# Migliori Software di valutazione della sicurezza e della privacy dei fornitori per piccole imprese

## How Many Software di valutazione della sicurezza e della privacy dei fornitori Products Does G2 Track?

**Total Products under this Category:** 133

### Category Stats (Aug 2026)

- **Average Rating:** 4.55/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Software di valutazione della sicurezza e della privacy dei fornitori Products?

**Perché puoi fidarti delle classifiche software di G2:**

- 30 Analisti ed Esperti di Dati
- 15,800+ Recensioni autentiche
- 133+ Prodotti
- Classifiche Imparziali

Le classifiche software di G2 si basano su recensioni verificate degli utenti, moderazione rigorosa e una metodologia di ricerca coerente mantenuta da un team di analisti ed esperti di dati. Ogni prodotto è misurato utilizzando gli stessi criteri trasparenti, senza posizionamenti a pagamento o influenze dei venditori. Sebbene le recensioni riflettano esperienze reali degli utenti, che possono essere soggettive, offrono preziose informazioni su come il software si comporta nelle mani dei professionisti. Insieme, questi input alimentano il G2 Score, un modo standardizzato per confrontare gli strumenti all'interno di ogni categoria.

## G2 Grid® for Software di valutazione della sicurezza e della privacy dei fornitori
 ![G2 Grid® for Software di valutazione della sicurezza e della privacy dei fornitori plotting products by satisfaction and market presence](https://www.g2.com/it/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=140904&focus%5B%5D=167976&focus%5B%5D=130035&focus%5B%5D=953&focus%5B%5D=165152)

Highlighted products: Vanta, Sprinto, Secureframe, Drata, Scrut Automation, Thoropass, IBM OpenPages, e Scytale.

Underlying data: [Grid® JSON](https://www.g2.com/it/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=drata&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages&focus%5B%5D=scytale-g2&segment=small-business)

**Sponsored**

### Conveyor

Conveyor è la piattaforma leader di automazione delle revisioni di sicurezza AI che aiuta i team di infosec e presales ad automatizzare l'intero processo di revisione della sicurezza, dalla compilazione dei questionari di sicurezza alla condivisione della documentazione di sicurezza come un SOC 2 con un solo clic. Con un'AI così precisa, puoi persino affidare la maggior parte dei tuoi flussi di lavoro di revisione della sicurezza al nostro nuovo Agente AI per la Fiducia del Cliente. Perché i team amano Conveyor: 1. L'unico centro di fiducia che offre un questionario da caricare per un'esperienza di risposte istantanee insieme a tutte le funzionalità per condividere la documentazione di sicurezza su larga scala 2. Inoltre, la risposta AI-questionnaire per generare automaticamente risposte accurate al 95%+ a interi questionari in modo da poter accelerare la revisione.

[Visita il sito web](https://www.g2.com/it/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-15T09%3A17%3A13Z&secure%5Bdisplayable_resource_id%5D=2445&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=2445&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=75579&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fit%2Fcategories%2Fvendor-security-and-privacy-assessment%2Fsmall-business&secure%5Btoken%5D=e9b776c02930dd9a3e28ecb43cbf0dec0aea09aa50874e87a5b5ac6be96962bf&secure%5Burl%5D=https%3A%2F%2Fwww.conveyor.com&secure%5Burl_type%5D=company_website)

### [Vanta](https://www.g2.com/it/products/vanta/reviews)

Vanta è la principale piattaforma di fiducia agentica che aiuta oltre 15.000 aziende, come Atlassian, Duolingo, Golden State Warriors e Icelandair, ad avviare e scalare i loro programmi di sicurezza e a costruire fiducia con gli acquirenti. Vanta fa risparmiare tempo ai team di sicurezza e migliora la visibilità dei programmi automatizzando oltre 35 framework di conformità, come SOC 2 e ISO 27001, e flussi di lavoro GRC, come la gestione del rischio.

**Average Rating:** 4.6/5.0

**Total Reviews:** 2,679

#### How Do G2 Users Rate Vanta?

- **Facilità di amministrazione:** 8.9/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 8.6/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.4/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Vanta?

- **Venditore:** [Vanta](https://www.g2.com/it/sellers/vanta)
- **Sito web dell'azienda:** www.vanta.com
- **Anno di Fondazione:** 2018
- **Sede centrale:** San Francisco, California
- **Twitter:** @TrustVanta  
4,694 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2f43ad38aec212995a4ae41a0e8f0e9e73bbc397da8e551a7dea1b22c6d61e74&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvanta-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,871 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 55% Small, 38% Medium

#### What Do G2 Reviewers Say About Vanta?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano la **facilità d'uso** di Vanta, trovando l'interfaccia intuitiva e l'implementazione semplice.
- Gli utenti apprezzano Vanta per trasformare **la conformità in un motore di business** , snellendo i processi e migliorando l'efficienza operativa.
- Gli utenti apprezzano l' **automazione** di Vanta, che migliora l'efficienza della conformità e supporta le esigenze aziendali rapide con il minimo sforzo.
- Gli utenti apprezzano Vanta per le sue **funzionalità che fanno risparmiare tempo** , consentendo un'automazione efficiente e una gestione della conformità semplificata.
- Gli utenti apprezzano le **integrazioni senza soluzione di continuità** di Vanta che migliorano il monitoraggio della conformità e semplificano i processi su diverse piattaforme.

##### Cons

- Gli utenti riscontrano **problemi di integrazione** con Vanta, poiché non tutti i fornitori si connettono senza problemi, richiedendo ulteriori sforzi manuali.
- Gli utenti trovano le **integrazioni limitate** di Vanta restrittive, in particolare per stack tecnologici più complessi o di nicchia.
- Gli utenti trovano le **funzionalità mancanti** nel livello inferiore di Vanta limitanti, specialmente in relazione a stack tecnologici complessi.
- Gli utenti esprimono preoccupazioni riguardo al **prezzo elevato** di Vanta, ritenendo che gravi sulle operazioni più piccole e aggiunga complessità.
- Gli utenti ritengono che Vanta sia **molto costoso** , sollevando preoccupazioni sulla sua idoneità per le aziende attente al budget.

#### What Are Recent G2 Reviews of Vanta?

**["Ci fa risparmiare ore sulla conformità, vale il costo"](https://www.g2.com/it/survey_responses/vanta-review-13272837)**

**Rating:** 4.0/5.0 stars

_— Surya Pratap S._

[Read full review](https://www.g2.com/it/survey_responses/vanta-review-13272837)

**["Vanta semplifica la conformità con prove automatizzate e supporto utile"](https://www.g2.com/it/survey_responses/vanta-review-13264196)**

**Rating:** 4.5/5.0 stars

_— Udayraj C._

[Read full review](https://www.g2.com/it/survey_responses/vanta-review-13264196)

#### What Are G2 Users Discussing About Vanta?

- [A cosa serve Vanta?](https://www.g2.com/it/discussions/what-is-vanta-used-for) - 3 comments, 2 upvotes

### [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,662

#### How Do G2 Users Rate Sprinto?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.6/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Sprinto?

- **Seller:** [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited)
- **Company Website:** sprinto.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @sprintoHQ  
13,279 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=88a586e2bb472645900fa1b7c798d25a8eec33961ed706d988c804e1de4cdc4a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsprinto-com&secure%5Burl_type%5D=linkedin_company_website)  
424 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 57% Small, 41% Medium

#### What Do G2 Reviewers Say About Sprinto?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Sprinto's **ease of use** exceptional, appreciating the straightforward deployment and comprehensive support throughout the process.
- Users praise the **helpful customer support** from Sprinto, facilitating smooth deployment and fast compliance management.
- Users praise Sprinto for its **transformative compliance features** and exceptional customer support, streamlining their compliance processes effectively.
- Users highlight the **exceptional customer support** from Sprinto, making deployment and compliance management effortless and efficient.
- Users value Sprinto for its **intuitive compliance management** , enhanced by exceptional support from knowledgeable account managers.

##### Cons

- Users report **integration issues** with some niche tools, though improvements are continuously being made.
- Users note **limited customization options** for certain features, impacting flexibility and initial setup for specific needs.
- Users experience **limited integrations** which can cause delays, yet improvements are ongoing to enhance functionality.
- Users find the **guidance unclear** during onboarding, leading to confusion about auditor accreditation and integrations.
- Users report **UI/UX challenges** with navigation and syncing, but hope for improvements with the new interface update.

#### What Are Recent G2 Reviews of Sprinto?

**["Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support"](https://www.g2.com/survey_responses/sprinto-review-12898116)**

**Rating:** 5.0/5.0 stars

_— Gayathri v._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12898116)

**["Fast path to SOC 2 Type 1 — great platform, outstanding support"](https://www.g2.com/survey_responses/sprinto-review-12885389)**

**Rating:** 5.0/5.0 stars

_— Ignacio B._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12885389)

### [Secureframe](https://www.g2.com/products/secureframe/reviews)

Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards.

**Average Rating:** 4.7/5.0

**Total Reviews:** 812

#### How Do G2 Users Rate Secureframe?

- **Ease of Admin:** 9.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Secureframe?

- **Seller:** [Secureframe](https://www.g2.com/sellers/secureframe)
- **Company Website:** secureframe.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @secureframe  
2,228 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=154d827436e7840ecd54fcd5bea92cefeb28595f6620d0dc82625a40be9119db&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsecureframe%2F&secure%5Burl_type%5D=linkedin_company_website)  
126 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 66% Small, 30% Medium

#### What Do G2 Reviewers Say About Secureframe?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Secureframe, making task tracking and setup straightforward and efficient.
- Users appreciate how Secureframe's **effortless compliance** with SOC 2 requires minimal maintenance and excellent support.
- Users value how Secureframe's **automation simplifies compliance** , making it easy and manageable for all users.
- Users value Secureframe's **strong security measures** , enhancing trust while managing sensitive client information effectively.
- Users value the **seamless integrations** of Secureframe, significantly enhancing efficiency and compliance management for small teams.

##### Cons

- Users face **integration issues** with niche tools, requiring manual effort and time for proper setup.
- Users find **limited customization** options for timing and follow-up schedules frustrating for compliance and training needs.
- Users are disappointed with the **limited integrations** , specifically lacking automatic features for major platforms like Azure and Stripe.
- Users desire improvements in the **audit function** , seeking better integration within Secureframe for a streamlined experience.
- Users find **missing features** like testing management enhancements limit the overall quality of life improvements in Secureframe.

#### What Are Recent G2 Reviews of Secureframe?

**["Secureframe Streamlined Our ISO 27001 Compliance"](https://www.g2.com/survey_responses/secureframe-review-13111175)**

**Rating:** 5.0/5.0 stars

_— Kunal P._

[Read full review](https://www.g2.com/survey_responses/secureframe-review-13111175)

**["Automation That Makes Compliance and Audit Prep Stress-Free"](https://www.g2.com/survey_responses/secureframe-review-13140194)**

**Rating:** 5.0/5.0 stars

_— Austin R._

[Read full review](https://www.g2.com/survey_responses/secureframe-review-13140194)

#### What Are G2 Users Discussing About Secureframe?

- [How are you getting value from the AI features when first-pass answers and automation feel hit-or-miss?](https://www.g2.com/discussions/how-are-you-getting-value-from-the-ai-features-when-first-pass-answers-and-automation-feel-hit-or-miss) - 1 comment, 1 upvote
- [Is anyone else struggling with limited reporting and document/search friction during executive reviews?](https://www.g2.com/discussions/is-anyone-else-struggling-with-limited-reporting-and-document-search-friction-during-executive-reviews) - 1 comment, 1 upvote
- [What do you do to make the first-year setup and control mapping less overwhelming?](https://www.g2.com/discussions/what-do-you-do-to-make-the-first-year-setup-and-control-mapping-less-overwhelming) - 1 comment, 1 upvote
- [How are other teams handling integrations that are partially supported or keep needing manual work?](https://www.g2.com/discussions/how-are-other-teams-handling-integrations-that-are-partially-supported-or-keep-needing-manual-work) - 1 comment
- [Unreliable training and login flows slow down my audits and force awkward deadline conversations](https://www.g2.com/discussions/unreliable-training-and-login-flows-slow-down-my-audits-and-force-awkward-deadline-conversations) - 1 comment

### [Drata](https://www.g2.com/products/drata/reviews)

Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,328

#### How Do G2 Users Rate Drata?

- **Ease of Admin:** 9.2/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Drata?

- **Seller:** [Drata](https://www.g2.com/sellers/drata)
- **Company Website:** drata.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, CA 
- **Twitter:** @DrataHQ  
1,525 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=78250d6bf26d782e9bea1bfb184a4d275d7c7c99e5a9bba537cb60809142029a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdrata%2F&secure%5Burl_type%5D=linkedin_company_website)  
677 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 47% Medium, 46% Small

#### What Do G2 Reviewers Say About Drata?

_AI-generated summary from verified user reviews_

##### Pros

- Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience.
- Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone.
- Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency.
- Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly.
- Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly.

##### Cons

- Users find Drata's **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions.
- Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required.
- Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata.
- Users find the **lack of clarity** in Drata's UI can complicate the audit process and task management.
- Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes.

#### What Are Recent G2 Reviews of Drata?

**["The DRATA system embodies simplicity and intuitiveness."](https://www.g2.com/survey_responses/drata-review-8124415)**

**Rating:** 5.0/5.0 stars

_— Ari B._

[Read full review](https://www.g2.com/survey_responses/drata-review-8124415)

**["Great framework for information security audits and overall compliance"](https://www.g2.com/survey_responses/drata-review-13225049)**

**Rating:** 4.5/5.0 stars

_— Emre Utku S._

[Read full review](https://www.g2.com/survey_responses/drata-review-13225049)

#### What Are G2 Users Discussing About Drata?

- [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
- [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
- [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
- [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote
- [Complex setup and overloaded templates slow down my first audit cycle](https://www.g2.com/discussions/complex-setup-and-overloaded-templates-slow-down-my-first-audit-cycle) - 1 comment, 1 upvote

### [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

**Average Rating:** 4.9/5.0

**Total Reviews:** 1,311

#### How Do G2 Users Rate Scrut Automation?

- **Ease of Admin:** 9.6/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.2/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.2/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scrut Automation?

- **Seller:** [Scrut Automation](https://www.g2.com/sellers/scrut-automation)
- **Company Website:** www.scrut.io
- **Year Founded:** 2022
- **HQ Location:** Palo Alto, US
- **Twitter:** @scrutsocial  
120 Twitter followers
- **LinkedIn® Page:** [in.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bc41c2e597940ae09ba338bf6abec320af78c3999ea4eb88e00635f919f04135&secure%5Burl%5D=https%3A%2F%2Fin.linkedin.com%2Fcompany%2Fscrut-automation&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 50% Small, 48% Medium

#### What Do G2 Reviewers Say About Scrut Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Scrut Automation's **ease of use** invaluable for tracking tasks and maintaining team access effectively.
- Users commend the **outstanding customer support** of Scrut Automation, highlighting teamwork and effective guidance throughout the process.
- Users appreciate the **exceptional support and guidance** from Scrut's team, significantly enhancing their compliance experience.
- Users value the **exceptional compliance management** by Scrut Automation, finding it efficient and cost-effective for SOC 2 processes.
- Users value the **supportive compliance assistance** from Scrut Automation, enhancing clarity and ease during audits.

##### Cons

- Users feel that Scrut Automation requires **significant improvements** in UI clarity and documentation quality for better usability.
- Users note the **missing features** in Scrut Automation, particularly in auto-answering questionnaires and report customization.
- Users face **technical issues** with complex modules and occasional login problems, impacting the overall user experience.
- Users find the **learning curve steep** , making navigation and understanding challenging for newcomers to Scrut Automation.
- Users express concerns over **lack of clarity** in test results and policy processes, complicating their experience with Scrut Automation.

#### What Are Recent G2 Reviews of Scrut Automation?

**["Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency"](https://www.g2.com/survey_responses/scrut-automation-review-13049695)**

**Rating:** 4.0/5.0 stars

_— Ravindra N._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-13049695)

**["Transforming Compliance and Security Management with Scrut Automation"](https://www.g2.com/survey_responses/scrut-automation-review-10499291)**

**Rating:** 5.0/5.0 stars

_— Karan A._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-10499291)

#### What Are G2 Users Discussing About Scrut Automation?

- [What is Scrut Automation used for?](https://www.g2.com/discussions/what-is-scrut-automation-used-for) - 1 comment, 1 upvote

### [Thoropass](https://www.g2.com/products/thoropass/reviews)

Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.

**Average Rating:** 4.7/5.0

**Total Reviews:** 580

#### How Do G2 Users Rate Thoropass?

- **Ease of Admin:** 9.0/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Thoropass?

- **Seller:** [Thoropass](https://www.g2.com/sellers/thoropass)
- **Company Website:** thoropass.com
- **Year Founded:** 2019
- **HQ Location:** New York
- **Twitter:** @thoropass  
379 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b1f297756fc129866b36b217a21369c351ca7d0a7174dc50b89b265a25747e91&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthoropass%2F&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 71% Small, 25% Medium

#### What Do G2 Reviewers Say About Thoropass?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Thoropass, enjoying its intuitive dashboard and helpful templates for efficient audits.
- Users appreciate the **exceptional support** from Thoropass, which simplifies the audit process and enhances their experience.
- Users value the **extensive integrations** of Thoropass, which streamline compliance efforts and enhance operational efficiency.
- Users commend the **helpful support team** of Thoropass, which enhances the overall audit and compliance experience.
- Users appreciate the **extensive integrations** of Thoropass, significantly streamlining compliance processes with various cloud providers.

##### Cons

- Users find **lack of clarity** in Thoropass, struggling with unorganized UX and missing essential information at point of sale.
- Users experience **integration issues** with Thoropass, leading to exceptions and unhelpful connections that hinder usability.
- Users find the **UX disjointed** , expressing a need for clearer guidance and better functionality in Thoropass.
- Users note a need for **improved communication and feature development** to enhance scheduling and audit experiences.
- Users find the **platform not intuitive** , leading to confusion and challenges in managing compliance efficiently.

#### What Are Recent G2 Reviews of Thoropass?

**["Thoropass and SOC2 process"](https://www.g2.com/survey_responses/thoropass-review-11551425)**

**Rating:** 5.0/5.0 stars

_— Nicole B._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-11551425)

**["Centralizes Compliance Tasks Efficiently"](https://www.g2.com/survey_responses/thoropass-review-10958552)**

**Rating:** 5.0/5.0 stars

_— Monica ._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-10958552)

#### What Are G2 Users Discussing About Thoropass?

- [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment

### [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)

OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies.

**Average Rating:** 4.2/5.0

**Total Reviews:** 66

#### How Do G2 Users Rate IBM OpenPages?

- **Ease of Admin:** 7.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind IBM OpenPages?

- **Seller:** [IBM](https://www.g2.com/sellers/ibm)
- **Year Founded:** 1911
- **HQ Location:** Armonk, New York, United States
- **Twitter:** @IBMSecurity  
74,660 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website)  
328,202 employees on LinkedIn®
- **Ownership:** SWX:IBM

#### Who Uses This Product?

- **Top Industries:** Banking, Information Technology and Services
- **Company Size:** 39% Medium, 34% Large

#### What Do G2 Reviewers Say About IBM OpenPages?

_AI-generated summary from verified user reviews_

##### Pros

- Users find IBM OpenPages to offer **effective risk management** , enhancing compliance and streamlining operations for their organizations.
- Users appreciate the **time-saving features** of IBM OpenPages, simplifying workflows and enhancing overall efficiency.
- Users value the **automation capabilities** of IBM OpenPages, enhancing workflows and risk management efficiently.
- Users appreciate the **intuitive interface** of IBM OpenPages, making navigation and usage exceptionally straightforward and efficient.
- Users commend the **security features** of IBM OpenPages, effectively protecting against data breaches and ensuring compliance.

##### Cons

- Users find the **complexity** of IBM OpenPages overwhelming, particularly regarding usability and report generation challenges.
- Users find IBM OpenPages **too expensive** , making it difficult to justify its implementation and ongoing costs.
- Users find **usability improvements necessary** in IBM OpenPages due to its complexity and steep learning curve.
- Users struggle with a **steep learning curve** in IBM OpenPages, finding it complex and challenging, especially for new users.
- Users find the **learning difficulty** with IBM OpenPages can hinder productivity and require extra effort to overcome.

#### What Are Recent G2 Reviews of IBM OpenPages?

**["Automates Security Tasks, But Pricey"](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)**

**Rating:** 4.0/5.0 stars

_— Madhav B._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)

**["Transforms Risk Management and Compliance"](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)**

**Rating:** 5.0/5.0 stars

_— Charlotte W._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)

#### What Are G2 Users Discussing About IBM OpenPages?

- [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery)
- [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool)
- [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages)
- [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson)

### [Scytale](https://www.g2.com/products/scytale-g2/reviews)

Scytale is the only AI GRC platform and human experts that drive real compliance outcomes - from getting compliant to staying compliant, and building trust across every framework. Trusted by 1,000+ companies worldwide, Scytale replaces fragmented testing with continuous control visibility, automating evidence, control cross-mapping, and risk management across 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001, and many more. Scytale is a full-scope trust and compliance platform with everything you need to run your GRC program in one central hub, including: an agentic GRC network, a Trust Center, AI-integrated offensive security and expert GRC services.

**Average Rating:** 4.8/5.0

**Total Reviews:** 704

#### How Do G2 Users Rate Scytale?

- **Ease of Admin:** 9.1/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.9/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scytale?

- **Seller:** [Scytale AI](https://www.g2.com/sellers/scytale-ai)
- **Company Website:** scytale.ai
- **Year Founded:** 2021
- **HQ Location:** New York, US
- **Twitter:** @scytale\_ai  
76 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=813f878dd624db92d69e43a157be813744a37962537ab43cfd42704d3acbbda1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fscytale-ai%2F&secure%5Burl_type%5D=linkedin_company_website)  
165 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 73% Small, 21% Medium

#### What Do G2 Reviewers Say About Scytale?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **hands-on support** from Scytale, making their compliance journey efficient and enjoyable.
- Users appreciate the **ease of use** of Scytale, facilitating streamlined compliance and efficient evidence management.
- Users appreciate Scytale for its **user-friendly design** , simplifying SOC compliance and improving task management and visibility.
- Users praise the **exceptional customer support** of Scytale, highlighting their proactive and knowledgeable assistance throughout the process.
- Users praise the **helpfulness of the Team** , noting exceptional support that enhances the overall experience with Scytale.

##### Cons

- Users face **integration issues** with Scytale, experiencing bugs and a lack of intuitive flow during the process.
- Users experience **limited integrations** with Scytale, facing frustrating configuration issues and inconsistent functionalities.
- Users express frustration over **limited configuration options** for evidence collection, leading to inaccurate automatic integrations.
- Users note some **quirky UX elements** in Scytale that could benefit from enhancement for a smoother experience.
- Users find the **missing features** in Scytale limiting, impacting its effectiveness for comprehensive GRC practices.

#### What Are Recent G2 Reviews of Scytale?

**["Simplifie la Certification avec Grande Efficacité"](https://www.g2.com/survey_responses/scytale-review-10285318)**

**Rating:** 5.0/5.0 stars

_— Alan M._

[Read full review](https://www.g2.com/survey_responses/scytale-review-10285318)

**["Scytale Simplifies ISO 27001 with Automated Evidence Collection and Integrations"](https://www.g2.com/survey_responses/scytale-review-13198294)**

**Rating:** 5.0/5.0 stars

_— Arjun Das K._

[Read full review](https://www.g2.com/survey_responses/scytale-review-13198294)

### [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

**Average Rating:** 4.6/5.0

**Total Reviews:** 107

#### How Do G2 Users Rate OneTrust Tech Risk & Compliance?

- **Ease of Admin:** 8.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.5/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.4/10 (Category avg: 7.9/10)

#### Who Is the Company Behind OneTrust Tech Risk & Compliance?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 46% Medium, 40% Small

#### What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, enhancing tracking and monitoring efficiency.
- Users value the **powerful automation** of OneTrust Tech Risk & Compliance, enhancing risk management and streamlining processes.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing tracking and visibility for risk management.
- Users appreciate the **centralized platform for risk and compliance management** , enhancing tracking, monitoring, and overall efficiency.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing efficiency and accountability in risk management.

##### Cons

- Users find the **complex implementation** of OneTrust Tech Risk & Compliance challenging, requiring significant time and effort to configure.
- Users find the **difficult setup** of OneTrust Tech Risk & Compliance challenging, often requiring significant time and learning.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance to be daunting for newcomers and complex to navigate.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance challenging, complicating the initial setup process.
- Users experience **slow loading** times with OneTrust Tech Risk & Compliance, especially when multiple tasks are active.

#### What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance?

**["OneTrust is the only GRC tool that works!"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)**

**Rating:** 5.0/5.0 stars

_— Gerald P._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)

**["The best GRC Product on the Market"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)**

**Rating:** 5.0/5.0 stars

_— Chinua K._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)

#### What Are G2 Users Discussing About OneTrust Tech Risk & Compliance?

- [What improvements would you suggest for OneTrust GRC to better meet your compliance needs?](https://www.g2.com/discussions/what-improvements-would-you-suggest-for-onetrust-grc-to-better-meet-your-compliance-needs)

### [UpGuard Vendor Risk](https://www.g2.com/it/products/upguard-vendor-risk/reviews)

UpGuard fornisce software di gestione del rischio informatico (offerto come SaaS) che aiuta le organizzazioni in tutto il mondo a prevenire violazioni dei dati monitorando continuamente i loro fornitori terzi e la loro postura di sicurezza. UpGuard è l'unico servizio che offre capacità di rilevamento delle perdite di dati di livello mondiale lungo la catena di approvvigionamento di un'organizzazione, monitorando continuamente oltre un milione di aziende per identificare proattivamente le esposizioni alla sicurezza utilizzando valutazioni di sicurezza proprietarie. La loro esperienza è stata presentata in The New York Times, The Wall Street Journal, Bloomberg, The Washington Post, Forbes, Reuters e TechCrunch tra gli altri. I potenti flussi di lavoro di valutazione del rischio di UpGuard consentono alle organizzazioni di automatizzare i questionari di sicurezza, e i rischi identificati dalle risposte sono automaticamente mappati alle valutazioni di sicurezza dei fornitori, fornendo una visione olistica dei rischi posti dai fornitori terzi. Le sue capacità di rimedio rendono più facile per le organizzazioni collaborare internamente e con i fornitori terzi per rimediare ai rischi di sicurezza identificati.

**Average Rating:** 4.5/5.0

**Total Reviews:** 728

#### How Do G2 Users Rate UpGuard Vendor Risk?

- **Facilità di amministrazione:** 9.1/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 8.8/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.6/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 7.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind UpGuard Vendor Risk?

- **Venditore:** [UpGuard](https://www.g2.com/it/sellers/upguard)
- **Sito web dell'azienda:** upguard.com
- **Anno di Fondazione:** 2012
- **Sede centrale:** Mountain View, California
- **Twitter:** @UpGuard  
8,705 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ecef7c625c5848d4830cff08a7ea502854ec4005dbbc0f617bcb2b0f106f0dd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fupguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
371 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CISO, Security Analyst
- **Top Industries:** Servizi finanziari, Tecnologia dell'informazione e servizi
- **Company Size:** 47% Large, 39% Medium

#### What Do G2 Reviewers Say About UpGuard Vendor Risk?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti trovano UpGuard Vendor Risk incredibilmente **facile da usare** , semplificando il loro flusso di lavoro e migliorando la sicurezza dei dati.
- Gli utenti apprezzano l' **interfaccia intuitiva** e le informazioni affidabili di UpGuard per una sicurezza efficace dei dati dei fornitori.
- Gli utenti apprezzano il **sistema di punteggio dinamico** di UpGuard Vendor Risk, che migliora la priorità del rischio e l'efficienza del monitoraggio.
- Gli utenti apprezzano UpGuard per le sue **funzionalità che fanno risparmiare tempo** , rendendo la gestione del rischio e il monitoraggio rapidi ed efficienti.
- Gli utenti elogiano il **supporto clienti** di UpGuard, evidenziando la sua efficienza e assistenza fluida per varie domande e compiti.

##### Cons

- Gli utenti trovano una mancanza di **chiarezza nelle raccomandazioni di rimedio** , spesso necessitando di ulteriore guida ed esempi specifici per l'implementazione.
- Gli utenti trovano UpGuard Vendor Risk **costoso** per le organizzazioni più piccole, desiderando prezzi più bassi e opzioni di fornitori più flessibili.
- Gli utenti notano la **funzionalità limitata** di UpGuard, specialmente in aree come la personalizzazione e l'adattabilità del flusso di lavoro.
- Gli utenti ritengono che UpGuard debba migliorare sui **falsi positivi** poiché complicano la gestione delle vulnerabilità e le valutazioni.
- Gli utenti trovano che le **opzioni di personalizzazione limitate** in UpGuard Vendor Risk ostacolino un uso efficace e la personalizzazione.

#### What Are Recent G2 Reviews of UpGuard Vendor Risk?

**["Piattaforma Ben Organizzata per la Due Diligence sulla Sicurezza"](https://www.g2.com/it/survey_responses/upguard-vendor-risk-review-13089101)**

**Rating:** 4.5/5.0 stars

_— Mohamed S._

[Read full review](https://www.g2.com/it/survey_responses/upguard-vendor-risk-review-13089101)

**["Piattaforma solida per gestire il rischio dei fornitori"](https://www.g2.com/it/survey_responses/upguard-vendor-risk-review-13042780)**

**Rating:** 5.0/5.0 stars

_— Utkarsh K._

[Read full review](https://www.g2.com/it/survey_responses/upguard-vendor-risk-review-13042780)

### [Secfix](https://www.g2.com/it/products/secfix/reviews)

Secfix è la piattaforma europea di automazione della sicurezza e della conformità creata per le PMI e le aziende di medie dimensioni. La piattaforma automatizza fino al 90% dello sforzo necessario per ottenere ISO 27001, SOC 2, GDPR, NIS2 e altri framework di conformità attraverso integrazioni profonde con il cloud AWS, SSO, sistemi di ticketing e HR. Con accesso diretto agli auditor europei e supporto multilingue, Secfix rende l'esperienza di audit fluida e senza stress.

**Average Rating:** 4.8/5.0

**Total Reviews:** 108

#### How Do G2 Users Rate Secfix?

- **Facilità di amministrazione:** 8.9/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 9.1/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.9/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 6.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Secfix?

- **Venditore:** [Secfix](https://www.g2.com/it/sellers/secfix)
- **Sito web dell'azienda:** secfix.com
- **Anno di Fondazione:** 2021
- **Sede centrale:** Munich, DE
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=748c9df6e137a2d93063e0c4c335ee1a6017101dc21f7f9adb2eea55f2a54de1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsecfix&secure%5Burl_type%5D=linkedin_company_website)  
37 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 81% Small, 19% Medium

#### What Do G2 Reviewers Say About Secfix?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano la **facilità d'uso** di Secfix, che consente una navigazione efficiente e processi di certificazione ISO semplificati.
- Gli utenti elogiano il **supporto clienti eccezionale** fornito da Secfix, migliorando significativamente la loro esperienza di gestione della conformità.
- Gli utenti apprezzano l' **automazione senza sforzo e le integrazioni senza soluzione di continuità** di Secfix, semplificando notevolmente la gestione della conformità.
- Gli utenti apprezzano l' **automazione della conformità senza soluzione di continuità** di Secfix, trasformando la gestione della conformità in un processo continuo e senza sforzo.
- Gli utenti apprezzano la **eccellente guida** del supporto clienti, che semplifica notevolmente il processo di certificazione ISO.

##### Cons

- Gli utenti notano significativi **problemi di integrazione** con fornitori più piccoli, rendendo necessari interventi manuali per strumenti non standard.
- Gli utenti affrontano sfide di **integrazione limitata** con infrastrutture personalizzate, risultando in compiti manuali e un processo di risoluzione più lento.
- Gli utenti sono frustrati dalle **integrazioni limitate** , in particolare con l'infrastruttura personalizzata che influisce sull'automazione e sulla facilità d'uso.
- Gli utenti evidenziano il **supporto per la certificazione mancante** e le funzionalità limitate, indicando aree che necessitano di miglioramenti in Secfix.
- Gli utenti affrontano **limitazioni di integrazione** con infrastrutture personalizzate, influenzando la facilità d'uso e richiedendo soluzioni manuali.

#### What Are Recent G2 Reviews of Secfix?

**["Ottima piattaforma e supporto CSM di SecFix eccezionale che va oltre ogni aspettativa"](https://www.g2.com/it/survey_responses/secfix-review-13030257)**

**Rating:** 5.0/5.0 stars

_— Ruween I._

[Read full review](https://www.g2.com/it/survey_responses/secfix-review-13030257)

**["Struttura chiara e grande supporto nel percorso verso ISO 27001"](https://www.g2.com/it/survey_responses/secfix-review-13095680)**

**Rating:** 5.0/5.0 stars

_— Bernhard K._

[Read full review](https://www.g2.com/it/survey_responses/secfix-review-13095680)

### [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third\_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

**Average Rating:** 4.9/5.0

**Total Reviews:** 118

#### How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

- **Ease of Admin:** 9.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

- **Seller:** [Riskprofiler](https://www.g2.com/sellers/riskprofiler)
- **Company Website:** riskprofiler.io
- **Year Founded:** 2019
- **HQ Location:** Rock Hill , US
- **Twitter:** @riskprofilerio  
209 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b24e229941d4d86cfe1c465f2ca6c72933d43e43c05341e557ac04e379d138f3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Friskprofiler&secure%5Burl_type%5D=linkedin_company_website)  
32 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software Engineer, Security Consultant
- **Top Industries:** Information Technology and Services, Design
- **Company Size:** 66% Medium, 33% Small

#### What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **effective risk management** capabilities of RiskProfiler, facilitating informed decisions and quick responses to threats.
- Users appreciate the **seamless onboarding and integration** of RiskProfiler, enhancing visibility and monitoring of external threats.
- Users commend the **fast and efficient customer support** of RiskProfiler, enhancing their overall experience and response time.
- Users value the **ease of use** of RiskProfiler, particularly the seamless integration and user-friendly dashboard.
- Users value the **easy setup** of RiskProfiler, appreciating its intuitive dashboard and quick implementation process.

##### Cons

- Users face a **steep learning curve** with RiskProfiler, requiring time for training and customization to navigate effectively.
- Users find the **complexity** of RiskProfiler overwhelming, necessitating significant time for training and adjustment.
- Users find a **difficult learning curve** for RiskProfiler, requiring significant training and time to navigate effectively.
- Users find the **learning difficulty** of RiskProfiler challenging, necessitating extra training and time for effective use.
- Users find the **complex setup** of RiskProfiler challenging, particularly for non-specialist teams trying to integrate it.

#### What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

**["Contextual Intelligence That Connects Risk Across the Attack Surface"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)

**["Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)

### [Responsive, formerly RFPIO](https://www.g2.com/products/responsive-formerly-rfpio/reviews)

Responsive is the global leader in strategic response management software, transforming how organizations share and exchange critical information. Our commitment to product innovation and customer success empowers companies to accelerate growth, mitigate risk and improve the employee experience by leveraging intelligent technologies to quickly and accurately manage RFPs, RFIs, security questionnaires (VSQs), due diligence questionnaires (DDQs), risk assessments and all other complex information requests (RFXs). With Responsive, frontline teams deliver superior responses by automating the completion of questionnaires, documents and spreadsheets while collaborating with stakeholders, improving processes with data insights, and quickly accessing approved content across popular business applications.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1,301

#### How Do G2 Users Rate Responsive, formerly RFPIO?

- **Ease of Admin:** 8.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 7.1/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 6.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Responsive, formerly RFPIO?

- **Seller:** [Responsive](https://www.g2.com/sellers/responsive)
- **Company Website:** www.responsive.io
- **Year Founded:** 2016
- **HQ Location:** Frisco, Texas
- **Twitter:** @responsiveio  
1,735 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=82217c41f6a5e492d82f08bf2e615eda4cafadcdbd2bcc37d9ca3f315e279e7d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fresponsiveio&secure%5Burl_type%5D=linkedin_company_website)  
716 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Proposal Manager, Proposal Writer
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 48% Medium, 39% Large

#### What Do G2 Reviewers Say About Responsive, formerly RFPIO?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Responsive, making RFI management intuitive and efficient.
- Users value the **user-friendly interface** and effective features that streamline response processes and enhance productivity.
- Users value the **efficiency** of Responsive, which simplifies collaboration and accelerates response delivery for RFPs.
- Users appreciate the **time-saving features** of Responsive, enhancing efficiency in project management and content reuse.
- Users value the **efficient team collaboration** features of Responsive, enhancing project management and response coordination.

##### Cons

- Users note a **steep initial learning curve** for advanced features, despite helpful support documentation and resources.
- Users find the **UI not intuitive** , especially for new users who struggle to navigate the platform efficiently.
- Users miss the **missing features** like Q&A pair notifications and support for additional formats.
- Users find the **non-intuitive features** of Responsive frustrating, complicating their searching experience and navigation.
- Users find the **difficult learning** curve challenging initially, but support resources help ease the process over time.

#### What Are Recent G2 Reviews of Responsive, formerly RFPIO?

**["Effortless RFP Management, Clean and Simple Interface"](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-4305533)**

**Rating:** 5.0/5.0 stars

_— Jack P._

[Read full review](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-4305533)

**["Powerful AI and Document Management for better responses"](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-11884656)**

**Rating:** 4.0/5.0 stars

_— Rui D._

[Read full review](https://www.g2.com/survey_responses/responsive-formerly-rfpio-review-11884656)

#### What Are G2 Users Discussing About Responsive, formerly RFPIO?

- [What is RFPIO used for?](https://www.g2.com/discussions/what-is-rfpio-used-for) - 1 comment
- [What is RFP360, an RFPIO company used for?](https://www.g2.com/discussions/what-is-rfp360-an-rfpio-company-used-for) - 1 comment

### [Copla](https://www.g2.com/products/copla/reviews)

Copla is a governance, risk, and compliance (GRC) and compliance automation platform founded in 2023 and focused on companies operating in Europe. It is built for organizations that need to meet a growing set of regulatory and security requirements, including DORA, NIS2, ISO 27001, and SOC 2. Rather than treating compliance as a one-time certification exercise, Copla is designed to keep organizations continuously compliant and audit-ready. The platform combines automation and AI with guidance from in-house CISO experts to manage the full GRC cycle in a single system. Core capabilities include framework compliance across multiple standards, where controls are mapped once and reused across frameworks; third-party and vendor risk management, which helps teams assess and monitor the risk introduced by suppliers and service providers; and multi-entity oversight, which lets organizations manage compliance across several entities or subsidiaries from one place. Copla also supports control monitoring, risk registers, and audit preparation, replacing the spreadsheets and disconnected tools that many teams rely on. Copla is intended to reduce the manual work involved in compliance while keeping the focus on real risk reduction rather than only satisfying framework checklists. Controls are tied to the risks they address, which helps keep a compliance program defensible during audits and reviews. Because each control and register adapts to how an organization actually operates, the platform reflects real business processes instead of applying a generic template. The result is a continuously maintained compliance posture that organizations can demonstrate to auditors, regulators, and customers at any time. Copla is typically used by mid-sized and enterprise companies in regulated sectors such as financial services, fintech, insurance, and IT, along with the third-party providers that support them. Compliance evidence is automatically stored in a central location, making audits faster and always regulator-ready. Features like data extraction, risk assessment, vulnerability scanning, penetration testing, and continuous monitoring ensure businesses stay secure and compliant. We also provide business continuity planning and awareness training to strengthen security posture. Copla includes fractional CISO services, offering expert guidance and strategic leadership to help organizations navigate complex compliance and risk management challenges. With fully guided DORA implementation, compliance analysis, and robust risk management workflows, our platform empowers financial institutions to reduce compliance workloads by up to 80% and save over 60K EUR, ensuring efficient and secure operations.

**Average Rating:** 4.9/5.0

**Total Reviews:** 97

#### How Do G2 Users Rate Copla?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.4/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Copla?

- **Seller:** [Copla](https://www.g2.com/sellers/copla)
- **Company Website:** www.copla.com
- **Year Founded:** 2023
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8d3cbba184440f5340b6a86129c45f55b28c76c52f7010788bfec9a9124f06b9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcyber-upgrade%2F&secure%5Burl_type%5D=linkedin_company_website)  
45 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 69% Small, 37% Medium

#### What Do G2 Reviewers Say About Copla?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **evidence validation feature** in Copla, which enhances audit preparation and continuity across cycles.
- Users praise the **ease of use** of Copla, appreciating its organized system and helpful prompts that streamline compliance processes.
- Users value the **time-saving automation** of Copla, completing complex tasks in a fraction of the time.
- Users value the **clarity and efficiency in auditing** provided by Copla, streamlining compliance and enhancing security procedures.
- Users value the **efficient evidence collection** of Copla, simplifying compliance tasks and enhancing clarity during reviews.

##### Cons

- Users find the **difficult setup** of Copla requires considerable planning, often leading to preference for email threads.
- Users face **integration issues** requiring manual efforts and workarounds, though support aids in streamlining the process.
- Users find the **complex setup** requires significant planning and adjustments for successful integration and mappings.
- Users find the **UX improvement** necessary due to a basic mobile experience and non-intuitive interface elements.
- Users find the **learning curve challenging** , especially for teams used to traditional task management methods.

#### What Are Recent G2 Reviews of Copla?

**["All Compliance Information in One Place for Clearer Reporting"](https://www.g2.com/survey_responses/copla-review-13058605)**

**Rating:** 5.0/5.0 stars

_— Sofia T._

[Read full review](https://www.g2.com/survey_responses/copla-review-13058605)

**["Copla Unified Our Compliance: One Source of Truth for Risks, Controls, and Evidence"](https://www.g2.com/survey_responses/copla-review-13070875)**

**Rating:** 5.0/5.0 stars

_— Quinn R._

[Read full review](https://www.g2.com/survey_responses/copla-review-13070875)

### [Apptega](https://www.g2.com/products/apptega/reviews)

Tired of spreadsheets that don’t scale and require too much manual effort? Hampered by overly complex IT GRC systems that have you working for them? Apptega is the cybersecurity and compliance management platform that makes it easy to assess, build, manage, and report your cybersecurity and compliance program. Organizations in all industries and MSSPs rely on Apptega to meet the challenges of cybersecurity and compliance more efficiently and cost-effectively than with any other approach. Featuring 25+ frameworks, including SOC 2, NIST, CMMC, ISO, CIS, PCI, GDPR, HIPAA and more, and manage your program with: - Multi-Tenant - Assessments - Compliance Scoring - Risk Management - Vendor Risk Management - Audit Management - Reporting - Integrations

**Average Rating:** 4.7/5.0

**Total Reviews:** 153

#### How Do G2 Users Rate Apptega?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.3/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.1/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Apptega?

- **Seller:** [Apptega](https://www.g2.com/sellers/apptega)
- **Company Website:** www.apptega.com
- **HQ Location:** Atlanta Junction, Georgia, United States
- **Twitter:** @apptega  
288 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0d14bd86a6a8ab19e0b345aa49a762ca6c50a9dc55f21cf3a30747d0038ee8ee&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F19418228%2F&secure%5Burl_type%5D=linkedin_company_website)  
55 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Chief Information Security Officer
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 42% Medium, 41% Small

#### What Do G2 Reviewers Say About Apptega?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Apptega, enjoying streamlined workflows and efficient compliance management in one place.
- Users appreciate the **effective compliance management** of Apptega, which simplifies organization and task automation.
- Users value the **streamlined compliance management** of Apptega, enhancing collaboration and reducing manual work for cybersecurity efforts.
- Users value the **streamlined management** of cybersecurity and compliance in a single, automated platform for better efficiency.
- Users appreciate the **streamlined security and compliance management** of Apptega, enhancing efficiency and visibility across programs.

##### Cons

- Users note that **several functionalities need improvement** , which impacts usability and hinders timely feature requests.
- Users feel Apptega has **limited functionality** with some bugs and missing frameworks, but improvements have been noted.
- Users express concern about **missing features** and slow delivery of new requests, impacting functionality and support.
- Users note the **limited functionality** of Apptega, citing gaps in API evidence, tracking, and essential report features.
- Users feel there is **limited customization** in Apptega, though recent improvements have been noted.

#### What Are Recent G2 Reviews of Apptega?

**["Clear Security Framework Control Breakdown"](https://www.g2.com/survey_responses/apptega-review-12488443)**

**Rating:** 4.0/5.0 stars

_— Kyle I._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12488443)

**["Streamlined Compliance and Cybersecurity Made Effortless with Apptega"](https://www.g2.com/survey_responses/apptega-review-12166378)**

**Rating:** 5.0/5.0 stars

_— Katie J._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12166378)

#### What Are G2 Users Discussing About Apptega?

- [What is Apptega used for?](https://www.g2.com/discussions/what-is-apptega-used-for)

- ‹ Prev ‹ Prev
- 1
- [2](/it/categories/vendor-security-and-privacy-assessment/small-business?order=g2_score&page=2#product-list)
- [Next › Next ›](/it/categories/vendor-security-and-privacy-assessment/small-business?order=g2_score&page=2#product-list)

Categorie in evidenza

[Software di Trasferimento File Gestito (MFT)](https://www.g2.com/it/categories/managed-file-transfer-mft)

[Software di automazione del marketing](https://www.g2.com/it/categories/marketing-automation)

[Software di Gestione della Compensazione](https://www.g2.com/it/categories/compensation-management)

[Software di protezione contro le frodi nell'e-commerce](https://www.g2.com/it/categories/e-commerce-fraud-protection)

[Software di gestione dei servizi sul campo](https://www.g2.com/it/categories/field-service-management)

Categorie simili

- [Strumenti di rilevamento della disinformazione](/it/categories/disinformation-detection-tools)

- [Gestione del Rischio IT](/it/categories/it-risk-management)

[Browse Valutazione della Sicurezza e della Privacy del Fornitore Themes](/it/categories/vendor-security-and-privacy-assessment/themes)