Best Enterprise Vendor Security and Privacy Assessment Software - Page 2

How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

Total Products under this Category: 142

Category Stats (Oct 2026)

  • Average Rating: 4.56/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Fusion Enterprise Resilience Platform (+0.21%) - Among all products in this category, Fusion Enterprise Resilience Platform recorded the largest rating increase compared to last month

Last updated: October 16, 2026

How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 16,300+ Authentic Reviews
  • 142+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vendor Security and Privacy Assessment Software

G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence

Highlighted products: UpGuard Vendor Risk, SecurityScorecard, Bitsight, Vanta, Responsive, formerly RFPIO, Drata, Securiti, and Loopio.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=upguard-vendor-risk&focus%5B%5D=securityscorecard&focus%5B%5D=bitsight&focus%5B%5D=vanta&focus%5B%5D=responsive-formerly-rfpio&focus%5B%5D=drata&focus%5B%5D=securiti&focus%5B%5D=loopio&segment=enterprise)

Perimeter

Painless end-to-end VRM: Perimeter covers the full VRM lifecycle for your entire vendor universe while cutting manual effort more than 80%. Unlimited scalability: Perimeter makes it easy to scale your VRM program to any number of vendors without hiring dozens of new roles. Fully customizable and branded for your organization: All assessments, logic, design, and language is fully customizable to your needs, processes, and brand. Bi-directional APIs and pre-configured templates: Works straight out of the box with pre-built templates while enabling the flexibility to easily customize assessments, workflows and processes to accommodate nuanced risk management as needed. Secure document sharing and storage: Perimeter makes scaling VRM easy with secure, centralized document management. Data hosted according to regulatory requirements. Onboarding, training, and support are all included in the price. Built to Eliminate the Pain
of Vendor Risk Management. Our Mission Is Simple: deliver painless, real-time vendor risk management through one integrated platform - from onboarding to assessment to continuous monitoring. We give teams the tools they need to automate assessments, validate vendor responses, continuously monitor their attack surfaces, and respond to issues before they escalate - all without adding headcount, complexity, or overhead. We were founded to fix the inefficiencies and blind spots plaguing traditional VRM programs - programs that are too slow to scale, too manual to trust, and too fragmented to protect against real-world threats. Fully integrated assessment, continuous monitoring and AI data extraction platform. Don’t just trust vendor attestations - validate them in real time. Up and running in under a week - no implementation partner needed. Cut manual work by 80% - and still improve your coverage. Easily customizable assessments, workflows and processes to accommodate nuanced risk management needs. See vendor risk as it happens - including early breach notifications. AI with guardrails - built for risk professionals. Built for Speed, Scale, and Simplicity.

Average Rating: 4.8/5.0

Total Reviews: 45

How Do G2 Users Rate Perimeter?

  • Ease of Admin: 9.2/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.1/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.6/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.3/10 (Category avg: 8.0/10)

Who Is the Company Behind Perimeter?

  • Seller: Perimeter
  • Company Website:
  • Year Founded: 2017
  • HQ Location: Minnetonka, MN
  • LinkedIn® Page: www.linkedin.com
    21 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Hospital & Health Care, Information Technology and Services
  • Company Size: 50% Large, 33% Medium

What Do G2 Reviewers Say About Perimeter?

AI-generated summary from verified user reviews

Pros
  • Users praise the ease of use of Perimeter, facilitating seamless vendor onboarding and daily assessments.
  • Users value the efficient vendor management capabilities of Perimeter, ensuring seamless onboarding and assessment of vendors.
  • Users find the automation tools in Perimeter simplify vendor risk management, making it efficient and less resource-intensive.
  • Users appreciate the customizable workflows in Perimeter, allowing tailored solutions to meet specific needs effectively.
  • Users find Perimeter extremely user-friendly, enhancing vendor onboarding and assessment with excellent support during migration.
Cons
  • Users find the complex setup of Perimeter requires significant initial adjustments and stakeholder alignment for effective use.
  • Users find the integration issues with ServiceNow to be a significant limitation of Perimeter's functionality.
  • Users find the learning curve steep when using Perimeter's workflow builder, which can be difficult for beginners.
  • Users find the workflow builder challenging for first-time use, making initial setup frustrating.
  • Users wish for more customization options in Perimeter, feeling limited in tailoring it to their company needs.

What Are Recent G2 Reviews of Perimeter?

What Are G2 Users Discussing About Perimeter?

Scrut Automation

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

Average Rating: 4.9/5.0

Total Reviews: 1,333

How Do G2 Users Rate Scrut Automation?

  • Ease of Admin: 9.6/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.2/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.2/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.7/10 (Category avg: 8.0/10)

Who Is the Company Behind Scrut Automation?

  • Seller: Scrut Automation
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Palo Alto, US
  • Twitter: @scrutsocial
    120 Twitter followers
  • LinkedIn® Page: in.linkedin.com
    237 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 50% Small, 48% Medium

What Do G2 Reviewers Say About Scrut Automation?

AI-generated summary from verified user reviews

Pros
  • Users find Scrut Automation’s ease of use essential for tracking tasks and collaboration across teams effectively.
  • Users value the exceptional customer support from Scrut Automation, which enhances their experience and success in compliance.
  • Users highlight the exceptional support from Priyanshi and the Scrut team throughout their compliance journey.
  • Users highlight Scrut Automation's exceptional compliance management, simplifying SOC 2 processes with outstanding support and integrated services.
  • Users value the clarity in compliance documentation offered by Scrut Automation, aiding successful audits and implementation.
Cons
  • Users note the need for improvement in UI, documentation, and bug resolution, which complicates the overall experience.
  • Users face technical issues that can overwhelm non-technical team members and hinder platform usability.
  • Users note the missing features like auto-answerable security and limited customization options for reports in Scrut Automation.
  • Users express concerns over lack of clarity in test results and policy processes, complicating their experience with Scrut Automation.
  • Users find the learning curve steep, facing challenges in navigation and understanding the certification process in Scrut Automation.

What Are Recent G2 Reviews of Scrut Automation?

What Are G2 Users Discussing About Scrut Automation?

Graphite Connect

Graphite Connect is the premiere solution for fast, easy supplier onboarding. Inspired by social networks, Graphite’s unique structure utilizes supplier-managed, verified profiles so onboarding data is always accurate and ready to use. When you’re ready to onboard, Graphite immediately integrates the supplier information you need directly into your ERP. Graphite allows you to filter, segment, and select your preferred suppliers before onboarding. Graphite also validates key supplier information like banking details, OFAC, and TIN, so you can be certain that your data is not only accurate but also safe from fraudulent changes. Key Features: > Single point-of-entry for requesters’ purchasing-related activities > Fast, accurate and secure supplier data onboarding > Automated supplier risk management/due diligence > Robust security measures to prevent fraudulent bank changes > Extensive audit trail > Full Integration with your ERP and other tools Additionally, all users have access to a myriad of valuable capabilities like localization, supplier diversity module, and extensive collaboration features.

Average Rating: 4.4/5.0

Total Reviews: 29

How Do G2 Users Rate Graphite Connect?

  • Ease of Admin: 9.1/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.5/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.1/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.5/10 (Category avg: 8.0/10)

Who Is the Company Behind Graphite Connect?

  • Seller: graphiteConnect
  • Year Founded: 2018
  • HQ Location: Lehi, US
  • Twitter: @graphiteConnect
    16 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    95 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 84% Large, 6% Medium

What Do G2 Reviewers Say About Graphite Connect?

AI-generated summary from verified user reviews

Pros
  • Users find Graphite Connect's ease of use enhances vendor onboarding, making the process seamless and efficient.
  • Users commend the excellent customer support of Graphite Connect, noting quick responses and effective assistance.
  • Users highlight the seamless collaboration enabled by Graphite Connect, simplifying vendor onboarding for all departments involved.
  • Users find easy implementation of Graphite Connect to streamline onboarding and improve cross-department collaboration effortlessly.
  • Users appreciate the automation features of Graphite Connect, enhancing accuracy and speeding up validation processes.
Cons
  • Users face onboarding difficulties with Graphite Connect, including challenges in communication and information sharing requirements.
  • Users find difficult navigation within Graphite Connect, leading to confusion and reliance on administrator assistance.
  • Users struggle with inefficient processes, citing prolonged setups and difficulties in tracking status without admin assistance.
  • Users face integration issues that can lead to inaccuracies and delays, impacting overall satisfaction with Graphite Connect.
  • Users find the lack of clarity in ID Verification challenging, often requiring administrator assistance for status updates.

What Are Recent G2 Reviews of Graphite Connect?

What Are G2 Users Discussing About Graphite Connect?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

ProcessUnity TPRM Platform

ProcessUnity is the Third-Party Risk Management (TPRM) company. ProcessUnity is a software platform that helps organizations assess, monitor, and manage risks associated with third-party vendors, suppliers, and business partners. The Third-Party Risk Management platform provides a centralized workspace for vendor onboarding, due diligence, customizable questionnaires, workflow automation, document management, and ongoing monitoring across the vendor lifecycle. It connects customers to the ProcessUnity Global Risk Exchange, a shared network of vendor risk profiles and completed assessments, and includes ProcessUnity Risk Index, a risk score combining internal control data with external threat intelligence. AI powered capabilities, including Evidence Evaluator and Assessment Autofill, help automate evidence review and questionnaire completion. ProcessUnity Third-Party Risk Management helps organizations identify vendor risk, meet regulatory requirements, and maintain oversight of vendor performance. To learn more or request a demo, visit www.processunity.com.

Average Rating: 4.5/5.0

Total Reviews: 54

How Do G2 Users Rate ProcessUnity TPRM Platform?

  • Ease of Admin: 8.6/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.0/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.0/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.3/10 (Category avg: 8.0/10)

Who Is the Company Behind ProcessUnity TPRM Platform?

  • Seller: ProcessUnity
  • Company Website:
  • Year Founded: 2003
  • HQ Location: Concord, US
  • Twitter: @ProcessUnity
    739 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    215 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Banking, Financial Services
  • Company Size: 54% Large, 31% Medium

What Do G2 Reviewers Say About ProcessUnity TPRM Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of ProcessUnity TPRM Platform, facilitating quick customization and efficient workflows.
  • Users value the high degree of customization in ProcessUnity TPRM Platform, enhancing their risk management workflows significantly.
  • Users value the high degree of customizability in ProcessUnity TPRM, facilitating tailored and efficient TPRM workflows.
  • Users praise the high degree of customization and automation in ProcessUnity, enhancing efficiency in TPRM workflows.
  • Users value the consistent governance and comprehensive reporting features of ProcessUnity for managing third-party risk effectively.
Cons
  • Users often report poor performance and limited CLM capabilities, leading to frustration and a steep learning curve.
  • Users express frustration with the slow loading times of ProcessUnity's TPRM Platform, impacting overall efficiency.
  • Users are frustrated by the limited features of ProcessUnity TPRM Platform, especially regarding basic dashboards and CLM capabilities.
  • Users frequently experience slow performance with the ProcessUnity TPRM Platform, leading to frustrations with loading times and timeouts.
  • Users express frustration with the steep learning curve of ProcessUnity's TPRM Platform, complicating admin and user experience.

What Are Recent G2 Reviews of ProcessUnity TPRM Platform?

Risk Ledger

Risk Ledger is a network-first platform delivering Active Supply Chain Security. Unlike traditional TPRM tools that rely on isolated, point-in-time supplier assessments, Risk Ledger connects organisations and suppliers through a shared network, enabling continuous visibility and collaborative defence. Our Standardised Assessment Framework replaces repetitive questionnaires with a single supplier profile shared across every client relationship. This delivers three immediate outcomes: 1. Efficiency at scale: Suppliers complete their profile once and reuse it across client relationships, reducing duplicated effort. Because 65% of your suppliers are already on the network with completed profiles, new organisations can often connect to existing suppliers and begin reviewing their responses in less than 24 hours, removing the initial onboarding bottleneck and accelerating supply chain visibility. 2. Supply chain visibility: Map 3rd, 4th, and nth-party dependencies as they truly exist, revealing concentration risks and systemic vulnerabilities that traditional spreadsheets miss. 3. Proactive threat management: When a critical vulnerability emerges, all suppliers are notified and asked to report their impact. Clients gain a real-time view of exposure without manually chasing responses in spreadsheets. With 19,000+ organisations on the Risk Ledger network and 40,000+ tracked connections, Risk Ledger is building the largest interconnected database of supplier security data.

Average Rating: 4.4/5.0

Total Reviews: 126

How Do G2 Users Rate Risk Ledger?

  • Ease of Admin: 8.9/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.7/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.5/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.2/10 (Category avg: 8.0/10)

Who Is the Company Behind Risk Ledger?

  • Seller: Risk Ledger
  • Company Website:
  • Year Founded: 2018
  • HQ Location: London, GB
  • Twitter: @riskledger
    632 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    98 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 46% Medium, 30% Small

What Do G2 Reviewers Say About Risk Ledger?

AI-generated summary from verified user reviews

Pros
  • Users find Risk Ledger's ease of use exceptional, noting its intuitive interface and quick navigation.
  • Users find Risk Ledger's centralized risk management effective in simplifying and enhancing supply chain security processes.
  • Users value the time-saving capabilities of Risk Ledger, enhancing efficiency in risk assessment and supplier onboarding.
  • Users value the efficiency of Risk Ledger, highlighting streamlined onboarding and risk assessment through a centralized platform.
  • Users value the strong security measures of Risk Ledger, enhancing transparency and managing third-party cyber risks effectively.
Cons
  • Users find the setup to be complex, particularly non-tech individuals struggle with the interface and onboarding process.
  • Users find the onboarding process clunky, making it challenging for non-tech individuals to adapt smoothly.
  • Users find the difficult setup of Risk Ledger time-consuming, making initial use challenging for non-tech-savvy individuals.
  • Users find the poor interface design can slow navigation and complicate the initial setup process.
  • Users find the time-consuming setup process challenging, often leading to frustration and inefficiency during initial use.

What Are Recent G2 Reviews of Risk Ledger?

SureCloud

SureCloud is the most intelligent GRC platform, enabling organisations to take centralised command of their risk, compliance and audit activities. Built for established teams managing complex environments, SureCloud offers a single, scalable solution that connects all GRC domains while fostering collaboration across your business units. Powered by event-sourced architecture, SureCloud provides a real-time, intelligent view of every risk so you understand how they have impacted you and what really matters to your business. See how risks evolve, track control performance, and link issues directly to outcomes while AI-driven insights help inform your next steps. SureCloud simplifies GRC complexity through a modular, no-code platform that is easy to configure without developer input. Collaboration is built in from role-based dashboards to automated approval workflows ensuring alignment and accountability no matter the business unit. Whether you are managing ISO 27001 compliance, improving your vendor assessments or driving data privacy, SureCloud gives you confidence to improve your posture and build lasting resilience. Highlights: - The Most Intelligent GRC Platform: SureCloud event-based architecture powers deep insights across your compliance and risk activities, capturing context over time instead of just static snapshots. Unlike other platforms, this enables you to track real changes, drive better decision-making, and gain clarity across your risks, controls, and even third-party interactions. - Clever compliance driven by ready automation: By automating manual human tasks such as evidence collection and controls monitoring, SureCloud dramatically reduces preparation time and ensures continued adherence to frameworks like ISO 27001, SOC 2 and GDPR. Get time back for teams to focus on your more important strategic decisions, uplifted by AI to inform improvements and next steps. - Total collaboration for enterprise success: Operate at scale without reliance on distributed toolsets, people and data by linking entities and projects. Clear task management and staged reviewing create accountability throughout the execution process so you deliver faster and without error, letting you improve your overall risk posture.

Average Rating: 4.2/5.0

Total Reviews: 56

How Do G2 Users Rate SureCloud?

  • Ease of Admin: 8.0/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.0/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.7/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.5/10 (Category avg: 8.0/10)

Who Is the Company Behind SureCloud?

  • Seller: SureCloud
  • Company Website:
  • Year Founded: 2006
  • HQ Location: London, United Kingdom
  • Twitter: @SureCloud
    748 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    64 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Financial Services, Retail
  • Company Size: 58% Large, 30% Medium

What Do G2 Reviewers Say About SureCloud?

AI-generated summary from verified user reviews

Pros
  • Users find SureCloud helpful and user-friendly, with efficient incident logging and impressive reporting features.
  • Users praise the responsive customer support of SureCloud, consistently providing quick and effective solutions.
  • Users find SureCloud to be intuitive and user-friendly, making adoption and implementation a smooth experience.
  • Users highlight the intuitive navigation of SureCloud, allowing quick adoption and seamless implementation across teams.
  • Users appreciate the effective reporting features in SureCloud, finding it easy to log incidents and visualize data.
Cons
  • Users find the interface not intuitive, requiring excessive clicks and complicating navigation and functionality.
  • Users find the limited functionality of SureCloud challenging, particularly with navigation and bulk upload restrictions.
  • Users find the inadequate reporting of SureCloud frustrating, wishing for more configurable and accessible reporting features.
  • Users find limited customization in SureCloud frustrating, as it hampers usability and requires backend support for simple tasks.
  • Users express frustration with limited reporting in SureCloud, preferring more customizable and direct options for data analysis.

What Are Recent G2 Reviews of SureCloud?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated