Cloud Compliance Tools

How Many Cloud Compliance Software Products Does G2 Track?

Total Products under this Category: 160

Category Stats (Sep 2026)

  • Average Rating: 4.56/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Flexera One (+1.44%) - Among all products in this category, Flexera One recorded the largest rating increase compared to last month

Last updated: September 01, 2026

How Does G2 Rank Cloud Compliance Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 16,400+ Authentic Reviews
  • 160+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Cloud Compliance Software

G2 Grid® for Cloud Compliance Software plotting products by satisfaction and market presence

Highlighted products: Vanta, Wiz, Sprinto, Drata, Microsoft Defender for Cloud, Scrut Automation, Scytale, and Secureframe.

Underlying data: [Grid® JSON](https://www.g2.com/categories/cloud-compliance/grids.json?focus%5B%5D=vanta&focus%5B%5D=wiz-wiz&focus%5B%5D=sprinto-inc&focus%5B%5D=drata&focus%5B%5D=microsoft-defender-for-cloud&focus%5B%5D=scrut-automation&focus%5B%5D=scytale-g2&focus%5B%5D=secureframe)

Vanta

Vanta is the leading Agentic Trust Platform helping 15k+ companies—like Atlassian, Duolingo, Golden State Warriors, and Icelandair—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management.

Average Rating: 4.5/5.0

Total Reviews: 2,703

How Do G2 Users Rate Vanta?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.4/10 (Category avg: 9.1/10)
  • Auditing: 9.1/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.6/10 (Category avg: 8.6/10)

Who Is the Company Behind Vanta?

  • Seller: Vanta
  • Company Website:
  • Year Founded: 2018
  • HQ Location: San Francisco, California
  • Twitter: @TrustVanta
    4,694 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,990 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 55% Small, 38% Medium

What Do G2 Reviewers Say About Vanta?

AI-generated summary from verified user reviews

Pros
  • Users find Vanta's ease of use invaluable, appreciating its intuitive interface and straightforward implementation process.
  • Users value Vanta for transforming compliance into a business driver, enhancing efficiency in the SOC 2 process.
  • Users value Vanta's automation for enhancing compliance efficiency, allowing teams to focus on core business activities.
  • Users appreciate the time-saving automation of Vanta, freeing them to focus on strategic tasks and compliance management.
  • Users value Vanta's seamless integrations, enhancing compliance visibility and streamlining processes across various platforms.
Cons
  • Users face integration issues with Vanta, requiring manual work and limited customization in reporting and dashboards.
  • Users face challenges with limited integrations, especially for niche tech stacks, affecting the overall experience.
  • Users express concern over missing features in Vanta, particularly regarding security training and support for complex tech stacks.
  • Users find the pricing issues with Vanta to be burdensome, especially for small or solo businesses seeking compliance.
  • Users feel that Vanta is very expensive, raising concerns about cost considerations and budget constraints.

What Are Recent G2 Reviews of Vanta?

What Are G2 Users Discussing About Vanta?

Sprinto

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

Average Rating: 4.7/5.0

Total Reviews: 1,666

How Do G2 Users Rate Sprinto?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.5/10 (Category avg: 9.1/10)
  • Auditing: 9.4/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 9.1/10 (Category avg: 8.6/10)

Who Is the Company Behind Sprinto?

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 57% Small, 41% Medium

What Do G2 Reviewers Say About Sprinto?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Sprinto, appreciating its simplicity and thorough support during deployment.
  • Users appreciate the knowledgeable and accommodating customer support from Sprinto, facilitating a smooth deployment and setup.
  • Users value the intuitive compliance management of Sprinto, enhanced by exceptional support from knowledgeable account managers.
  • Users find Sprinto's customer support exceptional, making deployment and management straightforward and efficient.
  • Users value the intuitive compliance management of Sprinto, enhanced by exceptional support from knowledgeable account managers.
Cons
  • Users note integration issues with some niche tools, but improvements are being made over time.
  • Users note a need for more customization options in features and reporting to better fit their unique environments.
  • Users experience limited integrations with Sprinto, leading to bugs and necessitating additional efforts for problem resolution.
  • Users find the guidance unclear at times, especially with auditor recommendations and onboarding documentation.
  • Users experience UI/UX issues and complicated navigation, though improvements from a recent interface update may address concerns.

What Are Recent G2 Reviews of Sprinto?

Wiz

Wiz transforms cloud security for customers – including more than 50% of the Fortune 100 – by enabling a new operating model. With Wiz, organizations can democratize security across the development lifecycle, empowering them to build fast and securely. Its Cloud Native Application Protection Platform (CNAPP) consolidates CSPM, KSPM, CWPP, Vulnerability management, IaC scanning, CIEM, DSPM into a single platform. Wiz drives visibility, risk prioritization, and business agility. Protecting Your Cloud Environments Requires a Unified, Cloud Native Platform. Wiz connects to every cloud environment, scans every layer, and covers every aspect of your cloud security - including elements that normally require installing agents. Its comprehensive approach has all of these cloud security solutions built in. Hundreds of organizations worldwide, including 50 percent of the Fortune 100, to rapidly identify and remove critical risks in cloud environments. Its customers include Salesforce, Slack, Mars, BMW, Avery Dennison, Priceline, Cushman & Wakefield, DocuSign, Plaid, and Agoda, among others. Wiz is backed by Sequoia, Index Ventures, Insight Partners, Salesforce, Blackstone, Advent, Greenoaks, Lightspeed and Aglaé. Visit https://www.wiz.io for more information.

Average Rating: 4.7/5.0

Total Reviews: 841

How Do G2 Users Rate Wiz?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.0/10 (Category avg: 9.1/10)
  • Auditing: 8.6/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.9/10 (Category avg: 8.6/10)

Who Is the Company Behind Wiz?

  • Seller: Wiz
  • Company Website:
  • Year Founded: 2020
  • HQ Location: New York, US
  • Twitter: @wiz_io
    24,733 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,147 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CISO, Security Engineer
  • Top Industries: Financial Services, Computer Software
  • Company Size: 53% Large, 39% Medium

What Do G2 Reviewers Say About Wiz?

AI-generated summary from verified user reviews

Pros
  • Users value the robust APIs and user-friendly UI, appreciating ongoing improvements and a wealth of insightful issues.
  • Users value the continuous enhancement of security features by Wiz, appreciating the support and innovation in their tool.
  • Users appreciate the ease of use of Wiz, benefiting from its user-friendly interface and seamless integration.
  • Users value the comprehensive visibility Wiz provides, enhancing security and prioritizing essential aspects of their cloud environment.
  • Users appreciate the easy setup of Wiz, enabling a quick and seamless integration into their workflows.
Cons
  • Users find a significant learning curve in mastering Wiz's extensive features, which can hinder initial usage.
  • Users find the feature limitations of Wiz frustrating, especially with complex management and reporting challenges.
  • Users note that improvement is needed for laggy query responses and better dashboard reporting capabilities.
  • Users identify improvements needed in dashboard reporting and feature streamlining for better usability and budgeting.
  • Users find the interface overwhelming initially, facing a steep learning curve and complex licensing issues.

What Are Recent G2 Reviews of Wiz?

Drata

Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.

Average Rating: 4.7/5.0

Total Reviews: 1,385

How Do G2 Users Rate Drata?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.3/10 (Category avg: 9.1/10)
  • Auditing: 9.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.4/10 (Category avg: 8.6/10)

Who Is the Company Behind Drata?

  • Seller: Drata
  • Company Website:
  • Year Founded: 2020
  • HQ Location: San Francisco, CA
  • Twitter: @DrataHQ
    1,525 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    4,534 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 47% Medium, 47% Small

What Do G2 Reviewers Say About Drata?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the round-the-clock customer support of Drata, which significantly enhances their experience and satisfaction.
  • Users appreciate the intuitive design of Drata, making it easy to set up and integrate various tools effectively.
  • Users appreciate the automated compliance monitoring of Drata, which significantly reduces manual effort and enhances security.
  • Users value Drata for its time-saving automation, streamlining compliance tasks and making audits manageable and efficient.
  • Users value Drata's easy integrations with various tools, streamlining the compliance process and enhancing usability.
Cons
  • Users express a need for more native integrations with third-party tools to enhance Drata's monitoring capabilities.
  • Users face integration issues with Drata, finding transitions and customizations challenging and requiring unexpected manual efforts.
  • Users find improvements needed in Drata's configurability and auditor experience, affecting seamless transitions from other platforms.
  • Users find the lack of clarity in Drata's UI can lead to confusion and difficulty in task management.
  • Users find the UX sometimes confusing, making it hard to track tasks and fix issues effectively.

What Are Recent G2 Reviews of Drata?

What Are G2 Users Discussing About Drata?

Microsoft Defender for Cloud

Microsoft Defender for Cloud is a cloud native application protection platform for multicloud and hybrid environments with comprehensive security across the full lifecycle, from development to runtime.

Average Rating: 4.4/5.0

Total Reviews: 427

How Do G2 Users Rate Microsoft Defender for Cloud?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 8.9/10 (Category avg: 9.1/10)
  • Auditing: 8.7/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.5/10 (Category avg: 8.6/10)

Who Is the Company Behind Microsoft Defender for Cloud?

  • Seller: Microsoft
  • Year Founded: 1975
  • HQ Location: Redmond, Washington
  • Twitter: @microsoft
    13,091,739 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    232,750 employees on LinkedIn®
  • Ownership: MSFT

Who Uses This Product?

  • Who Uses This: Saas Consultant, Software Engineer
  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 38% Medium, 35% Large

What Do G2 Reviewers Say About Microsoft Defender for Cloud?

AI-generated summary from verified user reviews

Pros
  • Users value the robust security features of Microsoft Defender for Cloud, effectively protecting against diverse cyber threats.
  • Users appreciate the comprehensive security of Microsoft Defender for Cloud, effectively protecting against various cyber threats.
  • Users praise the robust security features of Microsoft Defender for Cloud, enhancing threat detection and prevention effectively.
  • Users appreciate the security alerts from Microsoft Defender for Cloud, enhancing their overall cloud security experience.
  • Users value the effective threat detection of Microsoft Defender for Cloud, ensuring robust security for their cloud resources.
Cons
  • Users find the complexity of configuration in Microsoft Defender for Cloud challenging, affecting their overall experience.
  • Users note that while Microsoft Defender for Cloud is excellent, it can be expensive for small to medium businesses.
  • Users experience delayed detection with Microsoft Defender for Cloud, often missing suspicious threats and alerts.
  • Users find the complex interface and downtimes of Microsoft Defender for Cloud detracting from its overall usability.
  • Users experience false positives in Microsoft Defender for Cloud, leading to confusion over legitimate files being flagged.

What Are Recent G2 Reviews of Microsoft Defender for Cloud?

What Are G2 Users Discussing About Microsoft Defender for Cloud?

Scrut Automation

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

Average Rating: 4.9/5.0

Total Reviews: 1,312

How Do G2 Users Rate Scrut Automation?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.6/10 (Category avg: 9.1/10)
  • Auditing: 9.5/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 9.5/10 (Category avg: 8.6/10)

Who Is the Company Behind Scrut Automation?

  • Seller: Scrut Automation
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Palo Alto, US
  • Twitter: @scrutsocial
    120 Twitter followers
  • LinkedIn® Page: in.linkedin.com
    237 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 50% Small, 48% Medium

What Do G2 Reviewers Say About Scrut Automation?

AI-generated summary from verified user reviews

Pros
  • Users find Scrut Automation’s ease of use essential for tracking tasks and collaboration across teams effectively.
  • Users value the exceptional customer support from Scrut Automation, which enhances their experience and success in compliance.
  • Users highlight the exceptional support from Priyanshi and the Scrut team throughout their compliance journey.
  • Users highlight Scrut Automation's exceptional compliance management, simplifying SOC 2 processes with outstanding support and integrated services.
  • Users value the clarity in compliance documentation offered by Scrut Automation, aiding successful audits and implementation.
Cons
  • Users note the need for improvement in UI, documentation, and bug resolution, which complicates the overall experience.
  • Users face technical issues that can overwhelm non-technical team members and hinder platform usability.
  • Users note the missing features like auto-answerable security and limited customization options for reports in Scrut Automation.
  • Users express concerns over lack of clarity in test results and policy processes, complicating their experience with Scrut Automation.
  • Users find the learning curve steep, facing challenges in navigation and understanding the certification process in Scrut Automation.

What Are Recent G2 Reviews of Scrut Automation?

What Are G2 Users Discussing About Scrut Automation?

Scytale

Scytale is the only AI GRC platform and human experts that drive real compliance outcomes - from getting compliant to staying compliant, and building trust across every framework. Trusted by 1,000+ companies worldwide, Scytale replaces fragmented testing with continuous control visibility, automating evidence, control cross-mapping, and risk management across 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001, and many more. Scytale is a full-scope trust and compliance platform with everything you need to run your GRC program in one central hub, including: an agentic GRC network, a Trust Center, AI-integrated offensive security and expert GRC services.

Average Rating: 4.8/5.0

Total Reviews: 749

How Do G2 Users Rate Scytale?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.1/10 (Category avg: 9.1/10)
  • Auditing: 9.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.7/10 (Category avg: 8.6/10)

Who Is the Company Behind Scytale?

  • Seller: Scytale AI
  • Company Website:
  • Year Founded: 2021
  • HQ Location: New York, US
  • Twitter: @scytale_ai
    76 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    170 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 74% Small, 21% Medium

What Do G2 Reviewers Say About Scytale?

AI-generated summary from verified user reviews

Pros
  • Users praise Scytale for their hands-on support, making compliance processes smoother and more efficient.
  • Users love the ease of use of Scytale, appreciating its straightforward navigation and comprehensive support for compliance tasks.
  • Users value the ease of use of Scytale, enhancing SOC compliance efficiency and organization significantly.
  • Users appreciate the exceptional customer support from Scytale, finding the team proactive and genuinely invested in their success.
  • Users commend the great support team of Scytale, highlighting their dedication and helpfulness throughout the implementation process.
Cons
  • Users encounter integration issues with Scytale, finding some setups complicated and requiring additional troubleshooting.
  • Users find the limited integrations frustrating, as they lack customization and can complicate processes significantly.
  • Users find the limited configuration options for evidence collection frustrating due to inaccuracies and integration hassles.
  • Users are disappointed with the missing features, as limited configurations hinder efficient integration and functionality.
  • Users report encountering software bugs during integration, though improvements are consistently being made to the platform.

What Are Recent G2 Reviews of Scytale?

Secureframe

Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards.

Average Rating: 4.7/5.0

Total Reviews: 824

How Do G2 Users Rate Secureframe?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.4/10 (Category avg: 9.1/10)
  • Auditing: 9.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.7/10 (Category avg: 8.6/10)

Who Is the Company Behind Secureframe?

  • Seller: Secureframe
  • Company Website:
  • Year Founded: 2020
  • HQ Location: San Francisco, US
  • Twitter: @secureframe
    2,228 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    130 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 66% Small, 30% Medium

What Do G2 Reviewers Say About Secureframe?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Secureframe, making task tracking and setup straightforward and efficient.
  • Users appreciate that Secureframe ensures easy SOC 2 compliance with minimal maintenance and excellent team support.
  • Users value how Secureframe's automation simplifies compliance, making it easy and manageable for all users.
  • Users value Secureframe's strong security measures, enhancing trust while managing sensitive client information effectively.
  • Users value the seamless integrations of Secureframe, significantly enhancing efficiency and compliance management for small teams.
Cons
  • Users face integration issues with niche tools, requiring manual effort and time for proper setup.
  • Users find limited customization options for timing and follow-up schedules frustrating for compliance and training needs.
  • Users express frustration with limited integrations, noting challenges in automating connections with key platforms like Azure Dev Ops.
  • Users feel that the audit function needs improvement, as reliance on external tools complicates the process.
  • Users note the need for missing features in Secureframe, particularly around policy test management enhancements.

What Are Recent G2 Reviews of Secureframe?

What Are G2 Users Discussing About Secureframe?

Delve

Delve is an AI-native compliance platform that helps 100s of fast-growing companies get compliant with frameworks like SOC 2, HIPAA, ISO 27001, GDPR, PCI-DSS, HITRUST, and more. Delve's AI platform streamlines compliance from months of busywork down to days. AI is integrated throughout the process to automate code and infrastructure scanning, identify risks proactively, autofill security questionnaires, and more. We also provide white-glove onboarding, 1:1 Slack support, and end-to-end audit management for every engagement. Hypergrowth companies like Bland, 11x, and Lovable use Delve for automating compliance. Delve is backed by Y Combinator, General Catalyst, Funders Club, and more.

Average Rating: 4.7/5.0

Total Reviews: 136

How Do G2 Users Rate Delve?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.5/10 (Category avg: 9.1/10)
  • Auditing: 9.4/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 9.2/10 (Category avg: 8.6/10)

Who Is the Company Behind Delve?

  • Seller: Delve
  • Company Website:
  • Year Founded: 2023
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    24 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Computer Software
  • Company Size: 35% Small, 1% Medium

What Do G2 Reviewers Say About Delve?

AI-generated summary from verified user reviews

Pros
  • Users find Delve's ease of use exceptional, with intuitive navigation and clear, actionable steps for compliance.
  • Users find the easy setup of Delve a pleasant surprise, facilitating a smooth and hassle-free onboarding experience.
  • Users value Delve for its manageable compliance processes, simplifying audits and ensuring security with dedicated support.
  • Users commend the impressive response time of Delve's team, making the compliance process swift and seamless.
  • Users commend Delve for its seamless integrations with various tools, enhancing compliance and simplifying workflows significantly.
Cons
  • Users often face software bugs and onboarding challenges that hinder a smooth experience with Delve.
  • Users find that improvements are needed in Delve's navigation and functionality to enhance the overall user experience.
  • Users find the limited integrations in Delve restrictive, wishing for more compatibility with common startup systems.
  • Users express frustration over insufficient information regarding training availability and test implementation, leading to a confusing experience.
  • Users experience a lack of clarity regarding updates and decisions, leading to confusion and a need for support.

What Are Recent G2 Reviews of Delve?

Sysdig Secure

Sysdig Secure is the real-time cloud-native application protection platform (CNAPP) trusted by organizations of all sizes around the world.. Built by the creators of Falco and Wireshark, Sysdig uniquely delivers runtime-powered visibility and agentic AI to stop cloud attacks instantly, not after the damage is done. With Sysdig, you can: - Stop threats in 2 seconds and respond in minutes - Cut vulnerability noise by 95% with runtime prioritization - Detect real risk instantly across workloads, identities, and misconfigurations - Close permissions gaps in under 2 minutes Sysdig Secure consolidates CSPM, CWPP, CIEM, vulnerability management, and threat detection into a single open, real-time platform. Unlike other CNAPPs, Sysdig connects signals across runtime, identity, and posture to eliminate blind spots, reduce tool sprawl, and accelerate innovation without compromise. No guesswork. No black boxes. Just cloud security, the right way. Learn more at https://sysdig.com

Average Rating: 4.8/5.0

Total Reviews: 110

How Do G2 Users Rate Sysdig Secure?

  • Has the product been a good partner in doing business?: 9.7/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.5/10 (Category avg: 9.1/10)
  • Auditing: 9.6/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 9.5/10 (Category avg: 8.6/10)

Who Is the Company Behind Sysdig Secure?

  • Seller: Sysdig
  • Company Website:
  • Year Founded: 2013
  • HQ Location: San Francisco, California
  • Twitter: @Sysdig
    10,284 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    562 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer
  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 47% Large, 40% Medium

What Do G2 Reviewers Say About Sysdig Secure?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the robust security features of Sysdig Secure, providing real-time threat detection and vulnerability insights.
  • Users value the real-time threat detection capabilities of Sysdig Secure, enhancing their security for cloud-native environments.
  • Users appreciate the real-time vulnerability detection of Sysdig Secure, aiding in effective risk prioritization and threat management.
  • Users value the real-time threat detection of Sysdig Secure, enhancing security for cloud-native applications and environments.
  • Users value the comprehensive visibility provided by Sysdig Secure, enhancing security and compliance across environments.
Cons
  • Users face feature limitations with Sysdig Secure, including outdated documentation and challenging integration processes.
  • Users find the complexity during initial setup a challenge, especially for those lacking technical expertise.
  • Users find missing features like runtime detection and tracing hinder sysdig's usability and integration with organizational systems.
  • Users note the difficult learning curve for Sysdig Secure, making it challenging for those unfamiliar with DevSecOps.
  • Users find the initial setup and configuration complex, leading to challenges in utilizing Sysdig Secure effectively.

What Are Recent G2 Reviews of Sysdig Secure?

What Are G2 Users Discussing About Sysdig Secure?

CrowdStrike Falcon Cloud Security

Crowdstrike Falcon Cloud Security is the only CNAPP to stop breaches in the cloud Built for today’s hybrid and multi-cloud environments, Falcon Cloud Security protects the entire cloud attack surface - from code to runtime - by combining continuous agentless visibility with real-time detection and response. At runtime, Falcon Cloud Security delivers best-in-class cloud workload protection and real-time cloud detection and response (CDR) to stop active threats across hybrid environments. Integrated with the CrowdStrike Falcon platform, it correlates signals across endpoint, identity, and cloud to detect sophisticated cross-domain attacks that point solutions miss—enabling teams to respond faster and stop breaches in progress. To reduce risk before attacks occur, Falcon Cloud Security also delivers agentless-driven posture management that proactively shrinks the cloud attack surface. Unlike typical solutions, Crowdstrike enriches cloud risk detections with adversary intelligence and graph-based context, enabling security teams to prioritize exploitable exposures and prevent breaches before they happen. Customers using Falcon Cloud Security consistently see measurable results: 89% faster cloud detection and response 100x reduction in false positives by prioritizing exploitable, business-critical risk 83% reduction in cloud security licenses due to elimination of redundant tools

Average Rating: 4.5/5.0

Total Reviews: 215

How Do G2 Users Rate CrowdStrike Falcon Cloud Security?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 8.7/10 (Category avg: 9.1/10)
  • Auditing: 9.1/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.6/10 (Category avg: 8.6/10)

Who Is the Company Behind CrowdStrike Falcon Cloud Security?

  • Seller: CrowdStrike
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Sunnyvale, CA
  • Twitter: @CrowdStrike
    110,809 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    21,058 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 48% Large, 33% Medium

What Do G2 Reviewers Say About CrowdStrike Falcon Cloud Security?

AI-generated summary from verified user reviews

Pros
  • Users value the real-time threat detection of CrowdStrike Falcon Cloud Security, enhancing their protection in cloud environments.
  • Users value the real-time threat detection of CrowdStrike Falcon Cloud Security, enhancing their cloud security management significantly.
  • Users value the real-time detection efficiency of CrowdStrike Falcon Cloud Security for enhanced cloud threat management.
  • Users value the real-time vulnerability detection of CrowdStrike Falcon Cloud Security, enhancing proactive risk management and security.
  • Users appreciate the ease of use of CrowdStrike Falcon Cloud Security, making it a top choice for cloud cybersecurity.
Cons
  • Users find CrowdStrike Falcon Cloud Security to be expensive, particularly challenging for small businesses with budget constraints.
  • Users face issues with alert fatigue and response lag, calling for improved prioritization and better support resources.
  • Users experience alert fatigue and desire improved response times and better training resources for CrowdStrike Falcon.
  • Users find the feature complexity of CrowdStrike Falcon Cloud Security can overwhelm new users and necessitate a learning curve.
  • Users report a challenging learning curve with CrowdStrike Falcon, especially for those unfamiliar with similar tools.

What Are Recent G2 Reviews of CrowdStrike Falcon Cloud Security?

AWS Artifact

AWS Artifact provides on-demand access to AWS’ security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).

Average Rating: 4.1/5.0

Total Reviews: 19

How Do G2 Users Rate AWS Artifact?

  • Has the product been a good partner in doing business?: 8.3/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 10.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind AWS Artifact?

  • Seller: Amazon Web Services (AWS)
  • Year Founded: 2006
  • HQ Location: Seattle, WA
  • Twitter: @awscloud
    2,232,483 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    147,094 employees on LinkedIn®
  • Ownership: NASDAQ: AMZN

Who Uses This Product?

  • Top Industries: Information Technology and Services
  • Company Size: 43% Large, 43% Small

What Do G2 Reviewers Say About AWS Artifact?

AI-generated summary from verified user reviews

Pros
  • Users value the multi-layered defense of AWS Artifact, which effectively safeguards against evolving cyber threats.
Cons
  • Users find AWS Artifact's convoluted interface frustrating, as it lacks user-friendly features for easier navigation.
  • Users express frustration with the poor interface design of AWS Artifact, finding it convoluted and not user-friendly.

What Are Recent G2 Reviews of AWS Artifact?

What Are G2 Users Discussing About AWS Artifact?

Thoropass

Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.

Average Rating: 4.7/5.0

Total Reviews: 583

How Do G2 Users Rate Thoropass?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.2/10 (Category avg: 9.1/10)
  • Auditing: 9.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.4/10 (Category avg: 8.6/10)

Who Is the Company Behind Thoropass?

  • Seller: Thoropass
  • Company Website:
  • Year Founded: 2019
  • HQ Location: New York
  • Twitter: @thoropass
    379 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    206 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 71% Small, 25% Medium

What Do G2 Reviewers Say About Thoropass?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of Thoropass, enjoying the intuitive dashboard and organized features.
  • Users appreciate the excellent support from Thoropass, making rigorous audits feel manageable and efficient.
  • Users value the exceptional customer support from Thoropass that aids in achieving compliance and project clarity.
  • Users value the integrations of Thoropass, significantly streamlining compliance processes and saving valuable time.
  • Users commend the helpful customer support of Thoropass, which facilitates success throughout the audit process.
Cons
  • Users find a lack of clarity in Thoropass due to disjointed UX and insufficient information at sales points.
  • Users face integration issues with Thoropass, leading to exceptions and complications that hinder functionality.
  • Users feel the UX needs improvement, citing clunkiness and disjointedness that hinder the overall experience.
  • Users report a lack of visibility regarding audit status, making it challenging to track progress effectively.
  • Users note that improvements are needed in communication, UI stability, and feature development for Thoropass.

What Are Recent G2 Reviews of Thoropass?

What Are G2 Users Discussing About Thoropass?

Oneleet

Oneleet is the all-in-one security and compliance platform that gets companies genuinely secure while achieving SOC 2, ISO 27001, HIPAA and other compliance certifications faster than traditional approaches. Unlike compliance platforms that focus on checkbox evidence collection, Oneleet implements real security first. Compliance follows automatically as a natural outcome of effective cybersecurity, not as a separate goal. Most companies face a false choice: painful but effective security, or painless but ineffective compliance theater. Traditional compliance platforms require juggling multiple vendors, managing fragmented tools, spending months with consultants, and doing manual evidence collection to achieve a certificate that doesn't actually make you secure. Oneleet consolidates what previously required half a dozen vendors into one integrated platform: penetration testing by real security experts (not just vulnerability scans), code scanning with SAST and DAST, cloud security posture management, attack surface monitoring, mobile device management, security training and awareness, policy generation and management, and continuous compliance monitoring. Because we build everything ourselves and control the entire stack, we deploy comprehensive security with a click. No blind spots. No integration gaps. No vendor sprawl. We guarantee audit outcomes because our standards are higher than auditors' standards. We use AI extensively but responsibly, automating threat modeling and risk assessments while keeping humans in the loop to ensure quality. Clients never see AI hallucinations. We take full responsibility for the entire security journey, from initial setup through audit completion and continuous monitoring. Companies achieve compliance readiness faster with Oneleet, not by doing less, but by making real security easier. We ship all the tools you would normally spend weeks or months setting up and adopting. Our customers regularly win deals they previously lost due to inadequate security postures. Oneleet is the fastest growing compliance company in the sector. A large number of Oneleet's newer clients come from platforms like Vanta and Drata. With Oneleet's all-in-one bundle pricing its ROI is significantly higher than that of Vanta, Drata and Delve. Companies that switch from Vanta, Drata, or Delve to Oneleet report faster audits, higher approval rates, and less manual effort. Vanta and Drata rely heavily on manual evidence collection and vendor integrations, creating delays and gaps. Delve emphasizes AI automation but often sacrifices accuracy—its generated outputs are frequently rejected or require manual fixes. Oneleet achieves both precision and speed by combining full-stack automation with expert oversight, producing the industry’s lowest audit-rejection rate and the fastest path to verified security. Oneleet serves SMBs and growth-stage companies that need compliance certifications to close enterprise deals, but want to be genuinely secure, not just certified on paper. Founded by professional penetration testers who spent over a decade breaching Fortune 500s and startups, we built Oneleet to end the disconnect between compliance and security.

Average Rating: 4.9/5.0

Total Reviews: 141

How Do G2 Users Rate Oneleet?

  • Compliance Monitoring: 10.0/10 (Category avg: 9.1/10)
  • Auditing: 10.0/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 10.0/10 (Category avg: 8.6/10)

Who Is the Company Behind Oneleet?

  • Seller: Oneleet
  • Year Founded: 2022
  • HQ Location: Atlanta, US
  • LinkedIn® Page: www.linkedin.com
    49 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Engineer
  • Top Industries: Computer Software, Medical Devices
  • Company Size: 16% Small, 11% Medium

What Do G2 Reviewers Say About Oneleet?

AI-generated summary from verified user reviews

Pros
  • Users value the continuous security monitoring of Oneleet, enhancing compliance and reducing stress in audits.
  • Users value the compliance facilitation of Oneleet, enhancing documentation management for ISO 27001 certification during sales cycles.
  • Users find Oneleet's platform to have exceptional ease of use, simplifying compliance and providing clear support throughout.
  • Users value the quick and expert responses from Oneleet, feeling supported like having a senior colleague available.
  • Users value the effective compliance management capabilities of Oneleet, simplifying processes and ensuring thoroughness across multiple frameworks.
Cons
  • Users experience integration issues with Oneleet, affecting connections with various third-party applications.
  • Users find the limited customization options of Oneleet restrictive, desiring quicker integration rollouts.
  • Users find the limited integrations of Oneleet restrictive, missing out on essential connections for enhanced functionality.
  • Users find a lack of integration with smaller platforms, limiting Oneleet's overall effectiveness for their needs.
  • Users feel the lack of customization in reports limits their ability to tailor the product to their needs.

What Are Recent G2 Reviews of Oneleet?

Orca Security

The Orca Cloud Security Platform identifies, prioritizes, and remediates risks and compliance issues in workloads, configurations, and identities across your cloud estate spanning AWS, Azure, Google Cloud, Kubernetes, Alibaba Cloud, and Oracle Cloud. Orca offers the industry’s most comprehensive cloud security solution in a single platform — eliminating the need to deploy and maintain multiple point solutions. Orca is agentless-first, and connects to your environment in minutes using Orca’s patented SideScanning™ technology that provides deep and wide visibility into your cloud environment, without requiring agents. In addition, Orca can integrate with third-party agents for runtime visibility and protection for critical workloads. Orca is at the forefront of leveraging Generative AI for simplified investigations and accelerated remediation – reducing required skill levels and saving cloud security, DevOps, and development teams time and effort, while significantly improving security outcomes. As a Cloud Native Application Protection Platform (CNAPP), Orca consolidates many point solutions in one platform, including: CSPM, CWPP, CIEM, Vulnerability Management, Container and Kubernetes Security, DSPM, API Security, CDR, Multi-cloud Compliance, Shift Left Security, and AI-SPM.

Average Rating: 4.7/5.0

Total Reviews: 312

How Do G2 Users Rate Orca Security?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.3/10)
  • Compliance Monitoring: 9.0/10 (Category avg: 9.1/10)
  • Auditing: 8.7/10 (Category avg: 9.0/10)
  • Cloud Gap Analytics: 8.5/10 (Category avg: 8.6/10)

Who Is the Company Behind Orca Security?

  • Seller: Orca Security
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Portland, Oregon
  • Twitter: @orcasec
    4,835 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    523 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Engineer, CISO
  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 53% Large, 36% Medium

What Do G2 Reviewers Say About Orca Security?

AI-generated summary from verified user reviews

Pros
  • Users highly value the ease of use of Orca Security, enabling quick setup and intuitive navigation.
  • Users value the great visibility provided by Orca Security, enabling effective vulnerability management and prioritization of alerts.
  • Users value the agentless feature and intuitive interface of Orca Security, enhancing their security management experience.
  • Users praise the visibility provided by Orca Security, gaining comprehensive insights into their cloud environment effortlessly.
  • Users praise Orca Security for its comprehensive security features, offering great visibility and ease of implementation.
Cons
  • Users express concerns about security vulnerabilities, especially regarding API security and detection of vulnerable packages.
  • Users experience dashboard issues like clutter, slow performance, and quirks that hinder efficient navigation and usability.
  • Users face challenges with delayed detection of vulnerabilities, impacting timely response and troubleshooting efforts in Orca Security.
  • Users report many false positives, complicating the assessment of actual vulnerabilities in Orca Security.
  • Users note that the reporting capabilities and customization options of Orca Security need significant improvement.

What Are Recent G2 Reviews of Orca Security?

What Are G2 Users Discussing About Orca Security?

Lauren Worth
LW
Researched and written by Lauren Worth
Updated October 3, 2024