# Best Security Compliance Software with SOC 2 Capabilities - Page 15

## How Many Security Compliance Software Products Does G2 Track?

**Total Products under this Category:** 300

### Category Stats (Aug 2026)

- **Average Rating:** 4.6/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** LowerPlane (+3.71%) - Among all products in this category, LowerPlane recorded the largest rating increase compared to last month

_Last updated: August 04, 2026_

## How Does G2 Rank Security Compliance Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 24,400+ Authentic Reviews
- 300+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Security Compliance Software
 ![G2 Grid® for Security Compliance Software plotting products by satisfaction and market presence](https://www.g2.com/categories/security-compliance/grids.png?focus%5B%5D=123611&focus%5B%5D=162410&focus%5B%5D=36316&focus%5B%5D=140255&focus%5B%5D=140904&focus%5B%5D=167976&focus%5B%5D=165152&focus%5B%5D=77979)

Highlighted products: Vanta, Sprinto, JumpCloud, Secureframe, Drata, Scrut Automation, Scytale, and TeamMate.

Underlying data: [Grid® JSON](https://www.g2.com/categories/security-compliance/grids.json?focus%5B%5D=vanta&focus%5B%5D=sprinto-inc&focus%5B%5D=jumpcloud&focus%5B%5D=secureframe&focus%5B%5D=drata&focus%5B%5D=scrut-automation&focus%5B%5D=scytale-g2&focus%5B%5D=teammate)

**Sponsored**

### JumpCloud

JumpCloud® is the AI-powered identity infrastructure that unifies lifecycle management for humans, devices, and autonomous agents. JumpCloud gives IT teams complete visibility and control over every identity and every access point. JumpCloud helps organizations cut complexity, automate secure workflows, and put AI to work safely. Secure every identity. Human or not. Intelligent, secure IT for the agentic era.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2831&secure%5Bchosen_at%5D=2026-08-13T19%3A58%3A05Z&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=36316&secure%5Bresource_id%5D=2831&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fsecurity-compliance%2Ff%2Fsoc-2%3Ffilters%255BSecurity%2BCompliance%2BSoftware%255D%255B%255D%3D618%26page%3D15&secure%5Btoken%5D=eb7085518eb9091e7c2c7fb27d7e47c707b238c3b88877f6626f802b1ae406c3&secure%5Burl%5D=https%3A%2F%2Fjumpcloud.com%2Fuse-cases%2Fcompliance%3Futm_source%3DG2-Paid%26utm_medium%3DPaid-Directory%26utm_content%3DCompliance%26utm_campaign%3DG2PaidPromotions&secure%5Burl_type%5D=paid_promos)

### [IntelliGRC](https://www.g2.com/products/intelligrc/reviews)

IntelliGRC is a cutting-edge GRC platform specializing in CMMC compliance, designed to make cybersecurity compliance authentically accessible, especially the Defense Industrial Base (DIB). Our tools significantly reduce the resources needed for CMMC assessments, audit preparation, and remediation by a roadmap that is influenced from real world experience in preparing and successfully completing a 3rd party assessment (i.e. DIBCAC Assessments, JSVA Assessments). Our team consists of CMMC experts who regularly engage with defense contractors and are intimately familiar with the challenges faced by the DIB community. The platform has been engineered to minimize the pain of implementing and managing CMMC compliance.

#### Who Is the Company Behind IntelliGRC?

- **Seller:** [IntelliGRC](https://www.g2.com/sellers/intelligrc)
- **Year Founded:** 2016
- **HQ Location:** Fairfax, US
- **Twitter:** @IntelliGRC  
19 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=4ae1ccf77999398ef63b37fd21b39becbf8eb2ee564d4153fd1cf6d41b07712d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fintelligrc&secure%5Burl_type%5D=linkedin_company_website)  
23 employees on LinkedIn®

### [iSecurity Compliance Evaluator](https://www.g2.com/products/isecurity-compliance-evaluator/reviews)

The iSecurity Compliance Evaluator provides managers, auditors and systems administrators a quick, network-wide, comprehensive overview of their IBM i server’s compliance level with government, industry and corporate regulations. It provides concise one-page reports featuring an overall compliance score, as well as specific ratings for any security-related component of IBM i, such as system values, network attributes and user profiles. The reports also include useful operational information deriving from QAUDJRN and from network activity. The result is a colorful and user-friendly Excel spreadsheet which provides three different views: general, summary, and exceptions only displays.

#### Who Is the Company Behind iSecurity Compliance Evaluator?

- **Seller:** [iSecurity Field Encryption](https://www.g2.com/sellers/isecurity-field-encryption)
- **Year Founded:** 1983
- **HQ Location:** Nanuet, NY
- **Twitter:** @razleesecurity  
495 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=946e4672f1de4f595e99b717c7477cf8e4a5fcb6deded460677f96b2bd84eca0&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fraz-lee-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
20 employees on LinkedIn®

### [ISMS SmartKit](https://www.g2.com/products/isms-smartkit/reviews)

ISMS SmartKit is a set of pre-built templates and content for Atlassian Confluence, used to document an information security management system aligned with ISO/IEC 27001. The Confluence space it provides covers asset inventories, supplier management, risk assessment, incident logging, internal audits, corrective measures, and risk acceptance, using standard Confluence features (Page Properties macros, labels, CQL tables) for cross-referencing between sections; these links must be set up and maintained manually. It requires an existing or newly set up Confluence instance, which the vendor does not host. Setup involves a web presentation, an installation file, a remote configuration session, and a team walkthrough. Pricing is subscription or one-time purchase, quoted individually. The kit itself doesn't perform gap analysis, audits, or certification; it supplies the documentation structure that an organization fills in and maintains itself, marketed as an alternative to an external ISO 27001 consultant.

#### Who Is the Company Behind ISMS SmartKit?

- **Seller:** [Byght](https://www.g2.com/sellers/byght)
- **HQ Location:** Norderstedt, DE
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8e734cfdd36efa6cf4d91fc1c17e9adea78799fbf65ce06cc9c96a17868ca51c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbyght-gmbh&secure%5Burl_type%5D=linkedin_company_website)  
2 employees on LinkedIn®

### [ISO+](https://www.g2.com/products/iso-consulting-services-iso/reviews)

ISO+™ is an all-in-one, flexible, customisable and versatile software solution designed to streamline the documentation and implementation of various ISO management systems and frameworks for compliance and certification purposes. It gives organisations the capacity to manage their workflows automatically and paperlessly. ISO+™ fits with Construction, IT, Trades, Manufacturing, Services, Engineering, Health, Human Services, and Many More - businesses of all sizes, from startups to global enterprises. But the biggest game-changer differentiating ISO+™ from generic tools is its Robust Documentation Library - built into the platform and seamlessly integrated with other documents, modules, online forms, tables, and graphs.

**Average Rating:** 4.8/5.0

**Total Reviews:** 3

#### How Do G2 Users Rate ISO+?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.4/10)
- **Ease of Use:** 9.4/10 (Category avg: 9.0/10)
- **Ease of Admin:** 9.2/10 (Category avg: 8.9/10)
- **Quality of Support:** 9.4/10 (Category avg: 9.2/10)

#### Who Is the Company Behind ISO+?

- **Seller:** [ISO Consulting Services](https://www.g2.com/sellers/iso-consulting-services)
- **HQ Location:** Melbourne, AU
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8301636f65fd41ae6cb460edac522cad3e21d17ee800096e3d9f52633c738d99&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fiso-consulting-services&secure%5Burl_type%5D=linkedin_company_website)  
5 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Do G2 Reviewers Say About ISO+?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of ISO+, finding it simple to set up and navigate.
- Users appreciate the **automation** features of ISO+, which streamline document storage and creation seamlessly.
- Users value the **centralized management** of ISO+, enjoying its user-friendly layout and supportive customer service.
- Users appreciate the **excellent customer support** during integration, making the setup process smooth and easy.
- Users appreciate the **data centralization** of ISO+, enjoying easy access to documents and streamlined workflows.

##### Cons

- Users feel overwhelmed by the **feature overload** in ISO+, finding many modules unnecessary for their needs.
- Users believe that adding more features would enhance the **project management capabilities** of ISO+ significantly.

#### What Are Recent G2 Reviews of ISO+?

**["ISO Consulting Made NDIS Compliance Feel Achievable and Structured"](https://www.g2.com/survey_responses/iso-review-12769751)**

**Rating:** 5.0/5.0 stars

_— Verified User in Individual & Family Services_

[Read full review](https://www.g2.com/survey_responses/iso-review-12769751)

**["ISO+ the user friendly all in one integrated system"](https://www.g2.com/survey_responses/iso-review-11641530)**

**Rating:** 5.0/5.0 stars

_— Clarrissa S._

[Read full review](https://www.g2.com/survey_responses/iso-review-11641530)

### [ISO Manager Software](https://www.g2.com/products/iso-manager-software/reviews)

ISO Manager is an all-in-one digital command center designed specifically to manage ISO 27001 / Information Security Management System (ISMS) clause 4-10 auditable requirements and all applicable GRC compliance requirements (legal / regulatory and contractual). Its fast, flexible and affordable for any size organization.

#### Who Is the Company Behind ISO Manager Software?

- **Seller:** [ISO Manager](https://www.g2.com/sellers/iso-manager)
- **Year Founded:** 2013
- **HQ Location:** Phoenix, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=33b6fa6f002c5c710f3ee821725d4fdeeb90cdd162c78382367f111da2196746&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fpdca-manager-software%2F&secure%5Burl_type%5D=linkedin_company_website)  
5 employees on LinkedIn®

### [ISOPlanner](https://www.g2.com/products/isoplanner/reviews)

ISOPlanner offers ISO 27001 compliance software that simplifies managing ISO compliance within the Microsoft 365 ecosystem. Their software is designed for organizations new to ISO standards or those looking to optimize their existing compliance processes. Trusted by over 400 companies across more than 15 countries, ISOPlanner enhances collaboration and efficiency by integrating with tools like Sharepoint, Outlook, and Teams. With features including an AI Assistant and quick preparation for ISO audits, ISOPlanner aims to help clients achieve compliance and streamline their management systems.

#### Who Is the Company Behind ISOPlanner?

- **Seller:** [ISOPlanner](https://www.g2.com/sellers/isoplanner)
- **Year Founded:** 2021
- **HQ Location:** Driebergen-Rijsenburg, NL
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8b400a27a048f7fe05fb6a52171754ccc5ef4e2dc39316262de44d9f73dde6fd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fisoplanner%2F&secure%5Burl_type%5D=linkedin_company_website)  
9 employees on LinkedIn®

### [Isora GRC](https://www.g2.com/products/isora-grc/reviews)

Isora GRC is the collaborative GRC Assessment Platform™ that gives security teams one shared workspace to run assessments, manage vendors and assets, track live risks, and publish audit-ready reports. Built specifically for information security teams, Isora replaces fragmented spreadsheets and bloated enterprise GRC tools with a focused, fast-to-deploy platform that teams actually adopt. With structured workflows for risk and compliance assessments, connected inventories, and real-time visibility, security teams can operationalize their programs without the chaos. ❇️ Assessment Management Launch and track security assessments across departments, vendors, and frameworks in one centralized dashboard. See real-time progress, identify bottlenecks, and organize assessment campaigns by compliance goal. Every assessment stays connected to risks, owners, and evidence, creating a single source of truth for audit readiness. ❇️ Questionnaires & Surveys Deploy structured, user-friendly questionnaires to evaluate controls, collect evidence, and identify gaps. Built for collaboration, Isora's questionnaires let multiple contributors add responses, upload documents, and complete assessments without manual handoffs. Apply custom logic, weighted scoring, and pre-built templates for frameworks like NIST CSF, CIS, HIPAA, and GLBA. ❇️ Scorecards & Reports Generate automated scorecards and audit-ready reports that roll up assessment results, risks, and remediation into clear, actionable insights. Compare performance across targets, drill down into individual responses, and visualize high-risk areas with risk matrix reports. Export reports in PDF or CSV for external sharing, audits, and compliance documentation. ❇️ Inventory Management Maintain a complete, connected inventory of vendors, assets, and applications with custom metadata, deployment tracking, and assessment links. Search, filter, and export inventory data to support risk analysis, vendor reviews, and regulatory reporting. Keep inventory up to date with collaborative updates and automated enrichment. ❇️ Exception Management Track policy exceptions with clear accountability, expiration dates, and contextual links to affected assets and vendors. Create exceptions manually or via API, assign them to specific units, and search or filter for efficient oversight. Ensure timely reviews and minimize the risk of overlooked or outdated exceptions. ❇️ Risk Management Centralize risk tracking with a collaborative risk register that connects directly to assessment findings, owners, and remediation plans. Track risks with detailed attributes, custom fields, and risk scoring. Use interactive risk matrix widgets to visualize and prioritize high-impact risks, then export or import risk data for audit and compliance purposes.

**Average Rating:** 5.0/5.0

**Total Reviews:** 2

#### How Do G2 Users Rate Isora GRC?

- **Has the product been a good partner in doing business?:** 10.0/10 (Category avg: 9.4/10)
- **Ease of Use:** 8.3/10 (Category avg: 9.0/10)
- **Ease of Admin:** 10.0/10 (Category avg: 8.9/10)
- **Quality of Support:** 10.0/10 (Category avg: 9.2/10)

#### Who Is the Company Behind Isora GRC?

- **Seller:** [SaltyCloud](https://www.g2.com/sellers/saltycloud)
- **Year Founded:** 2017
- **HQ Location:** Austin, US
- **LinkedIn® Page:** [linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1aeec6fe88e400b69353770dcb46ba73fb1496f0389ca8d2d3f96811e0c9d284&secure%5Burl%5D=http%3A%2F%2Flinkedin.com%2Fcompany%2Fsaltycloudpbc%2F&secure%5Burl_type%5D=linkedin_company_website)  
12 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Medium

#### What Do G2 Reviewers Say About Isora GRC?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **responsive communication** of Isora GRC, appreciating timely support and training efforts.
- Users praise the **excellent customer support** of Isora GRC, benefiting from its responsive and helpful team.
- Users find Isora GRC to be **easy to use** , complemented by excellent support and a responsive team.
- Users value the **exceptional support** from Isora GRC, appreciating quick responses and effective training assistance.
- Users value the **excellent support** from Isora GRC, appreciating its ease of use and responsive team.

#### What Are Recent G2 Reviews of Isora GRC?

**["Isora is a great tool for risk assessments on hardware assets and applications."](https://www.g2.com/survey_responses/isora-grc-review-10427887)**

**Rating:** 5.0/5.0 stars

_— Verified User in Higher Education_

[Read full review](https://www.g2.com/survey_responses/isora-grc-review-10427887)

**["Simple But Robust - Enterprise Grade Solution"](https://www.g2.com/survey_responses/isora-grc-review-9976316)**

**Rating:** 5.0/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/isora-grc-review-9976316)

### [issosmart Pro](https://www.g2.com/products/issosmart-pro/reviews)

A cloud based management system streamlining ISO compliance for ISO 9001, ISO 14001, ISO 45001 and ISO 27001.

#### Who Is the Company Behind issosmart Pro?

- **Seller:** [RKMS](https://www.g2.com/sellers/rkms)
- **Year Founded:** 1994
- **HQ Location:** Blackpool, GB
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a96a39e7f8cc9c474dbc76b38c7e0789658610a5b4ef008134ccf5570e9acc9b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F11501250&secure%5Burl_type%5D=linkedin_company_website)  
19 employees on LinkedIn®

### [JUS.](https://www.g2.com/products/jus/reviews)

JUS. is a privacy, compliance, and legal management platform powered by JUS. AI (Jusi) — helping organizations digitize compliance programs and automate legal workflows across KVKK, GDPR, ISO 27001, ISO 27701, and 300+ regulations in 65+ countries, all from a single platform. Trusted by 100+ enterprise organizations including Turkish government ministries, defense institutions, healthcare groups, and industrial holdings, JUS. replaces fragmented spreadsheets and disconnected tools with a unified compliance and legal operating system. JUS. AI — Meet “Jusi” At the core of JUS. is Jusi, an AI agent built on JUS. Intelligence. Jusi works across all platform modules, purpose-trained on Turkish law, case precedents, and regulatory frameworks. Legal and compliance teams use Jusi to search case law and court decisions, draft legal briefs and petitions, generate contracts and compliance documents, analyze agreements for risk and missing clauses, and automate document creation across modules — all within the same environment where their compliance data already lives. Unlike standalone legal AI tools, Jusi operates with full context of your organization’s data inventory, vendor relationships, ongoing cases, and regulatory obligations. The Platform JUS. offers 13 integrated modules covering the full compliance lifecycle: data inventory management, cookie and consent management, data subject rights (DSAR) automation, breach management, risk and DPIA workflows, vendor and third-party risk, contract management, document management, audit management, asset management, training management, litigation management, and a global regulatory intelligence hub. Organizations can activate the modules relevant to their current compliance stage and scale as their program grows — without switching platforms or rebuilding processes. Built for KVKK and Beyond JUS. is developed and operated in Turkey, with all data stored on domestic servers. This directly addresses KVKK’s data localization requirements that most global platforms cannot satisfy. At the same time, JUS. supports GDPR, CCPA, LGPD, PDPA, and 300+ additional regulations, making it the right choice for multinational organizations managing cross-border compliance from a single environment. Who Uses JUS. JUS. is used by Data Protection Officers (DPOs), legal counsel, compliance teams, IT security departments, and risk managers at enterprise organizations across financial services, healthcare, defense, retail, manufacturing, and public sector. It is particularly suited for organizations preparing for KVKK compliance, ISO 27001 or ISO 27701 certification, GDPR audit readiness, or looking to bring AI into their legal operations without leaving their compliance environment. Trust and Security JUS. holds ISO 27001, ISO 27701, ISO 20000-1, and ISO 15504 certifications. With 50,000+ active users and 99.9% uptime, JUS. supports compliance and legal operations at enterprise scale. Key Problems Solved — Manual compliance replaced with automated workflows and real-time audit trails — Legal briefs, contracts, and documents generated by Jusi in seconds — DSAR requests handled end-to-end with deadline tracking — Data breach incidents managed from detection to 72-hour notification — Regulatory changes tracked automatically across 65+ jurisdictions

#### Who Is the Company Behind JUS.?

- **Seller:** [Veri Security Bilişim ve Danışmanlık Hizmetleri A.Ş.](https://www.g2.com/sellers/veri-security-bilisim-ve-danismanlik-hizmetleri-a-s)
- **Year Founded:** 2018
- **HQ Location:** Kadıköy, TR
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0c242b424bf05ad0ba6d2c67ee79091d453f4b0505d8c4399e22a8b384b4c046&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fjuspoint%2F&secure%5Burl_type%5D=linkedin_company_website)  
3 employees on LinkedIn®

### [kaimon](https://www.g2.com/products/kaimon/reviews)

kaimon is a file integrity monitoring (FIM) platform built for Linux infrastructure. It uses an eBPF kernel agent to capture every file lifecycle event - create, modify, move, delete, attribute change and write - with full process, user and device context, across bare-metal servers, virtual machines and containerized workloads. Traditional file integrity monitoring tools push raw filesystem events into a SIEM and expect a security engineer to spend weeks writing suppression rules before the output means anything to an auditor. Most evaluations end before that point, because a tool that reports thousands of routine deployment writes as findings is worse than no tool at all. kaimon replaces that work with AI-powered automatic baselining. On deployment the agent begins learning immediately. Over seven days it runs progressive, time-staggered analysis to capture every layer of operational noise - container startup artifacts, log rotation, package updates, nightly cron and weekly maintenance - and generates narrowly scoped suppression rules for legitimate activity. On day seven the baseline locks and the system becomes deterministic: anything that does not match established patterns is a genuine anomaly worth investigating. The baseliner is security-aware by design. It refuses to suppress changes to credential stores, privilege configuration, service unit definitions, SSH key files or system logs, so an attacker cannot teach it to ignore malicious behavior during the learning window. Built-in detection categories classify anomalies by severity out of the box: unauthorized changes to credential and privilege files, persistence mechanisms including SSH key injection, service backdoors and dynamic linker hijacking, log tampering, kernel module and driver changes, data exfiltration to removable media or via archive creation, permission and ownership manipulation, cron modifications, and package installs outside declared maintenance windows. Container coverage is native. A single kernel agent resolves overlay filesystem paths for Docker, Kubernetes, containerd, Podman, CRI-O and LXC, with no sidecars, no image modifications and no per-container agents. Reports are generated daily and map directly to the controls auditors ask about: SOC 2 CC6 and CC7, HIPAA 164.312(c)(1), PCI DSS 10.5.5 and 11.5, and NIST SP 800-53 SI-7. Each carries an AI-written, framework-specific verdict covering workload profile, anomaly assessment and compliance status. Evidence exports as PDF, HTML or JSON, and delivers by webhook to any SIEM, Slack, Discord or email. An interactive dashboard provides forensic deep search across the entire fleet, filtering by host, user, process and file path, for engineers who need more than an executive summary. Deployment is a single command. The agent detects the distribution and architecture, verifies checksums, installs, and configures itself. Deploy, baseline, report - with no regex, no rule authoring and no security engineer in the loop.

#### Who Is the Company Behind kaimon?

- **Seller:** [kaimon](https://www.g2.com/sellers/kaimon)

### [kameon AUDIT](https://www.g2.com/products/kameon-audit/reviews)

kameon Audit – The smart solution for efficient audit management kameon Audit is the intuitive audit management software designed for auditors and certification bodies. Our cloud-based solution significantly reduces administrative effort, standardizes audit processes, and optimizes planning. With collaborative features, it enhances communication with clients and stakeholders, ensuring seamless audits and better results.

#### Who Is the Company Behind kameon AUDIT?

- **Seller:** [kameon](https://www.g2.com/sellers/kameon)
- **HQ Location:** Berlin, DE
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=db74175905474eeaadcb547dee710d5c2d6c4a1773c6455e6a70a56db9827203&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fkameon-gmbh%2F&secure%5Burl_type%5D=linkedin_company_website)  
4 employees on LinkedIn®

### [Kaspera Shield](https://www.g2.com/products/kaspera-shield/reviews)

Kaspera Shield is a complete cybersecurity platform built for small and medium-sized businesses that don't have a dedicated IT or security team. Most security tools are built for enterprises with six-figure budgets and full-time security staff. Kaspera Shield brings that same level of protection to any business — law firms, medical practices, accounting firms, agencies, startups — at a price that makes sense. From a single dashboard, businesses can scan their external attack surface for vulnerabilities, run phishing simulations to test and train employees, generate AI-powered security policies, monitor for data breaches, and track compliance against frameworks like SOC 2, HIPAA, and ISO 27001. There's no complex setup, no security expertise required, and no need to stitch together five different tools. Kaspera Shield gives you a security score, tells you exactly what's wrong, and helps you fix it — all in one place. Key features: External vulnerability scanning with prioritized findings and CVE tracking Phishing simulation and employee security training AI-generated security policies with employee acknowledgement tracking Breach monitoring across employee email addresses Compliance audit workflows for SOC 2, HIPAA, ISO 27001, NIST, PCI DSS, and more Automated monthly security reports and shareable trust pages Native Microsoft 365 and Google Workspace integrations Built-in AI security assistant for plain-English guidance 14-day free trial. No credit card required.

#### Who Is the Company Behind Kaspera Shield?

- **Seller:** [Kaspera](https://www.g2.com/sellers/kaspera)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [Keel GRC](https://www.g2.com/products/keel-grc/reviews)

Keel is a governance, risk and compliance (GRC) platform for small and mid-sized companies doing compliance for the first time. It is built for the founder, IT lead, or fractional CISO who has to pass a first SOC 2 or ISO 27001 audit without a dedicated compliance team. Keel stores controls and evidence in a single graph and crosswalks them across frameworks, so a policy you approve or a piece of evidence you upload counts toward every framework that requires it. Thirteen frameworks are live today: SOC 2, ISO/IEC 27001:2022, HIPAA, PCI DSS 4.0.1, CIS Controls v8.1, NIST CSF 2.0, NIST SP 800-53 Rev. 5, ISO 9001:2015, ISO/IEC 42001:2023, NIST AI RMF 1.0, the EU AI Act, AI Governance Essentials, and ESG Essentials. The platform includes a risk register with likelihood and impact scoring, more than 50 framework-mapped policy templates with AI drafting and PDF export, vendor risk management, automated security questionnaires, evidence collection, access reviews, readiness reports, a Statement of Applicability, and a public trust center for sharing your security posture with customers. MSPs can manage multiple client programs from one console, with each client in an isolated, white-label workspace. Every new workspace starts with a 14-day free trial of Pro. No credit card is required, and when the trial ends you keep Pro or move to the Free plan with your data intact. The Free plan includes NIST CSF 2.0 and AI Governance Essentials. Paid plans start at $99 per month.

#### Who Is the Company Behind Keel GRC?

- **Seller:** [Keel](https://www.g2.com/sellers/keel-2026-07-24)
- **Year Founded:** 2026
- **HQ Location:** Atlanta, US
- **Twitter:** @keelgrc
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f4fd04ff11c84a35a8fd9995f07d73b5ec9ad2069caa3504dea50f0289aeee16&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fkeelgrc&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [Kravklar](https://www.g2.com/products/kravklar/reviews)

Kravklar is a NIS2 compliance self-assessment tool for Norwegian SMBs. It evaluates organizational maturity across all 10 security categories in NIS2 Article 21, generates a radar chart visualization, and provides a prioritized gap analysis with board-ready PDF reports. Free tier includes the full 56-question assessment with scores. Paid tier adds detailed gap analysis, action plans, and exportable reports.

#### Who Is the Company Behind Kravklar?

- **Seller:** [Torsvik Labs](https://www.g2.com/sellers/torsvik-labs)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [Kunnus](https://www.g2.com/products/kunnus/reviews)

Kunnus is a compliance management platform that enables manufacturers of products with digital elements to meet the requirements of the EU Cyber Resilience Act (CRA). Developed by Think Ahead Technologies GmbH in Stuttgart, Germany, Kunnus provides an all in one solution for organizing, documenting, and managing the regulatory obligations introduced by the CRA. Kunnus is covering everything from product classification and SBOM management to vulnerability tracking and audit preparation. The CRA requires manufacturers to implement cybersecurity measures throughout the entire product lifecycle, from design and development through post market monitoring. Kunnus supports organizations in structuring these processes by centralizing compliance relevant documentation, vulnerability handling, and reporting workflows in a single platform. The regulation affects a broad spectrum of products, including IoT devices, industrial equipment with digital interfaces, RFID enabled items, smart home products, and many other connected products that manufacturers may not immediately associate with cybersecurity regulation. Kunnus automatically generates SBOMs from build processes and continuously monitors all dependencies for new vulnerabilities. Kunnus is built on a foundation of European digital sovereignty. All data is hosted exclusively within the EU, with no reliance on US based cloud providers or infrastructure. With Kunnus Think Ahead is ensuring full alignment with European data protection standards and giving manufacturers complete control over their compliance data. Think Ahead values open source principles, which is reflected in tools like the Kunnus Scanner, an open source utility available on GitHub that can scan Windows based systems and feed the results directly into the platform. With key CRA deadlines approaching, including mandatory vulnerability reporting from September 2026 and full compliance by December 2027, Kunnus helps manufacturers establish structured compliance processes early. The platform serves any company worldwide that sells products with digital elements within the European Union.

#### Who Is the Company Behind Kunnus?

- **Seller:** [Think Ahead Technologies](https://www.g2.com/sellers/think-ahead-technologies)
- **Year Founded:** 2024
- **HQ Location:** Stuttgart, DE
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=5a7b79dcdc52872d7ca69fe7fa5282e3aa51aacfbac5578f71f6bdf870f8dd04&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthink-ahead-tech%2F&secure%5Burl_type%5D=linkedin_company_website)  
5 employees on LinkedIn®

- [‹ Prev ‹ Prev](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=14#product-list)
- [1](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score#product-list)
- [2](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=2#product-list)
- …
- [11](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=11#product-list)
- [12](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=12#product-list)
- [13](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=13#product-list)
- [14](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=14#product-list)
- 15
- [16](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=16#product-list)
- [17](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=17#product-list)
- [18](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=18#product-list)
- [19](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=19#product-list)
- [20](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=20#product-list)
- [Next › Next ›](/categories/security-compliance/f/soc-2?filters%5BSecurity+Compliance+Software%5D%5B%5D=618&order=g2_score&page=16#product-list)

Spotlight Categories

[Job Search Sites](https://www.g2.com/categories/job-search-sites)

[Electronic Data Interchange (EDI) Software](https://www.g2.com/categories/electronic-data-interchange-edi)

[Contact Center Workforce Software](https://www.g2.com/categories/contact-center-workforce)

[Product Lifecycle Management (PLM) Software](https://www.g2.com/categories/product-lifecycle-management-plm)

[Applicant Tracking Systems (ATS)](https://www.g2.com/categories/applicant-tracking-systems-ats)

Similar Categories

- [Anti-Money Laundering (AML)](/categories/anti-money-laundering)
- [Audit Management](/categories/audit-management)
- [Business Continuity Management](/categories/business-continuity-management-software)
- [Call Compliance](/categories/call-compliance)
- [Carbon Accounting](/categories/carbon-accounting)

- [Digital Communications Governance](/categories/digital-communications-governance)
- [Disclosure Management](/categories/disclosure-management)
- [Enterprise Risk Management (ERM)](/categories/enterprise-risk-management-erm)
- [Entity Management](/categories/entity-management)
- [Environmental, Social, and Governance (ESG) Reporting](/categories/environmental-social-and-governance-esg-reporting)

- [Ethics and Compliance Learning](/categories/ethics-and-compliance-learning)
- [Investigation Management](/categories/investigation-management)
- [Operational Risk Management](/categories/operational-risk-management)
- [Other GRC Tools](/categories/other-grc-tools)
- [Policy Management](/categories/policy-management)

[Browse Security Compliance Themes](/categories/security-compliance/themes)

Below are the top-rated Security Compliance Software with SOC 2 capabilities, as verified by G2’s Research team. Real users have identified SOC 2 as an important function of Security Compliance Software. Compare different products that offer this feature so you can decide which is best for your business needs.

Show More