# Top Free Vendor Security and Privacy Assessment Software - Page 3 ## How Many Vendor Security and Privacy Assessment Software Products Does G2 Track? **Total Products under this Category:** 131 ### Category Stats (Aug 2026) - **Average Rating:** 4.55/5 The average rating of products in this category, based on all submitted ratings - **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month _Last updated: August 01, 2026_ ## How Does G2 Rank Vendor Security and Privacy Assessment Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 15,700+ Authentic Reviews - 131+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## G2 Grid® for Vendor Security and Privacy Assessment Software ![G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=167976&focus%5B%5D=130035&focus%5B%5D=953) Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Sprinto, Secureframe, Scrut Automation, Thoropass, and IBM OpenPages. Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages) **Sponsored** ### Conveyor Conveyor is the market-leading AI security review automation platform that helps infosec & presales teams automate the entire security review -- from security questionnaire completion and sharing security documentation like a SOC 2 in one-click. With AI so accurate, you can even pass most of your security review workflows to our new AI Agent for Customer Trust. Why teams love Conveyor: 1. The only trust center to offer an upload questionnaire for instant answers experience along with all the bells & whistles to share security documentation at scale 2. Plus, AI-questionnaire response to auto-generate 95%+ accurate answers to entire questionnaires so you can speed through review. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-08T06%3A08%3A18Z&secure%5Bdisplayable_resource_id%5D=2445&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2445&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=75579&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvendor-security-and-privacy-assessment%2Ffree%3Fpage%3D3&secure%5Btoken%5D=2f11e40728818507719003cad62072d3f78976263640cfdfd0a7728ec068faf4&secure%5Burl%5D=https%3A%2F%2Fwww.conveyor.com&secure%5Burl_type%5D=company_website) ### [SecurityStudio](https://www.g2.com/products/securitystudio/reviews) SecurityStudio offers solutions to secure information for your organization, your employees, your vendors and yourself. Modern products for risk, compliance and security leaders to better protect critical information. We offer security assessments for individuals, Teams and Organizations. From Government to Schools and Private companies. **Average Rating:** 4.8/5.0 **Total Reviews:** 7 #### How Do G2 Users Rate SecurityStudio? - **Ease of Admin:** 9.7/10 (Category avg: 9.0/10) #### Who Is the Company Behind SecurityStudio? - **Seller:** [SecurityStudio](https://www.g2.com/sellers/securitystudio) - **Year Founded:** 2017 - **HQ Location:** Edina, US - **Twitter:** @StudioSecurity 407 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=119ff326c8c3176c369780617468202a91f67b725831b24c9bce42d88eaec108&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F11486715%2F&secure%5Burl_type%5D=linkedin_company_website) 5 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 40% Medium, 30% Large #### What Are Recent G2 Reviews of SecurityStudio? **["Security Studio Defines Security Posture with Auditable Proof"](https://www.g2.com/survey_responses/securitystudio-review-4306223)** **Rating:** 5.0/5.0 stars _— John K._ [Read full review](https://www.g2.com/survey_responses/securitystudio-review-4306223) **["S2 is definitely a 10 out of 10"](https://www.g2.com/survey_responses/securitystudio-review-4381635)** **Rating:** 5.0/5.0 stars _— Rich E._ [Read full review](https://www.g2.com/survey_responses/securitystudio-review-4381635) #### What Are G2 Users Discussing About SecurityStudio? - [What is SecurityStudio used for?](https://www.g2.com/discussions/what-is-securitystudio-used-for) ### [ComplyScore by Atlas Systems](https://www.g2.com/products/complyscore-by-atlas-systems/reviews) ComplyScore by Atlas Systems is an AI-driven third-party risk management platform designed to minimize potential threats and enhance the quality of vendor relationships. With AI-powered insights and industry expertise, ComplyScore experts create a detailed risk profile and identify vulnerabilities, enabling you to proactively improve your cybersecurity posture and optimize vendor performance. ComplyScore is used across 65 countries to help enterprises manage third-party risks through a tailored platform that simplifies compliance with SIG, NIST, ISO 27K, and SOC2 standards. ComplyScore services: Vendor governance: Monitor and assess vendor relationships, ensuring adherence to compliance standards and ethical practices Operational risk management: Identify and mitigate risks within day-to-day operations to safeguard against potential disruptions Supplier risk management: Assess and track risks from suppliers to maintain secure and compliant supply chains Compliance and regulatory monitoring: Stay ahead of global regulatory requirements, ensuring compliance across all third-party engagement **Average Rating:** 4.1/5.0 **Total Reviews:** 4 #### How Do G2 Users Rate ComplyScore by Atlas Systems? - **Ease of Admin:** 8.3/10 (Category avg: 9.0/10) - **Risk Scoring:** 8.3/10 (Category avg: 8.8/10) - **Questionnaire Templates:** 6.7/10 (Category avg: 8.6/10) - **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10) #### Who Is the Company Behind ComplyScore by Atlas Systems? - **Seller:** [Atlas Systems](https://www.g2.com/sellers/atlas-systems) - **Year Founded:** 2003 - **HQ Location:** East Brunswick, New Jersey - **Twitter:** @AtlasSystemsInc 824 Twitter followers - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e16be2dc44ddd9bee2797e746f2f8ab5469f2454b7eaeebd2df98159f0122a8a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fatlas-systems%2F&secure%5Burl_type%5D=linkedin_company_website) 415 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 75% Medium, 25% Large #### What Do G2 Reviewers Say About ComplyScore by Atlas Systems? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **seamless collaboration** with ComplyScore, appreciating their responsiveness and adaptability throughout the due diligence process. - Users appreciate the **supportive compliance management** of ComplyScore, ensuring timely completion and effective navigation of third-party risks. - Users commend the **responsive customer support** of ComplyScore, finding it crucial for navigating third-party vendor challenges. - Users value the **supportive risk management** provided by ComplyScore, ensuring compliance and effective third-party vendor assessments. - Users highlight the **trustworthiness and expertise** of ComplyScore's security team in managing third-party risk effectively. ##### Cons - Users express that the **poor UI** makes the system tricky and less friendly to navigate effectively. - Users experience **access issues** with ComplyScore, finding the interface unfriendly and follow-up communications ineffective. - Users find the **complex setup** of ComplyScore challenging, particularly due to its unfriendly interface and ineffective communication. - Users find the **feature deficiencies** in ComplyScore problematic, leading to inefficiencies and lack of customization in assessments. - Users face **integration issues** with ComplyScore, finding the interface unwelcoming and follow-ups ineffective. #### What Are Recent G2 Reviews of ComplyScore by Atlas Systems? **["A trusted partner"](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10777782)** **Rating:** 4.5/5.0 stars _— Verified User in Pharmaceuticals_ [Read full review](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10777782) **["Overall it was satisfactory for our outsourced third party risk management"](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10784524)** **Rating:** 4.0/5.0 stars _— Verified User in Information Technology and Services_ [Read full review](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10784524) ### [Isora GRC](https://www.g2.com/products/isora-grc/reviews) Isora GRC is the collaborative GRC Assessment Platform™ that gives security teams one shared workspace to run assessments, manage vendors and assets, track live risks, and publish audit-ready reports. Built specifically for information security teams, Isora replaces fragmented spreadsheets and bloated enterprise GRC tools with a focused, fast-to-deploy platform that teams actually adopt. With structured workflows for risk and compliance assessments, connected inventories, and real-time visibility, security teams can operationalize their programs without the chaos. ❇️ Assessment Management Launch and track security assessments across departments, vendors, and frameworks in one centralized dashboard. See real-time progress, identify bottlenecks, and organize assessment campaigns by compliance goal. Every assessment stays connected to risks, owners, and evidence, creating a single source of truth for audit readiness. ❇️ Questionnaires & Surveys Deploy structured, user-friendly questionnaires to evaluate controls, collect evidence, and identify gaps. Built for collaboration, Isora's questionnaires let multiple contributors add responses, upload documents, and complete assessments without manual handoffs. Apply custom logic, weighted scoring, and pre-built templates for frameworks like NIST CSF, CIS, HIPAA, and GLBA. ❇️ Scorecards & Reports Generate automated scorecards and audit-ready reports that roll up assessment results, risks, and remediation into clear, actionable insights. Compare performance across targets, drill down into individual responses, and visualize high-risk areas with risk matrix reports. Export reports in PDF or CSV for external sharing, audits, and compliance documentation. ❇️ Inventory Management Maintain a complete, connected inventory of vendors, assets, and applications with custom metadata, deployment tracking, and assessment links. Search, filter, and export inventory data to support risk analysis, vendor reviews, and regulatory reporting. Keep inventory up to date with collaborative updates and automated enrichment. ❇️ Exception Management Track policy exceptions with clear accountability, expiration dates, and contextual links to affected assets and vendors. Create exceptions manually or via API, assign them to specific units, and search or filter for efficient oversight. Ensure timely reviews and minimize the risk of overlooked or outdated exceptions. ❇️ Risk Management Centralize risk tracking with a collaborative risk register that connects directly to assessment findings, owners, and remediation plans. Track risks with detailed attributes, custom fields, and risk scoring. Use interactive risk matrix widgets to visualize and prioritize high-impact risks, then export or import risk data for audit and compliance purposes. **Average Rating:** 5.0/5.0 **Total Reviews:** 2 #### How Do G2 Users Rate Isora GRC? - **Ease of Admin:** 10.0/10 (Category avg: 9.0/10) - **Risk Scoring:** 10.0/10 (Category avg: 8.8/10) - **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10) - **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10) #### Who Is the Company Behind Isora GRC? - **Seller:** [SaltyCloud](https://www.g2.com/sellers/saltycloud) - **Year Founded:** 2017 - **HQ Location:** Austin, US - **LinkedIn® Page:** [linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1aeec6fe88e400b69353770dcb46ba73fb1496f0389ca8d2d3f96811e0c9d284&secure%5Burl%5D=http%3A%2F%2Flinkedin.com%2Fcompany%2Fsaltycloudpbc%2F&secure%5Burl_type%5D=linkedin_company_website) 12 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 50% Large, 50% Medium #### What Do G2 Reviewers Say About Isora GRC? _AI-generated summary from verified user reviews_ ##### Pros - Users value the **responsive communication** of Isora GRC, appreciating timely support and training efforts. - Users praise the **excellent customer support** of Isora GRC, benefiting from its responsive and helpful team. - Users find Isora GRC to be **easy to use** , complemented by excellent support and a responsive team. - Users value the **exceptional support** from Isora GRC, appreciating quick responses and effective training assistance. - Users value the **excellent support** from Isora GRC, appreciating its ease of use and responsive team. #### What Are Recent G2 Reviews of Isora GRC? **["Isora is a great tool for risk assessments on hardware assets and applications."](https://www.g2.com/survey_responses/isora-grc-review-10427887)** **Rating:** 5.0/5.0 stars _— Verified User in Higher Education_ [Read full review](https://www.g2.com/survey_responses/isora-grc-review-10427887) **["Simple But Robust - Enterprise Grade Solution"](https://www.g2.com/survey_responses/isora-grc-review-9976316)** **Rating:** 5.0/5.0 stars _— Verified User in Computer Software_ [Read full review](https://www.g2.com/survey_responses/isora-grc-review-9976316) ### [Auditive](https://www.g2.com/products/auditive/reviews) Third-Party Risk Management on auto-pilot. Measure your vendor risk in minutes and monitor continuously. Onboard vendors 4x faster by eliminating hours of manual reviews. Get access to information on thousands of vendors. Auditive is available for free. #### Who Is the Company Behind Auditive? - **Seller:** [Auditive](https://www.g2.com/sellers/auditive) - **Year Founded:** 2022 - **HQ Location:** N/A - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fdc79871c59d626ca627d6448ad629fec37b541ee76462f2999da8a14c16fa25&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fauditive&secure%5Burl_type%5D=linkedin_company_website) 9 employees on LinkedIn® ### [Avertro](https://www.g2.com/products/avertro/reviews) CyberHQ® from Avertro is the Resilience Command Platform that directs your defense. We translate technical signals into quantifiable, governance-ready intelligence, empowering you to validate cyber effectiveness, prove defensible resilience, and optimize security-per-dollar with absolute confidence. #### Who Is the Company Behind Avertro? - **Seller:** [Avertro](https://www.g2.com/sellers/avertro) - **Year Founded:** 2019 - **HQ Location:** San Francisco, US - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=31191142664c5913f24e4394a2d3ad9e00eaed9c4784685868de86ce1a806aae&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Favertro&secure%5Burl_type%5D=linkedin_company_website) 17 employees on LinkedIn® ### [Censinet](https://www.g2.com/products/censinet/reviews) Censinet delivers the healthcare industry’s leading risk intelligence platform, designed specifically to help organizations understand and manage systemic risk across their digital and third-party ecosystems. Powered by the RiskOps™ platform, Censinet provides enterprise-wide visibility into how risk moves across vendors, products, technologies, and critical clinical and operational functions. By operationalizing industry frameworks such as the Health Sector Coordinating Council’s Sector Mapping and Risk Toolkit (SMART), Censinet helps healthcare organizations identify concentration risk, understand operational dependencies, and prioritize mitigation efforts that strengthen resilience and support recovery when disruption occurs. The platform also supports AI governance by providing insight into vendor and product AI usage, while leveraging AI-powered automation to streamline assessments and risk operations across the healthcare ecosystem. Learn more at censinet.com. #### Who Is the Company Behind Censinet? - **Seller:** [Censinet](https://www.g2.com/sellers/censinet) - **Year Founded:** 2017 - **HQ Location:** Boston, US - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3783446d31af7a52889e7ab824f5d2e4b5e4b369f9bdcb9a8d643727d568172f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F28130912&secure%5Burl_type%5D=linkedin_company_website) 43 employees on LinkedIn® ### [Cybernark](https://www.g2.com/products/cybernark/reviews) Cybernark helps organizations comply with ISO27001 by providing automated supplier onboarding, security assessments, CIA risk scoring, document and evidence management, continuous monitoring and audit-ready reporting. The platform enables secure vendor-supplier communication and gives organizations full visibility into supply-chain cyber risks without relying on spreadsheets or excel. #### Who Is the Company Behind Cybernark? - **Seller:** [Cybernark](https://www.g2.com/sellers/cybernark) - **Year Founded:** 2024 - **HQ Location:** Den Ham, NL - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3a00605cd2f1a50ff94cad595b95520cc3b580cb78e6944ecfddc0a532811fca&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcybernark%2F&secure%5Burl_type%5D=linkedin_company_website) 1 employees on LinkedIn® ### [Noru](https://www.g2.com/products/noru/reviews) Noru is the AI-powered GRC platform that turns compliance from a cost center into a growth driver. We help modern businesses get — and stay — compliant with frameworks like SOC 2, ISO 27001, GDPR, NIS2, and more in days, not months. Noru's autonomous AI agents continuously gather evidence, map controls across multiple frameworks, and monitor your environment so you’re always audit-ready. Unlike checklist tools, Noru goes beyond passing audits — it transforms your compliance status into a live trust signal you can share with customers to shorten security reviews, win deals faster, and stand out from competitors. With Noru you can: Get compliant in a fraction of the time Reduce manual busywork with fully automated evidence collection Maintain readiness year-round with continuous monitoring Build trust and accelerate revenue with real-time compliance sharing **Average Rating:** 5.0/5.0 **Total Reviews:** 1 #### Who Is the Company Behind Noru? - **Seller:** [Noru](https://www.g2.com/sellers/noru) - **Year Founded:** 2025 - **HQ Location:** Stockholm, SE - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fb37633f028620b3b71e078668038248c1656c04f91c3194dd4f7e5f289b10f8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fnoru-tech%2F&secure%5Burl_type%5D=linkedin_company_website) 1 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Small #### What Do G2 Reviewers Say About Noru? _AI-generated summary from verified user reviews_ ##### Pros - Users find that Noru makes **compliance easy and enjoyable** , providing clear guidance throughout the process. - Users appreciate how Noru makes **compliance fun and easy** , providing clear guidance at every step of the process. - Users find that Noru makes **Compliance management enjoyable and straightforward** , providing clear guidance throughout the process. - Users find that Noru makes **compliance fun and easy** , providing clear guidance through every step of the process. - Users find Noru's **ease of use** impressive, making compliance enjoyable and straightforward with clear guidance. #### What Are Recent G2 Reviews of Noru? **["Noru Makes Compliance Fun, Easy, and Step-by-Step Clear"](https://www.g2.com/survey_responses/noru-review-12216434)** **Rating:** 5.0/5.0 stars _— Ann-Sophie F._ [Read full review](https://www.g2.com/survey_responses/noru-review-12216434) ### [Phinity Risk Solutions](https://www.g2.com/products/phinity-risk-solutions/reviews) The Phinity Risk Solutions integrate into your risk and compliance processes to help you decrease your risk and compliance exposure. Boost your risk management capability and manage your organisational risks, from identification through to remediation. Make informed decisions faster with our reporting. Our key solutions include: - Essential Risk Management - Third Party Risk Management (TPRM) - ISMS Management - Insurance Compliance Management - Vulnerability Management - Risk Remediation Management #### Who Is the Company Behind Phinity Risk Solutions? - **Seller:** [PHINITY RISK SOLUTIONS](https://www.g2.com/sellers/phinity-risk-solutions-42f20773-d778-4963-b6ff-45225b000726) - **Year Founded:** 2017 - **HQ Location:** Dublin, IE - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=220791b7657914385440d33c78956d0610aceb94271848547ae5dd5247577a56&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fphinity-risk-solutions&secure%5Burl_type%5D=linkedin_company_website) 1 employees on LinkedIn® ### [Relixi - Compliance Automation](https://www.g2.com/products/relixi-compliance-automation/reviews) Automating Trust in Compliance Relixi is a B2B SaaS compliance automation platform focusing on Security and Privacy domain to perform Automated, Paperless Compliance & Assessments. The tool is powered by Riskpro and comes with a preloaded compliance framework library which includes SOC 2, ISO 27001, GDPR, AI Act, DPDPA, and many more! Unlimited Security and Privacy Possibilities Relixi is a compliance automation platform that bundles pre-loaded content specific to your industry and company size and tech stack. Answer a few questions and Click "Load" to immediately load 30-50% of content for your compliance journey. It is meant to be used as a DIY Tool so that with little support, you can maximize value. Our team provided expertise and hand holding as needed. Relixi is built as a modular platform where each area of compliance such as ISO 27001, SOC2, Vendor Risk Management etc can be enabled as a module and all related forms and formats are activated instantly. Single Platform with unlimited users for all your compliance needs. The best part is content is complimentary. Annual subscription plans starting at Rs. 10,000 pm\*. #### Who Is the Company Behind Relixi - Compliance Automation? - **Seller:** [Riskpro India Ventures](https://www.g2.com/sellers/riskpro-india-ventures) - **Year Founded:** 2011 - **HQ Location:** Mumbai, IN - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d3eeee5ee8ae9d65bb04f9bb80b7713835731278cbe0ef022850517c21c2bda1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Friskpro-india&secure%5Burl_type%5D=linkedin_company_website) 89 employees on LinkedIn® ### [Rescana](https://www.g2.com/products/rescana/reviews) Rescana is a cybersecurity company focused on Third-Party Risk Management (TPRM) and External Attack Surface Management (EASM). It was founded in 2016 and has evolved into a platform that uses AI-powered automation to streamline how organizations assess and manage the security risks posed by their vendors and external digital assets. What Rescana Does: Rescana automates the traditionally manual and time-consuming processes of TPRM by: 1. Vendor Discovery & Classification Automatically identifies and classifies vendors, even those without a web presence, using AI and OSINT (open-source intelligence). 2. Risk Assessment Runs autonomous, on-demand security assessments and generates detailed risk profiles for vendors, integrating questionnaires, external scans, and organizational policies. 3. Remediation Guidance Offers actionable remediation steps and guidance based on the specific risks found. 4. Interactive Chat-Based Interface Enables users to interact with the system like a chatbot (powered by LLMs), asking questions about vendors, risks, policies, and controls. 5. Support for ESG and Multiple Questionnaire Formats Handles diverse compliance needs, including environmental, social, and governance (ESG) questionnaires, and supports multiple formats per vendor. Key Differentiators: • Agentic AI: Not just automation — Rescana employs autonomous agents that reason through questionnaire filling, evidence matching, and more. • No ticketing system needed: Unlike competitors, it doesn’t require manual back-and-forth with vendors. • Live risk dashboards: With real-time scanning and risk scoring. • Low false positives: Thanks to contextual analysis and risk validation. • Vendor Simulator: For demos and internal testing of workflows using simulated vendor responses. **Average Rating:** 5.0/5.0 **Total Reviews:** 1 #### Who Is the Company Behind Rescana? - **Seller:** [Rescana](https://www.g2.com/sellers/rescana) - **Year Founded:** 2017 - **HQ Location:** Tel Aviv, IL - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=3217385d5f3725d8d335203a7c45585f35c3abc146a4331c1a89a5078988129e&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Frescana%2F&secure%5Burl_type%5D=linkedin_company_website) 18 employees on LinkedIn® #### Who Uses This Product? - **Company Size:** 100% Large #### What Are Recent G2 Reviews of Rescana? **["IR Team Leader"](https://www.g2.com/survey_responses/rescana-review-6617022)** **Rating:** 5.0/5.0 stars _— Omry M._ [Read full review](https://www.g2.com/survey_responses/rescana-review-6617022) #### What Are G2 Users Discussing About Rescana? - [What is Rescana used for?](https://www.g2.com/discussions/what-is-rescana-used-for) ### [ResponseHub](https://www.g2.com/products/responsehub/reviews) ResponseHub is a security questionnaire automation platform that uses AI to help organizations complete vendor security assessments and compliance questionnaires. The tool processes security questionnaires in various spreadsheet formats and automatically generates answers by referencing uploaded policy documents, SOPs, and other organizational documentation. The platform maintains an automated knowledge base that stores previously answered questions and suggests new entries based on completed questionnaires. Each generated answer includes citations to specific policies, sections, pages, and sentences to provide traceability and confidence in responses. The tool includes an AI-powered parser that handles complex spreadsheet structures with multiple sheets and ambiguous column headers. Users can upload Excel files containing questionnaires, and the system extracts questions across all sheets, then allows downloading of the completed file with answers in the correct locations. ResponseHub provides question explainers to help users understand what each question means, confidence ratings for generated answers, and an AI-assisted writer for questions without existing references. The platform supports question assignment and delegation to subject matter experts with change tracking and approval workflows. Users can import existing knowledge bases from CSV files or generate templates based on the NIST Cybersecurity Framework 2.0. The system monitors changes to source documents and prompts users to refresh knowledge base entries to maintain accuracy. #### Who Is the Company Behind ResponseHub? - **Seller:** [ResponseHub](https://www.g2.com/sellers/responsehub) - **HQ Location:** N/A - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7966802bf49a1d3681be2e2e577589eb03f9a5f29293195e0e27c84edfb9cde7&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fresponsehub%2F&secure%5Burl_type%5D=linkedin_company_website) 1 employees on LinkedIn® ### [SafeBase](https://www.g2.com/products/safebase/reviews) SafeBase is a comprehensive Trust Center Platform designed specifically for enterprises to facilitate seamless security reviews. This platform addresses the challenges organizations face when responding to security questionnaires by significantly reducing the volume of inbound inquiries. By providing self-serve, secure access to essential information, SafeBase empowers customers to find the answers they need without the friction typically associated with traditional security review processes. Trusted by high growth companies and enterprise organizations like OpenAI, Asana, T-Mobile, and Zoom, SafeBase helps eliminate friction in the inbound security review process and helps build customer trust. The target audience for SafeBase includes security teams, sales professionals, and compliance officers within medium to large enterprises that require efficient management of security documentation and inquiries. The platform is particularly beneficial for organizations that frequently engage with clients who have rigorous security requirements. Use cases for SafeBase range from automating responses to security questionnaires to streamlining internal workflows, thus enabling teams to focus on more strategic initiatives rather than administrative tasks. Key features of SafeBase include: • Advanced Trust Center access and governance capabilities, which offer robust permissioning and access controls. Users can manage access through functionalities such as auto bulk invites, SCIM integration, and expiration dates, ensuring that sensitive information is shared securely and efficiently. • Automated NDA workflows further enhance the user experience by allowing buyers to securely access necessary documentation through integrated NDA signing, simplifying the process for all parties involved. • Chrome extension - enables users to provide questionnaire responses directly within their buyers' Third-Party Risk Management (TPRM) portals. This integration not only saves time but also enhances the accuracy of information shared. • Advanced analytics dashboards helping organizations communicate the return on investment (ROI) of their security programs. By leveraging CRM data, these dashboards highlight key focus areas and demonstrate how security initiatives contribute to overall revenue growth. • Multi-product Trust Center profiles, allowing organizations to showcase their trust posture across various product offerings. This feature makes it easy for buyers to self-serve security documentation tailored to their specific needs. By streamlining the security review process and positioning security as a strategic driver of revenue, SafeBase enables fast-growing companies to reclaim valuable time and resources, ultimately enhancing the buying experience for their clients. In 2025, SafeBase was acquired by Drata. Together, they also offer the leading Trust Management Platform enabling organizations to: ~ Proactively build trust with customers through dynamic, real-time Trust Centers. Accelerate security questionnaire responses and close deals faster with AI-powered automation. ~ Simplify and scale compliance efforts with advanced automation and robust integrations. ~ Enhance vendor and third-party risk management with improved efficiency and continuous visibility. ~ Scale and modernize enterprise GRC programs to address evolving market needs. #### Who Is the Company Behind SafeBase? - **Seller:** [SafeBase](https://www.g2.com/sellers/safebase) - **Company Website:** safebase.io - **Year Founded:** 2020 - **HQ Location:** San Francisco, California - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=6be048a149e28f44a303db00fb0ddc5ade4f84dc9cce1290298b669f4e7208c6&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsafebase%2F&secure%5Burl_type%5D=linkedin_company_website) 57 employees on LinkedIn® #### Who Uses This Product? - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 33% Medium #### What Do G2 Reviewers Say About SafeBase? _AI-generated summary from verified user reviews_ ##### Pros - Users find SafeBase to be **user-friendly and intuitive** , simplifying the management and sharing of security documentation. - Users value the **outstanding customer support** from the SafeBase team, enhancing their overall experience and success with the platform. - Users find SafeBase to be **intuitive and user-friendly** , requiring minimal training and offering excellent customer support. - Users appreciate the **intuitive and user-friendly interface** of SafeBase, enhancing security management and customer trust. - Users praise the **excellent communication** from SafeBase's team, enhancing support and ensuring prompt resolution of queries. ##### Cons - Users find **missing features** such as limited customization and lack of multi-org support frustrating for larger enterprises. - Users find the **lack of customization** in SafeBase restrictive, limiting their ability to tailor the security portal effectively. - Users find the **limited customization options** frustrating, especially for tailoring the security portal to their needs. - Users find the **feature complexity** of SafeBase challenging, wishing for more intuitive navigation and customization options. - Users find that SafeBase needs to address its **lack of multi-organizational support** for larger enterprises with subsidiaries. ### [Tentacle](https://www.g2.com/products/tentacle-2021-11-16/reviews) Tentacle is a configurable data management tool that allows organizations to improve their information security programs and overall security posture. The core Tentacle product allows enterprises of all sizes to manage all details related to their internal security posture, track and monitor similar information for their partners and vendors, centralize the storage and management of all program related documentation, increase overall connectivity with key partners, establish multiple internal projects for tracking independent security requirements, and continually benchmark all activities against today’s top industry frameworks governing the information security space. Learn more at tentacle.co #### Who Is the Company Behind Tentacle? - **Seller:** [Tentacle](https://www.g2.com/sellers/tentacle) - **Year Founded:** 2020 - **HQ Location:** Plano, US - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=62537f2f50b02161d612314d9fee27792cee5b36c76ece7c2f9594f252294bf7&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Ftentacle-llc%2F&secure%5Burl_type%5D=linkedin_company_website) 11 employees on LinkedIn® ### [Ubiscore](https://www.g2.com/products/ubiscore/reviews) Ubiscore is a leading provider of privacy ratings and privacy analytics for businesses. The company's mission is to help organizations of all sizes achieve their full potential by providing them with the tools and insights they need to understand and improve their privacy practices. #### Who Is the Company Behind Ubiscore? - **Seller:** [Ubiscore](https://www.g2.com/sellers/ubiscore) - **Year Founded:** 2020 - **HQ Location:** Berlin, DE - **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0b988eda0dfedd98463342b8c58f4cd1714aee76bc2778e70e5d38f18fc9a243&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fubiscore&secure%5Burl_type%5D=linkedin_company_website) 4 employees on LinkedIn® - [‹ Prev‹ Prev](/categories/vendor-security-and-privacy-assessment/free?order=g2_score&page=2#product-list) - [1](/categories/vendor-security-and-privacy-assessment/free?order=g2_score#product-list) - [2](/categories/vendor-security-and-privacy-assessment/free?order=g2_score&page=2#product-list) - 3 - Next ›Next › Spotlight Categories [Webinar Platforms](https://www.g2.com/categories/webinar) [Partner Relationship Management (PRM) Software](https://www.g2.com/categories/partner-relationship-management-prm) [Product Lifecycle Management (PLM) Software](https://www.g2.com/categories/product-lifecycle-management-plm) [Identity Verification Software](https://www.g2.com/categories/identity-verification) [Accounts Payable Automation Software](https://www.g2.com/categories/ap-automation) Similar Categories - [Disinformation Detection Tools](/categories/disinformation-detection-tools) - [IT Risk Management](/categories/it-risk-management) [Browse Vendor Security and Privacy Assessment Themes](/categories/vendor-security-and-privacy-assessment/themes)