Best Risk-Based Vulnerability Management Software - Page 7

How Many Risk-Based Vulnerability Management Software Products Does G2 Track?

Total Products under this Category: 222

Category Stats (Nov 2026)

  • Average Rating: 4.5/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: BMC Helix Remediate (+17.94%) - Among all products in this category, BMC Helix Remediate recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Risk-Based Vulnerability Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 6,300+ Authentic Reviews
  • 222+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Risk-Based Vulnerability Management Software

G2 Grid® for Risk-Based Vulnerability Management Software plotting products by satisfaction and market presence

Highlighted products: Ivanti Autonomous Endpoint Management, Tenable Vulnerability Management, Arctic Wolf, H1 Platform, RiskProfiler - External Threat Exposure Management, Pentera, YesWeHack, and Check Point Exposure Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/risk-based-vulnerability-management/grids.json?focus%5B%5D=ivanti-autonomous-endpoint-management&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=arctic-wolf&focus%5B%5D=h1-platform&focus%5B%5D=riskprofiler-external-threat-exposure-management&focus%5B%5D=pentera&focus%5B%5D=yeswehack&focus%5B%5D=check-point-exposure-management)

H2Cyber

At H2Cyber our product is designed for small businesses. We are teaching you the basic arithmetic of cybersecurity via our prioritized approach. This will allow your business to grow over time and move to a more robust cybersecurity framework if needed as all our controls are aligned to the five basic functions of the NIST Cybersecurity Framework (Identify, Protect, Detect, Respond, and Recovery). Our prioritized approach takes the guessing out of where to start. We have identified 77 controls and spread them out over 7 phases to help you easily manage your Cybersecurity program. Implementation times generally take between 17 and 35 weeks if you are starting from scratch.

Average Rating: 5.0/5.0

Total Reviews: 2

Who Is the Company Behind H2Cyber?

  • Seller: H2Cyber
  • Year Founded: 2009
  • HQ Location: Prosper, US
  • LinkedIn® Page: www.linkedin.com
    2 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Small

What Are Recent G2 Reviews of H2Cyber?

Hacknoid

CONTINUOUS VULNERABILITY DETECTION, ANALYSIS AND MANAGEMENT PLATFORM Your entire attack surface, automatically, continuously monitored with a unified view. Hacknoid automates vulnerability detection across all your network’s systems and devices, providing visibility and prioritizing alerts to help you optimize remediation efforts. We keep your asset inventory up to date and perform 24/7 automatic and intelligent analysis across your entire tech environment, enabling you to manage risks practically, simply, and proactively.

Average Rating: 4.6/5.0

Total Reviews: 4

How Do G2 Users Rate Hacknoid?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Hacknoid?

  • Seller: Hacknoid
  • Year Founded: 2013
  • HQ Location: Montevideo, UY
  • LinkedIn® Page: www.linkedin.com
    13 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 50% Medium, 25% Large

What Do G2 Reviewers Say About Hacknoid?

AI-generated summary from verified user reviews

Pros
  • Users value the continuous scanning feature of Hacknoid, which helps prioritize real risks effortlessly.
  • Users value the continuous scanning feature of Hacknoid, enhancing efficiency by automatically identifying and prioritizing vulnerabilities.
  • Users value the continuous scanning feature, which efficiently identifies and prioritizes real risks without manual effort.
  • Users love the continuous background scanning feature of Hacknoid, which effectively prioritizes real risks automatically.
  • Users value the continuous scanning feature of Hacknoid, efficiently identifying real risks without manual intervention.

What Are Recent G2 Reviews of Hacknoid?

Holm Security VMP

Holm Security’s unified platform delivers continuous, automated visibility and protection across millions of critical assets through a single unified platform - with one workflow and risk model. Our all-in-one platform provides a market-leading combination of Attack Surface Management (ASM) and vulnerability & exposure management, creating an efficient, proactive cyber defense. Use this platform to automatically identify new assets, monitor asset changes, eliminate blind spots, detect shadow IT, and find vulnerabilities. Holm Security’s platform is developed in Europe and delivered from European data centers, ensuring that sensitive data remains within the EU. Our European foundation reflects a strong commitment to data sovereignty, compliance, and secure development practices, providing organizations with a trusted and reliable framework for protecting critical assets.

Average Rating: 2.5/5.0

Total Reviews: 2

How Do G2 Users Rate Holm Security VMP?

  • Has the product been a good partner in doing business?: 5.0/10 (Category avg: 9.2/10)
  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 5.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Holm Security VMP?

Who Uses This Product?

  • Company Size: 50% Medium, 50% Small

What Do G2 Reviewers Say About Holm Security VMP?

AI-generated summary from verified user reviews

Pros
  • Users value the auth scanning and phishing simulation capabilities of Holm Security VMP for effective awareness training.
  • Users value the increase in awareness provided by Holm Security VMP through its phishing simulations and templates.
  • Users value the innovation in Holm Security VMP, particularly for its effective authentication scanning and phishing simulations.
  • Users value the scanning efficiency of Holm Security VMP, benefiting from effective authentication and phishing simulations.
Cons
  • Users are frustrated with the excessive false positives in Holm Security VMP, complicating vulnerability assessments and efficiency.
  • Users report frequent scanning issues, including multiple failures and a high number of false positives.
  • Users report frequent technical issues with Holm Security VMP, including false positives and failed scans.

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

RiskRecon

Gain objective insight into your third-party security performance and IT landscape

Average Rating: 4.5/5.0

Total Reviews: 2

How Do G2 Users Rate RiskRecon?

  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind RiskRecon?

  • Seller: Mastercard
  • Year Founded: 1966
  • HQ Location: Purchase, NY
  • LinkedIn® Page: www.linkedin.com
    52,021 employees on LinkedIn®
  • Ownership: NYSE - New York Stock Exchange
  • Total Revenue (USD mm): $15,301

Who Uses This Product?

  • Company Size: 50% Large, 50% Small

What Are Recent G2 Reviews of RiskRecon?

What Are G2 Users Discussing About RiskRecon?

Sonatype Lifecycle

Continuously secure your software supply chain with Sonatype Nexus Lifecycle, a software composition analysis (SCA) solution. Nexus Lifecycle helps development, security, and compliance teams reduce open source risk without slowing delivery. It detects vulnerable or non-compliant components early, provides clear remediation guidance, and enforces the same policies from development through CI/CD and release - powered by Sonatype Nexus Intelligence. Choose safer components up front: A Chrome extension and IDE integrations surface vulnerability, license, and quality insights as developers browse public repositories or add dependencies. Fix issues fast where work happens: In Eclipse, IntelliJ, and Visual Studio, developers can see exactly what's wrong and upgrade to an approved version with a click - no guesswork. Automate remediation in source control: Integrations with GitHub, GitLab, and Atlassian Bitbucket can comment on pull/merge requests and identify the specific dependency change that introduces risk, along with recommended versions to resolve it. You can also generate automated pull requests to update components that violate policy. Enforce open source policies across the SDLC: Create security, license, and architectural policies tailored by application type, team, or organization, then apply them consistently in developer tools, CI/CD, and repositories to prevent risky components from reaching production. Generate SBOMs in minutes: Produce accurate Software Bills of Materials (SBOMs) per application to understand what components and transitive dependencies are in use and verify compliance. Prove progress with reporting: Track trends like Mean Time to Resolution (MTTR) and violation reduction over time to demonstrate measurable risk reduction to stakeholders. Nexus Lifecycle integrates with common developer, CI/CD, and repository tools including Nexus Repository, Artifactory, Jira, Jenkins, Azure DevOps, and more.

Average Rating: 4.2/5.0

Total Reviews: 3

How Do G2 Users Rate Sonatype Lifecycle?

  • Has the product been a good partner in doing business?: 6.7/10 (Category avg: 9.2/10)

Who Is the Company Behind Sonatype Lifecycle?

  • Seller: Sonatype
  • Year Founded: 2008
  • HQ Location: Fulton, US
  • LinkedIn® Page: www.linkedin.com
    582 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 75% Large, 25% Medium

What Are Recent G2 Reviews of Sonatype Lifecycle?

Tripwire IP360

A Key Part of Fortra (the new face of HelpSystems) Tripwire is proud to be part of Fortra’s comprehensive cybersecurity portfolio. Fortra simplifies today’s complex cybersecurity landscape by bringing complementary products together to solve problems in innovative ways. These integrated, scalable solutions address the fast-changing challenges you face in safeguarding your organization. With the help of the powerful protection from Tripwire IP360 and others, Fortra is your relentless ally, here for you every step of the way throughout your cybersecurity journey.

Average Rating: 3.3/5.0

Total Reviews: 2

How Do G2 Users Rate Tripwire IP360?

  • Has the product been a good partner in doing business?: 6.7/10 (Category avg: 9.2/10)

Who Is the Company Behind Tripwire IP360?

  • Seller: Fortra
  • Year Founded: 1982
  • HQ Location: Eden Prairie, Minnesota
  • LinkedIn® Page: www.linkedin.com
    1,784 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of Tripwire IP360?

What Are G2 Users Discussing About Tripwire IP360?

TrueSight Vulnerability Management for Third-Party Applications

TrueSight Vulnerability Management helps security and IT operations teams prioritize and remediate risks based on potential impact to the business.

Average Rating: 3.8/5.0

Total Reviews: 2

Who Is the Company Behind TrueSight Vulnerability Management for Third-Party Applications?

Who Uses This Product?

  • Company Size: 67% Small, 33% Medium

What Are Recent G2 Reviews of TrueSight Vulnerability Management for Third-Party Applications?

What Are G2 Users Discussing About TrueSight Vulnerability Management for Third-Party Applications?

Visore Security Management Platform

Visore simplifies your organizations security operations with a Single pane-of-glass SecOps Platform that solves interoperability, built to address the #1 challenge plaguing IT and Cyber teams: comprehensive & up-to-date asset inventory. Asset inventory, consolidated data and threat intelligence, all in one place enable valuable insights with just one click.

Average Rating: 5.0/5.0

Total Reviews: 2

How Do G2 Users Rate Visore Security Management Platform?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Visore Security Management Platform?

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of Visore Security Management Platform?

What Are G2 Users Discussing About Visore Security Management Platform?

AttackTree

AttackTree is a vulnerability management software that helps predict hacking attacks and develop prevention schemes.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate AttackTree?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind AttackTree?

  • Seller: Isograph
  • Year Founded: 1986
  • HQ Location: Warrington, England, United Kingdom
  • LinkedIn® Page: www.linkedin.com
    12 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Are Recent G2 Reviews of AttackTree?

Black Kite

In today’s threat landscape, understanding your cyber risk exposure - across vendors, systems, and the extended supply chain - is critical. At Black Kite, our mission is to equip business and security leaders with a complete and accurate view of their cyber ecosystem risk extending out to their 4th-, 5th-, and Nth-parties. The Black Kite platform: - Unlocks continuous risk intelligence, including Black Kite’s Ransomware Susceptibility Index® (RSI), Adversary Susceptibility Index (ASI), and Data Breach Index (DBI) - Quantifies Financial Impact of risk using Open FAIR™ - Detects cyber exposure and high-risk signals across your supplier ecosystem and out to your Nth party with Black Kite FocusTags™ - Uses AI to automate vendor assessments, questionnaires, and gap analysis Our offerings: Black Kite Monitor: Continuous, real-time visibility into the cyber health of your third-party ecosystem - helping you build resilience across your supply chain. By providing accurate, always-up-to-date risk intelligence on vendors, Black Kite Monitor empowers teams to make informed risk decisions. Black Kite Assess: Delivers AI-powered cyber assessments built on trusted risk intelligence - including technical findings, posture ratings, and real-time risk signals. Black Kite Assess empowers teams to automate everything from document review and gap analysis to assessing vendor controls against custom questionnaires and standard frameworks and regulations, such as NIST and GDPR, while recommending remediations to engage third-parties on. Black Kite Extend: Gives organizations deeper visibility into the interconnected risks beyond their direct third parties. Built for teams managing complex supply chains or software vendor ecosystems, Black Kite Extend surfaces risk insights across fourth-, fifth-, and Nth-party relationships - helping you uncover hidden exposures and improve risk posture across your extended ecosystem. Whether it’s identifying critical dependencies, geopolitical risk, or sanctioned entities, Extend equips you with the context needed to make smarter decisions at scale.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Black Kite?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Black Kite?

  • Seller: Black Kite
  • Year Founded: 2016
  • HQ Location: Boston, Massachusetts, United States
  • LinkedIn® Page: www.linkedin.com
    175 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 100% Large

What Do G2 Reviewers Say About Black Kite?

AI-generated summary from verified user reviews

Pros
  • Users find Black Kite to be exceptionally easy to use, allowing for quick onboarding and fast value realization.
  • Users find Black Kite's easy implementation refreshing, allowing quick onboarding and immediate value from the tool.
  • Users commend Black Kite for their innovative features and customer engagement, making onboarding and value extraction effortless.
  • Users find implementation easy, enabling quick onboarding and immediate value from Black Kite's innovative approach.
  • Users appreciate the innovative features of Black Kite, valuing their responsiveness and engagement in product development.

What Are Recent G2 Reviews of Black Kite?

Centraleyes

Centraleyes is a next generation GRC platform that gives organizations an unparalleled understanding of their cyber risk and compliance. Centraleyes provides an exceptional ability to see, understand and react to growing risks and gaps, in a place where other solutions are ineffective. Centraleyes’s customers have automated and orchestrated their GRC function, to the point where it is 10x faster and 10x better. This is truly cyber risk management reimagined.

Average Rating: 4.3/5.0

Total Reviews: 3

Who Is the Company Behind Centraleyes?

Who Uses This Product?

  • Company Size: 67% Large, 33% Medium

What Do G2 Reviewers Say About Centraleyes?

AI-generated summary from verified user reviews

Pros
  • Users find Centraleyes provides valuable insights into compliance management, enhancing the understanding of cyber threats and vulnerabilities.
  • Users find that Centraleyes offers effective compliance simplification, enhancing GRC management and identifying cyber threats and weaknesses.
  • Users find Centraleyes invaluable for insight into cyber threats and improving compliance management.
  • Users find Centraleyes valuable for insightful GRC management, clearly identifying cyber threats and compliance strengths and weaknesses.
  • Users value the insightful risk management capabilities of Centraleyes, enhancing their understanding of compliance and cyber threats.
Cons
  • Users find filtering issues in Centraleyes, making it challenging to write satisfactory reports for all stakeholders.
  • Users find the inadequate reporting of Centraleyes challenging, as it fails to meet diverse stakeholder needs effectively.
  • Users struggle with the lack of clarity in reports from Centraleyes, impacting stakeholder satisfaction and drill-down capabilities.
  • Users find the limited reporting capabilities of Centraleyes frustrating, making it hard to meet all stakeholders' needs.
  • Users find the poor reporting capabilities of Centraleyes limiting, affecting stakeholder satisfaction and detailed analysis.

What Are Recent G2 Reviews of Centraleyes?

CybelAngel

CybelAngel protects its customers with External Attack Surface Management (EASM) solutions that are powered by the most comprehensive external asset discovery and threat detection technologies available. Built upon close to a decade of machine learning, our advanced platform scans the entirety of the internet every 24 hours to uncover unknown assets and shadow IT, cloud services, connected devices, fraudulent domains and exposed credentials — the sources attackers use to access confidential data, launch phishing campaigns or initiate destructive ransomware attacks. CybelAngel's combination of machine learning and expert human analysis provides deep visibility into the most critical threats, long before they’re exploited.

Average Rating: 4.6/5.0

Total Reviews: 7

How Do G2 Users Rate CybelAngel?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)

Who Is the Company Behind CybelAngel?

Who Uses This Product?

  • Company Size: 86% Large, 14% Medium

What Are Recent G2 Reviews of CybelAngel?

Cyberwatch

Cyberwatch is a server vulnerability monitoring solution with integrated patch management functionality.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Cyberwatch?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)

Who Is the Company Behind Cyberwatch?

Who Uses This Product?

  • Company Size: 100% Large

What Do G2 Reviewers Say About Cyberwatch?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the automation features of Cyberwatch, enabling proactive security management with user-friendly onboarding and detailed reports.
  • Users appreciate the highly responsive customer support of Cyberwatch, which greatly enhances their overall experience.
  • Users find the ease of understanding of Cyberwatch remarkable, making vulnerability management accessible for all experience levels.
  • Users value the intuitive platform of Cyberwatch, facilitating quick onboarding and efficient vulnerability management.
  • Users enjoy the quick onboarding process of Cyberwatch, making vulnerability management accessible even for beginners.

What Are Recent G2 Reviews of Cyberwatch?

Echelon

Echelon — your cybersecurity check-up solution. Just like a health check-up prevents illness, our AI-driven solution for ongoing cybersecurity audits prevents cyber threats — before they lead to financial loss or data breaches. Just 5 reasons to choose Echelon: 1. Fix Faster with AI. Our AI tool provides step-by-step guidance to remediate every detected vulnerability. Less routine for your team—more profit for you. 2. Machine Learning Leak Processing. Machine Learning enables Echelon to efficiently process leaked data, ensuring none of your sensitive information is exposed publicly. 3. Quick & Easy Setup. Just enter and confirm your domain or IP. No downloads. No access permissions needed. 4. Automatic Threat Detection. Finds security gaps before attackers do. 5. Echelon Never Sleeps. Audits are performed regularly. 24/7 CVE monitoring — if a new threat emerges, you'll be notified immediately. 3 simple steps to start: - Visit Echelon’s Website and Sign Up - Enter Domain/IP and Choose a Plan - Stay one step ahead of cyber threats – Echelon ensures 24/7 security

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Echelon?

  • Has the product been a good partner in doing business?: 10.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 10.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Echelon?

Who Uses This Product?

  • Company Size: 100% Medium

What Do G2 Reviewers Say About Echelon?

AI-generated summary from verified user reviews

Pros
  • Users value the enhanced cybersecurity of Echelon, providing an extra layer of protection against potential risks.
  • Users value the extra layer of protection Echelon provides, enhancing their multi-layered security approach effectively.
  • Users value the multi-layered security of Echelon, providing peace of mind with extra protection against potential risks.
Cons
  • Users find the technical language complex, making it challenging for those less familiar with the terminology.
  • Users find the technical language challenging, making it difficult for some to fully grasp the product.

What Are Recent G2 Reviews of Echelon?

Faraday Platform

Faraday ingests thousands of vulnerabilities from various assets and visualizes findings in a clear, dynamic, and intuitive dashboard. It is a comprehensive vulnerability management tool that helps security teams prioritize critical vulnerabilities, focusing on those that are exploitable to reduce noise and streamline reporting. Faraday can be deployed both in the cloud and on-premises, available in professional, corporate, and open-source versions. The company strongly supports open-source software (OSS) as they began as a small group of pentesters who needed to manage vulnerabilities and generate reports, leading them to develop this tool. Now, Faraday is accessible on GitHub for any pentester needing to create penetration testing reports. Among its many features, Faraday supports over 160 tools to consolidate work in one place. It also integrates seamlessly with Jira, ServiceNow, SolarWinds, and GitLab. The platform includes its own vulnerability scoring system to prioritize vulnerabilities as a hacker would, identifying exploitable vulnerabilities over seemingly critical ones that pose no real risk. Faraday is designed to meet the needs of small to large companies, allowing them to scale their security operations efficiently.

Average Rating: 5.0/5.0

Total Reviews: 1

How Do G2 Users Rate Faraday Platform?

  • Reporting: 8.3/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Faraday Platform?

Who Uses This Product?

  • Company Size: 100% Medium

What Are Recent G2 Reviews of Faraday Platform?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024