# Best Vendor Security and Privacy Assessment Software

## How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

**Total Products under this Category:** 136

### Category Stats (Aug 2026)

- **Average Rating:** 4.56/5 (↑0.01 vs Jul 2026) The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** UpGuard Trust Exchange (+10.0%) - Among all products in this category, UpGuard Trust Exchange recorded the largest rating increase compared to last month

_Last updated: August 19, 2026_

## How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 15,900+ Authentic Reviews
- 136+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Vendor Security and Privacy Assessment Software
 ![G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=167976&focus%5B%5D=953&focus%5B%5D=130035)

Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Sprinto, Secureframe, Scrut Automation, IBM OpenPages, and Thoropass.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=scrut-automation&focus%5B%5D=ibm-openpages&focus%5B%5D=thoropass)

**Sponsored**

### Conveyor

Conveyor is the market-leading AI security review automation platform that helps infosec & presales teams automate the entire security review -- from security questionnaire completion and sharing security documentation like a SOC 2 in one-click. With AI so accurate, you can even pass most of your security review workflows to our new AI Agent for Customer Trust. Why teams love Conveyor: 1. The only trust center to offer an upload questionnaire for instant answers experience along with all the bells & whistles to share security documentation at scale 2. Plus, AI-questionnaire response to auto-generate 95%+ accurate answers to entire questionnaires so you can speed through review.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-21T02%3A24%3A03Z&secure%5Bdisplayable_resource_id%5D=2445&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2445&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=75579&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvendor-security-and-privacy-assessment&secure%5Btoken%5D=4c77faf048aab9cf48cdd3cabc877aadab4d3ee06546c4e8c01690e3d949fd88&secure%5Burl%5D=https%3A%2F%2Fwww.conveyor.com&secure%5Burl_type%5D=company_website)

### [Vanta](https://www.g2.com/products/vanta/reviews)

Vanta is the leading Agentic Trust Platform helping 15k+ companies—like Atlassian, Duolingo, Golden State Warriors, and Icelandair—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management.

**Average Rating:** 4.6/5.0

**Total Reviews:** 2,688

#### How Do G2 Users Rate Vanta?

- **Ease of Admin:** 8.9/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.6/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Vanta?

- **Seller:** [Vanta](https://www.g2.com/sellers/vanta)
- **Company Website:** www.vanta.com
- **Year Founded:** 2018
- **HQ Location:** San Francisco, California
- **Twitter:** @TrustVanta  
4,694 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2f43ad38aec212995a4ae41a0e8f0e9e73bbc397da8e551a7dea1b22c6d61e74&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvanta-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,871 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 55% Small, 38% Medium

#### What Do G2 Reviewers Say About Vanta?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Vanta's **ease of use** invaluable, appreciating its intuitive interface and straightforward implementation process.
- Users value Vanta for transforming **compliance into a business driver** , enhancing efficiency in the SOC 2 process.
- Users value Vanta's **automation** for enhancing compliance efficiency, allowing teams to focus on core business activities.
- Users appreciate the **time-saving automation** of Vanta, freeing them to focus on strategic tasks and compliance management.
- Users value Vanta's **seamless integrations** , enhancing compliance visibility and streamlining processes across various platforms.

##### Cons

- Users face **integration issues** with Vanta, requiring manual work and limited customization in reporting and dashboards.
- Users face challenges with **limited integrations** , especially for niche tech stacks, affecting the overall experience.
- Users express concern over **missing features** in Vanta, particularly regarding security training and support for complex tech stacks.
- Users find the **pricing issues** with Vanta to be burdensome, especially for small or solo businesses seeking compliance.
- Users feel that Vanta is **very expensive** , raising concerns about cost considerations and budget constraints.

#### What Are Recent G2 Reviews of Vanta?

**["One place for compliance less manual chasing"](https://www.g2.com/survey_responses/vanta-review-13327512)**

**Rating:** 4.0/5.0 stars

_— Md Kamran M._

[Read full review](https://www.g2.com/survey_responses/vanta-review-13327512)

**["Vanta Simplifies Compliance with Automated Evidence and Clear Dashboards"](https://www.g2.com/survey_responses/vanta-review-13322686)**

**Rating:** 4.5/5.0 stars

_— ASIF K._

[Read full review](https://www.g2.com/survey_responses/vanta-review-13322686)

#### What Are G2 Users Discussing About Vanta?

- [What is Vanta used for?](https://www.g2.com/discussions/what-is-vanta-used-for) - 3 comments, 2 upvotes

### [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews)

UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board.

**Average Rating:** 4.5/5.0

**Total Reviews:** 731

#### How Do G2 Users Rate UpGuard Vendor Risk?

- **Ease of Admin:** 9.1/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.6/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind UpGuard Vendor Risk?

- **Seller:** [UpGuard](https://www.g2.com/sellers/upguard)
- **Company Website:** upguard.com
- **Year Founded:** 2012
- **HQ Location:** Mountain View, California
- **Twitter:** @UpGuard  
8,705 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ecef7c625c5848d4830cff08a7ea502854ec4005dbbc0f617bcb2b0f106f0dd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fupguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
371 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CISO, Security Analyst
- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 47% Large, 39% Medium

#### What Do G2 Reviewers Say About UpGuard Vendor Risk?

_AI-generated summary from verified user reviews_

##### Pros

- Users find UpGuard Vendor Risk to be **user-friendly** , simplifying the management of data security and vendor assessments.
- Users value the **intuitive interface** of UpGuard, making vendor data security management straightforward and efficient.
- Users value UpGuard's **dynamic scoring system** for its efficiency in risk prioritization and threat monitoring capabilities.
- Users appreciate UpGuard for its **time-saving features** , making security monitoring efficient and user-friendly.
- Users commend UpGuard's **responsive customer support** , enhancing product integration and facilitating efficient user assistance.

##### Cons

- Users find the **lack of clarity in remediation recommendations** can complicate proper implementation for their IT teams.
- Users find UpGuard Vendor Risk **expensive** , especially for smaller organizations and in comparison to other similar tools.
- Users note the **limited functionality** of UpGuard, suggesting improvements in reporting and contextual details for better usability.
- Users highlight the need for **improvement on false positives** , affecting reliability and requiring manual intervention.
- Users find the **limited customization** of UpGuard Vendor Risk restricts personalization and flexibility in features and notifications.

#### What Are Recent G2 Reviews of UpGuard Vendor Risk?

**["Fast, Reliable AI Content Reviews with Responsive Support"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13335805)**

**Rating:** 4.5/5.0 stars

_— Daniel T._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13335805)

**["Well-Organized Platform for Security Due Diligence"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)**

**Rating:** 4.5/5.0 stars

_— Mohamed S._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)

### [Drata](https://www.g2.com/products/drata/reviews)

Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,351

#### How Do G2 Users Rate Drata?

- **Ease of Admin:** 9.2/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Drata?

- **Seller:** [Drata](https://www.g2.com/sellers/drata)
- **Company Website:** drata.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, CA 
- **Twitter:** @DrataHQ  
1,525 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=78250d6bf26d782e9bea1bfb184a4d275d7c7c99e5a9bba537cb60809142029a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdrata%2F&secure%5Burl_type%5D=linkedin_company_website)  
677 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 47% Medium, 46% Small

#### What Do G2 Reviewers Say About Drata?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **round-the-clock customer support** of Drata, which significantly enhances their experience and satisfaction.
- Users appreciate the **intuitive design** of Drata, making it easy to set up and integrate various tools effectively.
- Users appreciate the **automated compliance monitoring** of Drata, which significantly reduces manual effort and enhances security.
- Users value Drata for its **time-saving automation** , streamlining compliance tasks and making audits manageable and efficient.
- Users value Drata's **easy integrations** with various tools, streamlining the compliance process and enhancing usability.

##### Cons

- Users express a need for **more native integrations** with third-party tools to enhance Drata's monitoring capabilities.
- Users face **integration issues** with Drata, finding transitions and customizations challenging and requiring unexpected manual efforts.
- Users find **improvements needed** in Drata's configurability and auditor experience, affecting seamless transitions from other platforms.
- Users find the **lack of clarity** in Drata's UI can lead to confusion and difficulty in task management.
- Users find the **UX sometimes confusing** , making it hard to track tasks and fix issues effectively.

#### What Are Recent G2 Reviews of Drata?

**["Compliance Made Simple: Intuitive, Efficient, and Well-Supported"](https://www.g2.com/survey_responses/drata-review-13331384)**

**Rating:** 5.0/5.0 stars

_— Yusr A._

[Read full review](https://www.g2.com/survey_responses/drata-review-13331384)

**["Drata Made Our SOC 2 Evidence Collection and Policies Simple"](https://www.g2.com/survey_responses/drata-review-13332038)**

**Rating:** 5.0/5.0 stars

_— John C._

[Read full review](https://www.g2.com/survey_responses/drata-review-13332038)

#### What Are G2 Users Discussing About Drata?

- [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
- [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
- [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
- [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote
- [Complex setup and overloaded templates slow down my first audit cycle](https://www.g2.com/discussions/complex-setup-and-overloaded-templates-slow-down-my-first-audit-cycle) - 1 comment, 1 upvote

### [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,663

#### How Do G2 Users Rate Sprinto?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.6/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Sprinto?

- **Seller:** [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited)
- **Company Website:** sprinto.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @sprintoHQ  
13,279 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=88a586e2bb472645900fa1b7c798d25a8eec33961ed706d988c804e1de4cdc4a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsprinto-com&secure%5Burl_type%5D=linkedin_company_website)  
424 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 57% Small, 41% Medium

#### What Do G2 Reviewers Say About Sprinto?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Sprinto, appreciating its simplicity and thorough support during deployment.
- Users appreciate the **knowledgeable and accommodating customer support** from Sprinto, facilitating a smooth deployment and setup.
- Users value the **intuitive compliance management** of Sprinto, enhanced by exceptional support from knowledgeable account managers.
- Users find Sprinto's **customer support exceptional** , making deployment and management straightforward and efficient.
- Users value the **intuitive compliance management** of Sprinto, enhanced by exceptional support from knowledgeable account managers.

##### Cons

- Users note **integration issues** with some niche tools, but improvements are being made over time.
- Users note a need for more **customization options** in features and reporting to better fit their unique environments.
- Users experience **limited integrations** with Sprinto, leading to bugs and necessitating additional efforts for problem resolution.
- Users find the **guidance unclear** at times, especially with auditor recommendations and onboarding documentation.
- Users experience **UI/UX issues** and complicated navigation, though improvements from a recent interface update may address concerns.

#### What Are Recent G2 Reviews of Sprinto?

**["Fast path to SOC 2 Type 1 — great platform, outstanding support"](https://www.g2.com/survey_responses/sprinto-review-12885389)**

**Rating:** 5.0/5.0 stars

_— Ignacio B._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12885389)

**["Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support"](https://www.g2.com/survey_responses/sprinto-review-12898116)**

**Rating:** 5.0/5.0 stars

_— Gayathri v._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12898116)

### [Secureframe](https://www.g2.com/products/secureframe/reviews)

Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards.

**Average Rating:** 4.7/5.0

**Total Reviews:** 818

#### How Do G2 Users Rate Secureframe?

- **Ease of Admin:** 9.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Secureframe?

- **Seller:** [Secureframe](https://www.g2.com/sellers/secureframe)
- **Company Website:** secureframe.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @secureframe  
2,228 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=154d827436e7840ecd54fcd5bea92cefeb28595f6620d0dc82625a40be9119db&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsecureframe%2F&secure%5Burl_type%5D=linkedin_company_website)  
126 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 66% Small, 30% Medium

#### What Do G2 Reviewers Say About Secureframe?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Secureframe, making task tracking and setup straightforward and efficient.
- Users appreciate that Secureframe ensures **easy SOC 2 compliance** with minimal maintenance and excellent team support.
- Users value how Secureframe's **automation simplifies compliance** , making it easy and manageable for all users.
- Users value Secureframe's **strong security measures** , enhancing trust while managing sensitive client information effectively.
- Users value the **seamless integrations** of Secureframe, significantly enhancing efficiency and compliance management for small teams.

##### Cons

- Users face **integration issues** with niche tools, requiring manual effort and time for proper setup.
- Users find **limited customization** options for timing and follow-up schedules frustrating for compliance and training needs.
- Users express frustration with **limited integrations** , noting challenges in automating connections with key platforms like Azure Dev Ops.
- Users feel that the **audit function needs improvement** , as reliance on external tools complicates the process.
- Users note the need for **missing features** in Secureframe, particularly around policy test management enhancements.

#### What Are Recent G2 Reviews of Secureframe?

**["Secureframe Streamlines Compliance with Continuous Monitoring and Automated Evidence Collection"](https://www.g2.com/survey_responses/secureframe-review-13287308)**

**Rating:** 5.0/5.0 stars

_— Michael F._

[Read full review](https://www.g2.com/survey_responses/secureframe-review-13287308)

**["Automation That Makes Compliance and Audit Prep Stress-Free"](https://www.g2.com/survey_responses/secureframe-review-13140194)**

**Rating:** 5.0/5.0 stars

_— Austin R._

[Read full review](https://www.g2.com/survey_responses/secureframe-review-13140194)

#### What Are G2 Users Discussing About Secureframe?

- [How are you getting value from the AI features when first-pass answers and automation feel hit-or-miss?](https://www.g2.com/discussions/how-are-you-getting-value-from-the-ai-features-when-first-pass-answers-and-automation-feel-hit-or-miss) - 1 comment, 1 upvote
- [Is anyone else struggling with limited reporting and document/search friction during executive reviews?](https://www.g2.com/discussions/is-anyone-else-struggling-with-limited-reporting-and-document-search-friction-during-executive-reviews) - 1 comment, 1 upvote
- [What do you do to make the first-year setup and control mapping less overwhelming?](https://www.g2.com/discussions/what-do-you-do-to-make-the-first-year-setup-and-control-mapping-less-overwhelming) - 1 comment, 1 upvote
- [How are other teams handling integrations that are partially supported or keep needing manual work?](https://www.g2.com/discussions/how-are-other-teams-handling-integrations-that-are-partially-supported-or-keep-needing-manual-work) - 1 comment
- [Unreliable training and login flows slow down my audits and force awkward deadline conversations](https://www.g2.com/discussions/unreliable-training-and-login-flows-slow-down-my-audits-and-force-awkward-deadline-conversations) - 1 comment

### [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

**Average Rating:** 4.9/5.0

**Total Reviews:** 1,311

#### How Do G2 Users Rate Scrut Automation?

- **Ease of Admin:** 9.6/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.2/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.2/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scrut Automation?

- **Seller:** [Scrut Automation](https://www.g2.com/sellers/scrut-automation)
- **Company Website:** www.scrut.io
- **Year Founded:** 2022
- **HQ Location:** Palo Alto, US
- **Twitter:** @scrutsocial  
120 Twitter followers
- **LinkedIn® Page:** [in.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bc41c2e597940ae09ba338bf6abec320af78c3999ea4eb88e00635f919f04135&secure%5Burl%5D=https%3A%2F%2Fin.linkedin.com%2Fcompany%2Fscrut-automation&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 50% Small, 48% Medium

#### What Do G2 Reviewers Say About Scrut Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Scrut Automation’s **ease of use** essential for tracking tasks and collaboration across teams effectively.
- Users value the **exceptional customer support** from Scrut Automation, which enhances their experience and success in compliance.
- Users highlight the **exceptional support** from Priyanshi and the Scrut team throughout their compliance journey.
- Users highlight Scrut Automation's **exceptional compliance management** , simplifying SOC 2 processes with outstanding support and integrated services.
- Users value the **clarity in compliance documentation** offered by Scrut Automation, aiding successful audits and implementation.

##### Cons

- Users note the need for **improvement in UI, documentation, and bug resolution** , which complicates the overall experience.
- Users note the **missing features** like auto-answerable security and limited customization options for reports in Scrut Automation.
- Users face **technical issues** that can overwhelm non-technical team members and hinder platform usability.
- Users note the need for **improvements in manual processes** , particularly in onboarding and feature clarity for better usability.
- Users find the **learning curve steep** , facing challenges in navigation and understanding the certification process in Scrut Automation.

#### What Are Recent G2 Reviews of Scrut Automation?

**["Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency"](https://www.g2.com/survey_responses/scrut-automation-review-13049695)**

**Rating:** 4.0/5.0 stars

_— Ravindra N._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-13049695)

**["Transforming Compliance and Security Management with Scrut Automation"](https://www.g2.com/survey_responses/scrut-automation-review-10499291)**

**Rating:** 5.0/5.0 stars

_— Karan A._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-10499291)

#### What Are G2 Users Discussing About Scrut Automation?

- [What is Scrut Automation used for?](https://www.g2.com/discussions/what-is-scrut-automation-used-for) - 1 comment, 1 upvote

### [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)

OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies.

**Average Rating:** 4.2/5.0

**Total Reviews:** 66

#### How Do G2 Users Rate IBM OpenPages?

- **Ease of Admin:** 7.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind IBM OpenPages?

- **Seller:** [IBM](https://www.g2.com/sellers/ibm)
- **Year Founded:** 1911
- **HQ Location:** Armonk, New York, United States
- **Twitter:** @IBMSecurity  
74,660 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website)  
328,202 employees on LinkedIn®
- **Ownership:** SWX:IBM

#### Who Uses This Product?

- **Top Industries:** Banking, Information Technology and Services
- **Company Size:** 39% Medium, 34% Large

#### What Do G2 Reviewers Say About IBM OpenPages?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **effective risk management capabilities** of IBM OpenPages, improving compliance and monitoring within their organizations.
- Users value the **time-saving features** of IBM OpenPages, enhancing workflow efficiency and minimizing mistakes.
- Users appreciate the **automation capabilities** of IBM OpenPages, benefiting from smart insights and streamlined compliance processes.
- Users love the **intuitive interface** of IBM OpenPages, making it easy to navigate and utilize for effective risk management.
- Users value the **robust security features** of IBM OpenPages, enhancing trust during audits and compliance management.

##### Cons

- Users find the **complexity** of IBM OpenPages challenging, leading to a steep learning curve and cumbersome workflows.
- Users find the **high cost** of IBM OpenPages to be a significant drawback, affecting overall value and accessibility.
- Users note the **usability challenges** of IBM OpenPages, citing a steep learning curve and complex customization processes.
- Users face a **steep learning curve** with IBM OpenPages, making usability challenging, especially for new or occasional users.
- Users find the **steep learning curve** of IBM OpenPages challenging, especially for infrequent users and report generation.

#### What Are Recent G2 Reviews of IBM OpenPages?

**["Automates Security Tasks, But Pricey"](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)**

**Rating:** 4.0/5.0 stars

_— Madhav B._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)

**["Transforms Risk Management and Compliance"](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)**

**Rating:** 5.0/5.0 stars

_— Charlotte W._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)

#### What Are G2 Users Discussing About IBM OpenPages?

- [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery)
- [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool)
- [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages)
- [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson)

### [Thoropass](https://www.g2.com/products/thoropass/reviews)

Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.

**Average Rating:** 4.7/5.0

**Total Reviews:** 580

#### How Do G2 Users Rate Thoropass?

- **Ease of Admin:** 9.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Thoropass?

- **Seller:** [Thoropass](https://www.g2.com/sellers/thoropass)
- **Company Website:** thoropass.com
- **Year Founded:** 2019
- **HQ Location:** New York
- **Twitter:** @thoropass  
379 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b1f297756fc129866b36b217a21369c351ca7d0a7174dc50b89b265a25747e91&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthoropass%2F&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 71% Small, 25% Medium

#### What Do G2 Reviewers Say About Thoropass?

_AI-generated summary from verified user reviews_

##### Pros

- Users highlight the **ease of use** of Thoropass, enjoying the intuitive dashboard and organized features.
- Users appreciate the **excellent support** from Thoropass, making rigorous audits feel manageable and efficient.
- Users value the **exceptional customer support** from Thoropass that aids in achieving compliance and project clarity.
- Users value the **integrations** of Thoropass, significantly streamlining compliance processes and saving valuable time.
- Users commend the **helpful customer support** of Thoropass, which facilitates success throughout the audit process.

##### Cons

- Users find a **lack of clarity** in Thoropass due to disjointed UX and insufficient information at sales points.
- Users face **integration issues** with Thoropass, leading to exceptions and complications that hinder functionality.
- Users feel the **UX needs improvement** , citing clunkiness and disjointedness that hinder the overall experience.
- Users report a lack of **visibility regarding audit status** , making it challenging to track progress effectively.
- Users note that **improvements are needed** in communication, UI stability, and feature development for Thoropass.

#### What Are Recent G2 Reviews of Thoropass?

**["Thoropass and SOC2 process"](https://www.g2.com/survey_responses/thoropass-review-11551425)**

**Rating:** 5.0/5.0 stars

_— Nicole B._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-11551425)

**["Centralizes Compliance Tasks Efficiently"](https://www.g2.com/survey_responses/thoropass-review-10958552)**

**Rating:** 5.0/5.0 stars

_— Monica ._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-10958552)

#### What Are G2 Users Discussing About Thoropass?

- [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment

### [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

**Average Rating:** 4.6/5.0

**Total Reviews:** 107

#### How Do G2 Users Rate OneTrust Tech Risk & Compliance?

- **Ease of Admin:** 8.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.5/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.4/10 (Category avg: 7.9/10)

#### Who Is the Company Behind OneTrust Tech Risk & Compliance?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 46% Medium, 40% Small

#### What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, enhancing efficiency through a centralized platform.
- Users value the **automation capabilities** of OneTrust, effectively streamlining risk and compliance management processes.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance for simplifying risk and compliance management.
- Users appreciate the **centralized risk and compliance management** of OneTrust, enhancing efficiency and visibility in workflows.
- Users value the **centralized platform** of OneTrust Tech Risk & Compliance for streamlined tracking and improved efficiency.

##### Cons

- Users find the **complex implementation** of OneTrust Tech Risk & Compliance challenging, needing considerable time and planning for setup.
- Users find the **difficult setup** of OneTrust Tech Risk & Compliance to be complex and time-consuming, impacting usability.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance to be challenging for newcomers during setup.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance daunting, complicating initial setup and usability.
- Users find that the **slow loading** of OneTrust Tech Risk & Compliance hampers performance and can affect usability.

#### What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance?

**["OneTrust is the only GRC tool that works!"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)**

**Rating:** 5.0/5.0 stars

_— Gerald P._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)

**["The best GRC Product on the Market"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)**

**Rating:** 5.0/5.0 stars

_— Chinua K._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)

#### What Are G2 Users Discussing About OneTrust Tech Risk & Compliance?

- [What improvements would you suggest for OneTrust GRC to better meet your compliance needs?](https://www.g2.com/discussions/what-improvements-would-you-suggest-for-onetrust-grc-to-better-meet-your-compliance-needs)

### [Responsive, formerly RFPIO](https://www.g2.com/products/responsive-formerly-rfpio/reviews)

Responsive is the global leader in strategic response management software, transforming how organizations share and exchange critical information. Our commitment to product innovation and customer success empowers companies to accelerate growth, mitigate risk and improve the employee experience by leveraging intelligent technologies to quickly and accurately manage RFPs, RFIs, security questionnaires (VSQs), due diligence questionnaires (DDQs), risk assessments and all other complex information requests (RFXs). With Responsive, frontline teams deliver superior responses by automating the completion of questionnaires, documents and spreadsheets while collaborating with stakeholders, improving processes with data insights, and quickly accessing approved content across popular business applications.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1,301

#### How Do G2 Users Rate Responsive, formerly RFPIO?

- **Ease of Admin:** 8.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 7.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Responsive, formerly RFPIO?

- **Seller:** [Responsive](https://www.g2.com/sellers/responsive)
- **Company Website:** www.responsive.io
- **Year Founded:** 2016
- **HQ Location:** Frisco, Texas
- **Twitter:** @responsiveio  
1,735 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=82217c41f6a5e492d82f08bf2e615eda4cafadcdbd2bcc37d9ca3f315e279e7d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fresponsiveio&secure%5Burl_type%5D=linkedin_company_website)  
716 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Proposal Manager, Proposal Writer
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 48% Medium, 39% Large

#### What Do G2 Reviewers Say About Responsive, formerly RFPIO?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Responsive, appreciating its intuitive features and smooth integration with existing tools.
- Users appreciate the **efficient import facilities** and **powerful project creation tools** that save time and enhance productivity.
- Users appreciate how Responsive significantly **saves time** by streamlining RFP management and enhancing teamwork across departments.
- Users highlight the **efficiency** of Responsive, dramatically reducing response times and enhancing collaboration with intuitive features.
- Users appreciate the **team collaboration features** of Responsive, streamlining RFP processes and enhancing efficiency across departments.

##### Cons

- Users face a **steep learning curve** with Responsive due to a complicated UI and basic text formatting tools.
- Users find the interface **not intuitive** , complicating tasks like text formatting and deduplication management.
- Users report **inaccurate responses** from AI, noting issues with autofill and static response discrepancies.
- Users find many **non-intuitive features** in Responsive, leading to a steep learning curve and inefficiencies.
- Users note **missing features** like advanced formatting options and improved AI accuracy, affecting overall usability.

#### What Are Recent G2 Reviews of Responsive, formerly RFPIO?

**["Effortless RFP Management, Clean and Simple Interface"](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-4305533)**

**Rating:** 5.0/5.0 stars

_— Jack P._

[Read full review](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-4305533)

**["Powerful AI and Document Management for better responses"](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-11884656)**

**Rating:** 4.0/5.0 stars

_— Rui D._

[Read full review](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-11884656)

#### What Are G2 Users Discussing About Responsive, formerly RFPIO?

- [What is RFPIO used for?](https://www.g2.com/discussions/what-is-rfpio-used-for) - 1 comment
- [What is RFP360, an RFPIO company used for?](https://www.g2.com/discussions/what-is-rfp360-an-rfpio-company-used-for) - 1 comment

### [OneTrust Privacy Automation](https://www.g2.com/products/onetrust-privacy-automation/reviews)

OneTrust’s mission is to enable the responsible use of data and AI. Our platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle. The Privacy Automation solution simplifies compliance, automates privacy operations and mitigates risk. Our tools include: -A real-time view of your compliance posture -Evergreen data and activity map -Data subject request automation -Privacy and AI risk workflows OneTrust supports seamless collaboration between data teams and risk teams to drive rapid and trusted innovation. Recognized as a market pioneer and leader, OneTrust boasts over 300 patents and serves more than 14,000 customers globally, ranging from industry giants to small businesses. For more information, visit www.onetrust.com.

**Average Rating:** 4.3/5.0

**Total Reviews:** 143

#### How Do G2 Users Rate OneTrust Privacy Automation?

- **Ease of Admin:** 8.4/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.4/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.0/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.1/10 (Category avg: 7.9/10)

#### Who Is the Company Behind OneTrust Privacy Automation?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Data Protection Officer
- **Top Industries:** Information Technology and Services, Financial Services
- **Company Size:** 45% Large, 40% Medium

#### What Do G2 Reviewers Say About OneTrust Privacy Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of OneTrust Privacy Automation, benefiting from its organized and centralized platform.
- Users value the **comprehensive all-in-one platform** of OneTrust Privacy Automation, streamlining privacy tasks efficiently and effectively.
- Users appreciate the **comprehensive automation** of OneTrust Privacy Automation, enhancing efficiency and simplifying privacy management tasks.
- Users value the **centralization and automation** of privacy workflows, enhancing compliance and reducing manual effort efficiently.
- Users value the **comprehensive all-in-one platform** of OneTrust Privacy Automation, which streamlines privacy workflows and enhances compliance.

##### Cons

- Users find the **complexity** of OneTrust Privacy Automation challenging, requiring significant time and training for effective configuration.
- Users find the **complexity of the setup process** daunting, requiring significant time and training for proper configuration.
- Users find the **complexity of setup** and steep learning curve challenging, requiring significant time and training.
- Users desire more advanced capabilities and options, noting the **feature limitations** in OneTrust Privacy Automation's reporting and dashboards.
- Users find the **learning difficulty** of OneTrust Privacy Automation challenging, requiring significant time and training for setup.

#### What Are Recent G2 Reviews of OneTrust Privacy Automation?

**["Easy-to-Use Compliance Tool That Integrates Seamlessly"](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12589467)**

**Rating:** 5.0/5.0 stars

_— Ryan H._

[Read full review](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12589467)

**["Intuitive UI and Smooth Onboarding for Workflows and Integrations"](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12641842)**

**Rating:** 4.5/5.0 stars

_— Mark B._

[Read full review](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12641842)

### [Bitsight](https://www.g2.com/products/bitsight/reviews)

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

**Average Rating:** 4.5/5.0

**Total Reviews:** 76

#### How Do G2 Users Rate Bitsight?

- **Ease of Admin:** 8.8/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.7/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.6/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Bitsight?

- **Seller:** [Bitsight](https://www.g2.com/sellers/bitsight)
- **Company Website:** www.bitsight.com
- **Year Founded:** 2011
- **HQ Location:** Boston, MA
- **Twitter:** @BitSight  
4,503 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=56e1c298f7c9929e49118678bddc5bbe3f8b17ba55b522d776985c6f3a6c58e8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbitsight%2F&secure%5Burl_type%5D=linkedin_company_website)  
741 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Hospital & Health Care
- **Company Size:** 71% Large, 24% Medium

#### What Do G2 Reviewers Say About Bitsight?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **comprehensive security posture** that Bitsight provides for both their organization and suppliers.
- Users value Bitsight for its **comprehensive risk assessment** , enabling effective management of cyber risks and third-party suppliers.
- Users appreciate the **intuitive interface** of Bitsight, finding it user-friendly and easy to navigate for daily tasks.
- Users value the **intuitive interface and comprehensive insights** provided by Bitsight, enhancing security management efficiency.
- Users commend Bitsight's **fantastic customer support** , recognizing their knowledge, responsiveness, and intuitive assistance.

##### Cons

- Users express frustration over the **missing features** in Bitsight, particularly regarding questionnaire management and transparency in scoring.
- Users express concerns about the **lack of clarity** in Bitsight's findings and scoring methodology, affecting overall trust.
- Users face **poor notifications** from BitSight, with alerts often delayed and historical breaches not reflecting current vulnerabilities.
- Users experience **slow performance** with Bitsight, as improvements in security scores often take time to reflect accurately.
- Users experience **delay issues** in response times and updates, affecting the overall reliability of Bitsight.

#### What Are Recent G2 Reviews of Bitsight?

**["Finds Public-Facing Security Flaws and Clearly Shows How to Fix Them"](https://www.g2.com/survey_responses/bitsight-review-12760320)**

**Rating:** 4.5/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/bitsight-review-12760320)

**["Effortless Cyber Risk Scoring for Proactive Security"](https://www.g2.com/survey_responses/bitsight-review-12098656)**

**Rating:** 4.0/5.0 stars

_— Matthew P._

[Read full review](https://www.g2.com/survey_responses/bitsight-review-12098656)

#### What Are G2 Users Discussing About Bitsight?

- [What does Bitsight Security Ratings do?](https://www.g2.com/discussions/what-does-bitsight-security-ratings-do)
- [How is BitSight calculated?](https://www.g2.com/discussions/how-is-bitsight-calculated)
- [What is a BitSight security rating?](https://www.g2.com/discussions/what-is-a-bitsight-security-rating)

### [SecurityScorecard](https://www.g2.com/products/securityscorecard/reviews)

Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics & Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard's technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes.

**Average Rating:** 4.3/5.0

**Total Reviews:** 88

#### How Do G2 Users Rate SecurityScorecard?

- **Ease of Admin:** 8.8/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.7/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind SecurityScorecard?

- **Seller:** [SecurityScorecard](https://www.g2.com/sellers/securityscorecard)
- **Company Website:** securityscorecard.com
- **Year Founded:** 2013
- **HQ Location:** New York, New York
- **Twitter:** @security\_score  
8,115 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=41057d7470f89191754db744d0a5a02e2b2940fd49bb7189248b40e1d0672c6d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F5054644%2F&secure%5Burl_type%5D=linkedin_company_website)  
616 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 48% Large, 36% Medium

#### What Do G2 Reviewers Say About SecurityScorecard?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **insightful dashboards and features** of SecurityScorecard, enhancing daily public security assessments effectively.
- Users find SecurityScorecard to have **exceptional ease of use** , with insightful dashboards and simple reporting features.
- Users appreciate the **insightful dashboards** of SecurityScorecard, providing immediate access to crucial information for improving security scores.
- Users commend the **unmatchable customer service** of SecurityScorecard, consistently addressing concerns promptly and effectively.
- Users appreciate the **intuitive interface** of SecurityScorecard, making it easy to monitor security scores effectively.

##### Cons

- Users experience a **lack of clarity** regarding score changes, leading to confusion about risk evaluations.
- Users find the **limited reporting** capabilities insufficient for bespoke needs, impacting effective compliance and executive presentations.
- Users experience **scoring issues** , with discrepancies causing confusion and conflicts with third-party assessments and false positives.
- Users note a need for **improvement in automated reporting** , citing issues like false positives and vendor maintenance concerns.
- Users face challenges with **inefficient risk management** , including false positives and subjective scoring factors impacting reliability.

#### What Are Recent G2 Reviews of SecurityScorecard?

**["Clear, Easy-to-Understand Security Ratings with Continuous Third-Party Risk Monitoring"](https://www.g2.com/survey_responses/securityscorecard-review-13164525)**

**Rating:** 4.5/5.0 stars

_— Dr. Jagannath S._

[Read full review](https://www.g2.com/survey_responses/securityscorecard-review-13164525)

**["External Vulnerability Management External Attack Surface"](https://www.g2.com/survey_responses/securityscorecard-review-11547186)**

**Rating:** 5.0/5.0 stars

_— Chris L._

[Read full review](https://www.g2.com/survey_responses/securityscorecard-review-11547186)

#### What Are G2 Users Discussing About SecurityScorecard?

- [What is SecurityScorecard used for?](https://www.g2.com/discussions/what-is-securityscorecard-used-for) - 1 comment
- [How much does BitSight cost?](https://www.g2.com/discussions/how-much-does-bitsight-cost) - 1 comment
- [What is IBM Watson used for?](https://www.g2.com/discussions/what-is-ibm-watson-used-for)
- [Why SecurityScorecard?](https://www.g2.com/discussions/why-securityscorecard) - 1 comment
- [What is SecurityScorecard?](https://www.g2.com/discussions/what-is-securityscorecard)

### [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third\_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

**Average Rating:** 4.9/5.0

**Total Reviews:** 118

#### How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

- **Ease of Admin:** 9.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

- **Seller:** [Riskprofiler](https://www.g2.com/sellers/riskprofiler)
- **Company Website:** riskprofiler.io
- **Year Founded:** 2019
- **HQ Location:** Rock Hill , US
- **Twitter:** @riskprofilerio  
209 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b24e229941d4d86cfe1c465f2ca6c72933d43e43c05341e557ac04e379d138f3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Friskprofiler&secure%5Burl_type%5D=linkedin_company_website)  
32 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software Engineer, Security Consultant
- **Top Industries:** Information Technology and Services, Design
- **Company Size:** 66% Medium, 33% Small

#### What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **multi-dimensional threat intelligence** of RiskProfiler, enabling efficient management of external threats and vendor risks.
- Users value the **seamless integration features** of RiskProfiler, enhancing real-time monitoring and adaptability in their workflows.
- Users praise the **fast and efficient customer support** of RiskProfiler, enhancing their overall experience and threat management.
- Users value the **ease of use** of RiskProfiler, as it seamlessly integrates and enhances external threat management.
- Users highlight the **easy setup** of RiskProfiler, facilitating quick implementation and seamless integration for effective threat management.

##### Cons

- Users face a **steep learning curve** with RiskProfiler, needing sufficient time for training and customization.
- Users find the **complexity** of RiskProfiler challenging, requiring time for training and adjustment to navigate effectively.
- Users find the **difficult learning** curve challenging, requiring significant time and training for effective platform use.
- Users find a **steep learning curve** with RiskProfiler, requiring time and training for effective use.
- Users find the **complex setup** of RiskProfiler challenging, hindering smooth adoption and integration for non-specialist teams.

#### What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

**["Contextual Intelligence That Connects Risk Across the Attack Surface"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)

**["Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)

### [Scytale](https://www.g2.com/products/scytale-g2/reviews)

Scytale is the only AI GRC platform and human experts that drive real compliance outcomes - from getting compliant to staying compliant, and building trust across every framework. Trusted by 1,000+ companies worldwide, Scytale replaces fragmented testing with continuous control visibility, automating evidence, control cross-mapping, and risk management across 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001, and many more. Scytale is a full-scope trust and compliance platform with everything you need to run your GRC program in one central hub, including: an agentic GRC network, a Trust Center, AI-integrated offensive security and expert GRC services.

**Average Rating:** 4.8/5.0

**Total Reviews:** 705

#### How Do G2 Users Rate Scytale?

- **Ease of Admin:** 9.1/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.9/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scytale?

- **Seller:** [Scytale AI](https://www.g2.com/sellers/scytale-ai)
- **Company Website:** scytale.ai
- **Year Founded:** 2021
- **HQ Location:** New York, US
- **Twitter:** @scytale\_ai  
76 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=813f878dd624db92d69e43a157be813744a37962537ab43cfd42704d3acbbda1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fscytale-ai%2F&secure%5Burl_type%5D=linkedin_company_website)  
165 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 73% Small, 21% Medium

#### What Do G2 Reviewers Say About Scytale?

_AI-generated summary from verified user reviews_

##### Pros

- Users praise Scytale for their **hands-on support** , making compliance processes smoother and more efficient.
- Users love the **ease of use** of Scytale, appreciating its straightforward navigation and comprehensive support for compliance tasks.
- Users value the **ease of use** of Scytale, enhancing SOC compliance efficiency and organization significantly.
- Users appreciate the **exceptional customer support** from Scytale, finding the team proactive and genuinely invested in their success.
- Users commend the **great support team** of Scytale, highlighting their dedication and helpfulness throughout the implementation process.

##### Cons

- Users encounter **integration issues** with Scytale, finding some setups complicated and requiring additional troubleshooting.
- Users find the **limited integrations** frustrating, as they lack customization and can complicate processes significantly.
- Users find the **limited configuration options** for evidence collection frustrating due to inaccuracies and integration hassles.
- Users note some **quirky UX elements** in Scytale's platform, suggesting room for improvement in the overall experience.
- Users are disappointed with the **missing features** , as limited configurations hinder efficient integration and functionality.

#### What Are Recent G2 Reviews of Scytale?

**["Simplifie la Certification avec Grande Efficacité"](https://www.g2.com/survey_responses/scytale-review-10285318)**

**Rating:** 5.0/5.0 stars

_— Alan M._

[Read full review](https://www.g2.com/survey_responses/scytale-review-10285318)

**["Scytale Simplifies ISO 27001 with Automated Evidence Collection and Integrations"](https://www.g2.com/survey_responses/scytale-review-13198294)**

**Rating:** 5.0/5.0 stars

_— Arjun Das K._

[Read full review](https://www.g2.com/survey_responses/scytale-review-13198294)

- ‹ Prev ‹ Prev
- 1
- [2](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)
- [3](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=3#product-list)
- [4](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=4#product-list)
- [5](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)
- …
- [9](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=9#product-list)
- [10](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=10#product-list)
- [Next › Next ›](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)

Spotlight Categories

[Mobile Marketing Software](https://www.g2.com/categories/mobile-marketing)

[Social Media Listening Tools](https://www.g2.com/categories/social-media-listening-tools)

[Managed File Transfer (MFT) Software](https://www.g2.com/categories/managed-file-transfer-mft)

[Cloud Infrastructure Monitoring Tools and Software](https://www.g2.com/categories/cloud-infrastructure-monitoring)

[Customer Data Platforms (CDP)](https://www.g2.com/categories/customer-data-platform-cdp)

Similar Categories

- [Disinformation Detection Tools](/categories/disinformation-detection-tools)

- [IT Risk Management](/categories/it-risk-management)

[Browse Vendor Security and Privacy Assessment Themes](/categories/vendor-security-and-privacy-assessment/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

Vendor security and privacy assessment software helps companies manage cybersecurity and privacy risk assessment processes when identifying, evaluating, and regularly reevaluating their vendors, service providers, and other third parties. The purpose of this software is to help companies understand the privacy and cybersecurity risks associated with doing business with specific prospective and existing third parties. Vendor security and privacy assessments often include reviewing and scoring a vendor’s cybersecurity policies, documentation, results of recent audits, certifications, and legal agreements on how sensitive or personally identifying data will be accessed, used, processed, or sold as defined by data privacy laws such as the GDPR or CCPA.

Vendor security and privacy assessment software assists two constituencies—both the company and the third party they do business with. Companies use this software to assess the cybersecurity and data privacy compliance of their third-party vendors, while vendors use this software to more easily reply to buyers’ questionnaires and publish their company’s cybersecurity and data privacy compliance information in a centralized, up-to-date, and referenceable exchange. This software allows vendors to use the same responses across multiple customer assessments, as well as proactively share information with customers, which saves the vendor time instead of manually editing individual spreadsheets or forms. On the customer side, vendor security and privacy assessment software is typically managed by information security teams. On the vendor side, sales teams typically use the software to distribute security and privacy compliance information to prospective customers. Vendor security and privacy assessment software often integrates with other software tools, including [CRM software](https://www.g2.com/categories/crm), [governance, risk & compliance software](https://www.g2.com/categories/governance-risk-compliance) , and [cybersecurity services providers](https://www.g2.com/categories/cybersecurity-services), such as ratings services providers.

Vendor security and privacy assessment software is for evaluating external parties and therefore is different from internal privacy or security risk assessment processes which utilize software such as [privacy impact assessment (PIA) software](https://www.g2.com/categories/privacy-impact-assessment-pia) or [security risk analysis software](https://www.g2.com/categories/security-risk-analysis). This software is also different from [IT risk management software](https://www.g2.com/categories/it-risk-management), which monitors risk of a company’s internal systems or data use. Vendor security and privacy assessment software is similar to, but narrower in scope than [vendor management software](https://www.g2.com/categories/vendor-management) and [third party & supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management), which evaluates risk more broadly than security or privacy, such as financial fraud, corruption, or human rights violations.

To qualify for inclusion in the Vendor Security and Privacy Assessment category, a product must:

- Enable vendors to own, manage, and publish a company profile containing cybersecurity and data privacy compliance information and documentation 
- Allow companies to assess vendor profiles in a centralized catalog, as well as by utilizing workflow to engage with vendors and request documentation such as security questionnaires, audits, certifications, etc. 
- Provide customer-facing teams with workflow to easily share access to the company’s vendor profile, including the ability to link to the profile on a company website or in marketing materials 
- Facilitate automated notifications, alerts, and reminders for specific actions including upcoming assessments, profile access requests, etc. 
- Support standardized security and privacy framework questionnaire templates commonly requested by customers, such as CAIQ, SIG, NIST, VSA, GDPR, ISO 27001, Privacy Shield, etc. 

Top Tools at a Glance

| Product | Best for | User Review |
| --- | --- | --- |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_847d3c60a573cb03066985a2e4f32496/vanta.png "Product Avatar Image")](https://www.g2.com/products/vanta/reviews)[Vanta](https://www.g2.com/products/vanta/reviews)[4.6/5(2,713)](https://www.g2.com/products/vanta/reviews) | Continuous SOC 2 compliance with automated evidence collection | "Vanta Simplifies Compliance with Automated Evidence and Clear Dashboards" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_a04b3e930dd865ce8365efe856a366e2/upguard-vendor-risk.png "Product Avatar Image")](https://www.g2.com/products/upguard-vendor-risk/reviews)[UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews)[4.5/5(735)](https://www.g2.com/products/upguard-vendor-risk/reviews) | Automated vendor risk scoring with security questionnaires | "Fast, Reliable AI Content Reviews with Responsive Support" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2bce95f5e70767dca2076ceceaef23c6/drata.png "Product Avatar Image")](https://www.g2.com/products/drata/reviews)[Drata](https://www.g2.com/products/drata/reviews)[4.7/5(1,367)](https://www.g2.com/products/drata/reviews) | Continuous SOC 2 compliance with automated evidence collection | "Compliance Made Simple: Intuitive, Efficient, and Well-Supported" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_a8d8c0062be0817c0a00149a97ef52f1/sprinto-inc%282%29.png "Product Avatar Image")](https://www.g2.com/products/sprinto-inc/reviews)[Sprinto](https://www.g2.com/products/sprinto-inc/reviews)[4.7/5(1,680)](https://www.g2.com/products/sprinto-inc/reviews) | Continuous compliance automation with guided audit readiness | "Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_d83a80e742be999cb9ddf238edce0fd3/secureframe.png "Product Avatar Image")](https://www.g2.com/products/secureframe/reviews)[Secureframe](https://www.g2.com/products/secureframe/reviews)[4.7/5(820)](https://www.g2.com/products/secureframe/reviews) | SOC 2 audit readiness with automated evidence collection | "Secureframe Streamlines Compliance with Continuous Monitoring and Automated Evidence Collection" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_ab4ffeb80266da30d3a0a2cd41baf402/scrut-automation.jpg "Product Avatar Image")](https://www.g2.com/products/scrut-automation/reviews)[Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)[4.9/5(1,313)](https://www.g2.com/products/scrut-automation/reviews) | AI-powered vendor questionnaire automation with policy mapping | "Transforming Compliance and Security Management with Scrut Automation" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_5015a6ccbbe12278ba4392c1c0d806be/ibm-openpages.png "Product Avatar Image")](https://www.g2.com/products/ibm-openpages/reviews)[IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)[4.2/5(76)](https://www.g2.com/products/ibm-openpages/reviews) | Third-party risk centralization with GRC workflows | "Automates Security Tasks, But Pricey" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2e5758f304e971fbd4ab7ab6c96cea90/thoropass.gif "Product Avatar Image")](https://www.g2.com/products/thoropass/reviews)[Thoropass](https://www.g2.com/products/thoropass/reviews)[4.7/5(582)](https://www.g2.com/products/thoropass/reviews) | SOC 2 compliance with bundled audit | "Thoropass and SOC2 process" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_d37abd66d00b9026c3a4febbd40dfae0/onetrust-tech-risk-compliance.png "Product Avatar Image")](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)[OneTrust Tech Risk &...](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)[4.6/5(108)](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews) | Automated GRC workflows with multi-framework compliance | "OneTrust is the only GRC tool that works!" |

* * *

Show More