# Best IT Risk Management Software

## How Many IT Risk Management Software Products Does G2 Track?

**Total Products under this Category:** 168

### Category Stats (Jul 2026)

- **Average Rating:** 4.5/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month

_Last updated: July 28, 2026_

## How Does G2 Rank IT Risk Management Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 10,900+ Authentic Reviews
- 168+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for IT Risk Management Software
 ![G2 Grid® for IT Risk Management Software plotting products by satisfaction and market presence](https://www.g2.com/categories/it-risk-management/grids.png?focus%5B%5D=4086&focus%5B%5D=77979&focus%5B%5D=162410&focus%5B%5D=130035&focus%5B%5D=167976&focus%5B%5D=1264619&focus%5B%5D=20964&focus%5B%5D=955)

Highlighted products: UpGuard Vendor Risk, TeamMate, Sprinto, Thoropass, Scrut Automation, RealCISO vCISO & GRC Platform, Optro, and SAP Risk Management.

Underlying data: [Grid® JSON](https://www.g2.com/categories/it-risk-management/grids.json?focus%5B%5D=upguard-vendor-risk&focus%5B%5D=teammate&focus%5B%5D=sprinto-inc&focus%5B%5D=thoropass&focus%5B%5D=scrut-automation&focus%5B%5D=realciso-vciso-grc-platform&focus%5B%5D=optro&focus%5B%5D=sap-risk-management)

**Sponsored**

### DNSFilter

DNSFilter is a cybersecurity solution designed to enhance internet safety and workplace productivity by actively blocking malicious online threats. By leveraging advanced artificial intelligence, DNSFilter provides protective Domain Name System (DNS) services that effectively shield users from a wide range of cyber threats, including phishing attacks, malware, and other advanced security risks. With its robust infrastructure, DNSFilter processes an impressive volume of queries, resolving upwards of 130 billion queries daily while blocking an average of 12 million threat queries each day. The target audience for DNSFilter includes businesses of all sizes, educational institutions, and any organization that seeks to safeguard its network from cyber threats. As cyberattacks increasingly leverage DNS, DNSFilter serves as a critical line of defense for organizations looking to protect sensitive data and maintain operational integrity. By implementing DNSFilter, organizations can not only mitigate risks but also enhance overall productivity by reducing the potential for downtime caused by security incidents. One of the standout features of DNSFilter is its unique machine learning models which block threats an average of 10 days faster than traditional threat feeds. This rapid response is crucial in a landscape where cyber threats evolve quickly, and timely intervention can prevent significant damage. The AI-driven technology behind DNSFilter continuously analyzes and adapts to emerging threats, ensuring that users are protected with the most current security measures available. This proactive approach to threat detection and blocking is a key differentiator that sets DNSFilter apart from other cybersecurity solutions. In addition to its threat-blocking capabilities, DNSFilter offers a user-friendly interface that simplifies management and monitoring for IT administrators. The platform provides detailed reporting and analytics, allowing organizations to gain insights into their network's security posture and make informed decisions regarding their cybersecurity strategies. With over 35 million users placing their trust in DNSFilter, the solution not only enhances security but also fosters a more productive work environment by minimizing distractions and interruptions caused by cyber threats. Overall, DNSFilter represents a comprehensive and effective solution for organizations seeking to bolster their cybersecurity defenses while promoting a safer and more efficient online experience. Its speed, intelligence, and ease of use make it a valuable asset in the ongoing battle against cyber threats.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1440&secure%5Bchosen_at%5D=2026-07-29T08%3A11%3A26Z&secure%5Bdisplayable_resource_id%5D=1440&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=page_category&secure%5Bplacement_resource_ids%5D%5B%5D=1440&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=23936&secure%5Bresource_id%5D=1440&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fit-risk-management&secure%5Btoken%5D=bdd4398d77f2f5a8c500fe75b0e4ad65a858878b37edead4393bc1f8f9c156af&secure%5Burl%5D=https%3A%2F%2Fexplore.dnsfilter.com%2FG2-free-trial%3Futm_source%3DG2%26utm_medium%3Dpaid-social%26utm_campaign%3Ddnsf_dg_2026-07_All_G2_free-trial&secure%5Burl_type%5D=custom_url)

[
UpGuard Vendor Risk
](https://www.g2.com/products/upguard-vendor-risk/reviews)

By [UpGuard](https://www.g2.com/sellers/upguard)

[

4.5/5(727)

](https://www.g2.com/products/upguard-vendor-risk/reviews)

What do users say?

Users consistently praise the intuitive interface and ease of use of UpGuard Vendor Risk, highlighting how it simplifies vendor risk management and enhances visibility into security postures. The plat

Pros and Cons

[
Ease of Use (252)
](https://www.g2.com/products/upguard-vendor-risk/reviews?qs=pros-and-cons)[
Lack of Clarity (52)
](https://www.g2.com/products/upguard-vendor-risk/reviews?qs=pros-and-cons)

### [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews)

UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board.

**Average Rating:** 4.5/5.0

**Total Reviews:** 724

#### How Do G2 Users Rate UpGuard Vendor Risk?

- **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.0/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.1/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.0/10 (Category avg: 9.0/10)

#### Who Is the Company Behind UpGuard Vendor Risk?

- **Seller:** [UpGuard](https://www.g2.com/sellers/upguard)
- **Company Website:** upguard.com
- **Year Founded:** 2012
- **HQ Location:** Mountain View, California
- **Twitter:** @UpGuard  
8,705 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ecef7c625c5848d4830cff08a7ea502854ec4005dbbc0f617bcb2b0f106f0dd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fupguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
371 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CISO, Security Analyst
- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 47% Large, 39% Medium

#### What Do G2 Reviewers Say About UpGuard Vendor Risk?

_AI-generated summary from verified user reviews_

##### Pros

- Users find UpGuard Vendor Risk to be incredibly **easy to use** , streamlining their workflow and enhancing data security.
- Users value the **user-friendly interface** and reliable information of UpGuard for effective vendor data security.
- Users value the **dynamic scoring system** of UpGuard Vendor Risk, which enhances risk prioritization and monitoring efficiency.
- Users value UpGuard for its **time-saving features** , making risk management and monitoring quick and efficient.
- Users commend UpGuard's **customer support** , highlighting its efficiency and smooth assistance for various queries and tasks.

##### Cons

- Users find a lack of **clarity in remediation recommendations** , often needing additional guidance and specific examples for implementation.
- Users find UpGuard Vendor Risk **expensive** for smaller organizations, wishing for lower pricing and more flexible vendor options.
- Users note the **limited functionality** of UpGuard, especially in areas like customization and workflow adaptability.
- Users feel that UpGuard needs to improve on **false positives** as they complicate vulnerability management and ratings.
- Users find the **limited customization** options in UpGuard Vendor Risk hinder effective use and personalization.

#### What Are Recent G2 Reviews of UpGuard Vendor Risk?

**["Well-Organized Platform for Security Due Diligence"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)**

**Rating:** 4.5/5.0 stars

_— Mohamed S._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)

**["Strong Platform for Managing Vendor Risk"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)**

**Rating:** 5.0/5.0 stars

_— Utkarsh K._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)

[
TeamMate
](https://www.g2.com/products/teammate/reviews)

By [Wolters Kluwer](https://www.g2.com/sellers/wolters-kluwer-0ec90624-3c0b-49b8-a8df-2bb1756379c1)

[

4.3/5(596)

](https://www.g2.com/products/teammate/reviews)

What do users say?

Users consistently praise the ease of use and intuitive design of TeamMate, which simplifies audit management and enhances collaboration among teams. The platform's structured approach helps streamlin

Pros and Cons

[
Ease of Use (76)
](https://www.g2.com/products/teammate/reviews?qs=pros-and-cons)[
Limited Customization (16)
](https://www.g2.com/products/teammate/reviews?qs=pros-and-cons)

### [TeamMate](https://www.g2.com/products/teammate/reviews)

In today’s complex risk landscape, organizations need more than isolated oversight, they need connected assurance. TeamMate delivers a unified approach by bringing audit, controls, risk, and compliance together into one integrated ecosystem, enabling teams to collaborate seamlessly while maintaining clear ownership and accountability. The TeamMate suite, TeamMate Audit, TeamMate Controls, and TeamMate Risk & Compliance, connects data, workflows, and insights across the Three Lines to provide a consistent, real-time view of organizational risk. This integration reduces silos, improves alignment, and supports more informed decision-making. - TeamMate Audit is purpose-built for internal audit, supporting the full audit lifecycle with guided workflows, embedded analytics, and AI-driven capabilities that improve quality, consistency, and productivity. - TeamMate Controls strengthens internal controls management with centralized documentation, standardized testing, and real-time visibility, empowering first- and second-line teams to improve control performance and streamline reporting. - TeamMate Risk & Compliance (formerly StandardFusion) unifies governance, risk, and compliance activities in a single platform, delivering a complete view of risk, automated workflows, and audit-ready evidence to improve efficiency and ensure transparency. Together, TeamMate’s purpose-built audit and GRC solutions provide the visibility, accountability, and consistency organizations need to build resilience, strengthen assurance, and move forward with confidence.

**Average Rating:** 4.3/5.0

**Total Reviews:** 585

#### How Do G2 Users Rate TeamMate?

- **Has the product been a good partner in doing business?:** 8.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.2/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.3/10 (Category avg: 9.0/10)

#### Who Is the Company Behind TeamMate?

- **Seller:** [Wolters Kluwer](https://www.g2.com/sellers/wolters-kluwer-0ec90624-3c0b-49b8-a8df-2bb1756379c1)
- **Company Website:** www.wolterskluwer.com
- **Year Founded:** 1987
- **HQ Location:** Alphen aan den Rijn, NL
- **Twitter:** @Wolters\_Kluwer  
17,786 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=d2fb80a693d690a66d81177c87cf6980cdb4f796fb21b9bd15cef37fcaca0b25&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fwolters-kluwer%2F&secure%5Burl_type%5D=linkedin_company_website)  
22,177 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Internal Auditor, Senior Internal Auditor
- **Top Industries:** Banking, Financial Services
- **Company Size:** 36% Large, 32% Small

#### What Do G2 Reviewers Say About TeamMate?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of TeamMate, finding it organized and intuitive for better navigation.
- Users value the **audit efficiency** of TeamMate+, noting significant improvements and streamlined processes in their auditing tasks.
- Users appreciate the **efficiency** of TeamMate, enabling better organization and quick onboarding without dedicated administration.
- Users praise TeamMate+ for its **intuitive and user-friendly interface** , enhancing efficiency and organization in audit documentation.
- Users value the **navigation ease** of TeamMate, appreciating the organized layout and smooth project transition.

##### Cons

- Users find **limited customization** options in TeamMate, hindering data tracking and integration with their workflows.
- Users find TeamMate's interface **not intuitive** , resulting in a challenging experience that requires extensive training.
- Users struggle with **inadequate reporting** , facing challenges in generating tailored reports and desired formats efficiently.
- Users find the **difficulty for new users** in TeamMate+ challenging, particularly with making changes and collaborating.
- Users experience challenges with **document management** , including inconsistent saving and lack of concurrent review options in TeamMate.

#### What Are Recent G2 Reviews of TeamMate?

**["TeamMate: a comprehensive, flexible, and pleasant tool for managing internal audits"](https://www.g2.com/survey_responses/teammate-review-11151352)**

**Rating:** 5.0/5.0 stars

_— Marc S._

[Read full review](https://www.g2.com/survey_responses/teammate-review-11151352)

**["Centralizes Audit Process, Needs Better Navigation"](https://www.g2.com/survey_responses/teammate-review-13095016)**

**Rating:** 5.0/5.0 stars

_— Kavya N._

[Read full review](https://www.g2.com/survey_responses/teammate-review-13095016)

#### What Are G2 Users Discussing About TeamMate?

- [What do you like most about TeamMate+ for audit management, and what improvements would you suggest?](https://www.g2.com/discussions/what-do-you-like-most-about-teammate-for-audit-management-and-what-improvements-would-you-suggest)
- [What is TeamMate+ used for?](https://www.g2.com/discussions/what-is-teammate-used-for)
- [What is StandardFusion used for?](https://www.g2.com/discussions/what-is-standardfusion-used-for)
- [How do you hyperlink in teammates?](https://www.g2.com/discussions/how-do-you-hyperlink-in-teammates) - 1 upvote
- [What is TeamMate EWP?](https://www.g2.com/discussions/what-is-teammate-ewp)

[
Sprinto
](https://www.g2.com/products/sprinto-inc/reviews)

By [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited)

[

4.7/5(1,677)

](https://www.g2.com/products/sprinto-inc/reviews)

What do users say?

Users consistently praise the ease of use and responsive support provided by Sprinto, which simplifies the often complex compliance processes. The platform's automation features significantly reduce m

Pros and Cons

[
Ease of Use (384)
](https://www.g2.com/products/sprinto-inc/reviews?qs=pros-and-cons)[
Integration Issues (71)
](https://www.g2.com/products/sprinto-inc/reviews?qs=pros-and-cons)

### [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,660

#### How Do G2 Users Rate Sprinto?

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.2/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.4/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Sprinto?

- **Seller:** [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited)
- **Company Website:** sprinto.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @sprintoHQ  
13,279 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=88a586e2bb472645900fa1b7c798d25a8eec33961ed706d988c804e1de4cdc4a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsprinto-com&secure%5Burl_type%5D=linkedin_company_website)  
424 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 57% Small, 42% Medium

#### What Do G2 Reviewers Say About Sprinto?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Sprinto's **ease of use** exceptional, appreciating the straightforward deployment and comprehensive support throughout the process.
- Users praise the **helpful customer support** from Sprinto, facilitating smooth deployment and fast compliance management.
- Users praise Sprinto for its **transformative compliance features** and exceptional customer support, streamlining their compliance processes effectively.
- Users highlight the **exceptional customer support** from Sprinto, making deployment and compliance management effortless and efficient.
- Users value Sprinto for its **intuitive compliance management** , enhanced by exceptional support from knowledgeable account managers.

##### Cons

- Users report **integration issues** with some niche tools, though improvements are continuously being made.
- Users note **limited customization options** for certain features, impacting flexibility and initial setup for specific needs.
- Users experience **limited integrations** which can cause delays, yet improvements are ongoing to enhance functionality.
- Users find the **guidance unclear** during onboarding, leading to confusion about auditor accreditation and integrations.
- Users report **UI/UX challenges** with navigation and syncing, but hope for improvements with the new interface update.

#### What Are Recent G2 Reviews of Sprinto?

**["Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support"](https://www.g2.com/survey_responses/sprinto-review-12898116)**

**Rating:** 5.0/5.0 stars

_— Gayathri v._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12898116)

**["Fast path to SOC 2 Type 1 — great platform, outstanding support"](https://www.g2.com/survey_responses/sprinto-review-12885389)**

**Rating:** 5.0/5.0 stars

_— Ignacio B._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12885389)

[
Thoropass
](https://www.g2.com/products/thoropass/reviews)

By [Thoropass](https://www.g2.com/sellers/thoropass)

[

4.7/5(580)

](https://www.g2.com/products/thoropass/reviews)

What do users say?

Users consistently praise the user-friendly interface and responsive customer support of Thoropass, which simplifies the compliance process and enhances overall experience. Many appreciate how the pla

Pros and Cons

[
Ease of Use (239)
](https://www.g2.com/products/thoropass/reviews?qs=pros-and-cons)[
Lack of Clarity (39)
](https://www.g2.com/products/thoropass/reviews?qs=pros-and-cons)

### [Thoropass](https://www.g2.com/products/thoropass/reviews)

Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.

**Average Rating:** 4.7/5.0

**Total Reviews:** 578

#### How Do G2 Users Rate Thoropass?

- **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.0/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.5/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Thoropass?

- **Seller:** [Thoropass](https://www.g2.com/sellers/thoropass)
- **Company Website:** thoropass.com
- **Year Founded:** 2019
- **HQ Location:** New York
- **Twitter:** @thoropass  
379 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b1f297756fc129866b36b217a21369c351ca7d0a7174dc50b89b265a25747e91&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthoropass%2F&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 71% Small, 26% Medium

#### What Do G2 Reviewers Say About Thoropass?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Thoropass, enjoying its intuitive dashboard and helpful templates for efficient audits.
- Users appreciate the **exceptional support** from Thoropass, which simplifies the audit process and enhances their experience.
- Users value the **extensive integrations** of Thoropass, which streamline compliance efforts and enhance operational efficiency.
- Users commend the **helpful support team** of Thoropass, which enhances the overall audit and compliance experience.
- Users appreciate the **extensive integrations** of Thoropass, significantly streamlining compliance processes with various cloud providers.

##### Cons

- Users find **lack of clarity** in Thoropass, struggling with unorganized UX and missing essential information at point of sale.
- Users experience **integration issues** with Thoropass, leading to exceptions and unhelpful connections that hinder usability.
- Users find the **UX disjointed** , expressing a need for clearer guidance and better functionality in Thoropass.
- Users note a need for **improved communication and feature development** to enhance scheduling and audit experiences.
- Users find the **platform not intuitive** , leading to confusion and challenges in managing compliance efficiently.

#### What Are Recent G2 Reviews of Thoropass?

**["Thoropass and SOC2 process"](https://www.g2.com/survey_responses/thoropass-review-11551425)**

**Rating:** 5.0/5.0 stars

_— Nicole B._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-11551425)

**["Centralizes Compliance Tasks Efficiently"](https://www.g2.com/survey_responses/thoropass-review-10958552)**

**Rating:** 5.0/5.0 stars

_— Monica ._

[Read full review](https://www.g2.com/survey_responses/thoropass-review-10958552)

#### What Are G2 Users Discussing About Thoropass?

- [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment

[
Scrut Automation
](https://www.g2.com/products/scrut-automation/reviews)

By [Scrut Automation](https://www.g2.com/sellers/scrut-automation)

[

4.9/5(1,314)

](https://www.g2.com/products/scrut-automation/reviews)

What do users say?

Users consistently praise the ease of use and strong customer support provided by Scrut Automation, which simplifies compliance management and streamlines the audit process. The platform's intuitive i

Pros and Cons

[
Ease of Use (289)
](https://www.g2.com/products/scrut-automation/reviews?qs=pros-and-cons)[
Improvement Needed (68)
](https://www.g2.com/products/scrut-automation/reviews?qs=pros-and-cons)

### [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

**Average Rating:** 4.9/5.0

**Total Reviews:** 1,311

#### How Do G2 Users Rate Scrut Automation?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.5/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.6/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.7/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Scrut Automation?

- **Seller:** [Scrut Automation](https://www.g2.com/sellers/scrut-automation)
- **Company Website:** www.scrut.io
- **Year Founded:** 2022
- **HQ Location:** Palo Alto, US
- **Twitter:** @scrutsocial  
120 Twitter followers
- **LinkedIn® Page:** [in.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bc41c2e597940ae09ba338bf6abec320af78c3999ea4eb88e00635f919f04135&secure%5Burl%5D=https%3A%2F%2Fin.linkedin.com%2Fcompany%2Fscrut-automation&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 50% Small, 48% Medium

#### What Do G2 Reviewers Say About Scrut Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Scrut Automation's **ease of use** invaluable for tracking tasks and maintaining team access effectively.
- Users commend the **outstanding customer support** of Scrut Automation, highlighting teamwork and effective guidance throughout the process.
- Users appreciate the **exceptional support and guidance** from Scrut's team, significantly enhancing their compliance experience.
- Users value the **exceptional compliance management** by Scrut Automation, finding it efficient and cost-effective for SOC 2 processes.
- Users value the **supportive compliance assistance** from Scrut Automation, enhancing clarity and ease during audits.

##### Cons

- Users feel that Scrut Automation requires **significant improvements** in UI clarity and documentation quality for better usability.
- Users note the **missing features** in Scrut Automation, particularly in auto-answering questionnaires and report customization.
- Users face **technical issues** with complex modules and occasional login problems, impacting the overall user experience.
- Users find the **learning curve steep** , making navigation and understanding challenging for newcomers to Scrut Automation.
- Users express concerns over **lack of clarity** in test results and policy processes, complicating their experience with Scrut Automation.

#### What Are Recent G2 Reviews of Scrut Automation?

**["Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency"](https://www.g2.com/survey_responses/scrut-automation-review-13049695)**

**Rating:** 4.0/5.0 stars

_— Ravindra N._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-13049695)

**["Transforming Compliance and Security Management with Scrut Automation"](https://www.g2.com/survey_responses/scrut-automation-review-10499291)**

**Rating:** 5.0/5.0 stars

_— Karan A._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-10499291)

#### What Are G2 Users Discussing About Scrut Automation?

- [What is Scrut Automation used for?](https://www.g2.com/discussions/what-is-scrut-automation-used-for) - 1 comment, 1 upvote

[
RealCISO vCISO & GRC Platform
](https://www.g2.com/products/realciso-vciso-grc-platform/reviews)

By [RealCISO](https://www.g2.com/sellers/realciso)

[

4.8/5(188)

](https://www.g2.com/products/realciso-vciso-grc-platform/reviews)

What do users say?

Users consistently praise the platform for its ease of use and comprehensive compliance management, which simplifies the process of tracking vulnerabilities and managing security frameworks. The intui

Pros and Cons

[
Ease of Use (53)
](https://www.g2.com/products/realciso-vciso-grc-platform/reviews?qs=pros-and-cons)[
Integration Issues (24)
](https://www.g2.com/products/realciso-vciso-grc-platform/reviews?qs=pros-and-cons)

### [RealCISO vCISO & GRC Platform](https://www.g2.com/products/realciso-vciso-grc-platform/reviews)

RealCISO is a compliance intelligence platform — not compliance software. It compiles, tracks, and improves security posture over time through a connected compliance data graph. Used by 3,000+ organizations and enterprises to run assessments at scale, track maturity progression, and make compliance decisions based on real data. For MSPs, MSSPs, and vCISO consultants: RealCISO automates assessment delivery across your entire book of business. White-label the platform, manage multi-tenant client billing, and run portfolio intelligence across your clients—"Across your 60 healthcare clients, access control is the highest-variance category. 12 are below L2." Service providers report 40% faster assessment cycles and measurable increases in recurring compliance revenue. For enterprises and in-house teams: RealCISO replaces spreadsheets and point-in-time assessments with continuous compliance intelligence. Track maturity progression per control from L1 (Ad-hoc) to L5 (Optimizing) over time. Simulate impact before acting—"If I implement this control, how much does my risk score improve?" Run assessments against an infinite number of frameworks (NIST CSF 2.0, HIPAA 2.0, SOC 2, ISO 27001, CMMC, CIS Controls, PCI-DSS, FedRAMP) in a single project. One evidence set. Multiple frameworks simultaneously. The core difference: Every competitor stores flat question-and-answer rows. RealCISO builds a connected graph: Controls → Risks → Evidence → Vendors → Policies → People. The AI reasons over that structure. That's why "AI + a spreadsheet" cannot replace RealCISO, and why maturity trajectory, portfolio intelligence, and impact simulation are only possible here. Platform features available today: - L1-L5 maturity trajectory — track progression per control over time (no competitor tracks control-level maturity) - Impact simulation — rank open gaps by projected score improvement before acting ("what-if" analysis) - Multi-framework single project — assess HIPAA + NIST CSF simultaneously; one evidence set mapped to both - Bidirectional control-risk mapping — in production (competitors announced this; we shipped it) - Evidence expiration signals — automatically surface aging evidence ranked by risk impact - Portfolio intelligence — for partners: cross-client pattern recognition across your entire client base - Immutable report versioning — full audit trail; every change tracked to actor and timestamp - White-label — custom domains, logos, and billing models for partners - AI assessment engine — enterprise-grade, provider-agnostic; executes assessments, not just assists - Chat-integrated workflows — "Create 3 planner cards for my top gaps"; batch actions with context awareness Biggest gaps vs. Vanta/Drata: Evidence collection integrations (Drata has 200+, Vanta has 300+). RealCISO's focus is on the intelligence layer, not the integration layer. Continuous monitoring is on the roadmap for 2026.

**Average Rating:** 4.8/5.0

**Total Reviews:** 188

#### How Do G2 Users Rate RealCISO vCISO & GRC Platform?

- **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.8/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.7/10 (Category avg: 9.0/10)

#### Who Is the Company Behind RealCISO vCISO & GRC Platform?

- **Seller:** [RealCISO](https://www.g2.com/sellers/realciso)
- **Company Website:** realciso.io
- **Year Founded:** 2020
- **HQ Location:** Boston, US
- **Twitter:** @RealCISO  
133 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=f9b66f83e084fc89925f8cc0ec521dbd8ade9b7c96bdcc6f6dab1a4bca41e058&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Frealciso-io&secure%5Burl_type%5D=linkedin_company_website)  
9 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** IT Compliance Manager, SOC Analyst
- **Top Industries:** Retail, Chemicals
- **Company Size:** 88% Medium, 40% Small

#### What Do G2 Reviewers Say About RealCISO vCISO & GRC Platform?

_AI-generated summary from verified user reviews_

##### Pros

- Users find RealCISO vCISO Platform **easy to use** , appreciating its user-friendliness and smooth implementation for compliance tasks.
- Users value the **proactive compliance management** offered by RealCISO, enhancing risk assessment and stakeholder communication.
- Users appreciate the **effective compliance management** of RealCISO, simplifying audits and enhancing stakeholder communication.
- Users value the **automation capabilities** of RealCISO vCISO, streamlining processes and enhancing efficiency in security management.
- Users praise **RealCISO's effective risk management** , allowing swift, informed decisions and simplifying compliance with international standards.

##### Cons

- Users find the **integration issues** challenging, as it complicates workflows and requires additional efforts for effective use.
- Users note **limitations in user access management** and the lack of tailored features for critical industries, affecting functionality.
- Users find the **limited functionality** of RealCISO vCISO & GRC Platform restricts customizations and sector-specific needs.
- Users note a **steep learning curve** for RealCISO vCISO & GRC Platform, requiring time and diligence to navigate effectively.
- Users feel the platform lacks **adequate guidance** , making it challenging for smaller firms to effectively deploy and utilize.

#### What Are Recent G2 Reviews of RealCISO vCISO & GRC Platform?

**["RealCISO Simplifies ISO 27001 Compliance Tracking with Helpful AI Assistance"](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-13067203)**

**Rating:** 4.5/5.0 stars

_— Sara B._

[Read full review](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-13067203)

**["RealCISO Keeps Compliance Tasks and Audit Evidence Organized"](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-13070121)**

**Rating:** 4.5/5.0 stars

_— James W._

[Read full review](https://www.g2.com/survey_responses/realciso-vciso-grc-platform-review-13070121)

[
Optro
](https://www.g2.com/products/optro/reviews)

By [Optro](https://www.g2.com/sellers/optro)

[

4.6/5(1,612)

](https://www.g2.com/products/optro/reviews)

What do users say?

Users consistently praise the product for its user-friendly interface and centralized audit management, which streamline the audit process and enhance collaboration. The platform's ability to integrat

Pros and Cons

[
Ease of Use (243)
](https://www.g2.com/products/optro/reviews?qs=pros-and-cons)[
Limited Functionality (71)
](https://www.g2.com/products/optro/reviews?qs=pros-and-cons)

### [Optro](https://www.g2.com/products/optro/reviews)

Optro (Formerly AuditBoard) is a GRC software solution that helps enterprises manage audit, risk, and compliance workflows through an agentic system of action. By using GRC-trained AI, centralizing disparate data points, and automating manual processes, the platform enables organizations to transition from reactive risk management to proactive strategic planning. The platform functions as a comprehensive ecosystem for risk managers, assurance leaders, internal auditors, and compliance officers. It addresses the increasing complexity of modern regulatory environments by providing tools for real-time monitoring and reporting. Optro facilitates a streamlined flow of information between teams, ensuring that risk data is not siloed but instead used to inform high-level business decisions. Optro’s approach allows companies to identify emerging threats and operational vulnerabilities before they impact the bottom line, ultimately turning risk management into a driver of organizational opportunity.

**Average Rating:** 4.6/5.0

**Total Reviews:** 1,596

#### How Do G2 Users Rate Optro?

- **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.4/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.6/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Optro?

- **Seller:** [Optro](https://www.g2.com/sellers/optro)
- **Company Website:** optro.ai
- **Year Founded:** 2014
- **HQ Location:** Cerritos, California
- **Twitter:** @optrohq  
2,975 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=fc31ce41cb63b5ba3728b1d0344ac370343de9ae3581ef3bf0ef33f95e8f3ba3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Foptro%2F&secure%5Burl_type%5D=linkedin_company_website)  
821 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Internal Audit Manager, Senior Internal Auditor
- **Top Industries:** Financial Services, Accounting
- **Company Size:** 59% Large, 20% Medium

#### What Do G2 Reviewers Say About Optro?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of Optro, finding it great for basic audit functions and assessments.
- Users appreciate the **efficiencies** of Optro, finding it easy to use for comprehensive audit functions and connections.
- Users find the software to be **intuitive and user-friendly** , enhancing their overall experience when configured properly.
- Users love the **versatile modules** of Optro that facilitate easy linkages and centralize functionality efficiently.
- Users love the **audit efficiency** of Optro, benefiting from seamless integration and streamlined processes throughout their audits.

##### Cons

- Users find the **limited functionality** of Optro restricts their ability to fully utilize analytics and projects.
- Users find that **improvement is needed** , particularly in risk assessment integration and user guidance for the Optro platform.
- Users find **limited customization** in Optro, facing challenges with complex roles, permissions, and dashboard creation.
- Users find the **interface not intuitive** , making feature navigation and understanding complex functionalities a challenge.
- Users struggle with **limited formatting options** and find some AI features unhelpful for organizing work papers effectively.

#### What Are Recent G2 Reviews of Optro?

**["Optro, the great ally in Risk Management, Controls, and Audits"](https://www.g2.com/survey_responses/optro-review-10064397)**

**Rating:** 5.0/5.0 stars

_— Marco Polo M._

[Read full review](https://www.g2.com/survey_responses/optro-review-10064397)

**["User-Friendly, Organized, and Reliable—Optro Makes Testing Documentation Easy"](https://www.g2.com/survey_responses/optro-review-13149638)**

**Rating:** 5.0/5.0 stars

_— Mariah K._

[Read full review](https://www.g2.com/survey_responses/optro-review-13149638)

#### What Are G2 Users Discussing About Optro?

- [What is AuditBoard used for?](https://www.g2.com/discussions/what-is-auditboard-used-for) - 1 comment
- [What is the best audit software?](https://www.g2.com/discussions/what-is-the-best-audit-software)
- [What is audit management software?](https://www.g2.com/discussions/what-is-audit-management-software) - 1 comment
- [What is Soxhub?](https://www.g2.com/discussions/what-is-soxhub) - 1 comment
- [What is AuditBoard?](https://www.g2.com/discussions/what-is-auditboard)

[
SAP Risk Management
](https://www.g2.com/products/sap-risk-management/reviews)

By [SAP](https://www.g2.com/sellers/sap)

[

4.2/5(81)

](https://www.g2.com/products/sap-risk-management/reviews)

What do users say?

Users consistently praise the software for its centralized risk management capabilities, which enhance visibility and compliance across organizations. The integration with other SAP systems and real-t

Pros and Cons

[
Risk Management (14)
](https://www.g2.com/products/sap-risk-management/reviews?qs=pros-and-cons)[
Learning Curve (7)
](https://www.g2.com/products/sap-risk-management/reviews?qs=pros-and-cons)

### [SAP Risk Management](https://www.g2.com/products/sap-risk-management/reviews)

SAP Risk Management is a comprehensive enterprise risk management (ERM) solution designed to help organizations identify, assess, analyze, and monitor risks that could impact business value and reputation. By integrating risk management processes across the enterprise, it enables proactive decision-making and enhances resilience against potential threats. Key Features and Functionality: - Risk Strategy and Planning: Define risk-relevant business activities, establish organizational risk hierarchies, automate risk monitoring, and assign risk appetite, owners, and responsibilities. - Risk Monitoring and Identification: Document incidents, analyze relationships, create surveys, and track root causes, consequences, and mitigation strategies. - Risk Analysis: Conduct both quantitative and qualitative analyses to determine the likelihood and potential impact of identified risks. - Graphical Views and Automated Monitoring: Utilize visual tools to evaluate risk information and continuously track key risk indicators and controls. - Real-Time Data Monitoring: Assess data from internal and external systems in real time for comprehensive risk visibility. - Guided Workflows and Deployment Starter Kits: Implement governance rules through guided processes and access libraries of business controls, regulations, risk drivers, and impacts. Primary Value and Solutions Provided: SAP Risk Management empowers organizations to gain insights into value-adding risks, monitor emerging risks and opportunities, and minimize unnecessary business losses. By providing a structured framework for risk identification and mitigation, it supports strategic business objectives and enhances overall organizational resilience.

**Average Rating:** 4.2/5.0

**Total Reviews:** 77

#### How Do G2 Users Rate SAP Risk Management?

- **Has the product been a good partner in doing business?:** 7.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.6/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.9/10 (Category avg: 8.7/10)
- **Quality of Support:** 7.9/10 (Category avg: 9.0/10)

#### Who Is the Company Behind SAP Risk Management?

- **Seller:** [SAP](https://www.g2.com/sellers/sap)
- **Year Founded:** 1972
- **HQ Location:** Walldorf
- **Twitter:** @SAP  
297,052 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8fd712dbd816fadfc039a60dcf8c1a3d6a48469756075586fa0be3da7e4b74d7&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsap%2F&secure%5Burl_type%5D=linkedin_company_website)  
141,955 employees on LinkedIn®
- **Ownership:** NYSE:SAP

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Automotive
- **Company Size:** 74% Large, 22% Medium

#### What Do G2 Reviewers Say About SAP Risk Management?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **centralized risk monitoring** of SAP Risk Management, enhancing compliance and simplifying risk management processes.
- Users appreciate the **ease of use** of SAP Risk Management, enabling efficient risk monitoring and management.
- Users appreciate the **centralized management** of SAP Risk Management, enabling better risk monitoring and improved decision-making.
- Users value the **comprehensive compliance management** features of SAP Risk Management, enhancing decision-making and risk monitoring.
- Users value the **excellent customer support** provided by SAP Risk Management, enhancing the overall user experience.

##### Cons

- Users struggle with the **steep learning curve** of SAP Risk Management, necessitating extensive training and expertise for effective use.
- Users find SAP Risk Management to have a **complex setup and steep learning curve** , which can hinder new users.
- Users find the **difficult setup** of SAP Risk Management a major challenge, especially for newcomers and integrations.
- Users find SAP Risk Management to be **expensive and overly complex** , making adoption challenging for new users.
- Users face **implementation delays** due to complex setups and slow response times, impacting overall efficiency and experience.

#### What Are Recent G2 Reviews of SAP Risk Management?

**["Efficient Risk Tracking, Needs UI Improvement"](https://www.g2.com/survey_responses/sap-risk-management-review-12208457)**

**Rating:** 4.5/5.0 stars

_— shubham B._

[Read full review](https://www.g2.com/survey_responses/sap-risk-management-review-12208457)

**["Centralized, Smart, and Secure Risk Management with SAP"](https://www.g2.com/survey_responses/sap-risk-management-review-11027090)**

**Rating:** 4.5/5.0 stars

_— Bhushan C._

[Read full review](https://www.g2.com/survey_responses/sap-risk-management-review-11027090)

#### What Are G2 Users Discussing About SAP Risk Management?

- [What is SAP GRC used for?](https://www.g2.com/discussions/what-is-sap-grc-used-for) - 3 comments
- [What is a GRC request?](https://www.g2.com/discussions/what-is-a-grc-request)
- [What does GRC software do?](https://www.g2.com/discussions/sap-grc-what-does-grc-software-do)
- [What are the components of SAP GRC?](https://www.g2.com/discussions/what-are-the-components-of-sap-grc)
- [What is SAP GRC?](https://www.g2.com/discussions/what-is-sap-grc)

[
Apptega
](https://www.g2.com/products/apptega/reviews)

By [Apptega](https://www.g2.com/sellers/apptega)

[

4.7/5(157)

](https://www.g2.com/products/apptega/reviews)

What do users say?

Users consistently praise the platform for its ease of use and intuitive interface, which simplifies managing compliance across multiple frameworks. The ability to streamline processes and automate ta

Pros and Cons

[
Ease of Use (38)
](https://www.g2.com/products/apptega/reviews?qs=pros-and-cons)[
Improvements Needed (12)
](https://www.g2.com/products/apptega/reviews?qs=pros-and-cons)

### [Apptega](https://www.g2.com/products/apptega/reviews)

Tired of spreadsheets that don’t scale and require too much manual effort? Hampered by overly complex IT GRC systems that have you working for them? Apptega is the cybersecurity and compliance management platform that makes it easy to assess, build, manage, and report your cybersecurity and compliance program. Organizations in all industries and MSSPs rely on Apptega to meet the challenges of cybersecurity and compliance more efficiently and cost-effectively than with any other approach. Featuring 25+ frameworks, including SOC 2, NIST, CMMC, ISO, CIS, PCI, GDPR, HIPAA and more, and manage your program with: - Multi-Tenant - Assessments - Compliance Scoring - Risk Management - Vendor Risk Management - Audit Management - Reporting - Integrations

**Average Rating:** 4.7/5.0

**Total Reviews:** 153

#### How Do G2 Users Rate Apptega?

- **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.1/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.6/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Apptega?

- **Seller:** [Apptega](https://www.g2.com/sellers/apptega)
- **Company Website:** www.apptega.com
- **HQ Location:** Atlanta Junction, Georgia, United States
- **Twitter:** @apptega  
288 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=0d14bd86a6a8ab19e0b345aa49a762ca6c50a9dc55f21cf3a30747d0038ee8ee&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F19418228%2F&secure%5Burl_type%5D=linkedin_company_website)  
55 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Chief Information Security Officer
- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 42% Medium, 41% Small

#### What Do G2 Reviewers Say About Apptega?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Apptega, enjoying streamlined workflows and efficient compliance management in one place.
- Users appreciate the **effective compliance management** of Apptega, which simplifies organization and task automation.
- Users value the **streamlined compliance management** of Apptega, enhancing collaboration and reducing manual work for cybersecurity efforts.
- Users value the **streamlined management** of cybersecurity and compliance in a single, automated platform for better efficiency.
- Users appreciate the **streamlined security and compliance management** of Apptega, enhancing efficiency and visibility across programs.

##### Cons

- Users note that **several functionalities need improvement** , which impacts usability and hinders timely feature requests.
- Users feel Apptega has **limited functionality** with some bugs and missing frameworks, but improvements have been noted.
- Users express concern about **missing features** and slow delivery of new requests, impacting functionality and support.
- Users note the **limited functionality** of Apptega, citing gaps in API evidence, tracking, and essential report features.
- Users feel there is **limited customization** in Apptega, though recent improvements have been noted.

#### What Are Recent G2 Reviews of Apptega?

**["Clear Security Framework Control Breakdown"](https://www.g2.com/survey_responses/apptega-review-12488443)**

**Rating:** 4.0/5.0 stars

_— Kyle I._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12488443)

**["Streamlined Compliance and Cybersecurity Made Effortless with Apptega"](https://www.g2.com/survey_responses/apptega-review-12166378)**

**Rating:** 5.0/5.0 stars

_— Katie J._

[Read full review](https://www.g2.com/survey_responses/apptega-review-12166378)

#### What Are G2 Users Discussing About Apptega?

- [What is Apptega used for?](https://www.g2.com/discussions/what-is-apptega-used-for)

[
SecurityScorecard
](https://www.g2.com/products/securityscorecard/reviews)

By [SecurityScorecard](https://www.g2.com/sellers/securityscorecard)

[

4.3/5(92)

](https://www.g2.com/products/securityscorecard/reviews)

What do users say?

Users consistently praise the ease of use and comprehensive insights provided by SecurityScorecard, which help organizations effectively manage their cybersecurity posture and vendor risks. The platfo

Pros and Cons

[
Security (24)
](https://www.g2.com/products/securityscorecard/reviews?qs=pros-and-cons)[
Lack of Clarity (4)
](https://www.g2.com/products/securityscorecard/reviews?qs=pros-and-cons)

### [SecurityScorecard](https://www.g2.com/products/securityscorecard/reviews)

Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics & Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard's technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes.

**Average Rating:** 4.3/5.0

**Total Reviews:** 88

#### How Do G2 Users Rate SecurityScorecard?

- **Has the product been a good partner in doing business?:** 8.8/10 (Category avg: 9.2/10)
- **Ease of Use:** 9.2/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.8/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.8/10 (Category avg: 9.0/10)

#### Who Is the Company Behind SecurityScorecard?

- **Seller:** [SecurityScorecard](https://www.g2.com/sellers/securityscorecard)
- **Company Website:** securityscorecard.com
- **Year Founded:** 2013
- **HQ Location:** New York, New York
- **Twitter:** @security\_score  
8,115 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=41057d7470f89191754db744d0a5a02e2b2940fd49bb7189248b40e1d0672c6d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F5054644%2F&secure%5Burl_type%5D=linkedin_company_website)  
616 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer & Network Security
- **Company Size:** 48% Large, 36% Medium

#### What Do G2 Reviewers Say About SecurityScorecard?

_AI-generated summary from verified user reviews_

##### Pros

- Users highly value the **insightful dashboards and comprehensive features** of SecurityScorecard for daily security monitoring.
- Users find SecurityScorecard's **ease of use** exceptional, enhancing daily security management with intuitive dashboards and features.
- Users find the **detailed likelihood reports** of SecurityScorecard invaluable for preparing against potential attacks and improving scores.
- Users praise the **unmatchable customer service** of SecurityScorecard, noting prompt and thorough responses to all concerns.
- Users appreciate the **intuitive design** of SecurityScorecard, making it easy to monitor security for themselves and third parties.

##### Cons

- Users express concern over the **lack of clarity** regarding score changes and the relevance of detected items.
- Users find the **limited reporting** features insufficient for custom presentations, lacking the necessary flexibility for their needs.
- Users experience **scoring issues** due to varied scores and false positives, complicating interactions and prioritization.
- Users emphasize the need for **improvement in automated reporting** due to issues with false positives and vendor reliability.
- Users find that **inefficient risk management** leads to false positives and lacks strong evidence for scoring decisions.

#### What Are Recent G2 Reviews of SecurityScorecard?

**["Clear, Easy-to-Understand Security Ratings with Continuous Third-Party Risk Monitoring"](https://www.g2.com/survey_responses/securityscorecard-review-13164525)**

**Rating:** 4.5/5.0 stars

_— Dr. Jagannath S._

[Read full review](https://www.g2.com/survey_responses/securityscorecard-review-13164525)

**["External Vulnerability Management External Attack Surface"](https://www.g2.com/survey_responses/securityscorecard-review-11547186)**

**Rating:** 5.0/5.0 stars

_— Chris L._

[Read full review](https://www.g2.com/survey_responses/securityscorecard-review-11547186)

#### What Are G2 Users Discussing About SecurityScorecard?

- [What is SecurityScorecard used for?](https://www.g2.com/discussions/what-is-securityscorecard-used-for) - 1 comment
- [How much does BitSight cost?](https://www.g2.com/discussions/how-much-does-bitsight-cost) - 1 comment
- [What is IBM Watson used for?](https://www.g2.com/discussions/what-is-ibm-watson-used-for)
- [Why SecurityScorecard?](https://www.g2.com/discussions/why-securityscorecard) - 1 comment
- [What is SecurityScorecard?](https://www.g2.com/discussions/what-is-securityscorecard)

[
OneTrust Tech Risk &...
](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

By [OneTrust](https://www.g2.com/sellers/onetrust)

[

4.6/5(108)

](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

What do users say?

Users consistently praise the product for its powerful automation and user-friendly interface, which significantly streamline compliance and risk management tasks. The centralized dashboard and automa

Pros and Cons

[
Ease of Use (17)
](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews?qs=pros-and-cons)[
Complex Implementation (6)
](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews?qs=pros-and-cons)

### [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

**Average Rating:** 4.6/5.0

**Total Reviews:** 107

#### How Do G2 Users Rate OneTrust Tech Risk & Compliance?

- **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.5/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.7/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.9/10 (Category avg: 9.0/10)

#### Who Is the Company Behind OneTrust Tech Risk & Compliance?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 46% Medium, 40% Small

#### What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, enhancing tracking and monitoring efficiency.
- Users value the **powerful automation** of OneTrust Tech Risk & Compliance, enhancing risk management and streamlining processes.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing tracking and visibility for risk management.
- Users appreciate the **centralized platform for risk and compliance management** , enhancing tracking, monitoring, and overall efficiency.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing efficiency and accountability in risk management.

##### Cons

- Users find the **complex implementation** of OneTrust Tech Risk & Compliance challenging, requiring significant time and effort to configure.
- Users find the **difficult setup** of OneTrust Tech Risk & Compliance challenging, often requiring significant time and learning.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance to be daunting for newcomers and complex to navigate.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance challenging, complicating the initial setup process.
- Users experience **slow loading** times with OneTrust Tech Risk & Compliance, especially when multiple tasks are active.

#### What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance?

**["The best GRC Product on the Market"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)**

**Rating:** 5.0/5.0 stars

_— Chinua K._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)

**["Powerful Automation, But Setup Challenges"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-11988415)**

**Rating:** 4.5/5.0 stars

_— SONIA G._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-11988415)

#### What Are G2 Users Discussing About OneTrust Tech Risk & Compliance?

- [What improvements would you suggest for OneTrust GRC to better meet your compliance needs?](https://www.g2.com/discussions/what-improvements-would-you-suggest-for-onetrust-grc-to-better-meet-your-compliance-needs)

[
IBM OpenPages
](https://www.g2.com/products/ibm-openpages/reviews)

By [IBM](https://www.g2.com/sellers/ibm)

[

4.2/5(76)

](https://www.g2.com/products/ibm-openpages/reviews)

What do users say?

Users consistently praise the user-friendly interface and customizable workflows of IBM OpenPages, which streamline risk and compliance management. Many appreciate its ability to centralize various fu

Pros and Cons

[
Risk Management (12)
](https://www.g2.com/products/ibm-openpages/reviews?qs=pros-and-cons)[
Complexity (3)
](https://www.g2.com/products/ibm-openpages/reviews?qs=pros-and-cons)

### [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)

OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies.

**Average Rating:** 4.2/5.0

**Total Reviews:** 66

#### How Do G2 Users Rate IBM OpenPages?

- **Has the product been a good partner in doing business?:** 7.9/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.3/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.3/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.4/10 (Category avg: 9.0/10)

#### Who Is the Company Behind IBM OpenPages?

- **Seller:** [IBM](https://www.g2.com/sellers/ibm)
- **Year Founded:** 1911
- **HQ Location:** Armonk, New York, United States
- **Twitter:** @IBMSecurity  
74,660 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website)  
328,202 employees on LinkedIn®
- **Ownership:** SWX:IBM

#### Who Uses This Product?

- **Top Industries:** Banking, Information Technology and Services
- **Company Size:** 39% Medium, 34% Large

#### What Do G2 Reviewers Say About IBM OpenPages?

_AI-generated summary from verified user reviews_

##### Pros

- Users find IBM OpenPages to offer **effective risk management** , enhancing compliance and streamlining operations for their organizations.
- Users appreciate the **time-saving features** of IBM OpenPages, simplifying workflows and enhancing overall efficiency.
- Users value the **automation capabilities** of IBM OpenPages, enhancing workflows and risk management efficiently.
- Users appreciate the **intuitive interface** of IBM OpenPages, making navigation and usage exceptionally straightforward and efficient.
- Users commend the **security features** of IBM OpenPages, effectively protecting against data breaches and ensuring compliance.

##### Cons

- Users find the **complexity** of IBM OpenPages overwhelming, particularly regarding usability and report generation challenges.
- Users find IBM OpenPages **too expensive** , making it difficult to justify its implementation and ongoing costs.
- Users find **usability improvements necessary** in IBM OpenPages due to its complexity and steep learning curve.
- Users struggle with a **steep learning curve** in IBM OpenPages, finding it complex and challenging, especially for new users.
- Users find the **learning difficulty** with IBM OpenPages can hinder productivity and require extra effort to overcome.

#### What Are Recent G2 Reviews of IBM OpenPages?

**["Automates Security Tasks, But Pricey"](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)**

**Rating:** 4.0/5.0 stars

_— Madhav B._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)

**["Transforms Risk Management and Compliance"](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)**

**Rating:** 5.0/5.0 stars

_— Charlotte W._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)

#### What Are G2 Users Discussing About IBM OpenPages?

- [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery)
- [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool)
- [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages)
- [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson)

[
Hyperproof
](https://www.g2.com/products/hyperproof/reviews)

By [Hyperproof](https://www.g2.com/sellers/hyperproof)

[

4.5/5(218)

](https://www.g2.com/products/hyperproof/reviews)

What do users say?

Users consistently praise Hyperproof for its ease of use and centralized compliance management, which simplifies the audit process and enhances collaboration among teams. The platform's intuitive inte

Pros and Cons

[
Ease of Use (67)
](https://www.g2.com/products/hyperproof/reviews?qs=pros-and-cons)[
Learning Curve (17)
](https://www.g2.com/products/hyperproof/reviews?qs=pros-and-cons)

### [Hyperproof](https://www.g2.com/products/hyperproof/reviews)

Hyperproof is a comprehensive Governance, Risk, and Compliance (GRC) software solution designed to assist security-conscious organizations in managing their compliance operations efficiently. Founded in 2018 and headquartered in the Seattle area, Hyperproof caters to various industries, including technology, healthcare, and financial services. It is trusted by notable companies such as Reddit, Fortinet, Appian, Outreach, and Thales, who rely on Hyperproof to transition from manual, reactive compliance processes to a continuous, proactive operating model. The target audience for Hyperproof encompasses organizations that require robust compliance management systems to navigate complex regulatory environments. It is particularly beneficial for teams that face the challenge of managing multiple compliance frameworks simultaneously. Hyperproof's features are tailored to streamline compliance efforts, allowing organizations to focus on their core operations while ensuring adherence to necessary regulations. Specific use cases include automating compliance testing, managing policy documentation, and providing real-time visibility into compliance status, which are essential for maintaining operational integrity in highly regulated industries. Key features of Hyperproof include purpose-built AI agents that simplify the compliance process by surfacing relevant evidence, validating controls, and closing compliance gaps without the need for extensive manual intervention. This allows teams to maintain control over decision-making while reducing the time spent on compliance tasks. Additionally, Hyperproof's cross-framework control mapping enables organizations to leverage existing controls across various regulations, minimizing redundancy and effort when adapting to new compliance requirements. The platform also automates the testing of high-frequency controls, ensuring that any failures are promptly addressed through automated task creation and escalation. Hyperproof distinguishes itself with the largest framework library in the market, supporting over 160 frameworks, which allows organizations to adopt new regulations seamlessly. Its ability to accommodate complex organizational structures further enhances its flexibility, enabling users to customize their compliance processes without being constrained by a flat structure. The implementation process is designed to be efficient, ensuring that teams can quickly adapt to the software while receiving ongoing support, reflected in high customer satisfaction ratings. Moreover, Hyperproof’s integration capabilities with existing tools ensure that compliance tasks are managed in context, promoting collaboration and efficiency. Organizations utilizing Hyperproof have reported significant improvements in compliance productivity, with a 70% increase noted by users. The platform has also contributed to substantial cost savings, with an estimated $150,000 saved annually on control orchestration and a 66% reduction in duplicative controls. Furthermore, teams have experienced a reduction of approximately 350 hours in audit preparation each year, underscoring Hyperproof's value in enhancing compliance operations and overall organizational efficiency.

**Average Rating:** 4.5/5.0

**Total Reviews:** 217

#### How Do G2 Users Rate Hyperproof?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.8/10 (Category avg: 8.7/10)
- **Ease of Admin:** 9.1/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.4/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Hyperproof?

- **Seller:** [Hyperproof](https://www.g2.com/sellers/hyperproof)
- **Company Website:** hyperproof.io
- **Year Founded:** 2018
- **HQ Location:** Seattle, Washington, United States
- **Twitter:** @Hyperproof  
188 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=a325d01f7b5ba5f463c66305e33722fa467a54f7b8d36d50d93e093bc649cfaf&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fhyperproof&secure%5Burl_type%5D=linkedin_company_website)  
148 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Computer Software
- **Company Size:** 48% Medium, 38% Large

#### What Do G2 Reviewers Say About Hyperproof?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Hyperproof to be **user-friendly** , facilitating effective communication and simplifying compliance management across audits.
- Users highlight Hyperproof's **user-friendly compliance management** , allowing for seamless integration and efficient task management.
- Users appreciate the **user-friendly interface and robust features** of Hyperproof, enhancing workflow efficiency and collaboration.
- Users value the **seamless automation** in Hyperproof, significantly reducing manual efforts and enhancing productivity in compliance tasks.
- Users value the **centralized GRC system** in Hyperproof, enhancing audit efficiency and streamlining compliance workflows.

##### Cons

- Users find the **learning curve steep** in Hyperproof, especially when navigating advanced features and setup processes.
- Users experience a **steep learning curve** with Hyperproof, making it challenging to utilize all its advanced features effectively.
- Users express frustration over the **limited customization** options in Hyperproof, particularly for reports and dashboard settings.
- Users find Hyperproof **not intuitive** , making navigation and communication challenging, especially with advanced features and comments.
- Users feel that Hyperproof needs **interface improvement and better reporting tools** , as navigation and analytics can be cumbersome.

#### What Are Recent G2 Reviews of Hyperproof?

**["Streamlined Compliance with Room for Improvement"](https://www.g2.com/survey_responses/hyperproof-review-11956461)**

**Rating:** 4.5/5.0 stars

_— Pedro M._

[Read full review](https://www.g2.com/survey_responses/hyperproof-review-11956461)

**["Hyperproof : Changed the way you managed compliance!"](https://www.g2.com/survey_responses/hyperproof-review-8021945)**

**Rating:** 5.0/5.0 stars

_— Apple A._

[Read full review](https://www.g2.com/survey_responses/hyperproof-review-8021945)

#### What Are G2 Users Discussing About Hyperproof?

- [What is Hyperproof used for?](https://www.g2.com/discussions/what-is-hyperproof-used-for) - 1 comment

[
SAI360
](https://www.g2.com/products/sai360/reviews)

By [SAI360](https://www.g2.com/sellers/sai360)

[

4.2/5(122)

](https://www.g2.com/products/sai360/reviews)

What do users say?

Users consistently praise the product for its customizable platform and responsive support team, which enhance their ability to tailor workflows and manage compliance effectively. Many appreciate the

Pros and Cons

[
Ease of Use (12)
](https://www.g2.com/products/sai360/reviews?qs=pros-and-cons)[
Expensive (7)
](https://www.g2.com/products/sai360/reviews?qs=pros-and-cons)

### [SAI360](https://www.g2.com/products/sai360/reviews)

SAI360's Platform brings together ethics, governance, risk, and compliance management for a more powerful perspective. Leverage the most connected platform and industry-leading content to manage risk from every angle. • Start quick with solutions built upon industry best practices • Scale as needed with the ability to customize • Gain insight and share easily with analytics and reporting • Engage employees with interactive training • Offer training in the flow of work for maximum impact • Access support from an industry leader with 25+ years of expertise Insights from the SAI360 team: https://www.sai360.com/

**Average Rating:** 4.2/5.0

**Total Reviews:** 121

#### How Do G2 Users Rate SAI360?

- **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.2/10)
- **Ease of Use:** 7.6/10 (Category avg: 8.7/10)
- **Ease of Admin:** 7.1/10 (Category avg: 8.7/10)
- **Quality of Support:** 8.3/10 (Category avg: 9.0/10)

#### Who Is the Company Behind SAI360?

- **Seller:** [SAI360](https://www.g2.com/sellers/sai360)
- **Company Website:** www.sai360.com
- **Year Founded:** 2003
- **HQ Location:** Chicago, US
- **Twitter:** @SAI\_Compliance  
2,036 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=88c4d162c2eeb920a2a1bf07bd84001df03ba1b475355ab94cc6df4e98248565&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsai360%2F&secure%5Burl_type%5D=linkedin_company_website)  
442 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Hospital & Health Care, Financial Services
- **Company Size:** 65% Large, 31% Medium

#### What Do G2 Reviewers Say About SAI360?

_AI-generated summary from verified user reviews_

##### Pros

- Users find SAI360's **ease of use** outstanding, with quick onboarding and responsive support enhancing their experience.
- Users appreciate the **responsive customer support** of SAI360, receiving efficient assistance from real people.
- Users love the **customizability** of SAI360, enabling tailored workflows and seamless integration with their existing systems.
- Users appreciate the **strong integration capabilities** of SAI360, enhancing their risk management experience and workflows significantly.
- Users value the **wide range of features** in SAI360, enhancing connection in compliance and risk management.

##### Cons

- Users feel SAI360 is **overpriced** for its features, leading to frustration and difficulty in customization and support.
- Users often find the platform's **difficult learning** curve frustrating, which hinders quick onboarding and feature utilization.
- Users find the **high learning curve** of SAI360 challenging, which complicates onboarding and feature accessibility for newcomers.
- Users find the **pricing issues** of SAI360 to be a significant drawback, limiting its accessibility and value.
- Users find the **steep learning curve** of SAI360 challenging, particularly for new users facing complex features and navigation.

#### What Are Recent G2 Reviews of SAI360?

**["SAI360 Streamlines Risk & Compliance in One Place—No Coding Needed"](https://www.g2.com/survey_responses/sai360-review-13131784)**

**Rating:** 5.0/5.0 stars

_— Dave S._

[Read full review](https://www.g2.com/survey_responses/sai360-review-13131784)

**["Streamlined Risk Management, Steep Learning Curve"](https://www.g2.com/survey_responses/sai360-review-13104463)**

**Rating:** 4.5/5.0 stars

_— Mariem H._

[Read full review](https://www.g2.com/survey_responses/sai360-review-13104463)

#### What Are G2 Users Discussing About SAI360?

- [What are the benefits and challenges of using SAI360 for governance, risk, and compliance management?](https://www.g2.com/discussions/what-are-the-benefits-and-challenges-of-using-sai360-for-governance-risk-and-compliance-management)
- [What is SAI360 used for?](https://www.g2.com/discussions/what-is-sai360-used-for)

[
Fastpath
](https://www.g2.com/products/fastpath/reviews)

By [Delinea](https://www.g2.com/sellers/delinea)

[

4.7/5(108)

](https://www.g2.com/products/fastpath/reviews)

What do users say?

Users consistently praise the exceptional customer support and ease of use of Fastpath, highlighting its intuitive interface and quick response times from the support team. Many appreciate how it simp

Pros and Cons

[
Ease of Use (20)
](https://www.g2.com/products/fastpath/reviews?qs=pros-and-cons)[
Missing Features (6)
](https://www.g2.com/products/fastpath/reviews?qs=pros-and-cons)

### [Fastpath](https://www.g2.com/products/fastpath/reviews)

Fastpath is a cloud-based access orchestration platform. It allows organizations to manage and automate the processes around access governance and security, quickly and efficiently. Customizable, quick to implement and deploy means you get value right away. And it works with all major enterprise software in multi-site, multi-application environments. Fastpath helps to identify, quantify and manage data access risk, so you can be confident that the right people are accessing the right information for the right reasons. Make informed strategic business decisions confidently, knowing your organization is secure and compliant. **Unrivalled Integrations** Fastpath integrates out-of-the-box, working across multi-application environments and custom-made software to deliver insight into your security risks. **Rapid Time to Value** We’re easy to implement and quick to deploy, and with no expensive customization required, you can immediately reap ROI. **Frictionless Automation** Effortlessly automate processes like onboarding, testing and proving controls to continuously identify, quantify, and eliminate risk. **Improved Efficiency** Ease of use and out-of-the-box content allow security teams to get up to speed fast, focus on what matters, and save valuable time.

**Average Rating:** 4.7/5.0

**Total Reviews:** 106

#### How Do G2 Users Rate Fastpath?

- **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10)
- **Ease of Use:** 8.9/10 (Category avg: 8.7/10)
- **Ease of Admin:** 8.9/10 (Category avg: 8.7/10)
- **Quality of Support:** 9.7/10 (Category avg: 9.0/10)

#### Who Is the Company Behind Fastpath?

- **Seller:** [Delinea](https://www.g2.com/sellers/delinea)
- **Year Founded:** 2004
- **HQ Location:** San Francisco
- **Twitter:** @DelineaInc  
897 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=c44ff2476de5e8812d0281962d85d4113d42565e042939144e1b4ad83a2ecc53&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdelinea%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,328 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 55% Large, 43% Medium

#### What Do G2 Reviewers Say About Fastpath?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Fastpath to be **user-friendly and easy to learn** , making the integration process seamless and efficient.
- Users appreciate the **exceptional customer support** from Fastpath, noting their responsiveness and knowledgeable assistance.
- Users commend Fastpath for its **exceptional support team** , ensuring responsive and knowledgeable assistance throughout their experience.
- Users value the **detailed reporting capabilities** of Fastpath, enhancing SOX Controls monitoring and risk analysis effectiveness.
- Users value the **detailed reporting features** of Fastpath, enabling thorough analysis of risks and streamlined license management.

##### Cons

- Users find the **lack of custom reporting features** frustrating, complicating processes like SOD analysis and onboarding.
- Users find the **poor reporting** capabilities of Fastpath limiting, hindering effective data analysis and integration.
- Users find the **learning curve steep** , often preferring direct assistance over reliance on training materials.
- Users experience **slow customer support** , often receiving unhelpful responses that complicate issue resolution and training efforts.
- Users find the **inadequate reporting** capabilities of Fastpath limiting, affecting their ability to generate comprehensive insights.

#### What Are Recent G2 Reviews of Fastpath?

**["Fastpath makes my life easier"](https://www.g2.com/survey_responses/fastpath-review-8523252)**

**Rating:** 5.0/5.0 stars

_— Stephen O._

[Read full review](https://www.g2.com/survey_responses/fastpath-review-8523252)

**["Fastpath has been super beneficial"](https://www.g2.com/survey_responses/fastpath-review-9593924)**

**Rating:** 5.0/5.0 stars

_— Jackie H._

[Read full review](https://www.g2.com/survey_responses/fastpath-review-9593924)

#### What Are G2 Users Discussing About Fastpath?

- [What do you recommend for companies considering Fastpath for access control and compliance management?](https://www.g2.com/discussions/what-do-you-recommend-for-companies-considering-fastpath-for-access-control-and-compliance-management)
- [How much does Fastpath cost?](https://www.g2.com/discussions/how-much-does-fastpath-cost)
- [What is fastpath GRC?](https://www.g2.com/discussions/what-is-fastpath-grc)
- [What does Fastpath do?](https://www.g2.com/discussions/what-does-fastpath-do)
- [What is fastpath assure?](https://www.g2.com/discussions/what-is-fastpath-assure)

- &lsaquo; Prev‹ Prev
- 1
- [2](/categories/it-risk-management?order=g2_score&page=2#product-list)
- [3](/categories/it-risk-management?order=g2_score&page=3#product-list)
- [4](/categories/it-risk-management?order=g2_score&page=4#product-list)
- [5](/categories/it-risk-management?order=g2_score&page=5#product-list)
- …
- [11](/categories/it-risk-management?order=g2_score&page=11#product-list)
- [12](/categories/it-risk-management?order=g2_score&page=12#product-list)
- [Next &rsaquo;Next ›](/categories/it-risk-management?order=g2_score&page=2#product-list)

Spotlight Categories

[Sales Compensation Software](https://www.g2.com/categories/sales-compensation)

[Sales Engagement Software](https://www.g2.com/categories/sales-engagement)

[Network Monitoring Software](https://www.g2.com/categories/network-monitoring)

[Professional Services Automation Software](https://www.g2.com/categories/professional-services-automation)

[Employee Engagement Software](https://www.g2.com/categories/employee-engagement)

Similar Categories

- [Disinformation Detection Tools](/categories/disinformation-detection-tools)

- [Vendor Security and Privacy Assessment](/categories/vendor-security-and-privacy-assessment)

[Browse IT Risk Management Themes](/categories/it-risk-management/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

IT risk management software protects business data against all risks associated with the use of software and hardware. This type of software is used to identify, assess, and mitigate IT risks across all business entities of a company. IT risk management solutions also help companies ensure the security and privacy of customer or supplier data. Organizations use IT risk management to comply with governmental regulations and internal policies related to data security. This type of software is implemented by IT departments and can be used by all employees. IT risk management can be deployed as part of a broader governance, risk, and compliance system.

IT risk management systems need to consolidate data from multiple sources and integrate with solutions for IT infrastructure, IT management, and security. When deployed as a standalone product, IT risk management software integrates with [governance, risk, and compliance software](https://www.g2.com/categories/governance-risk-compliance) and other risk management software.

To qualify for inclusion in the IT Risk Management category, a product must:

- Provide tools to identify, assess, and classify IT risks 
- Deliver scoring and ranking methods to track risk severity 
- Include standard templates for audits and other IT risk processes 
- Provide workflows to manage IT risk plans and tasks 
- Create IT risk tests such as vulnerability and penetration 
- Monitor the performance of the IT risk management activities 
- Include reports and documents for compliance purposes 

Top Tools at a Glance

| 

 | 

Third-party risk questionnaires with continuous external scanning

 | 

User Review

"Well-Organized Platform for Security Due Diligence"

 |
| 

 | 

Continuous cloud compliance with automated evidence collection

 | 

User Review

"Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support"

 |
| 

 | 

SOC 2 compliance with integrated audit

 | 

User Review

"Thoropass and SOC2 process"

 |
| 

 | 

Compliance automation with AI questionnaire completion

 | 

User Review

"Transforming Compliance and Security Management with Scrut Automation"

 |
| 

 | 

Multi-framework compliance automation with cloud misconfiguration detection

 | 

User Review

"RealCISO Simplifies ISO 27001 Compliance Tracking with Helpful AI Assistance"

 |
| 

 | 

Connected IT risk across GRC modules

 | 

User Review

"User-Friendly, Organized, and Reliable—Optro Makes Testing Documentation Easy"

 |
| 

 | 

SAP-native risk and access control

 | 

User Review

"Efficient Risk Tracking, Needs UI Improvement"

 |
| 

 | 

Multi-framework compliance with control crosswalking

 | 

User Review

"Clear Security Framework Control Breakdown"

 |

* * *

Show More