# Best Vendor Security and Privacy Assessment Software - Page 6

## How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

**Total Products under this Category:** 131

### Category Stats (Aug 2026)

- **Average Rating:** 4.55/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 15,700+ Authentic Reviews
- 131+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Vendor Security and Privacy Assessment Software
 ![G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=167976&focus%5B%5D=130035&focus%5B%5D=953)

Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Sprinto, Secureframe, Scrut Automation, Thoropass, and IBM OpenPages.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages)

**Sponsored**

### iFax

iFax is an enterprise-grade, cloud-based fax and document exchange platform built for regulated industries that require secure, compliant, and scalable communication workflows. Designed for healthcare, finance, government, and legal operations, iFax provides HIPAA, GLBA, FERPA, and SOC 2 aligned workflows, complete with audit logs, encryption, BAAs, and granular admin controls. iFax replaces legacy fax servers and outdated FoIP systems with a modern, cloud-native platform that supports secure transmissions, EHR/EMR integrations, MFP connectivity, and developer-friendly APIs. Teams can send, receive, automate, and monitor high-volume fax workflows across departments and distributed environments using web, email, or mobile apps. With a mature infrastructure, global availability, and a proven track record across thousands of organizations, iFax enables regulated teams to exchange sensitive data with high reliability and at scale. The platform supports automated routing, AI-assisted data extraction, and no-code workflows, helping enterprises meet strict compliance requirements while reducing operational burden.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-04T19%3A19%3A24Z&secure%5Bdisplayable_resource_id%5D=1466&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=81124&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=81124&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvendor-security-and-privacy-assessment%3Fpage%3D6&secure%5Btoken%5D=b426d33328d8fa1806d79467e0d5d7f0b0927b001b944c319c4a90ca9d5648e0&secure%5Burl%5D=https%3A%2F%2Fwww.ifaxapp.com%2Flogin%2Fhttps%3A%2F%2Fwww.ifaxapp.com%2Flogin%2F%3Futm_source%3Dg2%26utm_medium%3Dcta%26utm_campaign%3Dfree_trial&secure%5Burl_type%5D=free_trial)

### [ComplyScore by Atlas Systems](https://www.g2.com/products/complyscore-by-atlas-systems/reviews)

ComplyScore by Atlas Systems is an AI-driven third-party risk management platform designed to minimize potential threats and enhance the quality of vendor relationships. With AI-powered insights and industry expertise, ComplyScore experts create a detailed risk profile and identify vulnerabilities, enabling you to proactively improve your cybersecurity posture and optimize vendor performance. ComplyScore is used across 65 countries to help enterprises manage third-party risks through a tailored platform that simplifies compliance with SIG, NIST, ISO 27K, and SOC2 standards. ComplyScore services: Vendor governance: Monitor and assess vendor relationships, ensuring adherence to compliance standards and ethical practices Operational risk management: Identify and mitigate risks within day-to-day operations to safeguard against potential disruptions Supplier risk management: Assess and track risks from suppliers to maintain secure and compliant supply chains Compliance and regulatory monitoring: Stay ahead of global regulatory requirements, ensuring compliance across all third-party engagement

**Average Rating:** 4.1/5.0

**Total Reviews:** 4

#### How Do G2 Users Rate ComplyScore by Atlas Systems?

- **Ease of Admin:** 8.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.3/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 6.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind ComplyScore by Atlas Systems?

- **Seller:** [Atlas Systems](https://www.g2.com/sellers/atlas-systems)
- **Year Founded:** 2003
- **HQ Location:** East Brunswick, New Jersey
- **Twitter:** @AtlasSystemsInc  
824 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e16be2dc44ddd9bee2797e746f2f8ab5469f2454b7eaeebd2df98159f0122a8a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fatlas-systems%2F&secure%5Burl_type%5D=linkedin_company_website)  
415 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 75% Medium, 25% Large

#### What Do G2 Reviewers Say About ComplyScore by Atlas Systems?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **seamless collaboration** with ComplyScore, appreciating their responsiveness and adaptability throughout the due diligence process.
- Users appreciate the **supportive compliance management** of ComplyScore, ensuring timely completion and effective navigation of third-party risks.
- Users commend the **responsive customer support** of ComplyScore, finding it crucial for navigating third-party vendor challenges.
- Users value the **supportive risk management** provided by ComplyScore, ensuring compliance and effective third-party vendor assessments.
- Users highlight the **trustworthiness and expertise** of ComplyScore's security team in managing third-party risk effectively.

##### Cons

- Users express that the **poor UI** makes the system tricky and less friendly to navigate effectively.
- Users experience **access issues** with ComplyScore, finding the interface unfriendly and follow-up communications ineffective.
- Users find the **complex setup** of ComplyScore challenging, particularly due to its unfriendly interface and ineffective communication.
- Users find the **feature deficiencies** in ComplyScore problematic, leading to inefficiencies and lack of customization in assessments.
- Users face **integration issues** with ComplyScore, finding the interface unwelcoming and follow-ups ineffective.

#### What Are Recent G2 Reviews of ComplyScore by Atlas Systems?

**["A trusted partner"](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10777782)**

**Rating:** 4.5/5.0 stars

_— Verified User in Pharmaceuticals_

[Read full review](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10777782)

**["Overall it was satisfactory for our outsourced third party risk management"](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10784524)**

**Rating:** 4.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/complyscore-by-atlas-systems-review-10784524)

### [Isora GRC](https://www.g2.com/products/isora-grc/reviews)

Isora GRC is the collaborative GRC Assessment Platform™ that gives security teams one shared workspace to run assessments, manage vendors and assets, track live risks, and publish audit-ready reports. Built specifically for information security teams, Isora replaces fragmented spreadsheets and bloated enterprise GRC tools with a focused, fast-to-deploy platform that teams actually adopt. With structured workflows for risk and compliance assessments, connected inventories, and real-time visibility, security teams can operationalize their programs without the chaos. ❇️ Assessment Management Launch and track security assessments across departments, vendors, and frameworks in one centralized dashboard. See real-time progress, identify bottlenecks, and organize assessment campaigns by compliance goal. Every assessment stays connected to risks, owners, and evidence, creating a single source of truth for audit readiness. ❇️ Questionnaires & Surveys Deploy structured, user-friendly questionnaires to evaluate controls, collect evidence, and identify gaps. Built for collaboration, Isora's questionnaires let multiple contributors add responses, upload documents, and complete assessments without manual handoffs. Apply custom logic, weighted scoring, and pre-built templates for frameworks like NIST CSF, CIS, HIPAA, and GLBA. ❇️ Scorecards & Reports Generate automated scorecards and audit-ready reports that roll up assessment results, risks, and remediation into clear, actionable insights. Compare performance across targets, drill down into individual responses, and visualize high-risk areas with risk matrix reports. Export reports in PDF or CSV for external sharing, audits, and compliance documentation. ❇️ Inventory Management Maintain a complete, connected inventory of vendors, assets, and applications with custom metadata, deployment tracking, and assessment links. Search, filter, and export inventory data to support risk analysis, vendor reviews, and regulatory reporting. Keep inventory up to date with collaborative updates and automated enrichment. ❇️ Exception Management Track policy exceptions with clear accountability, expiration dates, and contextual links to affected assets and vendors. Create exceptions manually or via API, assign them to specific units, and search or filter for efficient oversight. Ensure timely reviews and minimize the risk of overlooked or outdated exceptions. ❇️ Risk Management Centralize risk tracking with a collaborative risk register that connects directly to assessment findings, owners, and remediation plans. Track risks with detailed attributes, custom fields, and risk scoring. Use interactive risk matrix widgets to visualize and prioritize high-impact risks, then export or import risk data for audit and compliance purposes.

**Average Rating:** 5.0/5.0

**Total Reviews:** 2

#### How Do G2 Users Rate Isora GRC?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 10.0/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 10.0/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Isora GRC?

- **Seller:** [SaltyCloud](https://www.g2.com/sellers/saltycloud)
- **Year Founded:** 2017
- **HQ Location:** Austin, US
- **LinkedIn® Page:** [linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1aeec6fe88e400b69353770dcb46ba73fb1496f0389ca8d2d3f96811e0c9d284&secure%5Burl%5D=http%3A%2F%2Flinkedin.com%2Fcompany%2Fsaltycloudpbc%2F&secure%5Burl_type%5D=linkedin_company_website)  
12 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 50% Large, 50% Medium

#### What Do G2 Reviewers Say About Isora GRC?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **responsive communication** of Isora GRC, appreciating timely support and training efforts.
- Users praise the **excellent customer support** of Isora GRC, benefiting from its responsive and helpful team.
- Users find Isora GRC to be **easy to use** , complemented by excellent support and a responsive team.
- Users value the **exceptional support** from Isora GRC, appreciating quick responses and effective training assistance.
- Users value the **excellent support** from Isora GRC, appreciating its ease of use and responsive team.

#### What Are Recent G2 Reviews of Isora GRC?

**["Isora is a great tool for risk assessments on hardware assets and applications."](https://www.g2.com/survey_responses/isora-grc-review-10427887)**

**Rating:** 5.0/5.0 stars

_— Verified User in Higher Education_

[Read full review](https://www.g2.com/survey_responses/isora-grc-review-10427887)

**["Simple But Robust - Enterprise Grade Solution"](https://www.g2.com/survey_responses/isora-grc-review-9976316)**

**Rating:** 5.0/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/isora-grc-review-9976316)

### [MSXCYBER](https://www.g2.com/products/msxcyber/reviews)

MSXCYBER is an Information Security Management System (ISMS), which is a set of policies and procedures implemented by organisations to manage information risks such as cyber attacks or data theft.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1

#### How Do G2 Users Rate MSXCYBER?

- **Ease of Admin:** 10.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind MSXCYBER?

- **Seller:** [XGRC Product Range](https://www.g2.com/sellers/xgrc-product-range)
- **Year Founded:** 2004
- **HQ Location:** Midrand, ZA
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2a8aa7f60f6aad510083fd8b78ef4c74cfa0ecf4fd9e4412b5696ac2c21be8b8&secure%5Burl%5D=http%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fxgrcsoftware&secure%5Burl_type%5D=linkedin_company_website)  
22 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of MSXCYBER?

**["Mitigates Risks, Increases Security and Helps with Compliance"](https://www.g2.com/survey_responses/msxcyber-review-8201501)**

**Rating:** 4.5/5.0 stars

_— James M._

[Read full review](https://www.g2.com/survey_responses/msxcyber-review-8201501)

### [ShieldRisk TPRM](https://www.g2.com/products/shieldrisk-tprm/reviews)

ShieldRisk AI is an artificial intelligence-powered unified platform for vendor risk management, vendor audit, and due diligence. ShieldRisk provides a streamlined vendor evaluation and risk management for the existing and approaching third-party vendors. The AI-powered enables the analysis of auditing and advisory functions, involving time savings, faster data analysis, increased levels of accuracy, more in-depth insight into business processes, and enhanced service capabilities.

**Average Rating:** 5.0/5.0

**Total Reviews:** 1

#### Who Is the Company Behind ShieldRisk TPRM?

- **Seller:** [Shieldbyte Infosec](https://www.g2.com/sellers/shieldbyte-infosec)
- **Year Founded:** 2018
- **HQ Location:** Mumbai, IN
- **Twitter:** @ShieldbyteI  
15 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f05233ee8e9e9500370d7d8e455cfd96393d143b03cc895d7a705846d6418b1a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fshieldbyteinfosecpvtltd%2F&secure%5Burl_type%5D=linkedin_company_website)  
50 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 100% Small

#### What Are Recent G2 Reviews of ShieldRisk TPRM?

**["Amazing Platform for Vendor Audit, Risks Assessment and Due Diligence"](https://www.g2.com/survey_responses/shieldrisk-tprm-review-4991244)**

**Rating:** 5.0/5.0 stars

_— Verified User in Financial Services_

[Read full review](https://www.g2.com/survey_responses/shieldrisk-tprm-review-4991244)

#### What Are G2 Users Discussing About ShieldRisk TPRM?

- [What is TPRM process?](https://www.g2.com/discussions/what-is-tprm-process)
- [What is TPRM platform?](https://www.g2.com/discussions/what-is-tprm-platform)
- [What is third party management software?](https://www.g2.com/discussions/what-is-third-party-management-software)

### [Abriska 27036 - Supply Risk Management Software](https://www.g2.com/products/abriska-27036-supply-risk-management-software/reviews)

The purpose of Abriska® 27036 is to help you improve both the effectiveness and efficiency of your supplier information security due diligence process. This is achieved by providing you with the capacity to tailor your question set and ask more in-depth questions of suppliers who have access to more sensitive or critical information. The core set of questions that form the due diligence have been developed by URM’s team of information security and data protection practitioners and are closely aligned to both ISO 27001 and ISO 27036\*.

#### Who Is the Company Behind Abriska 27036 - Supply Risk Management Software?

- **Seller:** [URM Consulting Services](https://www.g2.com/sellers/urm-consulting-services-1602159f-1dd2-491e-b573-9d446d9db8c9)
- **Year Founded:** 2005
- **HQ Location:** Reading, GB
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=e10b0ef1102140ff2a6a8b5b1f147d9c7a487db710c9fdb6ec554c8e279af4b1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Furm-consulting&secure%5Burl_type%5D=linkedin_company_website)  
128 employees on LinkedIn®

### [AI Risk Frameworks](https://www.g2.com/products/ai-risk-frameworks/reviews)

Enkrypt AI's Compliance Management Frameworks provide automated solutions to ensure AI applications adhere to the latest regulatory standards. By integrating customized, enterprise-ready guardrails, organizations can safeguard their AI systems against risks such as non-compliance, malicious threats, and biased or toxic content. This framework is designed to work across various industries, including insurance, life sciences, finance, and technology, offering tailored solutions to meet specific compliance requirements.

#### Who Is the Company Behind AI Risk Frameworks?

- **Seller:** [Enkrypt AI](https://www.g2.com/sellers/enkrypt-ai)
- **Year Founded:** 2022
- **HQ Location:** Boston, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1c72bf3af25295d88b891303ce8d68d854905e0e9ceed5b89ad9ed9bc810619c&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fenkryptai&secure%5Burl_type%5D=linkedin_company_website)  
22 employees on LinkedIn®

### [Ansarada Procure](https://www.g2.com/products/ansarada-procure/reviews)

Ansarada Procure is a specialized software platform designed to streamline and secure the procurement processes of large, complex infrastructure projects. It offers a comprehensive suite of tools that enhance efficiency, compliance, and collaboration throughout the procurement lifecycle.

**Average Rating:** 4.9/5.0

**Total Reviews:** 6

#### How Do G2 Users Rate Ansarada Procure?

- **Ease of Admin:** 9.6/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Ansarada Procure?

- **Seller:** [ansarada](https://www.g2.com/sellers/ansarada)
- **Year Founded:** 2005
- **HQ Location:** The Rocks, Sydney, NSW
- **Twitter:** @ansarada  
1,532 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=9e210fd9cad7c193f655c2e36741d0fb7b914d7dc5a4b4057d02e59665ecaa68&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fansarada&secure%5Burl_type%5D=linkedin_company_website)  
170 employees on LinkedIn®

#### Who Uses This Product?

- **Company Size:** 33% Large, 33% Medium

#### What Do G2 Reviewers Say About Ansarada Procure?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Ansarada Procure to be **easy to implement** , facilitating a smooth training experience for their teams.
- Users commend the **ease of use** of Ansarada Procure, making implementation and team training a breeze.
- Users find **easy implementation** of Ansarada Procure beneficial for quickly training their teams and enhancing productivity.
- Users praise the **implementation ease** of Ansarada Procure, making it simple to train their teams effectively.
- Users find the **onboarding process easy** and appreciate its effectiveness in training their teams smoothly.

#### What Are Recent G2 Reviews of Ansarada Procure?

**["Fantastic system for streamlining procurement processes"](https://www.g2.com/survey_responses/ansarada-procure-review-10409558)**

**Rating:** 5.0/5.0 stars

_— Grace M._

[Read full review](https://www.g2.com/survey_responses/ansarada-procure-review-10409558)

**["Ansarada Procure is Intuitive and easy to use"](https://www.g2.com/survey_responses/ansarada-procure-review-8313157)**

**Rating:** 4.5/5.0 stars

_— Harry C._

[Read full review](https://www.g2.com/survey_responses/ansarada-procure-review-8313157)

### [Approvd](https://www.g2.com/products/approvd/reviews)

Approvd provides you with painless risk assessment setup and real-time workflow updates, seamlessly helping you reduce external cybersecurity risk and save costs

#### Who Is the Company Behind Approvd?

- **Seller:** [Approvd](https://www.g2.com/sellers/approvd)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [AppTotal](https://www.g2.com/products/apptotal/reviews)

AppTotal is a platform that focuses on assessing the risks involved with OAuth apps

#### Who Is the Company Behind AppTotal?

- **Seller:** [AppTotal](https://www.g2.com/sellers/apptotal)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [ardent privacy](https://www.g2.com/products/ardent-privacy/reviews)

The leading company in enterprise security, ardent aims to minimize your cyber risk and ensure your data is secure. Your sensitive data is crucial to your operation and it’s our job to keep it safe.

**Average Rating:** 3.5/5.0

**Total Reviews:** 1

#### Who Is the Company Behind ardent privacy?

- **Seller:** [Ardent](https://www.g2.com/sellers/ardent)
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=1412c14a22bdf72b0693fb4bf45a189b847ff2565ac4dfc86ce06f687b564e09&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fin%2Fardentsec%2F&secure%5Burl_type%5D=linkedin_company_website)

#### Who Uses This Product?

- **Company Size:** 100% Medium

### [Attestly](https://www.g2.com/products/attestly/reviews)

Attestly automates security questionnaire responses for B2B SaaS companies. Upload your past questionnaires or policy docs to build an answer library, then import any inbound questionnaire (SIG Lite, CAIQ, custom vendor assessments) and get AI-drafted answers in minutes — grounded in your own approved content, with citations. No hallucinations. Free to start.

#### Who Is the Company Behind Attestly?

- **Seller:** [Attestly](https://www.g2.com/sellers/attestly)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=7886df2ed926834e5eb248c77dcfa8e5c815d3ab1f0fe3132ced0dba45868834&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2FNo-Linkedin-Presence-Added-Intentionally-By-DataOps&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [Auditive](https://www.g2.com/products/auditive/reviews)

Third-Party Risk Management on auto-pilot. Measure your vendor risk in minutes and monitor continuously. Onboard vendors 4x faster by eliminating hours of manual reviews. Get access to information on thousands of vendors. Auditive is available for free.

#### Who Is the Company Behind Auditive?

- **Seller:** [Auditive](https://www.g2.com/sellers/auditive)
- **Year Founded:** 2022
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fdc79871c59d626ca627d6448ad629fec37b541ee76462f2999da8a14c16fa25&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fauditive&secure%5Burl_type%5D=linkedin_company_website)  
9 employees on LinkedIn®

### [Avertro](https://www.g2.com/products/avertro/reviews)

CyberHQ® from Avertro is the Resilience Command Platform that directs your defense. We translate technical signals into quantifiable, governance-ready intelligence, empowering you to validate cyber effectiveness, prove defensible resilience, and optimize security-per-dollar with absolute confidence.

#### Who Is the Company Behind Avertro?

- **Seller:** [Avertro](https://www.g2.com/sellers/avertro)
- **Year Founded:** 2019
- **HQ Location:** San Francisco, US
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=31191142664c5913f24e4394a2d3ad9e00eaed9c4784685868de86ce1a806aae&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Favertro&secure%5Burl_type%5D=linkedin_company_website)  
17 employees on LinkedIn®

### [Azanzi TPRM](https://www.g2.com/products/azanzi-tprm/reviews)

Azanzi TPRM is a Third-Party Risk Management platform that our customers use to manage cyber security and ESG compliance in the supply chain

#### Who Is the Company Behind Azanzi TPRM?

- **Seller:** [Azanzi](https://www.g2.com/sellers/azanzi)
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0730f61e757464490a5c78f212199c12874405b8ecf5e059cae41a8d085f9251&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fazanzi&secure%5Burl_type%5D=linkedin_company_website)  
1 employees on LinkedIn®

### [Bayonet](https://www.g2.com/products/bayonet/reviews)

Bayonet is a first-of-its-kind sales prospecting tool designed specifically for Sales professionals selling cybersecurity products and services. Effectively, a lead-generation platform, Bayonet features hundreds of thousands of qualified leads — compromised companies around the world with active vulnerabilities that can be converted into customers. Bayonet accelerate sales prospecting by: - Finding customers that need your solutions in seconds. - Filtering prospects to match your qualification criteria. - Enriching prospects with unprecedented vulnerability data. - Providing prospects their Supply Chain risk reports.

#### Who Is the Company Behind Bayonet?

- **Seller:** [Hudson Rock](https://www.g2.com/sellers/hudson-rock)
- **HQ Location:** Tel Aviv, IL
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a1f8eee93a5b636ace07f1c781ee9dde9e661e41b479b25637832128b2e07728&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fhudson-rock&secure%5Burl_type%5D=linkedin_company_website)  
9 employees on LinkedIn®

- [‹ Prev‹ Prev](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)
- [1](/categories/vendor-security-and-privacy-assessment?order=g2_score#product-list)
- [2](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)
- [3](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=3#product-list)
- [4](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=4#product-list)
- [5](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)
- 6
- [7](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=7#product-list)
- [8](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=8#product-list)
- [9](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=9#product-list)
- [Next ›Next ›](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=7#product-list)

Spotlight Categories

[Business Process Management Software](https://www.g2.com/categories/business-process-management)

[Audit Management Software Solutions](https://www.g2.com/categories/audit-management)

[Network Monitoring Software](https://www.g2.com/categories/network-monitoring)

[SMS Marketing Software](https://www.g2.com/categories/sms-marketing)

[Outbound Call Tracking Software](https://www.g2.com/categories/outbound-call-tracking)

Similar Categories

- [Disinformation Detection Tools](/categories/disinformation-detection-tools)

- [IT Risk Management](/categories/it-risk-management)

[Browse Vendor Security and Privacy Assessment Themes](/categories/vendor-security-and-privacy-assessment/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

Vendor security and privacy assessment software helps companies manage cybersecurity and privacy risk assessment processes when identifying, evaluating, and regularly reevaluating their vendors, service providers, and other third parties. The purpose of this software is to help companies understand the privacy and cybersecurity risks associated with doing business with specific prospective and existing third parties. Vendor security and privacy assessments often include reviewing and scoring a vendor’s cybersecurity policies, documentation, results of recent audits, certifications, and legal agreements on how sensitive or personally identifying data will be accessed, used, processed, or sold as defined by data privacy laws such as the GDPR or CCPA.

Vendor security and privacy assessment software assists two constituencies—both the company and the third party they do business with. Companies use this software to assess the cybersecurity and data privacy compliance of their third-party vendors, while vendors use this software to more easily reply to buyers’ questionnaires and publish their company’s cybersecurity and data privacy compliance information in a centralized, up-to-date, and referenceable exchange. This software allows vendors to use the same responses across multiple customer assessments, as well as proactively share information with customers, which saves the vendor time instead of manually editing individual spreadsheets or forms. On the customer side, vendor security and privacy assessment software is typically managed by information security teams. On the vendor side, sales teams typically use the software to distribute security and privacy compliance information to prospective customers. Vendor security and privacy assessment software often integrates with other software tools, including [CRM software](https://www.g2.com/categories/crm), [governance, risk & compliance software](https://www.g2.com/categories/governance-risk-compliance) , and [cybersecurity services providers](https://www.g2.com/categories/cybersecurity-services), such as ratings services providers.

Vendor security and privacy assessment software is for evaluating external parties and therefore is different from internal privacy or security risk assessment processes which utilize software such as [privacy impact assessment (PIA) software](https://www.g2.com/categories/privacy-impact-assessment-pia) or [security risk analysis software](https://www.g2.com/categories/security-risk-analysis). This software is also different from [IT risk management software](https://www.g2.com/categories/it-risk-management), which monitors risk of a company’s internal systems or data use. Vendor security and privacy assessment software is similar to, but narrower in scope than [vendor management software](https://www.g2.com/categories/vendor-management) and [third party & supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management), which evaluates risk more broadly than security or privacy, such as financial fraud, corruption, or human rights violations.

To qualify for inclusion in the Vendor Security and Privacy Assessment category, a product must:

- Enable vendors to own, manage, and publish a company profile containing cybersecurity and data privacy compliance information and documentation 
- Allow companies to assess vendor profiles in a centralized catalog, as well as by utilizing workflow to engage with vendors and request documentation such as security questionnaires, audits, certifications, etc. 
- Provide customer-facing teams with workflow to easily share access to the company’s vendor profile, including the ability to link to the profile on a company website or in marketing materials 
- Facilitate automated notifications, alerts, and reminders for specific actions including upcoming assessments, profile access requests, etc. 
- Support standardized security and privacy framework questionnaire templates commonly requested by customers, such as CAIQ, SIG, NIST, VSA, GDPR, ISO 27001, Privacy Shield, etc. 

Show More