What I like best about Apptega is how it brings all of our cybersecurity and compliance work into one place. Instead of juggling spreadsheets and separate tools, our entire program, including frameworks, controls, assessments, and reporting, lives in a single, easy-to-navigate platform. The most helpful part of Apptega is its ability to streamline project tracking and evidence collection. We can easily assign owners, set timelines, upload supporting documents, and monitor progress from one dashboard. This turns what used to be a scattered, manual process into a clear, auditable workflow that keeps everyone aligned and accountable. The dashboards and scoring tools also make it simple to show leadership where we stand and what gaps need attention. The biggest upsides are time savings, better visibility, and improved collaboration. Apptega gives us a living system of record rather than static documents, so updates and evidence stay current. It also simplifies communication with executives, auditors, and clients by turning complex compliance data into clear, visual reports. Ultimately, it helps us mature our security program faster and with less administrative overhead. Review collected by and hosted on G2.com.

While Apptega has been a major improvement over manual processes, there are a few areas where it could grow. Some configuration options and workflows can feel rigid at first and require extra time to customize to our exact needs. The reporting and export functions, although useful, could be more flexible and allow for deeper customization to match specific executive or board requirements.

Despite these points, Apptega’s support team is responsive and often incorporates customer feedback into updates, which makes us optimistic about continued improvements. Review collected by and hosted on G2.com.

The number of available compliance frameworks. Irrespective of the business line you are into, they have wide variety of frameworks included in their platform. Very easy to launch the framework and convert them into program. Their customer support is awesome. It helps us use it every day without any trouble. Since it is cloud based there is no implementation. As soon as you get your credentials, you are good to go. You can also integrate it with your existing cloud platforms to get your compliance visibility immediately. Review collected by and hosted on G2.com.

The UI can be little updated with modern look. Review collected by and hosted on G2.com.

We've found Apptega incredibly helpful for handling our cybersecurity and compliance needs. The interface is straightforward, and it comes with built-in frameworks like NIST, CMMC, and ISO, which make things so much easier. Automated tracking has really boosted our governance and risk management. We can map controls across different frameworks, keep tabs on progress in real-time, and whip up executive-level reports without any hassle. Their customer support team is also quick to respond and very knowledgeable. Thanks to Apptega, we've moved from being reactive to proactive in our cybersecurity efforts. Review collected by and hosted on G2.com.

Apptega is a great platform, but the vendor risk management module could be easier to use when checking out third-party reports. Making it simpler to upload, access, and review these reports would really help teams dealing with lots of vendors. It would also be awesome if we could look at reports across all vendors to get an overall risk score. The vendor risk portal is good, but it could use some feature upgrades Review collected by and hosted on G2.com.

Apptega is intuitive to use-- i was able to get my multiple security frameworks setup with minimal time required. My favorite thing is the constant innovation we see going on. I've submitted multiple feature requests since the product was released and the Apptega team has been diligent with their word and communication around these requests. They've also done good work to build a community around their tool-- where folks can discuss the tool and how best to use it, and anything else related to it. Review collected by and hosted on G2.com.

Sometimes we come across bugs in the web app. These bugs may be resolved in days to weeks, depending on the issue. Review collected by and hosted on G2.com.

Apptega gives me a way to track the progress of our security program against a multiple security frameworks. I can upload all supporting documentation and assign changes to my team. Apptega also allows me to create a customized risk profile based on which controls are still in progress. It takes the effort out of spreadsheets and puts it in a centralized location. Review collected by and hosted on G2.com.

The reporting mechanisms could be more granular to allow better subcontrol visibility. Review collected by and hosted on G2.com.

The platform's ease of use and streamlined interface made it simple for us to get our GRC program up and running quickly. Review collected by and hosted on G2.com.

I believe it would be beneficial to have a greater number of integrations, as this would help provide an even better customer experience. Review collected by and hosted on G2.com.

Apptega has become my preferred GRC platform. I rely on it for managing the BBG Security Program, as well as for overseeing our Risk Management and TPRM programs. Review collected by and hosted on G2.com.

I am still learning how to use the TPRM module. Review collected by and hosted on G2.com.

Apptega is "just right" for most mid-market firms GRC needs. Other products tout more bells and whistles but in my experience they never get implemented. Apptega helps security and compliance managers move away from their trusty folder full of spreadsheet alternative to manage the routines that need to get done to maintain risk management, security posture and compliance needs.

We've worked with other platforms. Comparatively, Apptega is the most accessible with users able to stand up their first risk assessment quickly without a lot of pre training required. Review collected by and hosted on G2.com.

We wish the risk assessment functionality was tied to a risk assessment framework like NIST 800-30 or ISO and not so directly connected to the compliance frameworks. Review collected by and hosted on G2.com.

The openminded hunger for making the product better and better is more than I've seen with other GRC solutions. Apptega has increased capability and potential greatly over the last 4 years that Arrakis Consulting has been working with them. Regular calls with heavy hitters in Apptega to help improve the product and expand capabilities is a true sign of caring about improving and doing better than the day before. Review collected by and hosted on G2.com.

Not as many integrations as other platforms but it's not really a dislike. The Apptega team is very up front with wanting to improve at every opportunity. Review collected by and hosted on G2.com.

Simplifies many GRC tasks that other products over complicate, allowing a foundational assessment to be completed quickly then expanded upon. It integrates seamlessly with SAML for authentication and the support team is excellent. Review collected by and hosted on G2.com.

As a package that supports numerous governance frameworks, it uses common control criteria to assist in overall assessment. Even so, these behaviors can sometimes impact scoring in unexpected and confusing ways. Review collected by and hosted on G2.com.