# Best Vendor Security and Privacy Assessment Software - Page 4

## How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

**Total Products under this Category:** 131

### Category Stats (Aug 2026)

- **Average Rating:** 4.55/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 15,700+ Authentic Reviews
- 131+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Vendor Security and Privacy Assessment Software
 ![G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=167976&focus%5B%5D=130035&focus%5B%5D=953)

Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Sprinto, Secureframe, Scrut Automation, Thoropass, and IBM OpenPages.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages)

**Sponsored**

### Transifex

Transifex is a continuous localisation platform designed for software, website, and digital product localisation. It serves as a comprehensive solution for product, engineering, marketing, and localisation teams, facilitating the translation and updating of software interfaces, websites, and digital content in real-time as changes occur. By integrating localisation into the development and content creation processes, Transifex eliminates the traditional batch-based approach, allowing for a more streamlined and efficient workflow. The platform is particularly beneficial for organisations that manage frequently changing software and web content, such as application user interfaces, marketing websites, customer-facing portals, and online documentation. Traditional localisation methods often involve manual file exports and delayed translation cycles, which can lead to discrepancies between translated content and the source updates. Transifex addresses these challenges by automating content synchronisation, enabling near real-time delivery of translations, and ensuring that localisation keeps pace with ongoing development. For software localisation, Transifex integrates seamlessly with code repositories and development workflows. This integration allows new or updated strings to be automatically sent for translation and returned without manual intervention, supporting agile and continuous release cycles. This capability significantly reduces the operational burden on engineering teams, allowing them to focus on development rather than localisation logistics. In the realm of website and marketing localisation, Transifex connects with various content management systems and web frameworks, simplifying the translation of web pages, navigation, metadata, and customer-facing copy. This functionality is particularly advantageous for marketing teams that require rapid multilingual updates to maintain consistency across different markets. The platform’s ability to facilitate quick publishing of translated content ensures that organisations can effectively engage with diverse audiences without delay. Transifex also offers robust collaboration features that enhance the localisation process. These include translation memory, terminology management, and review workflows, which support translators, reviewers, and localisation managers in maintaining linguistic consistency and quality across both technical and marketing content. By providing these tools, Transifex enables teams to operate efficiently while ensuring high standards in their translations. As part of the broader XTM localisation platform, Transifex allows organisations to combine continuous localisation with translation management and visual context tools when necessary. This integration further enhances its value proposition, making it an ideal choice for product teams, engineering teams, marketing teams, and localisation professionals seeking scalable localisation solutions in high-change environments.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-03T14%3A24%3A24Z&secure%5Bdisplayable_resource_id%5D=561&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=15606&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=15606&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvendor-security-and-privacy-assessment%3Fpage%3D4&secure%5Btoken%5D=3fc81aa48c0e05b21017c129d9d54c33958c6c959f55a45554093223a5f1ec09&secure%5Burl%5D=https%3A%2F%2Fhubs.ly%2FQ03jf7gc0&secure%5Burl_type%5D=book_demo)

### [Ombud](https://www.g2.com/products/ombud/reviews)

Built on a foundation of expertise in sales engineering & response management, Ombud serves enterprise-level RevOps teams. Our platform combines Generative AI, content collaboration, project management, & machine learning to streamline the creation of client-facing Sales & Business Development documentation. We move beyond basic automation & knowledge management, offering context-aware intelligent support. This enables RevOps teams to significantly elevate efficiency, cut costs, & surpass growth goals. Ombud partners with medium to large enterprises, streamlining Revenue Operations processes related to Proposal Management, PreSales, Sales & Client Service organizations. Here’s how Ombud is different: ▸ Enterprise-Grade Platform: We are built for enterprise deployments, & are able to scale to that level of complexity. We successfully support global organizations across industries. Versatility Across Use-Cases: We are more than an RFP tool. Use-cases include RFX, InfoSec questionnaires, proactive sales proposals, SOWs & contracts, security documentation, POC frameworks & more. ▸ Generative AI & Machine Learning: Our advanced GenaI capabilities integrate curated & organic content, unlocking your team’s best work & easily surfacing it for reuse. Results compound & improve over time. ▸ Scalability & Growth: We built our product to scale with you. We do not cap users or concurrent projects. We do not charge per feature or present paywalls. We foster scaling adoption, we do not inhibit it. ▸ Change Management & Adoption: We are a high-touch partner. This spans implementation & change management, training, ongoing education & full-service import services. The result for global enterprises like Zendesk, UKG, Pegasystems, Anaplan, Sage and OneStream is a consistent message, faster turnaround time, and professional deliverables at each key step of the sales process. Ombud is headquartered in Denver, CO. To learn more, please visit https://www.ombud.com/

**Average Rating:** 4.7/5.0

**Total Reviews:** 26

#### How Do G2 Users Rate Ombud?

- **Ease of Admin:** 9.4/10 (Category avg: 9.0/10)
- **Risk Scoring:** 6.7/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 6.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Ombud?

- **Seller:** [Ombud](https://www.g2.com/sellers/ombud)
- **Year Founded:** 2011
- **HQ Location:** Denver, Colorado
- **Twitter:** @ombud  
278 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=65822ad206c159466f0bcc11047c8e5ef76ae3515cdcaf85245d4ee01d632055&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fombud%2F&secure%5Burl_type%5D=linkedin_company_website)  
44 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 54% Large, 46% Medium

#### What Do G2 Reviewers Say About Ombud?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **collaborative features** of Ombud, simplifying RFP management and response sharing.
- Users find the **ease of process** with Ombud enhances collaboration and simplifies RFP management and responses.
- Users find Ombud's platform offers **ease of use** , simplifying RFP uploads, collaboration, and response exporting.
- Users find Ombud's **easy RFP collaboration and export** features enhance their proposal submission process significantly.
- Users value the **effortless team collaboration** in Ombud, making RFP management and response preparation seamless.

##### Cons

- Users find Ombud to be **not intuitive** , making it challenging compared to more user-friendly competitors.
- Users find Ombud less **user-friendly** compared to competitors, impacting the ease of their experience.

#### What Are Recent G2 Reviews of Ombud?

**["Ombud Makes RFPs Easy with an Efficient, AI-Driven Library"](https://www.g2.com/survey_responses/ombud-review-12459120)**

**Rating:** 4.5/5.0 stars

_— Verified User in Human Resources_

[Read full review](https://www.g2.com/survey_responses/ombud-review-12459120)

**["Ombud makes RFPs easy"](https://www.g2.com/survey_responses/ombud-review-8840691)**

**Rating:** 4.0/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/ombud-review-8840691)

#### What Are G2 Users Discussing About Ombud?

- [What is Ombud used for?](https://www.g2.com/discussions/what-is-ombud-used-for)

### [6clicks](https://www.g2.com/products/6clicks/reviews)

Transform your approach to cyber risk and compliance with 6clicks, a leading AI-powered Governance, Risk & Compliance (GRC) platform. Designed for service providers, enterprises and governments, 6clicks streamlines building resilient cyber programs that go beyond tick-box compliance. Our unique Hub & Spoke deployment model and powerful AI engine connect distributed teams, systems, and data, providing comprehensive oversight and control. With 6clicks, you can: ➡️ Balance control and autonomy with our Hub & Spoke deployment model, ideal for managing distributed GRC programs across various divisions, functions, geographies, or projects. ➡️ Utilize Hailey, our AI engine, to automate security compliance, IT risk management, vendor management, incident response and more. ➡️ Leverage our transparent licensing model with unlimited users and access to all our modules and the most in-demand security frameworks, like ISO27001, NIST, SOC 2, Cyber Essentials, CMMC, and DORA. ➡️ Access our vast Content Library, including turn-key security frameworks and regulations, audit and assessment templates, control sets and policies, and risk and issue libraries. We also offer advisors and managed service providers a white-labelled, turn-key GRC platform designed to increase client retention, unlock new revenue streams and streamline and scale service delivery.

**Average Rating:** 4.4/5.0

**Total Reviews:** 21

#### How Do G2 Users Rate 6clicks?

- **Ease of Admin:** 8.5/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.7/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.1/10 (Category avg: 7.9/10)

#### Who Is the Company Behind 6clicks?

- **Seller:** [6clicks](https://www.g2.com/sellers/6clicks)
- **Year Founded:** 2019
- **HQ Location:** Carlton, Victoria, Australia
- **Twitter:** @6clicksOfficial  
129 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b36112ea863b01ab87f4e30784ee98f04e03dd608c560706893cbdccb2655da5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F6clicks%2F&secure%5Burl_type%5D=linkedin_company_website)  
85 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services
- **Company Size:** 50% Medium, 32% Small

#### What Are Recent G2 Reviews of 6clicks?

**["better streamline and risk management tool to enhance the visibility"](https://www.g2.com/survey_responses/6clicks-review-9662456)**

**Rating:** 4.5/5.0 stars

_— Abhishek C._

[Read full review](https://www.g2.com/survey_responses/6clicks-review-9662456)

**["Enterprise-Grade Risk & Compliance Management in One Platform"](https://www.g2.com/survey_responses/6clicks-review-12704038)**

**Rating:** 4.5/5.0 stars

_— Biswajit B._

[Read full review](https://www.g2.com/survey_responses/6clicks-review-12704038)

### [TrustCloud®](https://www.g2.com/products/trustcloud/reviews)

As a Trust Assurance platform, TrustCloud® uses a unified, graph-based architecture that connects your controls, policies, and knowledge base into one silo-free compliance automation and risk management platform. We help compliance teams: - Reduce cost and time managing controls and preparing for audits - Accelerate sales deals with faster security reviews - Manage and quantify risk We help CISOs: - Reduce corporate and personal liability - Programmatically measure and report on control status, compliance audits, customer commitments, and risk - Become strategic partners to the board and leadership TrustCloud is a fast, affordable, and accurate compliance and risk management platform that dynamically scopes to your objectives as regulations change and your business grows.

**Average Rating:** 4.6/5.0

**Total Reviews:** 49

#### How Do G2 Users Rate TrustCloud®?

- **Ease of Admin:** 9.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.2/10 (Category avg: 7.9/10)

#### Who Is the Company Behind TrustCloud®?

- **Seller:** [TrustCloud®](https://www.g2.com/sellers/trustcloud)
- **Company Website:** www.trustcloud.ai
- **HQ Location:** Boston, US
- **Twitter:** @TrustCloudAI  
439 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=15cbb1b95fc8754565d5ab994ec8d1ed93413241dae86ef460bc6cd6fd63b17f&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbekintent%2F&secure%5Burl_type%5D=linkedin_company_website)  
75 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 82% Small, 18% Medium

#### What Do G2 Reviewers Say About TrustCloud®?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **automation features** of TrustCloud®, streamlining compliance tasks and enhancing overall governance efficiency.
- Users appreciate the **efficient policy management** of TrustCloud®, simplifying compliance tasks and enhancing governance visibility.
- Users find TrustCloud® offers **efficient risk management** , simplifying compliance tasks and enhancing visibility across various frameworks.
- Users value the **time-saving automation** of TrustCloud®, enhancing productivity in compliance and governance tasks.
- Users value TrustCloud® for its **effective compliance management** , streamlining tasks and improving visibility across various frameworks.

##### Cons

- Users experience **integration issues** with existing tools and find setup cumbersome, impacting overall functionality.
- Users find **limited integrations** challenging, as they often require extra setup and can hinder seamless functionality.
- Users find the **pricing to be high** for TrustCloud®, making it less accessible for some organizations.
- Users find the **lack of flexibility in customization** limits their experience with TrustCloud®'s features and integrations.
- Users find the **limited customization** options of TrustCloud® restrict their ability to tailor the platform to specific needs.

#### What Are Recent G2 Reviews of TrustCloud®?

**["Effortless Compliance Management with TrustCloud"](https://www.g2.com/survey_responses/trustcloud-review-12070011)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/trustcloud-review-12070011)

**["Comprehensive Policy Training with Mandatory Focus That Works"](https://www.g2.com/survey_responses/trustcloud-review-12429028)**

**Rating:** 4.5/5.0 stars

_— Matthew L._

[Read full review](https://www.g2.com/survey_responses/trustcloud-review-12429028)

### [CEEL](https://www.g2.com/products/ceel/reviews)

Ceel is an AI-native Governance, Risk, and Compliance (GRC) automation platform that helps organizations streamline security, privacy, and AI compliance across multiple frameworks including SOC 2, ISO 27001, ISO 42001, GDPR, HIPAA, NIST and many more. The platform is designed for startups, mid-market companies, and enterprise teams that need to demonstrate trust, reduce audit complexity, and maintain continuous compliance with evolving standards. Ceel automates the end-to-end compliance lifecycle through agentic AI copilots that handle evidence collection, control mapping, risk monitoring, and audit readiness. Users can get compliant in days instead of months and manage their entire compliance posture from one unified platform. The system continuously collects and verifies data across connected integrations - such as cloud providers, identity systems, ticketing tools, and device management platforms to ensure security controls are always up to date. With built-in audits, companies can work directly with approved auditors and achieve certification in weeks rather than quarters. We integrate with you directly through Slack and Microsoft Teams, allowing teams to collaborate, receive alerts, and resolve compliance tasks without leaving their workflow. Its unified dashboard also helps reduce operational risk, lower cyber insurance premiums, and avoid regulatory penalties by maintaining ongoing visibility and proof of compliance. Key Features and Benefits • Agentic AI Copilots: automate compliance tasks, gather evidence, and manage controls autonomously. • Built-In Audits — accelerate certification timelines with auditor-ready data and workflow integration. • Evidence & Device Management — unify assets, endpoints, and cloud configurations under one secure dashboard. • Slack / Teams Integration — communicate with copilots, track progress, and receive real-time updates. • Continuous Monitoring & Trust Center — maintain audit readiness, prove trust to customers, and share compliance posture in real time. Ceel enables organizations to unlock new enterprise revenue, streamline certifications, and maintain compliance confidence as they scale.

**Average Rating:** 4.9/5.0

**Total Reviews:** 14

#### How Do G2 Users Rate CEEL?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.1/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind CEEL?

- **Seller:** [CEEL](https://www.g2.com/sellers/ceel)
- **Year Founded:** 2024
- **HQ Location:** San Francisco , US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1f4bd4e277a97e63233d302036202773f22a470d928dee5abcc34a731a22d866&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsocurely%2F&secure%5Burl_type%5D=linkedin_company_website)  
11 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 79% Small, 21% Medium

#### What Do G2 Reviewers Say About CEEL?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **personalized and responsive customer support** from Socurely, enhancing their compliance journey significantly.
- Users commend the **ease of use** of Socurely, highlighting its simplicity and efficiency for compliance tasks.
- Users appreciate the **responsive support** from Socurely, which simplifies compliance and enhances overall productivity with organized resources.
- Users value the **AI automation** of CEEL, appreciating its efficiency and ease of integration in the GRC process.
- Users praise Socurely for its **ease of use in compliance management** , significantly reducing manual efforts and audit stress.

##### Cons

- Users note **limited features** initially, but appreciate quick updates and fixes that improve the platform over time.
- Users find some **non-intuitive features** and controls in CEEL, making initial navigation and usage challenging.
- Users feel that **update issues** slow down enhancements, though support remains responsive and dedicated to improvements.
- Users feel the **excessive controls** in CEEL can be overwhelming and suggest a reduction for better usability.
- Users experience **delay issues** with feature updates in Socurely, though support remains responsive and attentive to feedback.

#### What Are Recent G2 Reviews of CEEL?

**["Comprehensive Compliance Platform We Couldn’t Have Done SOC 2 Without"](https://www.g2.com/survey_responses/ceel-review-13001623)**

**Rating:** 5.0/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/ceel-review-13001623)

**["CEEL Makes SOC 2 & HIPAA Compliance Manageable, Fast, and Well-Supported"](https://www.g2.com/survey_responses/ceel-review-13002234)**

**Rating:** 5.0/5.0 stars

_— Billy K._

[Read full review](https://www.g2.com/survey_responses/ceel-review-13002234)

### [SAFE](https://www.g2.com/products/safe-security-safe/reviews)

SAFE has reinvented cyber risk management with Agentic AI. The company helps CISOs, TPRM, and GRC leaders become strategic business partners by automating the understanding, prioritization and management of cyber risk—accelerating AI adoption and digital transformation. SAFE is the #1 platform to unify the management of all cyber risks—enterprise, third-party, and AI-related—and deliver autonomous cyber risk management through a fleet of specialized AI agents. Its platform replaces manual effort with agentic automation, backed by the world’s most trusted risk standards. Trusted by hundreds of global organizations, SAFE has more than doubled revenue three years in a row and raised $100M+ to fuel the future of cyber risk automation.

**Average Rating:** 4.4/5.0

**Total Reviews:** 59

#### How Do G2 Users Rate SAFE?

- **Ease of Admin:** 8.2/10 (Category avg: 9.0/10)
- **Risk Scoring:** 7.5/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.0/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.1/10 (Category avg: 7.9/10)

#### Who Is the Company Behind SAFE?

- **Seller:** [Safe Security](https://www.g2.com/sellers/safe-security)
- **Year Founded:** 2012
- **HQ Location:** Palo Alto, US
- **Twitter:** @safecrq  
3,248 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e8030ec0a0fbe49ebd50f7bbf676485b37881efb34d296757d55a1e5b2eafa5c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsafesecurity-inc%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,217 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Hospital & Health Care
- **Company Size:** 73% Large, 13% Medium

#### What Do G2 Reviewers Say About SAFE?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **revolutionary approach to cyber risk management** that SAFE offers with its FAIR analysis integration.
- Users commend the **exceptional customer support** of SAFE, consistently receiving timely assistance and expert guidance.
- Users value SAFE for its **robust features** that enhance decision-making and streamline risk analysis effectively.
- Users praise the **seamless data integration** in SAFE, enhancing insights and empowering strategic decision-making.
- Users find SAFE to have **intuitive usability** , with easy implementation and clear dashboards enhancing their experience.

##### Cons

- Users find the **missing features** in SAFE limit functionality and hinder effective risk analysis and onboarding.
- Users find that **information management needs improvement** , as granularity and transparency issues hinder effective data utilization.
- Users face **integration issues** with SAFE, limiting data access and complicating use for smaller teams.
- Users find **limited customization** options in SAFE, lacking deep integrations and the ability to tailor configurations effectively.
- Users find the **interface confusing** , with a cluttered dashboard and unclear group creation methods complicating risk assessments.

#### What Are Recent G2 Reviews of SAFE?

**["Fast Customer Support, Automated FAIR Analysis, Real-time CTI informed TEF make SAFE the #1 CRQ tool"](https://www.g2.com/survey_responses/safe-review-11385254)**

**Rating:** 5.0/5.0 stars

_— Joshua C._

[Read full review](https://www.g2.com/survey_responses/safe-review-11385254)

**["Elevating risk management with a trusted partner."](https://www.g2.com/survey_responses/safe-review-11388553)**

**Rating:** 4.5/5.0 stars

_— Zoe S._

[Read full review](https://www.g2.com/survey_responses/safe-review-11388553)

#### What Are G2 Users Discussing About SAFE?

- [What is an FME workflow?](https://www.g2.com/discussions/what-is-an-fme-workflow)
- [Is FME a GIS?](https://www.g2.com/discussions/is-fme-a-gis)
- [What can FME be used for?](https://www.g2.com/discussions/what-can-fme-be-used-for)
- [How can I make software safe?](https://www.g2.com/discussions/how-can-i-make-software-safe)

### [Onlayer Platform](https://www.g2.com/products/onlayer-platform/reviews)

Banks and PayFacs are given a user account which they can log into and use the dashboard. In the dashboard, they can create their own portfolio, scan domains, and get a security score for each scanned vendor ranging from 0 to 100. At the end of each scan a report is generated, which provides detailed information about detected vulnerabilities found in the vendor’s infrastructure. There are three types of reports, with various degrees of details. One being the Full Report, another providing only Vulnerabilities found, and lastly an Action Report is generated which guides the vendor step by step to solve the issues within the website and remediate the cyber security posture.

**Average Rating:** 4.8/5.0

**Total Reviews:** 6

#### How Do G2 Users Rate Onlayer Platform?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Onlayer Platform?

- **Seller:** [Onlayer](https://www.g2.com/sellers/onlayer)
- **Year Founded:** 2019
- **HQ Location:** Ankara, TR
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b93907096f3099069cb866e548c8533c4e9bbc6a953c413fceb5114c24cb3d6a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fpci-checklist%2F&secure%5Burl_type%5D=linkedin_company_website)  
28 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 50% Large, 33% Small

#### What Do G2 Reviewers Say About Onlayer Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **automation capabilities** of Onlayer Platform, which streamline onboarding and enhance risk management efficiently.
- Users value the **customer support** of Onlayer Platform, remarking on its focus and commitment to continuous improvement.
- Users value the **ease of process** with Onlayer, enabling quick onboarding and efficient risk management for merchants.
- Users value the **ease of use** of Onlayer Platform, appreciating its straightforward setup without integration hassles.
- Users value the **easy integrations** of Onlayer Platform, facilitating seamless secure transactions without complex setup.

##### Cons

- Users desire **more granular reporting** on the Onlayer Platform for improved insights and effectiveness.

#### What Are Recent G2 Reviews of Onlayer Platform?

**["Onlayer For Actionable Insights and Periodic Risk Management"](https://www.g2.com/survey_responses/onlayer-platform-review-9838560)**

**Rating:** 5.0/5.0 stars

_— SELMA S._

[Read full review](https://www.g2.com/survey_responses/onlayer-platform-review-9838560)

**["Bespoke audit questions"](https://www.g2.com/survey_responses/onlayer-platform-review-10241773)**

**Rating:** 4.0/5.0 stars

_— Verified User in Oil & Energy_

[Read full review](https://www.g2.com/survey_responses/onlayer-platform-review-10241773)

#### What Are G2 Users Discussing About Onlayer Platform?

- [What is PCI Checklist Merchant Risk Assessment used for?](https://www.g2.com/discussions/what-is-pci-checklist-merchant-risk-assessment-used-for) - 1 comment

### [ServiceNow Governance, Risk, and Compliance (GRC)](https://www.g2.com/products/servicenow-governance-risk-and-compliance-grc/reviews)

ServiceNow for Governance, Risk and Compliance (GRC) is an AI-native platform that connects enterprise risk management, compliance, cyber risk, operational resilience, third-party risk management, privacy compliance, AI governance, and ESG on a single platform and data model. Designed for midsize to large enterprises in all industries, it runs every program on the same AI platform powering the rest of your business, so your teams can sense emerging risk, decide what to do about it, act before it becomes a problem, and govern everything in between. Strong operations start with knowing where your risk is and building your business to withstand it. ServiceNow helps you quantify and manage risk across your enterprise, from process failures and privacy exposure to loss events, with AI native workflows that surface issues, assess impact, and connect risk directly to the operations and processes you depend on. The strongest organizations are built to withstand disruption, not just recover from it. Designed for frameworks like DORA, ServiceNow gives you the tools to assess exposure, strengthen critical operations, and build resilience into the way your business runs. When disruption hits, the impact is minimal and recovery is fast because business continuity plans and recovery workflows are connected and in place. The cyber threat landscape is expanding faster than most organizations can track, with threats growing in volume, sophistication, and speed from every direction. ServiceNow helps you translate cyber risk into business risk you can act on, with continuous control monitoring, risk quantification, and visibility into third-party exposure. Because everything runs on one platform, cyber risk data has the business context you need to make faster, more confident decisions. ServiceNow also gives you visibility into third-party risk across the full relationship lifecycle, so you always know where your risk is and can act before it becomes a problem. With AI-native assessments and real-time risk scoring, your vendor ecosystem never becomes a blind spot. Regulatory expectations are expanding faster than most compliance programs were built to handle. New frameworks, evolving privacy laws, and emerging AI regulations mean your team is constantly absorbing change while keeping existing obligations current. ServiceNow brings your entire compliance program onto one platform, from regulatory compliance and change management to audit readiness, privacy obligations, and sustainability disclosures. And as AI regulations take effect, keeping pace becomes part of that same compliance mandate. Govern every AI asset, from ServiceNow or any third party, with the visibility and controls needed to ensure every model operates safely, ethically, and in line with regulatory requirements. ServiceNow runs everything on one platform with one data model. Risk data is always current and flows freely across every program without manual reconciliation or duplicate effort. The result is a complete, contextualized, and connected picture of risk across your enterprise.

**Average Rating:** 4.2/5.0

**Total Reviews:** 108

#### How Do G2 Users Rate ServiceNow Governance, Risk, and Compliance (GRC)?

- **Ease of Admin:** 7.7/10 (Category avg: 9.0/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind ServiceNow Governance, Risk, and Compliance (GRC)?

- **Seller:** [ServiceNow](https://www.g2.com/sellers/servicenow)
- **Company Website:** www.servicenow.com
- **Year Founded:** 2004
- **HQ Location:** Santa Clara, CA
- **Twitter:** @servicenow  
55,548 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8f146dd2da6255ae21db2f89043b268912043fe250660dfee40ba3c0574bb1ba&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F29352%2F&secure%5Burl_type%5D=linkedin_company_website)  
35,081 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Banking, Information Technology and Services
- **Company Size:** 43% Large, 17% Medium

#### What Do G2 Reviewers Say About ServiceNow Governance, Risk, and Compliance (GRC)?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **automation of tasks** in ServiceNow GRC, streamlining ESG reporting and enhancing compliance efficiency.
- Users value the **unified platform with automation** in ServiceNow GRC, enhancing ESG compliance and reporting efficiency.
- Users appreciate the **unified platform and automation** of ServiceNow ESG Management, streamlining ESG tracking and reporting.
- Users value the **efficient monitoring and automation** features of ServiceNow GRC, enhancing risk management and compliance processes.
- Users value the **efficiency improvement** from ServiceNow GRC, enabling real-time risk management with seamless monitoring and automation.

##### Cons

- Users find the **complex setup** process of ServiceNow GRC to be time-consuming and challenging to navigate.
- Users find ServiceNow GRC **expensive** , making it challenging in the current economy despite its overall value.
- Users find the **learning curve steep** , as the concepts are complicated and navigation is challenging.
- Users find the **learning difficulty** to understand concepts and navigate the interface a challenge in ServiceNow GRC.
- Users find the **limited customization** in ServiceNow GRC hampers tailoring to unique workflows and requirements efficiently.

#### What Are Recent G2 Reviews of ServiceNow Governance, Risk, and Compliance (GRC)?

**["Comprehensive GRC Management on a Unified Platform"](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-13185428)**

**Rating:** 4.0/5.0 stars

_— Verified User in Consulting_

[Read full review](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-13185428)

**["Single platform for enterprise-wide risk visibility"](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12759445)**

**Rating:** 4.0/5.0 stars

_— Verified User in Banking_

[Read full review](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12759445)

#### What Are G2 Users Discussing About ServiceNow Governance, Risk, and Compliance (GRC)?

- [What is a governance risk and compliance tool?](https://www.g2.com/discussions/what-is-a-governance-risk-and-compliance-tool)
- [Does ServiceNow have a GRC module?](https://www.g2.com/discussions/does-servicenow-have-a-grc-module)
- [What are the features of IT GRC?](https://www.g2.com/discussions/what-are-the-features-of-it-grc)
- [What can ServiceNow governance risk and compliance help?](https://www.g2.com/discussions/what-can-servicenow-governance-risk-and-compliance-help)

### [ThreatWorx](https://www.g2.com/products/threatworx/reviews)

ThreatWorx is a next-gen proactive cybersecurity platform that protects servers, cloud, containers and source code from malware and vulnerabilities without scanner appliances or bulky agents. ThreatWorx serves multiple use cases including threat intelligence, DevSecOps, cloud security, vulnerability management and third party risk assessment.

**Average Rating:** 4.7/5.0

**Total Reviews:** 9

#### How Do G2 Users Rate ThreatWorx?

- **Ease of Admin:** 9.2/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.9/10 (Category avg: 8.8/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind ThreatWorx?

- **Seller:** [Threatwatch](https://www.g2.com/sellers/threatwatch)
- **Year Founded:** 2016
- **HQ Location:** LOS GATOS, US
- **Twitter:** @threatwatch  
100 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f5657162472a245c39f3e39a2b762d1ff812c0737644e0357ad52a4b7f8301aa&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthreatwatch%2F&secure%5Burl_type%5D=linkedin_company_website)  
5 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 40% Medium, 40% Small

#### What Are Recent G2 Reviews of ThreatWorx?

**["Amazing security technology"](https://www.g2.com/survey_responses/threatworx-review-4936116)**

**Rating:** 5.0/5.0 stars

_— Parikshit S._

[Read full review](https://www.g2.com/survey_responses/threatworx-review-4936116)

**["very good product"](https://www.g2.com/survey_responses/threatworx-review-6954316)**

**Rating:** 4.5/5.0 stars

_— Yogesh S._

[Read full review](https://www.g2.com/survey_responses/threatworx-review-6954316)

#### What Are G2 Users Discussing About ThreatWorx?

- [What is ThreatWorx used for?](https://www.g2.com/discussions/what-is-threatworx-used-for)

### [Supply Wisdom](https://www.g2.com/products/supply-wisdom/reviews)

Supply Wisdom transforms global business with comprehensive, predictive, real-time risk intelligence. Through continuous monitoring, comprehensive intelligence reports, and real-time alerts, Supply Wisdom speeds business growth, lowers costs, increases security and compliance, and unlocks revenue opportunities. Supply Wisdom’s full-stack AI-based SaaS products turn open-source data into risk intelligence and are the market’s only software to cover all risk domains in real-time: financial, cyber, operational, ESG, compliance, Nth party, and location-based risk. Supply Wisdom clients include Fortune 100 and Global 2000 firms in the financial services, insurance, healthcare, and technology sectors, including United Healthcare, BNY Mellon, and Bank of Ireland. Supply Wisdom values diversity with a global workforce that is currently 57% female. Contact us today for a quick demo so you can see how our actionable approach can achieve great results for your company.

**Average Rating:** 4.3/5.0

**Total Reviews:** 17

#### How Do G2 Users Rate Supply Wisdom?

- **Ease of Admin:** 8.9/10 (Category avg: 9.0/10)
- **Risk Scoring:** 7.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 3.9/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 4.4/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Supply Wisdom?

- **Seller:** [Supply Wisdom](https://www.g2.com/sellers/supply-wisdom)
- **Year Founded:** 2017
- **HQ Location:** New York, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d25eba400023c393670f96fd29bd7f143779b5a49e0ba0f5bbd87cc4e477ba4b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsupplywisdom&secure%5Burl_type%5D=linkedin_company_website)  
123 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Financial Services
- **Company Size:** 59% Large, 29% Medium

#### What Do G2 Reviewers Say About Supply Wisdom?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Supply Wisdom, making it simple to monitor key targets and receive useful alerts.
- Users appreciate the **daily alert notifications** from Supply Wisdom, finding them helpful for proactive vendor engagement.
- Users appreciate the **easy setup** of Supply Wisdom, enabling a smooth start and efficient utilization of the tool.
- Users find **implementation easy** with Supply Wisdom, appreciating the smooth setup and friendly customer support.
- Users value the **timely alerts** from Supply Wisdom, enhancing vendor communication and proactive risk management.

##### Cons

- Users highlight **poor UX design** in Supply Wisdom, causing confusion and hindering effective navigation and alert management.
- Users experience **integration issues** with Supply Wisdom, including limited tracking and confusing vendor organization during implementation.
- Users find the **intrusive notifications** from Supply Wisdom overwhelming, especially with an initial flood of alerts.
- Users find **limited customization** in Supply Wisdom, impacting usability and the management of alerts significantly.
- Users find **poor notifications** challenging, with initial excessive alerts leading to potential overwhelm in managing information.

#### What Are Recent G2 Reviews of Supply Wisdom?

**["As a practitioner of Vendor Management, I would recommend Supply Wisdom as a monitoring tool."](https://www.g2.com/survey_responses/supply-wisdom-review-10757207)**

**Rating:** 5.0/5.0 stars

_— Verified User in Insurance_

[Read full review](https://www.g2.com/survey_responses/supply-wisdom-review-10757207)

**["New Implementation Review"](https://www.g2.com/survey_responses/supply-wisdom-review-10748455)**

**Rating:** 4.5/5.0 stars

_— Verified User in Insurance_

[Read full review](https://www.g2.com/survey_responses/supply-wisdom-review-10748455)

### [Cyberbase](https://www.g2.com/products/cyberbase/reviews)

Cyberbase is the unified workspace where security, sales, and legal teams eliminate the manual work that slows deals down. The platform uses agentic AI — trained on your approved playbooks and security posture — to automate three core workflows: security questionnaire and DDQ completion, contract redlining (NDAs, DPAs, MSAs), and a customer-facing Trust Center for proactive security documentation sharing. Unlike point solutions that address only one piece of the security review process, Cyberbase brings questionnaire automation, contract review, and trust center capabilities into a single platform. This means teams manage their entire security review lifecycle — from the first questionnaire to the final redline — without switching tools. Key capabilities include: - AI Security Questionnaire Automation: Upload any questionnaire and receive audit-ready answers generated from your organization's security documentation, policies, and prior responses — in minutes, not weeks. - AI Contract Redlining: NDAs, DPAs, and MSAs are automatically reviewed against your organizational security posture and approved playbooks, with precise tracked changes and flagged risk areas. - Free Trust Center: A customer-facing portal where prospects and customers can self-serve access to your security documentation, certifications, and compliance artifacts — at no cost, replacing tools that charge $6K–$15K+. - Gap Detection: When your documentation can't answer a question, Cyberbase flags it as a potential gap and routes it to the appropriate team member for resolution. - Team Collaboration: Invite team members and ensure everyone works with the correct, up-to-date organizational security commitments. Cyberbase is SOC 2 Type II compliant, uses Anthropic's ISO 42001-certified models under commercial terms that prohibit training on customer data, and maintains only three subprocessors (AWS, Google, Anthropic). Enterprise customers can access single-tenant architecture and IP indemnification. Built by engineers from Apple and Robinhood, Cyberbase is for security leaders, sales teams, GRC professionals, and legal teams at companies that need to move faster through the "certified-to-deal-ready" gap without sacrificing rigor.

**Average Rating:** 4.7/5.0

**Total Reviews:** 3

#### How Do G2 Users Rate Cyberbase?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 10.0/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Cyberbase?

- **Seller:** [Cyberbase Systems](https://www.g2.com/sellers/cyberbase-systems)
- **Year Founded:** 2025
- **HQ Location:** San Francisco, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=eadefb28f58d38cffb991ace4d050bc6b5a319b73bf67b8b8ebb485775be1689&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcyberbaseai%2F&secure%5Burl_type%5D=linkedin_company_website)  
9 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 67% Small, 33% Medium

#### What Are Recent G2 Reviews of Cyberbase?

**["Cyberbase Helps Us Crush Security Questionnaires and Close Enterprise Deals Faster"](https://www.g2.com/survey_responses/cyberbase-review-12594929)**

**Rating:** 4.5/5.0 stars

_— Vlad V._

[Read full review](https://www.g2.com/survey_responses/cyberbase-review-12594929)

**["Finally, a tool that doesn't let deals die in security review"](https://www.g2.com/survey_responses/cyberbase-review-12871047)**

**Rating:** 4.5/5.0 stars

_— Dmytro S._

[Read full review](https://www.g2.com/survey_responses/cyberbase-review-12871047)

### [Gatekeeper](https://www.g2.com/products/gatekeeper/reviews)

Gatekeeper is the only unified Vendor and Contract Lifecycle Management solution. Built for lean Finance, Procurement and Legal teams with enterprise-sized compliance responsibilities, Gatekeeper brings every vendor, contract, obligation, renewal, performance review and line of spend together in one connected platform. Unlike standalone CLM, supplier risk and procurement tools, every stage of the vendor lifecycle stays connected, giving organisations complete visibility, stronger governance and better commercial decisions. Due diligence shapes the contract. The contract stays connected to obligations, performance and spend. A continuous view of what every vendor delivers and costs surfaces savings your team can act on Gatekeeper AI turns your data into answers, while Gatekeeper Agents turn those answers into action. More than 50 specialist agents automate due diligence, contract review, evidence collection, compliance monitoring, obligation tracking and supplier performance. Customers reduce vendor onboarding by up to 90%, accelerate contracting by up to 75%, reclaim more than 30 weeks of manual administration and reduce vendor spend by up to 14%. With implementation in less than 60 days, more than 1,700 integrations and SOC 1 Type 2, SOC 2 Type 1, ISO 9001 and ISO 27001 certifications, Gatekeeper helps organisations strengthen governance, accelerate contracting and unlock more value from every supplier relationship. Protection ✦ Performance. Together.

**Average Rating:** 4.5/5.0

**Total Reviews:** 82

#### How Do G2 Users Rate Gatekeeper?

- **Ease of Admin:** 8.8/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Gatekeeper?

- **Seller:** [Gatekeeper](https://www.g2.com/sellers/gatekeeper)
- **Company Website:** www.gatekeeperhq.com
- **Year Founded:** 2010
- **HQ Location:** London, United Kingdom
- **Twitter:** @gatekeeperhq  
100 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=4b6d1b5686cdac345663cdf18d9293bcb7671cb31688b568c5e391724c5f5288&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fgatekeeperhq%2F&secure%5Burl_type%5D=linkedin_company_website)  
115 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Financial Services
- **Company Size:** 49% Medium, 29% Large

#### What Do G2 Reviewers Say About Gatekeeper?

_AI-generated summary from verified user reviews_

##### Pros

- Users commend the **user-friendly design** of Gatekeeper, praising its ease of use and efficient functionality.
- Users praise the **responsive customer support** from Gatekeeper, highlighting their timely assistance and helpful team members.
- Users find **contract management easy and efficient** with Gatekeeper, benefiting from templates and superb customer support.
- Users find the **implementation process straightforward** , supported by a proactive and responsive team, ensuring a seamless experience.
- Users value the **customization options** of Gatekeeper, which enhance functionality and streamline contract management processes.

##### Cons

- Users desire **customization options** and better ERP integration in Gatekeeper, limiting its overall utility for some.
- Users find **limited customization options** frustrating, as they require significant effort and may not meet individual needs.
- Users find the **additional modules expensive** , leading to concerns about the overall pricing structure and budgeting.
- Users find the **high fees** for additional modules to be a significant drawback of Gatekeeper.
- Users report **poor customer support** , facing challenges even after submitting Tech support requests for issue resolution.

#### What Are Recent G2 Reviews of Gatekeeper?

**["Easy-to-Connect CLM with a Powerful API"](https://www.g2.com/survey_responses/gatekeeper-review-12409063)**

**Rating:** 4.5/5.0 stars

_— David d._

[Read full review](https://www.g2.com/survey_responses/gatekeeper-review-12409063)

**["Gatekeeper, it just works well!"](https://www.g2.com/survey_responses/gatekeeper-review-11129491)**

**Rating:** 4.5/5.0 stars

_— Lawrence B._

[Read full review](https://www.g2.com/survey_responses/gatekeeper-review-11129491)

#### What Are G2 Users Discussing About Gatekeeper?

- [Is GateKeeper free?](https://www.g2.com/discussions/is-gatekeeper-free)
- [What is GateKeeper review?](https://www.g2.com/discussions/what-is-gatekeeper-review)
- [Is GateKeeper cloud-based?](https://www.g2.com/discussions/is-gatekeeper-cloud-based)
- [What is a GateKeeper software?](https://www.g2.com/discussions/what-is-a-gatekeeper-software)

### [Privacy Nexus](https://www.g2.com/products/privacy-nexus/reviews)

At Privacy Company we believe in a world in which every organization works actively on data protection. Under the motto Making Data Protection Easy, Privacy Company offers advice, training and software to build a privacy friendly and safe organisational culture. Our team of experienced consultants help organisations quickly and with industry-leading quality to become and remain compliant with the General Data Protection Regulation (GDPR).

**Average Rating:** 4.6/5.0

**Total Reviews:** 4

#### How Do G2 Users Rate Privacy Nexus?

- **Ease of Admin:** 8.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.3/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Privacy Nexus?

- **Seller:** [Privacy Company](https://www.g2.com/sellers/privacy-company)
- **HQ Location:** Den Haag, NL
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=442f762916b0539fb50b9b61b332593e702fd252c837f9dfcaf29f9b30e89ca5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fprivacy-nexus&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Medium

#### What Are Recent G2 Reviews of Privacy Nexus?

**["Handeling rambling information scene"](https://www.g2.com/survey_responses/privacy-nexus-review-9784429)**

**Rating:** 4.0/5.0 stars

_— Cem P._

[Read full review](https://www.g2.com/survey_responses/privacy-nexus-review-9784429)

**["Supportive Privacy Management Extension"](https://www.g2.com/survey_responses/privacy-nexus-review-10028127)**

**Rating:** 4.5/5.0 stars

_— Alessandro T._

[Read full review](https://www.g2.com/survey_responses/privacy-nexus-review-10028127)

### [ScalePad ControlMap](https://www.g2.com/products/scalepad-controlmap/reviews)

Built for MSPs, ControlMap is a cybersecurity compliance automation platform designed to expedite the compliance journey for 50+ frameworks and standards. With turnkey tools, automation, and templates, ControlMap enables MSPs to offer Compliance as a Service (CaaS), increasing revenue streams and ensuring clients are compliant within highly regulated industries.&nbsp; Designed to scale, ControlMap provides a multi-tenant solution that helps MSPs become the compliance expert their clients need - without having to take a single cybersecurity course. From robust reporting and policy templates to 40+ supported integrations, achieving compliance is accessible and frictionless.&nbsp; It’s time to accelerate growth, boost resilience, and mitigate cybersecurity risks. Peace of mind is just a framework away.&nbsp; Enabling MSPs to build and manage a cybersecurity compliance program, ControlMap streamlines compliance from start to audit and beyond. Say “goodbye” to endless spreadsheets and documents with a SaaS solution that simplifies the complexities in achieving and maintaining SOC 2, CMMC, FTC Safeguards, NIST CSF 2.0, CIS Controls, and many more standards. See firsthand how ControlMap can help at&nbsp;www.scalepad.com/control-map

**Average Rating:** 4.6/5.0

**Total Reviews:** 50

#### How Do G2 Users Rate ScalePad ControlMap?

- **Ease of Admin:** 8.1/10 (Category avg: 9.0/10)
- **Risk Scoring:** 10.0/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind ScalePad ControlMap?

- **Seller:** [ScalePad](https://www.g2.com/sellers/scalepad)
- **Company Website:** www.scalepad.com
- **Year Founded:** 2015
- **HQ Location:** Vancouver, BC
- **Twitter:** @GoScalePad  
981 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=65e8fb974179a19c4d14b5706418e1904180ba5e0d12fd01e9c44a2b382dbce5&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fscalepad%2F&secure%5Burl_type%5D=linkedin_company_website)  
235 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 55% Medium, 37% Small

#### What Do G2 Reviewers Say About ScalePad ControlMap?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of ScalePad ControlMap, enjoying its streamlined interface and integrated features for efficiency.
- Users value the **secure API integrations** of ScalePad ControlMap, enhancing connectivity and efficiency across various platforms.
- Users value the **easy navigation and comprehensive compliance frameworks** of ScalePad ControlMap, streamlining their regulatory processes.
- Users value the **easy-to-navigate dashboard** of ScalePad ControlMap, enhancing workflow across multiple compliance frameworks efficiently.
- Users value the **automatic evidence collection** feature of ScalePad ControlMap, simplifying governance and risk management processes.

##### Cons

- Users find the **setup process complex** , especially with SSO login issues between different platforms requiring additional configurations.
- Users find the **learning curve challenging** , particularly with loading times and discovering features on first use.
- Users experience **access issues** with SSO login when using both MSP and organizational tenants, complicating access for teams.
- Users face difficulties with **SSO login integration** , requiring extra configuration for access across different tenants.
- Users find the **complex implementation** of ScalePad ControlMap to be more challenging than anticipated based on initial company discussions.

#### What Are Recent G2 Reviews of ScalePad ControlMap?

**["Controlmap Simplifies ISO27001 and SMB1001 Compliance Management"](https://www.g2.com/survey_responses/scalepad-controlmap-review-13062229)**

**Rating:** 5.0/5.0 stars

_— Glyn W._

[Read full review](https://www.g2.com/survey_responses/scalepad-controlmap-review-13062229)

**["Awesome and effective GRC coverage"](https://www.g2.com/survey_responses/scalepad-controlmap-review-13024181)**

**Rating:** 4.0/5.0 stars

_— Verified User in Computer & Network Security_

[Read full review](https://www.g2.com/survey_responses/scalepad-controlmap-review-13024181)

### [UpGuard Trust Exchange](https://www.g2.com/products/upguard-trust-exchange/reviews)

UpGuard Trust Exchange is an AI-powered security questionnaire automation and trust management solution that empowers sales and security teams to streamline their trust management process and close deals faster. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Vendor Risk and Breach Risk to provide a unified defense against modern cyber threats. As organizations scale, demonstrating a strong security posture to prospects and customers becomes a major bottleneck. Traditional methods rely on time-consuming, error-prone copying and pasting, leaving teams bogged down in manual back-and-forth across departments. Trust Exchange solves this by combining Questionnaire AI, centralized Trust Centers, and seamless collaboration into a single, scalable platform. Key Capabilities: • Questionnaire AI: Answer security questionnaires in record time. Save your team from time-consuming manual entry. Questionnaire AI constantly learns from your library of existing questionnaires and security documentation to create fast, accurate answers. Verify all AI-generated suggestions with one click to maintain total control. • Proactive Trust Centers: Fast-track sales with a centralized hub. Build trust faster by proactively sharing your security documentation, certifications, and policies in one secure place. Your Trust Center makes it easy for prospects to access the information they need without the traditional email back-and-forth, establishing credibility in seconds. • Centralized Collaboration: Bring your team together in one place. Streamline your entire trust management process by inviting all the collaborators you need to answer questionnaires. Align security, sales, and other teams in a single workspace to prevent stale documents from being shared. • Premium Enterprise Features: Fortify your organization and brand. Scale your trust efforts with premium features like custom domains, multiple tailored Trust Centers, and watermarked PDF downloads to secure every document you share. By translating complex security postures into verified, easily shareable Trust Centers, UpGuard Trust Exchange enables security and sales leaders to establish credibility, accelerate sales cycles, and confidently prove compliance to prospects.

**Average Rating:** 2.5/5.0

**Total Reviews:** 3

#### Who Is the Company Behind UpGuard Trust Exchange?

- **Seller:** [UpGuard](https://www.g2.com/sellers/upguard)
- **Year Founded:** 2012
- **HQ Location:** Mountain View, California
- **Twitter:** @UpGuard  
8,705 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ecef7c625c5848d4830cff08a7ea502854ec4005dbbc0f617bcb2b0f106f0dd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fupguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
371 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 67% Medium, 33% Small

### [Vendict](https://www.g2.com/products/vendict/reviews)

Vendict combines cutting-edge AI technologies with industry-leading expertise to provide a simple yet powerful automated security compliance solution that ensures high response rates and unmatched accuracy. With our custom-built Generative AI solution, Vendict empowers security teams to reduce risk, accelerate the sales cycle, and gain a competitive advantage by efficiently and accurately managing security questionnaires and third-party risk management at scale in a matter of hours, instead of weeks. Vendict has established a reputation as a leader in providing security questionnaire solutions to organizations worldwide. By partnering with Vendict, organizations can experience firsthand how our custom-built Generative AI solution can help them reduce compliance friction, enhance efficiency, and turn the speed of solving security questionnaires into a competitive advantage in their respective markets.

**Average Rating:** 4.8/5.0

**Total Reviews:** 3

#### How Do G2 Users Rate Vendict?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 10.0/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)

#### Who Is the Company Behind Vendict?

- **Seller:** [Vendict](https://www.g2.com/sellers/vendict)
- **Year Founded:** 2021
- **HQ Location:** NY, IL
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=851ceeecb5e321a3c0d7e66bfcfd463f337e7c841d948ce7eed147848708f48b&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvendict%2F&secure%5Burl_type%5D=linkedin_company_website)  
48 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of Vendict?

**["If you're looking for accuracy and verified information on Vendors - try Vendict!"](https://www.g2.com/survey_responses/vendict-review-4348792)**

**Rating:** 5.0/5.0 stars

_— Verified User in Marketing and Advertising_

[Read full review](https://www.g2.com/survey_responses/vendict-review-4348792)

**["Automated vendor risk management"](https://www.g2.com/survey_responses/vendict-review-4326785)**

**Rating:** 5.0/5.0 stars

_— Mahinour S._

[Read full review](https://www.g2.com/survey_responses/vendict-review-4326785)

#### What Are G2 Users Discussing About Vendict?

- [What is Vendict used for?](https://www.g2.com/discussions/what-is-vendict-used-for)

- [&lsaquo; Prev‹ Prev](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=3#product-list)
- [1](/categories/vendor-security-and-privacy-assessment?order=g2_score#product-list)
- [2](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)
- [3](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=3#product-list)
- 4
- [5](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)
- [6](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=6#product-list)
- [7](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=7#product-list)
- [8](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=8#product-list)
- [9](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=9#product-list)
- [Next &rsaquo;Next ›](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)

Spotlight Categories

[Zero Trust Networking Software](https://www.g2.com/categories/zero-trust-networking)

[Contact Center Quality Assurance Software](https://www.g2.com/categories/contact-center-quality-assurance)

[Sales Compensation Software](https://www.g2.com/categories/sales-compensation)

[Security Compliance Software](https://www.g2.com/categories/security-compliance)

[SAP Store Software](https://www.g2.com/categories/sap-store)

Similar Categories

- [Disinformation Detection Tools](/categories/disinformation-detection-tools)

- [IT Risk Management](/categories/it-risk-management)

[Browse Vendor Security and Privacy Assessment Themes](/categories/vendor-security-and-privacy-assessment/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

Vendor security and privacy assessment software helps companies manage cybersecurity and privacy risk assessment processes when identifying, evaluating, and regularly reevaluating their vendors, service providers, and other third parties. The purpose of this software is to help companies understand the privacy and cybersecurity risks associated with doing business with specific prospective and existing third parties. Vendor security and privacy assessments often include reviewing and scoring a vendor’s cybersecurity policies, documentation, results of recent audits, certifications, and legal agreements on how sensitive or personally identifying data will be accessed, used, processed, or sold as defined by data privacy laws such as the GDPR or CCPA.

Vendor security and privacy assessment software assists two constituencies—both the company and the third party they do business with. Companies use this software to assess the cybersecurity and data privacy compliance of their third-party vendors, while vendors use this software to more easily reply to buyers’ questionnaires and publish their company’s cybersecurity and data privacy compliance information in a centralized, up-to-date, and referenceable exchange. This software allows vendors to use the same responses across multiple customer assessments, as well as proactively share information with customers, which saves the vendor time instead of manually editing individual spreadsheets or forms. On the customer side, vendor security and privacy assessment software is typically managed by information security teams. On the vendor side, sales teams typically use the software to distribute security and privacy compliance information to prospective customers. Vendor security and privacy assessment software often integrates with other software tools, including [CRM software](https://www.g2.com/categories/crm), [governance, risk & compliance software](https://www.g2.com/categories/governance-risk-compliance) , and [cybersecurity services providers](https://www.g2.com/categories/cybersecurity-services), such as ratings services providers.

Vendor security and privacy assessment software is for evaluating external parties and therefore is different from internal privacy or security risk assessment processes which utilize software such as [privacy impact assessment (PIA) software](https://www.g2.com/categories/privacy-impact-assessment-pia) or [security risk analysis software](https://www.g2.com/categories/security-risk-analysis). This software is also different from [IT risk management software](https://www.g2.com/categories/it-risk-management), which monitors risk of a company’s internal systems or data use. Vendor security and privacy assessment software is similar to, but narrower in scope than [vendor management software](https://www.g2.com/categories/vendor-management) and [third party & supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management), which evaluates risk more broadly than security or privacy, such as financial fraud, corruption, or human rights violations.

To qualify for inclusion in the Vendor Security and Privacy Assessment category, a product must:

- Enable vendors to own, manage, and publish a company profile containing cybersecurity and data privacy compliance information and documentation 
- Allow companies to assess vendor profiles in a centralized catalog, as well as by utilizing workflow to engage with vendors and request documentation such as security questionnaires, audits, certifications, etc. 
- Provide customer-facing teams with workflow to easily share access to the company’s vendor profile, including the ability to link to the profile on a company website or in marketing materials 
- Facilitate automated notifications, alerts, and reminders for specific actions including upcoming assessments, profile access requests, etc. 
- Support standardized security and privacy framework questionnaire templates commonly requested by customers, such as CAIQ, SIG, NIST, VSA, GDPR, ISO 27001, Privacy Shield, etc. 

Show More