respond to emerging threats in a timely and effective manner. Additionally, our platform provides comprehensive reporting, audit trails, and a secure environment for identity management. With QOMPLX solutions, organizations can protect their digital environment from identity-related threats and ensure business continuity by utilizing: • Threat Detection and Response (ITDR) Prevent, detect and respond to identity threats in real-time • Managed Solutions Cost effective managed cybersecurity including Managed ITDR, Managed Extended Detection and Response (XDR), and Managed Detection and Response (MDR) • Attack Surface Monitoring (ASM) Discover cyber vulnerabilities and the size of your attack surface


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 11
**How Do G2 Users Rate Qomplx?**

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.3/10)
- **Reporting:** 8.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 9.2/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.2/10 (Category avg: 8.8/10)

**Who Is the Company Behind Qomplx?**

- **Seller:** [QOMPLX](https://www.g2.com/sellers/qomplx)
- **Year Founded:** 2015
- **HQ Location:** Tysons, Virginia
- **Twitter:** @QOMPLX (570 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/qomplx/about (24 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 55% Mid-Market, 27% Enterprise


### 14. [Reposify](https://www.g2.com/products/reposify/reviews)
  Reposify is an External Attack Surface Management platform that delivers autonomous, 24/7 discovery of exposed internet assets and shadow IT risks so they can be eliminated before attackers exploit them. No installation is required.


  **Average Rating:** 4.5/5.0
  **Total Reviews:** 4
**How Do G2 Users Rate Reposify?**

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.3/10)
- **Reporting:** 8.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 6.7/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.3/10 (Category avg: 8.8/10)

**Who Is the Company Behind Reposify?**

- **Seller:** [Reposify](https://www.g2.com/sellers/reposify)
- **Year Founded:** 2011
- **HQ Location:** Remote, Oregon, United States
- **Twitter:** @reposify
- **LinkedIn® Page:** https://www.linkedin.com/company/crowdstrike (10,347 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 50% Small-Business, 25% Mid-Market


#### What Are Reposify's Pros and Cons?

**Pros:**

- Ease of Use (1 reviews)
- User Interface (1 reviews)

**Cons:**

- Expensive (1 reviews)

### 15. [Rivial Data Security](https://www.g2.com/products/rivial-data-security/reviews)
  Security leaders leverage Rivial's Data Security platform to accurately measure risk, automate compliance and easily manage their security program. Rivial leverages Monte Carlo analysis, Cyber Risk Quantification, and real-world breach data to predict potential financial losses. Easily Quantify the Financial Impact of IT Risk, Compliance, and Security Decisions


  **Average Rating:** 5.0/5.0
  **Total Reviews:** 10
**How Do G2 Users Rate Rivial Data Security?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 10.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind Rivial Data Security?**

- **Seller:** [Rivial Data Security](https://www.g2.com/sellers/rivial-data-security)
- **Year Founded:** 2010
- **HQ Location:** West Lafayette, Indiana
- **LinkedIn® Page:** https://www.linkedin.com/company/rivial-data-security/ (27 employees on LinkedIn®)

**Who Uses This Product?**
  - **Top Industries:** Financial Services
  - **Company Size:** 90% Mid-Market, 10% Small-Business


#### What Are Rivial Data Security's Pros and Cons?

**Pros:**

- Helpful (4 reviews)
- Communication (3 reviews)
- Customer Support (3 reviews)
- Document Management (3 reviews)
- Security (3 reviews)

**Cons:**

- Learning Curve (2 reviews)
- Learning Difficulty (2 reviews)
- Complexity (1 reviews)
- Confusing Interface (1 reviews)
- Confusing Terminology (1 reviews)

### 16. [ArmorCode Agentic AI Platform](https://www.g2.com/products/armorcode-agentic-ai-platform/reviews)
  ArmorCode helps enterprises manage security risk and governance across today's heterogeneous technology environments. The ArmorCode Agentic AI Platform gives security teams a system of action – moving from fragmented signals to owned, policy-driven, auditable decisions. Its unified exposure management capabilities deliver visibility, insight, and control across four solutions: Application Security Posture Management, Vulnerability Management, Software Supply Chain Security, and AI Exposure Management. Processing over 200 billion findings a year across hundreds of native integrations, ArmorCode unifies, prioritizes, and drives remediation across applications, cloud, code, infrastructure, and AI. Powered by Anya, the industry's first agentic AI framework for enterprise security, ArmorCode is trusted by global enterprises to reduce exposure and adopt AI and modern software practices with confidence – without replacing existing tools or forcing vendor consolidation.


  **Average Rating:** 4.0/5.0
  **Total Reviews:** 3
**How Do G2 Users Rate ArmorCode Agentic AI Platform?**

- **Has the product been a good partner in doing business?:** 6.7/10 (Category avg: 9.3/10)
- **Reporting:** 8.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 8.3/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.9/10 (Category avg: 8.8/10)

**Who Is the Company Behind ArmorCode Agentic AI Platform?**

- **Seller:** [ArmorCode](https://www.g2.com/sellers/armorcode)
- **Year Founded:** 2020
- **HQ Location:** Palo Alto, California, United States
- **LinkedIn® Page:** https://www.linkedin.com/company/armorcode (209 employees on LinkedIn®)
- **Ownership:** Dana Torgersen

**Who Uses This Product?**
  - **Company Size:** 67% Mid-Market, 33% Small-Business


#### What Are ArmorCode Agentic AI Platform's Pros and Cons?

**Pros:**

- Cybersecurity (2 reviews)
- Security (2 reviews)
- Vulnerability Identification (2 reviews)
- Automation (1 reviews)
- Centralization (1 reviews)

**Cons:**

- Needs Improvement (2 reviews)
- Inadequate Reporting (1 reviews)
- Information Management (1 reviews)
- Information Overload (1 reviews)
- Limited Customization (1 reviews)

### 17. [Bacon Unlimited](https://www.g2.com/products/bacon-unlimited/reviews)
  Bacon Unlimited is a cross-platform endpoint management and vulnerability remediation platform designed to help IT teams manage vulnerabilities and system updates. Built for organizations that are tired of manual patching, repetitive admin work, and limited visibility, Bacon Unlimited goes beyond just identifying security problems—it helps you fix them instantly. With real-time remediation, automation, and monitoring, Bacon Unlimited simplifies patching, software updates, and policy enforcement across Windows, macOS, and Linux devices. The platform automatically remediates vulnerabilities, applying OS patches, software updates, and configuration changes to ensure that security gaps are closed quickly. This proactive approach allows organizations to address vulnerabilities in real-time and prevents potential breaches before they disrupt business operations. Unlike traditional tools that require manual intervention or delayed updates, Bacon Unlimited continuously monitors endpoints and remediates issues automatically, eliminating the need for constant human oversight. Businesses gain full visibility into their endpoint security and operations through an intuitive dashboard, helping IT teams manage devices more efficiently and with less overhead. With Bacon Unlimited, organizations can: • Remediate vulnerabilities instantly, preventing security risks from impacting operations. • Automate patching and configuration management, reducing the need for manual intervention and the risk of human error. • Manage endpoints across multiple operating systems, ensuring consistency and security across all devices. This unified platform not only simplifies IT operations but also improves compliance and security by ensuring that systems remain up-to-date and secure. Bacon Unlimited is designed to save time, reduce manual work, and enhance overall IT productivity, making it the ideal solution for modern IT environments.


  **Average Rating:** 5.0/5.0
  **Total Reviews:** 3
**How Do G2 Users Rate Bacon Unlimited?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)

**Who Is the Company Behind Bacon Unlimited?**

- **Seller:** [Bacon Unlimited](https://www.g2.com/sellers/bacon-unlimited)
- **Year Founded:** 2019
- **HQ Location:** Wilmington, US
- **LinkedIn® Page:** https://www.linkedin.com/company/bacon-unlimited (33 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 67% Small-Business, 33% Enterprise


#### What Are Bacon Unlimited's Pros and Cons?

**Pros:**

- Endpoint Management (3 reviews)
- Security (3 reviews)
- Cross-Platform Compatibility (2 reviews)
- Centralized Management (1 reviews)
- Customer Support (1 reviews)

**Cons:**

- Difficult Learning Curve (1 reviews)
- Difficulty in Use (1 reviews)
- Learning Curve (1 reviews)
- Missing Features (1 reviews)
- Poor Reporting (1 reviews)

### 18. [Escape](https://www.g2.com/products/escape/reviews)
  Escape is the only DAST that works with your modern stack and tests business logic instead of missing headers Escape helps teams secure modern applications: • Document all your APIs in minutes and enrich your API inventory with seamless integrations • Discover vulnerabilities even at a business logic level with our proprietary AI-powered algorithm • Escape fits right into your modern stack, supporting modern web frameworks, APIs, CI/CD, and Wiz without hassle. • Ensure comprehensive coverage of GraphQL-specific vulnerabilities


  **Average Rating:** 5.0/5.0
  **Total Reviews:** 9
**How Do G2 Users Rate Escape?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 8.9/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 6.7/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.9/10 (Category avg: 8.8/10)

**Who Is the Company Behind Escape?**

- **Seller:** [Escape](https://www.g2.com/sellers/escape)
- **Year Founded:** 2020
- **HQ Location:** Paris, France
- **Twitter:** @escapetechHQ (346 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/escapetech/ (56 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 56% Small-Business, 33% Mid-Market


#### What Are Escape's Pros and Cons?

**Pros:**

- Ease of Use (3 reviews)
- Easy Integrations (2 reviews)
- Scanning Technology (2 reviews)
- Security (2 reviews)
- API Management (1 reviews)

**Cons:**

- Complex Setup (1 reviews)
- Difficult Upgrades (1 reviews)
- Limited Features (1 reviews)
- Missing Features (1 reviews)
- Update Issues (1 reviews)

### 19. [ImmuniWeb AI Platform](https://www.g2.com/products/immuniweb-ai-platform/reviews)
  Attack surface management and Dark Web Monitoring. ImmuniWeb® Discovery leverages OSINT and our award-winning AI technology to illuminate attack surface and Dark Web exposure of a company. The non-intrusive and production-safe discovery is a perfect fit both for continuous self-assessment and vendor risk scoring to prevent supply chain attacks.


  **Average Rating:** 4.7/5.0
  **Total Reviews:** 11
**How Do G2 Users Rate ImmuniWeb AI Platform?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)

**Who Is the Company Behind ImmuniWeb AI Platform?**

- **Seller:** [ImmuniWeb](https://www.g2.com/sellers/immuniweb-8be8a6d5-dde6-41c6-b289-3ad6257f0258)
- **Year Founded:** 2019
- **HQ Location:** Geneva, CH
- **Twitter:** @immuniweb (8,484 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/immuniweb/ (33 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 92% Mid-Market, 8% Small-Business


#### What Are ImmuniWeb AI Platform's Pros and Cons?

**Pros:**

- Vulnerability Detection (4 reviews)
- Customer Support (3 reviews)
- Monitoring (2 reviews)
- Monitoring Efficiency (2 reviews)
- Alert Notifications (1 reviews)

**Cons:**

- Complexity (1 reviews)
- Integration Issues (1 reviews)
- Lack of Integration (1 reviews)
- Limited Features (1 reviews)
- Limited Flexibility (1 reviews)

### 20. [NetSPI](https://www.g2.com/products/netspi-2026-02-04/reviews)
  NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape.


  **Average Rating:** 4.9/5.0
  **Total Reviews:** 13
**How Do G2 Users Rate NetSPI?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 10.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind NetSPI?**

- **Seller:** [NetSPI](https://www.g2.com/sellers/netspi)
- **Company Website:** https://www.netspi.com
- **Year Founded:** 2001
- **HQ Location:** Minneapolis, MN
- **Twitter:** @NetSPI (4,036 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/netspi/ (592 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 46% Enterprise, 38% Mid-Market


#### What Are NetSPI's Pros and Cons?

**Pros:**

- Expertise (4 reviews)
- Team Quality (4 reviews)
- Communication (3 reviews)
- Ease of Use (3 reviews)
- Service Quality (3 reviews)

**Cons:**

- Difficult Navigation (1 reviews)
- False Positives (1 reviews)
- Information Management (1 reviews)
- Lack of Detail (1 reviews)
- Lack of Information (1 reviews)

### 21. [RedHunt Labs ASM Platform](https://www.g2.com/products/redhunt-labs-asm-platform/reviews)
  RedHunt Labs is a 360º Attack Surface Management platform that stands out by offering an unparalleled and all-encompassing solution. Our platform goes beyond traditional host and subdomain discovery, extending its reach to encompass a vast array of assets, including third-party SaaS clouds, Docker images, GitHub repositories, Postman collections, and more. With RedHunt Labs ASM Platform, an organization can - continuously track their exposure on the internet - keep an eye on External Supply Chain risks - manage vendor and subsidiary risk - find security issues before threat actors do.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 6
**How Do G2 Users Rate RedHunt Labs ASM Platform?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 9.2/10 (Category avg: 8.8/10)

**Who Is the Company Behind RedHunt Labs ASM Platform?**

- **Seller:** [RedHunt Labs](https://www.g2.com/sellers/redhunt-labs)
- **Year Founded:** 2019
- **HQ Location:** London, GB
- **Twitter:** @RedHuntLabs (3,631 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/redhunt-labs/ (35 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 67% Small-Business, 33% Enterprise


#### What Are RedHunt Labs ASM Platform's Pros and Cons?

**Pros:**

- Risk Management (2 reviews)
- Visibility (2 reviews)
- Vulnerability Identification (2 reviews)
- Actionable Intelligence (1 reviews)
- Alert Notifications (1 reviews)

**Cons:**

- Dashboard Issues (1 reviews)
- Inefficient Alert System (1 reviews)
- Integration Issues (1 reviews)
- Lack of Detail (1 reviews)
- Poor Usability (1 reviews)

### 22. [Senteon System Hardening](https://www.g2.com/products/senteon-system-hardening/reviews)
  Senteon is a game-changer in the cybersecurity landscape, designed specifically to meet the needs of enterprises and MSPs/MSSPs. Our platform takes the complexity out of hardening workstations, servers, and browsers, automating the process to ensure the highest security standards in minutes. This comprehensive overview aims to provide a deep dive into what makes Senteon a critical asset for your security posture, with a focus on technology, education, and strategic partnerships. Advanced Automated Hardening Automated CIS Benchmark Compliance Senteon automatically aligns your systems with the latest CIS Benchmarks. This automation removes the manual burden of configuration, reducing human error and ensuring that your security measures are always up-to-date. Registry-Level Security Changes Unlike traditional methods that depend on Intune, Group Policy, or PowerShell, Senteon operates directly at the registry level. This ensures that security policies are applied reliably, minimizing the risk of configuration drift and maximizing effectiveness. Learning Mode for Non-Disruptive Hardening Our innovative learning mode assesses the impact of security settings before applying them. This feature allows you to implement security measures seamlessly, maintaining business continuity while enhancing your security posture. Real-Time Monitoring and Enforcement Senteon continuously monitors your endpoints, enforcing security settings in real-time. This proactive approach prevents configuration drift and keeps your systems secure without constant manual intervention. Comprehensive Compliance and Reporting Compliance Across Multiple Standards Senteon generates detailed compliance reports, aligning with various regulatory standards such as NIST 800-53, NIST 800-171, CMMC, HIPAA, PCI-DSS, SOC2, and more. These reports simplify audits, providing clear evidence of your security measures and ensuring you meet regulatory requirements with ease. Detailed Change Tracking and Audit Trails Our platform logs all security changes, offering a transparent record for audits and compliance reviews. This detailed tracking helps maintain a robust security posture and demonstrates your commitment to security and compliance. Direct Integration with Win32 APIs Senteon integrates directly with Win32 APIs, allowing for single-click deployments and consistent configuration updates. This ensures near-perfect execution and simplifies the management of security settings across all endpoints. Strategic Education and Partnerships Weekly Webinar Series with CIS In partnership with the Center for Internet Security (CIS), Senteon hosts a weekly webinar series. These sessions cover practical applications of CIS Benchmarks, security best practices, and regulatory compliance, providing valuable education to help you stay informed and prepared. Global Reach with Strategic Partnerships Senteon has a global presence, with distributors in the EU, UK, and APAC regions. Our strategic partnerships with leading organizations, including CIS, enhance our capabilities and provide additional resources for our clients. Expert Support and Training Benefit from Senteon’s expert support and training programs, designed to help you maximize your security investment. Our team is available to assist with onboarding, troubleshooting, and ongoing education, ensuring you have the knowledge and resources to maintain a strong security posture. Future-Ready Security Measures Continuous Improvement with Regular Updates Senteon is committed to continuous improvement, regularly updating our platform to incorporate the latest security best practices and benchmarks. This ensures your security measures remain current and effective against evolving threats. Professional Services for Enhanced Security Access tailored professional services to further enhance your security measures. Senteon offers compliance certification assistance, penetration testing, and customized security solutions to help you implement and manage your security policies effectively. ROI and Operational Efficiency Maximizing ROI Senteon delivers significant ROI by automating system hardening and compliance processes, reducing the time and effort required for these critical tasks. This allows your IT team to focus on higher-value projects and reduces the risk of costly security incidents. Standardized Configurations for Efficiency By standardizing configurations across all endpoints, Senteon reduces troubleshooting time and enhances overall operational efficiency. This streamlining of processes not only boosts productivity but also ensures a consistent and secure environment. Senteon is the premier solution for automated endpoint hardening, offering comprehensive security and compliance for enterprises and MSPs/MSSPs. Our platform's advanced features, robust automation capabilities, and commitment to continuous improvement make Senteon the ideal choice for organizations seeking to enhance their security posture and ensure regulatory compliance. Join the many businesses that trust Senteon to safeguard their digital assets and experience the future of cybersecurity today.


  **Average Rating:** 4.9/5.0
  **Total Reviews:** 9
**How Do G2 Users Rate Senteon System Hardening?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Risk-Prioritization:** 10.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind Senteon System Hardening?**

- **Seller:** [Senteon](https://www.g2.com/sellers/senteon)
- **Year Founded:** 2019
- **HQ Location:** Marietta, US
- **LinkedIn® Page:** https://www.linkedin.com/company/20314479 (19 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 89% Small-Business, 11% Mid-Market


#### What Are Senteon System Hardening's Pros and Cons?

**Pros:**

- Automation (1 reviews)
- Compliance Management (1 reviews)
- Dashboard Design (1 reviews)
- Integration Capabilities (1 reviews)
- Policy Management (1 reviews)

**Cons:**

- API Limitations (1 reviews)
- Lack of Automation (1 reviews)
- Limitations (1 reviews)
- Missing Features (1 reviews)

### 23. [Synack](https://www.g2.com/products/synack/reviews)
  Synack is a continuous penetration testing platform that combines agentic AI with a global network of vetted security researchers to uncover real, exploitable vulnerabilities across the entire attack surface. Most organizations test only a fraction of what matters. Synack closes that coverage gap—using AI to scale discovery and human expertise to validate real risk. The platform enables enterprises to move from periodic testing to continuous security validation across web applications, APIs, cloud, and infrastructure—prioritizing findings based on what is actually exploitable, not just detected. Synack supports penetration testing, continuous security testing, vulnerability management, and attack surface management in dynamic, cloud-based, and hybrid environments. Founded by former NSA professionals, Synack supports enterprise and public sector organizations where security, compliance, and risk management are mission-critical.


  **Average Rating:** 4.8/5.0
  **Total Reviews:** 16
**How Do G2 Users Rate Synack?**

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.3/10)
- **Reporting:** 10.0/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 10.0/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 10.0/10 (Category avg: 8.8/10)

**Who Is the Company Behind Synack?**

- **Seller:** [Synack](https://www.g2.com/sellers/synack)
- **Company Website:** https://www.synack.com/
- **Year Founded:** 2013
- **HQ Location:** Redwood City, California, United States
- **Twitter:** @synack (26,749 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/synack-inc-/ (247 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 81% Enterprise, 13% Mid-Market


### 24. [Threadfix](https://www.g2.com/products/threadfix/reviews)
  ThreadFix 3.0 provides a comprehensive view of your risk from applications and their supporting infrastructure. Skip the spreadsheets and PDFs forever.


  **Average Rating:** 3.7/5.0
  **Total Reviews:** 3
**How Do G2 Users Rate Threadfix?**

- **Reporting:** 8.3/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 8.3/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 8.3/10 (Category avg: 8.8/10)

**Who Is the Company Behind Threadfix?**

- **Seller:** [Denim Group](https://www.g2.com/sellers/denim-group)
- **HQ Location:** N/A
- **Twitter:** @denimgroup (1,370 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/25716 (1 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 33% Enterprise, 33% Mid-Market


### 25. [Tromzo](https://www.g2.com/products/tromzo/reviews)
  Tromzo accelerates risk remediation from code to cloud. As modern development teams are deploying code and infrastructure rapidly across many pipelines, security teams are facing significant gaps in visibility of who is deploying what artifacts and where. To keep up with this, most security teams have deployed a myriad of security scanning tools that report issues at each layer of the stack. While these security tools generate an overwhelming volume of issues, they also lack context and live in separate data silos making them unactionable. This leads to slowing remediation and growing risk. Tromzo solves this challenge by accelerating the remediation of risks at every layer from code to cloud. We do this by building a prioritized risk view of the entire software supply chain with context from code to cloud. This context helps our users understand which few assets are critical to the business, prevent risks from being introduced to those critical assets and automate the remediation lifecycle of the few issues that truly matter.


  **Average Rating:** 3.3/5.0
  **Total Reviews:** 3
**How Do G2 Users Rate Tromzo?**

- **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.3/10)
- **Reporting:** 6.7/10 (Category avg: 8.8/10)
- **Vulnerability Intelligence:** 5.8/10 (Category avg: 8.7/10)
- **Risk-Prioritization:** 4.2/10 (Category avg: 8.8/10)

**Who Is the Company Behind Tromzo?**

- **Seller:** [Tromzo](https://www.g2.com/sellers/tromzo)
- **Year Founded:** 2021
- **HQ Location:** Mountain View, US
- **Twitter:** @TromzoSecurity (127 Twitter followers)
- **LinkedIn® Page:** https://www.linkedin.com/company/tromzo (16 employees on LinkedIn®)

**Who Uses This Product?**
  - **Company Size:** 100% Mid-Market



    ## What Is Risk-Based Vulnerability Management Software?
  [Vulnerability Management Software](https://www.g2.com/categories/vulnerability-management)
  ## What Software Categories Are Similar to Risk-Based Vulnerability Management Software?
    - [Threat Intelligence Software](https://www.g2.com/categories/threat-intelligence)
    - [Vulnerability Scanner Software](https://www.g2.com/categories/vulnerability-scanner)
    - [Penetration Testing Tools](https://www.g2.com/categories/penetration-testing-tools)
    - [Dark Web Monitoring Tools](https://www.g2.com/categories/dark-web-monitoring)
    - [ Attack Surface Management Software](https://www.g2.com/categories/attack-surface-management)
    - [Exposure Management Platforms](https://www.g2.com/categories/exposure-management-platforms)
    - [Digital Risk Protection (DRP) Platforms](https://www.g2.com/categories/digital-risk-protection-drp-platforms)