Best Risk-Based Vulnerability Management Software - Page 5

How Many Risk-Based Vulnerability Management Software Products Does G2 Track?

Total Products under this Category: 222

Category Stats (Nov 2026)

  • Average Rating: 4.5/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: BMC Helix Remediate (+17.94%) - Among all products in this category, BMC Helix Remediate recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Risk-Based Vulnerability Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,200+ Authentic Reviews
  • 222+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Risk-Based Vulnerability Management Software

G2 Grid® for Risk-Based Vulnerability Management Software plotting products by satisfaction and market presence

Highlighted products: Ivanti Autonomous Endpoint Management, Tenable Vulnerability Management, Arctic Wolf, H1 Platform, Pentera, RiskProfiler - External Threat Exposure Management, YesWeHack, and Check Point Exposure Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/risk-based-vulnerability-management/grids.json?focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=arctic-wolf&focus%5B%5D=h1-platform&focus%5B%5D=pentera&focus%5B%5D=riskprofiler-external-threat-exposure-management&focus%5B%5D=yeswehack&focus%5B%5D=check-point-exposure-management)

Tenable OT Security

Tenable OT Security disrupts attack paths and protects industrial and critical infrastructure from cyber threats. From inventory management and asset tracking to threat detection at the device and network level, vulnerability management and configuration control, Tenable’s OT security capabilities provide maximum visibility, security, and control across your entire operations.

Average Rating: 4.1/5.0

Total Reviews: 10

How Do G2 Users Rate Tenable OT Security?

  • Has the product been a good partner in doing business?: 7.2/10 (Category avg: 9.2/10)
  • Reporting: 7.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Tenable OT Security?

  • Seller: Tenable
  • Company Website:
  • HQ Location: Columbia, MD
  • LinkedIn® Page: www.linkedin.com
    2,361 employees on LinkedIn®
  • Ownership: NASDAQ: TENB

Who Uses This Product?

  • Company Size: 60% Large, 20% Small

What Do G2 Reviewers Say About Tenable OT Security?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the effective visibility and practical insights of Tenable OT Security for complex OT environments.
  • Users value the true OT awareness and visibility of Tenable OT Security, enhancing security without disrupting operations.
  • Users value the comprehensive visibility Tenable OT Security provides, enhancing understanding and actionability in complex OT environments.
  • Users value the full visibility into OT assets and timely alerts for quick risk remediation.
  • Users appreciate the detection efficiency of Tenable OT Security, enabling quick risk remediation while maintaining production stability.
Cons
  • Users find limited features in Tenable OT Security, noting that advanced reporting and customization need improvement.
  • Users find the complexity of Tenable OT Security's reporting and asset management limits their overall effectiveness.
  • Users find the pricing high for smaller plants, complicating adoption and value assessment of Tenable OT Security.
  • Users find the asset management features complicated and the process of discovering OT assets tedious.
  • Users find the inadequate reporting and customization options limiting, along with the complex pricing and licensing structure.

What Are Recent G2 Reviews of Tenable OT Security?

Endor Labs

Endor Labs turns application security into a competitive advantage. At the core is AURI, the security harness for agentic development. It helps coding agents write secure code by default, automates PR security reviews, and gives agents deterministic context to fix what matters fast. At the core is our patented code context graph: a continuously updated model of application behavior across code, dependencies, secrets, and containers. The result: 83% fewer blocked PRs, 10x fewer security tickets, and 6x faster remediation at Atlassian, Cursor, Rubrik, and Snowflake.

Average Rating: 4.8/5.0

Total Reviews: 10

How Do G2 Users Rate Endor Labs?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 6.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Endor Labs?

  • Seller: Endor Labs
  • Company Website:
  • Year Founded: 2021
  • HQ Location: Palo Alto, California, United States
  • LinkedIn® Page: www.linkedin.com
    211 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Medium, 30% Large

What Do G2 Reviewers Say About Endor Labs?

AI-generated summary from verified user reviews

Pros
  • Users commend Endor Labs for its powerful reachability analysis and user-friendly UI, enhancing operational efficiency and security management.
  • Users find Endor Labs' interface to be user-friendly, enhancing productivity with seamless integration and easy access to crucial data.
  • Users commend the high accuracy of findings from Endor Labs, enabling better decision-making and risk assessment.
  • Users value the exceptional customer support of Endor Labs for its responsiveness and effective assistance addressing challenges.
  • Users value the integration support from Endor Labs, praising its seamless setup and responsive assistance during implementation.
Cons
  • Users find that the UX improvement needed hampers the overall experience and clarity in functionality.
  • Users feel that API limitations restrict their ability to fully utilize Endor Labs' features through the UI.
  • Users find the difficult setup of Endor Labs somewhat challenging, especially with unclear error messages during project configuration.
  • Users note that integration issues with Jira hinder the overall experience, though improvements are in progress.
  • Users express a need for improved UI/UX features, specifically regarding authentication and branch monitoring capabilities.

What Are Recent G2 Reviews of Endor Labs?

Synack

Synack is a continuous penetration testing platform that combines agentic AI with a global network of vetted security researchers to uncover real, exploitable vulnerabilities across the entire attack surface. Most organizations test only a fraction of what matters. Synack closes that coverage gap—using AI to scale discovery and human expertise to validate real risk. The platform enables enterprises to move from periodic testing to continuous security validation across web applications, APIs, cloud, and infrastructure—prioritizing findings based on what is actually exploitable, not just detected. Synack supports penetration testing, continuous security testing, vulnerability management, and attack surface management in dynamic, cloud-based, and hybrid environments. Founded by former NSA professionals, Synack supports enterprise and public sector organizations where security, compliance, and risk management are mission-critical.

Average Rating: 4.8/5.0

Total Reviews: 21

How Do G2 Users Rate Synack?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Synack?

  • Seller: NetSPI
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Minneapolis, MN
  • LinkedIn® Page: www.linkedin.com
    595 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 71% Large, 14% Medium

What Are Recent G2 Reviews of Synack?

What Are G2 Users Discussing About Synack?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works

ThreatConnect TI Ops

TI Ops is the threat intelligence platform built for operations, not just centralization. It ingests hundreds of internal and external sources, enriches them with AI, and aligns them to your intelligence requirements and MITRE ATT&CK gaps. Analysts can instantly operationalize insights across the SOC, IR, hunt, and vulnerability teams — no swivel-chairing required. When combined with Polarity and Risk Quantifier, TI Ops helps teams act on intelligence faster and focus on the threats that truly matter to the business.

Average Rating: 4.6/5.0

Total Reviews: 14

How Do G2 Users Rate ThreatConnect TI Ops?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Reporting: 6.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind ThreatConnect TI Ops?

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 57% Large, 43% Medium

What Do G2 Reviewers Say About ThreatConnect TI Ops?

AI-generated summary from verified user reviews

Pros
  • Users value the no-code Playbook builder, enabling extensive automation and seamless integration with various tools for threat management.
  • Users value the cross-collaboration and extensive automation capabilities of ThreatConnect TI Ops for improved threat detection.
  • Users find ThreatConnect TI Ops highly user-friendly, with seamless integration and easy implementation enhancing their experience.
  • Users value the automation capabilities of ThreatConnect TI Ops, streamlining processes and improving SOC efficiency significantly.
  • Users commend the ease of implementation of ThreatConnect TI Ops, enhancing their threat management experience effortlessly.
Cons
  • Users feel the UX needs improvement for a smoother investigation flow and enhanced overall interface usability.
  • Users note that additional licensing costs for some features can hinder accessibility for smaller organizations.
  • Users dislike the API limitations that hinder seamless integration with other tools and affect TQL writing.
  • Users find the difficult learning curve of ThreatConnect TI Ops challenging at first, but training reduces frustration.
  • Users find the difficult setup challenging initially, but appreciate the available training resources to ease the process.

What Are Recent G2 Reviews of ThreatConnect TI Ops?

What Are G2 Users Discussing About ThreatConnect TI Ops?

8iSoft YODA

8iSoft YODA, the ultimate AI-powered vulnerability remediation platform for tech professionals. YODA provides a comprehensive solution to the challenges of vulnerability management, significantly reducing the time needed for vulnerability detection and remediation from months to just 7 days. This is achieved through automation of tasks such as scanning and continuous monitoring, complemented by detailed step-by-step solutions for each vulnerability. The intuitive dashboard offers a clear overview of vulnerabilities, asset health scores, and industry benchmarks, making progress monitoring effortless. YODA's unique feature set includes robust asset management, in-depth vulnerability information, and easily accessible solutions, setting it apart from any other scanner products. It also offers compliance-oriented reports and streamlines IT operations and procurement processes. With YODA, your IT team's efficiency soars, and procurement becomes hassle-free. YODA's unwavering commitment to quality and continuous improvement ensures ever-evolving solutions. It's not just about managing vulnerabilities; it's about achieving faster results, reducing costs, and enhancing the productivity of your IT team. Take action now and experience the transformative power of YODA.

Average Rating: 4.5/5.0

Total Reviews: 5

How Do G2 Users Rate 8iSoft YODA?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 9.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.7/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.7/10 (Category avg: 8.8/10)

Who Is the Company Behind 8iSoft YODA?

  • Seller: 8iSoft
  • Year Founded: 2020
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    9 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of 8iSoft YODA?

Cytix

Cytix is the security decision layer for a world where software development never stops. It reads the context behind every ticket, pull request and release, and helps security, engineering and risk teams decide which software changes carry real risk, what response is proportionate, and what evidence to keep. Cytix already powers KPMG and NCC Group's continuous testing programme, turning software change into security decisions the business can stand behind.

Average Rating: 4.7/5.0

Total Reviews: 11

How Do G2 Users Rate Cytix?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 9.6/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Cytix?

  • Seller: Cytix
  • Year Founded: 2022
  • HQ Location: Manchester
  • LinkedIn® Page: www.linkedin.com
    25 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 55% Small, 36% Medium

What Do G2 Reviewers Say About Cytix?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of Cytix, enabling efficient triaging and seamless integration into development workflows.
  • Users value the automated testing feature of Cytix, appreciating its real-time scanning and AI-driven predictions.
  • Users value the clear interface of Cytix for delivering actionable insights seamlessly integrated into their workflows.
  • Users value the clear and actionable insights from Cytix, enhancing efficiency in identifying and addressing issues.
  • Users rave about the fantastic customer support from Cytix, highlighting their expertise and assistance during and after implementation.
Cons
  • Users find the confusing interface somewhat critical, but appreciate that the product ultimately works well.
  • Users find the difficult learning curve of Cytix challenging due to unfamiliarity with the software.
  • Users find Cytix to be expensive, especially when compared to traditional penetration testing and open-source tools.
  • Users often face false positives with Cytix, causing extra work without real security threats identified.
  • Users find limited customization of Cytix's workflows and templates affects their ability to meet specific needs.

What Are Recent G2 Reviews of Cytix?

Forescout Platform

As AI-driven vulnerability and exploitation accelerate attack velocity to machine speed, Forescout is a foundational cyber defense layer that allows organizations to segment and isolate compromised systems, block lateral movement, and automate response across IT, OT, IoT, and IoMT environments. The Forescout Vistaro™ platform, powered by agentic AI and enhanced with Vedere Labs threat intelligence, delivers a Universal Zero Trust Network Access (UZTNA) architecture that integrates seamlessly with 180+ security and IT products. With Forescout Vistaro, organizations get comprehensive inventory and classification of both managed and unmanaged assets, continuous exposure management, and real-time protection including dynamic network segmentation and automated threat response.

Average Rating: 4.5/5.0

Total Reviews: 16

How Do G2 Users Rate Forescout Platform?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.2/10)

Who Is the Company Behind Forescout Platform?

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 53% Large, 29% Medium

What Do G2 Reviewers Say About Forescout Platform?

AI-generated summary from verified user reviews

Pros
  • Users value the instant discovery and classification of endpoints, enhancing network security and visibility significantly.
  • Users value the instant discovery and classification of endpoints provided by Forescout, enhancing network security and visibility.
  • Users appreciate the instant IP visibility provided by Forescout, enhancing endpoint management and compliance enforcement.
  • Users value the instant discovery and comprehensive visibility provided by Forescout, enhancing network security management significantly.
  • Users appreciate the customization capabilities of Forescout Platform, enhancing security across diverse network environments.
Cons
  • Users find implementation complex due to dependency on various systems and lack of adequate support and documentation.
  • Users face significant dependency issues with Forescout Platform, finding integrations and support overly complex and time-consuming.
  • Users face integration issues with Forescout due to lack of documentation and complex dependencies, leading to challenges in deployment.
  • Users experience significant performance issues with Forescout Platform, citing slow TAC support and complicated implementations.
  • Users report poor customer support from TAC, causing significant delays and unresolved issues during critical integrations.

What Are Recent G2 Reviews of Forescout Platform?

What Are G2 Users Discussing About Forescout Platform?

NetSPI

NetSPI PTaaS is a type of penetration testing as a service (PTaaS) solution designed to help organizations identify and remediate vulnerabilities within their systems, applications, and networks. This service utilizes a combination of skilled professionals, established processes, and advanced AI technology to provide contextualized security outcomes in real time, all accessible through a unified platform. By addressing the limitations of traditional penetration testing methods, NetSPI PTaaS offers a more efficient and comprehensive approach to security assessments. This service is targeted at businesses of all sizes, from startups to large enterprises, making it particularly beneficial for security teams looking to enhance their vulnerability management strategies. NetSPI PTaaS caters to a variety of use cases, including application security assessments, infrastructure testing, and evaluations of emerging technologies such as artificial intelligence. With over 50 different types of penetration tests available, including traditional point in time testing and our continuous offerings, organizations can customize their security evaluations to meet specific needs, ensuring thorough coverage across all potential attack surfaces. A key feature of NetSPI PTaaS is its commitment to delivering real-time findings through a single platform. This capability allows security teams to receive immediate insights into vulnerabilities, enabling them to act swiftly to mitigate risks based on role and priority, managing testing in just a few clicks. The platform's integration capabilities enhance its usability, allowing organizations to seamlessly incorporate findings into their existing security workflows. This streamlined approach not only saves time but also ensures that remediation efforts are based on high-fidelity, manually validated findings, thus improving overall security effectiveness. The expertise of NetSPI's team of over 350 in-house security professionals is another significant differentiator. Their extensive experience and knowledge in the field of cybersecurity ensure that the testing methodologies employed are rigorous and consistent, uncovering vulnerabilities, exposures, and misconfigurations that may be overlooked by other solutions. This white-glove approach to penetration testing emphasizes the importance of manual validation, providing organizations with reliable and actionable insights that can significantly enhance their security posture. NetSPI PTaaS stands out in the realm of penetration testing services by combining expert human analysis with advanced AI technology, delivering timely and accurate results. This empowers organizations to strengthen their defenses against evolving cyber threats, ensuring that they remain resilient in an increasingly complex security landscape.

Average Rating: 4.9/5.0

Total Reviews: 19

How Do G2 Users Rate NetSPI?

  • Has the product been a good partner in doing business?: 9.8/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind NetSPI?

  • Seller: NetSPI
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Minneapolis, MN
  • LinkedIn® Page: www.linkedin.com
    595 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 42% Medium, 37% Large

What Do G2 Reviewers Say About NetSPI?

AI-generated summary from verified user reviews

Pros
  • Users commend NetSPI for their expertise and professionalism, delivering effective engagement and excellent communication throughout the process.
  • Users commend the exceptional quality of the NetSPI team, appreciating their skills and effective communication throughout engagements.
  • Users value the effective communication with NetSPI, enjoying real-time updates and easy access to project history.
  • Users praise the ease of use of NetSPI, highlighting its intuitive interface and effective communication tools.
  • Users praise the outstanding service quality of NetSPI, highlighting their exceptional team and effective tools for engagement.
Cons
  • Users find that difficult navigation within NetSPI's interface hampers their overall experience and efficiency.
  • Users reported false positives in the NetSPI vulnerability report, causing confusion regarding affected devices.
  • Users find the vulnerability report unclear, as it lacks details on which devices are affected by vulnerabilities.
  • Users report a lack of detail in vulnerability reports, making it unclear which devices are affected.
  • Users noted a lack of information regarding vulnerabilities on specific devices in the NetSPI reports.

What Are Recent G2 Reviews of NetSPI?

PDQ

PDQ is an endpoint management platform designed for IT administrators and sysadmins to manage endpoints, deploy software, secure vulnerabilities, and automate IT. PDQ's cloud-native platform (formerly called PDQ Connect) is designed to get you up and running in minutes. When regulatory or compliance needs require it, PDQ can also be deployed on-premise with our Deploy & Inventory plan. Manage your organization's Windows and macOS machines from a central platform designed to make the grind of everyday IT workflows seamless and, dare we say, pretty damn quick. Core capabilities include patch management, vulnerability remediation, remote desktop access and monitoring, and software deployment. In short, the stuff you actually tell us to build. Just look at our Discord. Vulnerabilities are continuously detected and prioritized using real-world exploit activity in addition to CVSS, enabling remediation based on real, not theoretical, business risk. Patch both Windows OS and over 1,000 Windows and macOS packages from a hand-built library sourced directly from publishers, virus-scanned, stripped of nonsense, and typically updated within hours of a new release. PDQ pre-built workflows and automations are running within minutes of onboarding, but most of our sysadmins combine custom multistep packages, advanced PowerShell scanners, dynamic device groups, vulnerability automations, and a community-shared script library to create an end-to-end system tailor-built for their situation, reducing what was once days into minutes. And for when all else fails, PDQ ships with a native device-level diagnostics and a remote desktop tool that fires up quickly to help you diagnose, fix, and move on, whether you’re dealing with an x64 Lenovo or an ARM Macbook Pro. Multi-tenant support allows IT teams managing multiple environments to operate from a single console. Real-time, event-driven automation allows IT teams to execute workflows based on device state and predefined conditions — deployments trigger the moment a condition is met, without waiting for a scheduled window. Offline device deployment queuing ensures no device is skipped regardless of connectivity at the time a deployment runs. And where compliance, regulatory, or org policy requires, PDQ’s core deployment and patching capabilities can also be deployed as an on-premise, agentless solution with our Deploy & Inventory plan. PDQ is SOC 2 certified and includes security features including MFA, role-based access controls, encryption, and audit logging to support compliance requirements. Pricing is publicly available and supports self-service purchasing without requiring a sales call. A 14-day free trial is available with no credit card required.

Average Rating: 4.7/5.0

Total Reviews: 735

How Do G2 Users Rate PDQ?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)

Who Is the Company Behind PDQ?

  • Seller: PDQ
  • Company Website:
  • Year Founded: 2001
  • HQ Location: Salt Lake City, Utah, United States
  • LinkedIn® Page: www.linkedin.com
    392 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager, Systems Administrator
  • Top Industries: Primary/Secondary Education, Information Technology and Services
  • Company Size: 63% Medium, 15% Large

What Do G2 Reviewers Say About PDQ?

AI-generated summary from verified user reviews

Pros
  • Users find PDQ incredibly easy to use, streamlining software management and updates across multiple devices efficiently.
  • Users value the remote software deployment capabilities of PDQ Connect, enhancing efficiency and security management.
  • Users find PDQ's easy deployment feature invaluable for efficiently managing software updates across multiple machines.
  • Users find the easy setup of PDQ Connect straightforward, enabling quick deployment and efficient management of devices.
  • Users appreciate the efficient remote access capabilities of PDQ, enhancing support and saving time for remote teams.
Cons
  • Users note significant missing features in PDQ Connect, which affects the overall functionality and user experience.
  • Users highlight the need for significant improvements in agent stability and remote assistance performance with PDQ Connect.
  • Users note the limited features of PDQ Connect compared to PDQ Inventory and Deploy, impacting their experience.
  • Users often face remote access issues with PDQ, including slow performance and agent inactivity problems.
  • Users encounter deployment issues with PDQ, finding the process cumbersome and occasionally complicated for custom setups.

What Are Recent G2 Reviews of PDQ?

What Are G2 Users Discussing About PDQ?

Upwind

Upwind is the runtime-first cloud security platform that secures your deployments, configurations, and applications by providing real-time visibility from the inside out. We’ve built a unified fabric that maps your environment as it runs - revealing what’s truly at risk, what’s actively happening, and how to respond quickly and effectively. With Upwind, security, dev, and ops teams move faster, stay focused, and fix risks that matter most.

Average Rating: 4.9/5.0

Total Reviews: 10

How Do G2 Users Rate Upwind?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Upwind?

  • Seller: Upwind
  • Company Website:
  • Year Founded: 2022
  • HQ Location: San Francisco, California, United States
  • LinkedIn® Page: www.linkedin.com
    537 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 60% Medium, 30% Large

What Do G2 Reviewers Say About Upwind?

AI-generated summary from verified user reviews

Pros
  • Users find Upwind to be very easy to use, appreciating its quick support and real-time functionality.
  • Users appreciate Upwind for its excellent visibility, enhancing risk posture and simplifying threat identification.
  • Users praise the quick and responsive customer support of Upwind, enhancing overall satisfaction and experience.
  • Users commend the real-time detection efficiency of Upwind, enabling swift threat identification and resolution.
  • Users commend the implementation ease of Upwind, highlighting its smooth integration into AWS environments.
Cons
  • Users find that the alert overload from numerous vulnerability findings can be quickly overwhelming and distracting.
  • Users note compliance issues with Upwind, particularly regarding NIST and GDPR reporting requirements.
  • Users face challenges with bulk alert resolution in Upwind, limiting effective data management capabilities.
  • Users find the data overload from numerous vulnerability findings to be overwhelming and difficult to manage.
  • Users face challenges with false positives, leading to difficulties in alert management and resolution.

What Are Recent G2 Reviews of Upwind?

ArmorCode Unified Exposure Management

ArmorCode is redefining security governance in the AI era as the agentic control plane for Unified Exposure Management. Its Platform delivers software and infrastructure security governance that consolidates findings and prioritizes ones with real business impact, surfaces exploitability and attack paths, de-risks AI adoption, and accelerates compliance. ArmorCode's Agentic Control Plane helps enterprises manage security risk across today's heterogeneous environments. Powered by 
Anya Agents, an agentic workforce for enterprise security, it connects a Context Risk Graph to 400+ sources; unifying exposure management across infrastructure, software supply chains, applications, and AI systems; and delivering visibility, insight, and control without replacing existing tools. ArmorCode was founded in 2020 by Nikhil Gupta and is headquartered in Palo Alto, California. Trusted by dozens of Fortune 1000 enterprise customers, ArmorCode serves North America and EMEA with a team of 200+ employees.

Average Rating: 4.1/5.0

Total Reviews: 4

How Do G2 Users Rate ArmorCode Unified Exposure Management?

  • Has the product been a good partner in doing business?: 6.7/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind ArmorCode Unified Exposure Management?

  • Seller: ArmorCode
  • Year Founded: 2020
  • HQ Location: Palo Alto, California, United States
  • LinkedIn® Page: www.linkedin.com
    222 employees on LinkedIn®
  • Ownership: Dana Torgersen

Who Uses This Product?

  • Company Size: 50% Medium, 25% Small

What Do G2 Reviewers Say About ArmorCode Unified Exposure Management?

AI-generated summary from verified user reviews

Pros
  • Users value the enhanced security and streamlined vulnerability management provided by ArmorCode, boosting their overall efficiency.
  • Users value the enhanced security in ArmorCode, effectively managing vulnerabilities from development to deployment.
  • Users commend ArmorCode for its effective vulnerability identification, streamlining workflows and enhancing security throughout development and deployment.
  • Users value the automation features of ArmorCode for effortlessly enhancing security from development to deployment.
  • Users value the centralization of vulnerabilities in ArmorCode, enhancing workflows for security teams effectively.
Cons
  • Users find that ArmorCode requires improvement in scalability and customization for better data presentation and analysis.
  • Users find the reporting inadequate, noting accuracy issues and limited customization options in ArmorCode Unified Exposure Management.
  • Users find that the data presentation requires significant effort to clearly convey organizational risks effectively.
  • Users find the information overload from ArmorCode challenging, requiring significant effort to distill actionable insights.
  • Users note the limited customization options in reporting, leading to inaccuracies and less tailored insights.

What Are Recent G2 Reviews of ArmorCode Unified Exposure Management?

Escape

Escape automates the full offensive security lifecycle, multiplying the impact of every security engineer tenfold. Our key products: 1. AI Pentesting: Replace manual pentest and bug bounty programs with a solution that scales. 2. Business-logic-aware DAST: Replace legacy DAST with business-logic-aware testing that improves over time and helps your team remediate real, exploitable vulnerabilities. 3. Attack Surface Management: Discover and validate exposure of modern applications, APIs, and infrastructure from code to cloud. Escape is a customer-centric company, supporting more than 2000+ security teams worldwide, and we have the privilege of working with exceptional companies like Schibsted (Media), HealthEquity (Healthcare), Applied (InsurTech), Visma, Miro (Tech), DoubleVerify (AdTech), Thinkific (EdTech), and many others.

Average Rating: 4.9/5.0

Total Reviews: 10

How Do G2 Users Rate Escape?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 8.9/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 6.7/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Escape?

  • Seller: Escape
  • Company Website:
  • Year Founded: 2020
  • HQ Location: Paris, France
  • LinkedIn® Page: www.linkedin.com
    76 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Small, 40% Medium

What Do G2 Reviewers Say About Escape?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Escape, praising its simple setup and seamless CI/CD integration.
  • Users love the easy integrations with Escape, facilitating smooth workflows and secure GraphQL endpoint checks.
  • Users appreciate the effective scanning technology of Escape, enhancing API security management and vulnerability detection.
  • Users value the strong API security features of Escape, ensuring effective management and detection of vulnerabilities.
  • Users commend Escape for its effective API security management, adeptly identifying various vulnerabilities, including overlooked business logic flaws.
Cons
  • Users find the complex setup of Escape can be a challenge, requiring adjustment to keep up with updates.
  • Users find difficult upgrades sometimes challenging, but appreciate the continuous improvements and security enhancements of the platform.
  • Users note the limited features currently offered, though improvements are promised based on active feedback and updates.
  • Users note missing features in Escape, yet appreciate the roadmap for updates and responsiveness to feedback.
  • Users find update issues occasionally challenging, though the overall tool benefits outweigh these minor inconveniences.

What Are Recent G2 Reviews of Escape?

Hadrian

Hadrian is an agentless SaaS product that continuously maps exposed assets, discovers risks, and prioritizes remediation so that security teams can harden their external attack surfaces. Using passive data sources, active scanning techniques, and machine learning models, Hadrian identifies digital assets and complex attack paths that security teams are unaware of. It incorporates how misconfigurations, exposed secrets, permissions, and vulnerabilities impact an organization’s security posture. Context-aware testing uses only relevant modules and secrets in attack paths. This combination of context and risk discovery allows Hadrian to prioritize the same targets attackers will exploit. All of this is presented in an online dashboard to help security teams focus on what matters and make their attack surface more secure.

Average Rating: 4.5/5.0

Total Reviews: 4

How Do G2 Users Rate Hadrian?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 9.2/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.4/10 (Category avg: 8.8/10)

Who Is the Company Behind Hadrian?

  • Seller: Hadrian
  • Year Founded: 2021
  • HQ Location: Amsterdam, North Holland, Netherlands
  • LinkedIn® Page: www.linkedin.com
    105 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 75% Large, 25% Medium

What Are Recent G2 Reviews of Hadrian?

ManageEngine Vulnerability Manager Plus

ManageEngine Vulnerability Manager Plus is a comprehensive, all-in-one exposure management solution designed to help IT security teams build a proactive cybersecurity foundation. Rather than reacting to breaches, it empowers organizations to scan continuously, assess, prioritize, and remediate vulnerabilities before attackers can exploit them, all from a single, unified console. Asset discovery, vulnerability assessment and threat prioritization: Vulnerability Manager Plus manages every endpoint in your network, such as desktops, laptops, servers, virtual machines, DMZ servers, and network devices, whether in local offices, remote branches, or roaming environments. It delivers complete, real-time visibility into all vulnerabilities in a single window, including known, unknown, zero-day, and actively exploited vulnerabilities. AI-powered threat intelligence assigns risk scores to each vulnerability, helping security teams cut through the noise and focus remediation efforts on what matters most. Vulnerability remediation: This is the only vulnerability detection platform that comes with built-in patching, and automated patch deployment. It supports patching for Windows, macOS, and Linux operating systems, along with over 1,100 third-party applications. Admins can customize deployment policies, test and approve patches before rollout, and decline patches for specific groups; all while staying in control of the patching lifecycle from end-to-end. Security configuration management Vulnerability Manager Plus identifies misconfigurations in operating systems, applications, and web servers, and provides actionable steps to restore compliance. It audits firewalls, antivirus status, and BitLocker configurations; enforces strong password policies and account lockout settings; verifies memory protection settings like ASLR, DEP, and SEHOP; and manages share permissions and legacy protocol settings, all without disrupting business operations. Web server hardening: Vulnerability Manager Plus continuously monitors web servers for default and insecure configurations, validates SSL certificate setup, checks HTTPS enablement, and restricts unauthorized access at the server root level. Context-aware analysis delivers targeted security recommendations to harden your web servers. High-risk software, port, and antivirus audit: Stay ahead of risk with real-time visibility into end-of-life software, unsafe peer-to-peer applications, remote sharing tools, and open ports. Identify systems running outdated or disabled antivirus solutions and remediate them in a click. Compliance auditing: Automate compliance audits against regulations such as CIST, NIST, and UK Cyber Essentials across multiple machines and multiple benchmarks simultaneously. Customize benchmark rules to fit your organization's unique policies, and access detailed remediation guidance for every violation flagged. Network device vulnerability management: Maintain a consolidated inventory of all network devices across local and remote sites. Identify firmware versions, detect associated vulnerabilities, group devices by OS or vendor, and deploy the right firmware patches efficiently to close exposure gaps faster. System quarantine policy: Define compliance conditions based on OS patches, installed software, services, registry entries, file versions, and more. Automatically isolate non-compliant systems with network restrictions and restore normal access once issues are resolved, keeping your network clean without manual intervention. Vulnerability Manager Plus supports 18 languages, and supports patching for 1100+ applications, making it a fit for organizations of all sizes seeking a single, powerful platform to manage their entire vulnerability lifecycle.

Average Rating: 4.6/5.0

Total Reviews: 7

How Do G2 Users Rate ManageEngine Vulnerability Manager Plus?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)

Who Is the Company Behind ManageEngine Vulnerability Manager Plus?

  • Seller: Zoho
  • Year Founded: 1996
  • HQ Location: Austin, TX
  • LinkedIn® Page: www.linkedin.com
    30,913 employees on LinkedIn®
  • Phone: +1 (888) 900-9646

Who Uses This Product?

  • Company Size: 57% Medium, 29% Small

What Do G2 Reviewers Say About ManageEngine Vulnerability Manager Plus?

AI-generated summary from verified user reviews

Pros
  • Users find the detection capabilities of ManageEngine Vulnerability Manager Plus effective for global patch management.
  • Users find the ease of managing patches globally with ManageEngine Vulnerability Manager Plus highly beneficial and efficient.
  • Users find ManageEngine Vulnerability Manager Plus to be the best tool for patch management, simplifying global patch management across machines.
  • Users find that ManageEngine Vulnerability Manager Plus excels in simple global patch management, making it an essential tool.
  • Users find ManageEngine's patch management simplicity invaluable for efficiently managing patches across all global machines.
Cons
  • Users report false positives in ManageEngine Vulnerability Manager Plus, causing confusion over actual vulnerabilities identified.
  • Users report inaccuracy issues with CVE IDs in ManageEngine Vulnerability Manager Plus, affecting vulnerability assessment reliability.
  • Users notice security vulnerabilities discrepancies in ManageEngine Vulnerability Manager Plus, affecting accuracy of identified threats.
  • Users report inconsistent CVE identification in ManageEngine, leading to potential gaps in vulnerability management.

What Are Recent G2 Reviews of ManageEngine Vulnerability Manager Plus?

Qomplx

QOMPLX is a leading provider of identity-focused cybersecurity software solutions. Our technology continually monitors user activity across all points of access, including cloud and on-premise systems, to prevent harm to your network, detect suspicious behavior and anomalies, and provide contextualized recommendations to improve your overall cybersecurity. The QOMPLX data platform provides real-time alerts and visualizations for rapid response and to allow for a proactive stance against malicious actors. It also enables the capture and store of identity data for future analysis, allowing organizations to detect and respond to emerging threats in a timely and effective manner. Additionally, our platform provides comprehensive reporting, audit trails, and a secure environment for identity management. With QOMPLX solutions, organizations can protect their digital environment from identity-related threats and ensure business continuity by utilizing: • Threat Detection and Response (ITDR) Prevent, detect and respond to identity threats in real-time • Managed Solutions Cost effective managed cybersecurity including Managed ITDR, Managed Extended Detection and Response (XDR), and Managed Detection and Response (MDR) • Attack Surface Monitoring (ASM) Discover cyber vulnerabilities and the size of your attack surface

Average Rating: 4.5/5.0

Total Reviews: 11

How Do G2 Users Rate Qomplx?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.2/10 (Category avg: 8.8/10)

Who Is the Company Behind Qomplx?

  • Seller: QOMPLX
  • Year Founded: 2015
  • HQ Location: Tysons, Virginia
  • LinkedIn® Page: www.linkedin.com
    22 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 55% Medium, 27% Large

What Are Recent G2 Reviews of Qomplx?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024