# Best Third Party & Supplier Risk Management Software *By [Lauren Worth](https://research.g2.com/insights/author/lauren-worth)* Third-party and supplier risk management software gathers and manages vendor risk data to protect companies from issues across various risks. These risks may include financial, legal, strategic, reputational, ethical, information security, operational, cybersecurity, environmental, and geopolitical risks. This type of software assesses, monitors, and mitigates risks that could negatively impact company-supplier relationships. Compliance and risk officers typically use third-party and supplier risk management software. Additionally, companies benefit from this software by minimizing risks from unreliable suppliers. It also helps reduce the chances of reputational damage associated with high-risk vendors, lessens the likelihood of business disruptions, and lowers the potential for negative financial consequences. Third-party and supplier risk management software is usually implemented as part of a broader governance, risk, and compliance initiative. A third-party and supplier risk management tool is different from [vendor security and privacy assessment software](https://www.g2.com/categories/vendor-security-and-privacy-assessment), as the latter focuses specifically on cybersecurity and privacy third-party risks but does not address other risk domains, such as financial or environmental risks. Third-party and supplier risk management also differs from [contractor risk management](https://www.g2.com/categories/contractor-risk-management), which assesses the unique risks associated with hiring an individual or organization to complete a specific project rather than a vendor engaged in providing goods or services as part of their normal business operations. It also stands apart from various types of [supplier or supply chain management software](https://www.g2.com/categories/supply-chain-management) because those typically don’t have robust vendor risk analysis capabilities. To qualify for inclusion in the Third Party and Supplier Risk Management category, a product must: - Include standard workflows and templates to assess and evaluate a wide range of third-party risks, including financial, legal, strategic, reputational, ethical, information security, operational, cybersecurity, environmental, and geopolitical risks - Include standard reports on third-party risk exposure - Remediate third-party risks in alignment with internal policies - Monitor ongoing vendor performance and any third-party risk changes ## Top Third Party & Supplier Risk Management Software at a Glance | # | Product | Rating | Best For | What Users Say | |---|---------|--------|----------|----------------| | 1 | [Vanta](https://www.g2.com/products/vanta/reviews) | 4.6/5.0 (2,593 reviews) | Compliance automation with TPRM and trust center | "[Embedded AI and powerful integrations for Compliance](https://www.g2.com/survey_responses/vanta-review-13074077)" | | 2 | [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) | 4.5/5.0 (721 reviews) | Continuous attack surface and vendor security monitoring | "[Well-Organized Platform for Security Due Diligence](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)" | | 3 | [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) | 4.8/5.0 (213 reviews) | Sanctions and denied-party screening for global trade | "[Descartes Screening: Extremely Easy to Use with Customizable Precision](https://www.g2.com/survey_responses/descartes-denied-party-screening-review-13053321)" | | 4 | [Creditsafe](https://www.g2.com/products/creditsafe/reviews) | 4.5/5.0 (242 reviews) | Global supplier credit risk and data intelligence | "[Valuable Company Search and KYC Protect Insights with Helpful Credit Status Alerts](https://www.g2.com/survey_responses/creditsafe-review-13060923)" | | 5 | [osapiens](https://www.g2.com/products/osapiens/reviews) | 4.4/5.0 (241 reviews) | — | "[Continuous Improvement Meets Strong Customer Partnership](https://www.g2.com/survey_responses/osapiens-review-12692485)" | | 6 | [Secureframe](https://www.g2.com/products/secureframe/reviews) | 4.7/5.0 (804 reviews) | Compliance and TPRM with strong onboarding | "[Streamlined Task Management for Teams with Stellar Usability](https://www.g2.com/survey_responses/secureframe-review-12921074)" | | 7 | [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews) | 4.2/5.0 (66 reviews) | AI-powered GRC for enterprise risk consolidation | "[Automates Security Tasks, But Pricey](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)" | | 8 | [SAP Ariba](https://www.g2.com/products/sap-ariba/reviews) | 4.1/5.0 (742 reviews) | Procurement and supplier management for SAP environments | "[Modern API-First Ariba on SAP BTP That Reduces Integration Friction](https://www.g2.com/survey_responses/sap-ariba-review-12825444)" | | 9 | [Bitsight](https://www.g2.com/products/bitsight/reviews) | 4.5/5.0 (76 reviews) | Cyber risk intelligence for vendor security posture | "[Finds Public-Facing Security Flaws and Clearly Shows How to Fix Them](https://www.g2.com/survey_responses/bitsight-review-12760320)" | | 10 | [EcoVadis](https://www.g2.com/products/ecovadis/reviews) | 4.2/5.0 (93 reviews) | Supplier sustainability ratings for ESG programs | "[EcoVadis: Resourceful ESG Assessments with Clear Scorecards and Supply Chain Transparency](https://www.g2.com/survey_responses/ecovadis-review-12864755)" | --- ## What Are the Most Common Questions About Third Party & Supplier Risk Management Software? *AI-generated · Last updated: May 26, 2026* ### Which risk management platform is best for third-party suppliers? Based on G2 reviews, [Vendor Risk](https://www.g2.com/products/vendor-risk) appears most often in recent feedback for this use case. According to verified users, it stands out for continuous monitoring, clear risk visibility, automated assessments, and reporting that helps teams evaluate vendors before onboarding and during ongoing reviews. G2 reviewers mention easier prioritization of vulnerabilities, simplified communication of supplier risk to stakeholders, and reduced manual effort compared with spreadsheet-driven processes. Buyers should note that some users still mention occasional false positives, generic findings in some cases, or a desire for deeper reporting customization, but overall the recurring theme is strong visibility into third-party security posture. ### What top-rated supplier risk management tools? Based on G2 reviews, buyers evaluating supplier risk management tools most often highlight themes like continuous monitoring, easier evidence collection, centralized vendor records, and faster due diligence workflows. According to verified users, leading products in this category differ by emphasis: some focus on cyber posture monitoring and vendor ratings, while others concentrate on questionnaire automation, compliance tracking, or broader governance workflows. G2 reviewers mention that the best experiences usually combine clear dashboards, strong onboarding support, and reduced reliance on spreadsheets or email-based reviews. At the same time, users also call out common tradeoffs such as reporting limitations, occasional alert noise, and integration gaps, so fit depends on whether your team prioritizes monitoring, workflow automation, or audit readiness. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – continuous vendor monitoring, automated assessments, and reporting for third-party security reviews - [Secureframe](https://www.g2.com/products/secureframe) – centralized vendor reviews and compliance workflows with evidence collection and audit readiness support - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening) – restricted-party and sanctions screening for supplier and partner verification workflows ### Which supplier risk management app is best for handling third-party risks? Based on G2 reviews, [Vendor Risk](https://www.g2.com/products/vendor-risk) is the most consistently represented option for handling third-party risks in recent feedback. According to verified users, it helps teams monitor vendor security posture continuously, assess vulnerabilities, compare vendors, and communicate risk clearly through accessible reports and dashboards. G2 reviewers mention that it supports both onboarding and ongoing oversight, which is especially useful for organizations trying to reduce manual follow-up and make quicker vendor decisions. Several users also describe it as easy to navigate and quick to set up, though some note that certain findings can feel high level or require further validation. Overall, the recurring signal is strong usability paired with broad external risk visibility. ### What best third-party supplier risk software for a mid-sized company? Based on G2 reviews, mid-sized companies often value software that balances strong monitoring with manageable setup and day-to-day usability. According to verified users, common priorities include centralized vendor information, automated questionnaires, clear risk scoring, and reporting that helps smaller teams stay on top of supplier reviews without relying on multiple spreadsheets. G2 reviewers mention that tools in this category are especially helpful when they reduce manual work, improve audit readiness, and make it easier to track remediation or compliance gaps over time. For a mid-sized company, the best fit depends on whether the team needs more cyber risk visibility, broader GRC workflows, or stronger onboarding support, but recent reviews consistently point to efficiency and visibility as the biggest buying criteria. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – useful for continuous supplier monitoring, clear reporting, and reducing manual third-party review work - [Secureframe](https://www.g2.com/products/secureframe) – strong fit for teams that want vendor reviews tied to compliance, evidence collection, and centralized oversight - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening) – helps teams screen suppliers against restricted lists with fast, repeatable compliance checks ### What supplier risk management services with the highest user ratings? Based on G2 reviews, services and platforms with the strongest recent sentiment tend to earn praise for making supplier due diligence faster, more centralized, and easier to maintain over time. According to verified users, buyers repeatedly highlight responsive support, intuitive interfaces, continuous monitoring, and tools that replace spreadsheet-heavy review processes. G2 reviewers mention that highly regarded options often combine vendor assessments, risk visibility, and alerting in one place, helping teams stay organized across onboarding, ongoing monitoring, and audit preparation. Users also note that strong service experiences matter alongside product functionality, especially during implementation and support. When comparing options, buyers should look for evidence in reviews of clear workflows, practical reporting, and dependable customer assistance. ### What user-friendly supplier risk management software options? Based on G2 reviews, user-friendly supplier risk management software is usually described as easy to navigate, quick to adopt, and effective at reducing manual coordination across teams. According to verified users, the most approachable tools offer centralized dashboards, straightforward questionnaires, reusable vendor information, and clear workflows for assessments, documentation, and follow-up. G2 reviewers mention that usability matters not only for risk teams but also for business users, suppliers, and stakeholders who need to participate without extensive training. Across recent reviews, products earn positive feedback when they simplify onboarding, surface key risks clearly, and avoid burying teams in disconnected files or emails. Buyers should still watch for learning curves in more configurable platforms or reporting limitations in lighter-weight tools. ### What most recommended software for managing third-party suppliers? Based on G2 reviews, the most recommended software for managing third-party suppliers usually helps teams centralize vendor data, automate recurring reviews, and maintain visibility into supplier security or compliance posture. According to verified users, recommendation trends favor products that reduce spreadsheet work, speed up due diligence, and provide clear dashboards for follow-up and decision-making. G2 reviewers mention that highly recommended options often stand out for responsive support, scalable workflows, and practical monitoring features that make supplier oversight easier across onboarding and ongoing reviews. At the same time, users still flag differences in fit around reporting depth, integrations, and the level of technical detail offered. For buyers, the strongest recommendations usually go to tools that combine usability with consistent risk visibility. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – recommended for clear third-party visibility, continuous monitoring, and practical reporting for supplier reviews - [Secureframe](https://www.g2.com/products/secureframe) – recommended for centralized vendor management tied to broader compliance and audit workflows - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening) – recommended for teams that need repeatable supplier screening and strong compliance traceability ### What best tools for supplier risk management in the software industry? Based on G2 reviews, software companies often look for supplier risk tools that connect vendor reviews with security, compliance, and engineering workflows. According to verified users, the most relevant platforms in this context help teams automate questionnaires, monitor vendor posture, centralize evidence, and reduce the burden of repeated customer or supplier security reviews. G2 reviewers mention that these tools are especially valuable when they integrate with existing systems, support faster onboarding, and provide ongoing visibility into vendor security gaps or changes. Reviews also suggest that software teams care about scalability and ease of collaboration across procurement, security, legal, and engineering. The best option depends on whether your organization prioritizes cyber monitoring, broader GRC management, or streamlined due diligence response processes. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – useful for software teams that need external security visibility, questionnaire support, and continuous supplier monitoring - [Secureframe](https://www.g2.com/products/secureframe) – helpful for software companies managing vendor reviews alongside SOC, ISO, and evidence collection workflows - [Omnea](https://www.g2.com/products/omnea-omnea) – supports cross-functional vendor onboarding and risk reviews across procurement, security, privacy, and IT teams ### What best third-party supplier risk management software for small business? Based on G2 reviews, small businesses tend to favor supplier risk management software that is straightforward to implement, easy to understand, and effective without a large dedicated risk team. According to verified users, the most helpful platforms centralize vendor details, automate reminders or assessments, and reduce the need for spreadsheet-heavy tracking. G2 reviewers mention that small teams especially benefit from clear dashboards, responsive support, and tools that save time during onboarding, vendor reviews, and compliance preparation. Reviews also show that ease of use can matter as much as feature depth, since smaller organizations often need practical workflows more than highly customized configurations. Buyers should compare how well each product balances usability, visibility, and ongoing monitoring for lean teams. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – practical for small teams needing clear vendor visibility, automated assessments, and simple reporting - [Secureframe](https://www.g2.com/products/secureframe) – useful for smaller businesses that want vendor reviews connected to broader compliance work - [Perimeter](https://www.g2.com/products/perimeter) – designed to simplify vendor questionnaires, AI-assisted reviews, and security posture insight ### What leading third-party risk management software? Based on G2 reviews, leading third-party risk management software is typically recognized for centralizing vendor information, improving visibility into supplier posture, and making assessments more repeatable. According to verified users, the strongest products often combine continuous monitoring, questionnaires, evidence collection, and reporting in a way that reduces manual effort for risk and compliance teams. G2 reviewers mention that buyers should look beyond feature lists and pay attention to support quality, implementation experience, and how well the tool fits existing workflows across procurement, security, legal, and audit teams. Recent reviews show that leading options vary in emphasis, with some excelling in cyber monitoring and others in workflow automation or broader compliance management, so the best choice depends on operational priorities. **Here are some of the top-rated products on G2:** - [Vendor Risk](https://www.g2.com/products/vendor-risk) – combines external risk visibility, automated assessments, and reporting for ongoing third-party oversight - [Secureframe](https://www.g2.com/products/secureframe) – supports centralized vendor management, evidence gathering, and continuous compliance tracking - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening) – supports supplier screening and compliance verification against restricted-party lists ## G2 Grid® for Third Party & Supplier Risk Management Software ![G2 Grid® for Third Party & Supplier Risk Management Software plotting products by satisfaction and market presence](https://www.g2.com/categories/third-party-supplier-risk-management/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=1214856&focus%5B%5D=5514&focus%5B%5D=1301114&focus%5B%5D=140255&focus%5B%5D=953&focus%5B%5D=510) Highlighted products: Vanta, UpGuard Vendor Risk, Descartes Denied Party Screening, Creditsafe, osapiens, Secureframe, IBM OpenPages, and SAP Ariba. Underlying data: [Grid® JSON](https://www.g2.com/categories/third-party-supplier-risk-management/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=descartes-denied-party-screening&focus%5B%5D=creditsafe&focus%5B%5D=osapiens&focus%5B%5D=secureframe&focus%5B%5D=ibm-openpages&focus%5B%5D=sap-ariba) ## How Many Third Party & Supplier Risk Management Software Products Does G2 Track? **Total Products under this Category:** 137 ### Category Stats (Jul 2026) - **Average Rating**: 4.48/5 (↓0.01 vs Jun 2026) The average rating of products in this category, based on all submitted ratings - **Top Trending Product**: MyComplianceOffice (+0.64%) - Among all products in this category, MyComplianceOffice recorded the largest rating increase compared to last month *Last updated: July 13, 2026* ## How Does G2 Rank Third Party & Supplier Risk Management Software Products? **Why You Can Trust G2's Software Rankings:** - 30 Analysts and Data Experts - 10,800+ Authentic Reviews - 137+ Products - Unbiased Rankings G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category. ## Which Third Party & Supplier Risk Management Software Is Best for Your Use Case? - **Leader:** [Vanta](https://www.g2.com/products/vanta/reviews) - **Highest Performer:** [Formalize](https://www.g2.com/products/formalize/reviews) - **Easiest to Use:** [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) - **Top Trending:** [Vanta](https://www.g2.com/products/vanta/reviews) - **Best Free Software:** [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) --- **Sponsored** ### Ethixbase360 Ethixbase360 is a comprehensive third-party risk management platform that helps organizations identify, assess, manage, and monitor risk across their global third-party ecosystem. Combining advanced technology with expert due diligence, the platform enables organizations to strengthen compliance, improve supply chain transparency, and build more resilient business relationships. Designed for mid-market and enterprise organizations operating in complex regulatory environments, Ethixbase360 supports organizations across industries including healthcare and life sciences, manufacturing, extraction, energy, technology, transportation, and logistics. It helps companies address a broad range of third-party risks, including anti-bribery and corruption, sanctions, modern slavery, human rights, cybersecurity, ESG, and reputational risk. The platform provides configurable risk-based workflows, enhanced due diligence, sanctions and adverse media screening, continuous monitoring, supplier engagement tools, and comprehensive reporting, giving organizations a defensible, audit-ready approach to managing third-party risk. Its modular, scalable architecture enables organizations to adapt to evolving regulatory requirements while driving greater transparency, resilience, and accountability throughout their value chains. [Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=paid_promo&secure%5Bad_slot%5D=category_product_list&secure%5Bcategory_id%5D=1441&secure%5Bchosen_at%5D=2026-07-14T04%3A36%3A50Z&secure%5Bmedium%5D=sponsored&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=141811&secure%5Bresource_id%5D=1441&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fthird-party-supplier-risk-management&secure%5Btoken%5D=29632065f85ab12976d99a6b87db1fef5d18affffbec1ef53fa778cc73df88bd&secure%5Burl%5D=https%3A%2F%2Fethixbase360.com%2Fwhat-we-do%2Frisk-area-tprm%2F&secure%5Burl_type%5D=paid_promos) --- ## What Are the Top-Rated Third Party & Supplier Risk Management Software Products in 2026? ### 1. [Vanta](https://www.g2.com/products/vanta/reviews) Vanta is the leading Agentic Trust Platform helping 15k+ companies—like Atlassian, Duolingo, Golden State Warriors, and Icelandair—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management. **Average Rating:** 4.6/5.0 **Total Reviews:** 2,593 **How Do G2 Users Rate Vanta?** - **Oversight:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Centralized Data:** 8.7/10 (Category avg: 8.9/10) - **KPIs:** 8.1/10 (Category avg: 8.5/10) **Who Is the Company Behind Vanta?** - **Seller:** [Vanta](https://www.g2.com/sellers/vanta) - **Company Website:** https://www.vanta.com/ - **Year Founded:** 2018 - **HQ Location:** San Francisco, California - **Twitter:** @TrustVanta (4,694 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/vanta-security/ (1,871 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CTO, CEO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 56% Small-Business, 39% Mid-Market #### What Are Vanta's Pros and Cons? **Pros:** - Ease of Use (798 reviews) - Compliance (606 reviews) - Integrations (463 reviews) - Automation (457 reviews) - Time-saving (446 reviews) **Cons:** - Integration Issues (207 reviews) - Pricing Issues (178 reviews) - Expensive (173 reviews) - Limited Integrations (172 reviews) - Missing Features (165 reviews) ### What Do G2 Reviewers Say About Vanta? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of Vanta, enjoying its straightforward interface and clear organizational plans. - Users value Vanta for turning **compliance into a business driver** , enhancing efficiency and accuracy in the process. - Users value the **seamless integrations** Vanta offers, enhancing compliance monitoring and documentation preparation effortlessly. - Users admire Vanta's **automation** , enhancing compliance efficiency while maintaining speed and accuracy for business success. - Users value Vanta for its **time-saving automation** , significantly reducing manual tasks and improving efficiency in compliance management. **Cons:** - Users face **integration issues** with Vanta, leading to manual work and limited reporting, but improvement is underway. - Users express concerns about Vanta's **high pricing and lack of flexibility** , particularly for small businesses and solopreneurs. - Users feel that Vanta is **very expensive** , impacting their overall perception of its value and accessibility. - Users note the **limited integrations** with niche tech stacks, which may hinder broader application performance. - Users find the **missing features** in Vanta's lower tiers limit its effectiveness for diverse tech stacks. #### What Are Recent G2 Reviews of Vanta? **"[Well-Structured, Interactive Security Standards Tracking with a Strong Trust Center](https://www.g2.com/survey_responses/vanta-review-13086207)"** **Rating:** 4.5/5.0 stars *— Ejike I.* [Read full review](https://www.g2.com/survey_responses/vanta-review-13086207) --- **"[Embedded AI and powerful integrations for Compliance](https://www.g2.com/survey_responses/vanta-review-13074077)"** **Rating:** 4.0/5.0 stars *— Bruno M.* [Read full review](https://www.g2.com/survey_responses/vanta-review-13074077) --- #### What Are G2 Users Discussing About Vanta? - [What is Vanta used for?](https://www.g2.com/discussions/what-is-vanta-used-for) - 3 comments, 2 upvotes ### 2. [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews) UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board. **Average Rating:** 4.5/5.0 **Total Reviews:** 721 **How Do G2 Users Rate UpGuard Vendor Risk?** - **Oversight:** 8.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Centralized Data:** 8.4/10 (Category avg: 8.9/10) - **KPIs:** 8.1/10 (Category avg: 8.5/10) **Who Is the Company Behind UpGuard Vendor Risk?** - **Seller:** [UpGuard](https://www.g2.com/sellers/upguard) - **Company Website:** https://upguard.com - **Year Founded:** 2012 - **HQ Location:** Mountain View, California - **Twitter:** @UpGuard (8,705 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/upguard/ (371 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Security Analyst, CISO - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 47% Enterprise, 39% Mid-Market #### What Are UpGuard Vendor Risk's Pros and Cons? **Pros:** - Ease of Use (252 reviews) - Security (143 reviews) - Risk Management (133 reviews) - Time-saving (108 reviews) - Customer Support (101 reviews) **Cons:** - Lack of Clarity (52 reviews) - Expensive (38 reviews) - Limited Functionality (32 reviews) - Improvement Needed (26 reviews) - Limited Customization (24 reviews) ### What Do G2 Reviewers Say About UpGuard Vendor Risk? *AI-generated summary from verified user reviews* **Pros:** - Users praise the **ease of use** of UpGuard Vendor Risk, enhancing daily tasks and understanding data safety improvements. - Users appreciate the **intuitive interface and reliable updates** of UpGuard, enhancing security and ease of use. - Users value UpGuard's **dynamic scoring system** for effectively identifying and prioritizing risks in public infrastructure. - Users value UpGuard's **time-saving features** that streamline monitoring and reporting, enhancing overall security efficiency. - Users value the **responsive customer support** of UpGuard, enhancing experience with efficient query resolution and smooth operation. **Cons:** - Users find the **lack of clarity** in remediation recommendations complicates implementation and slows down the process. - Users find UpGuard Vendor Risk **expensive** , particularly for smaller organizations with fewer vendor needs. - Users note the **limited functionality** of UpGuard, particularly in customization and context for alerts, affecting usability. - Users note that UpGuard needs to improve on **false positives** that impact accuracy and require manual correction. - Users find **limited customization** in UpGuard Vendor Risk, affecting the flexibility and effectiveness of notifications and reports. #### What Are Recent G2 Reviews of UpGuard Vendor Risk? **"[Well-Organized Platform for Security Due Diligence](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)"** **Rating:** 4.5/5.0 stars *— Mohamed S.* [Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101) --- **"[Strong Platform for Managing Vendor Risk](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)"** **Rating:** 5.0/5.0 stars *— Utkarsh K.* [Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780) --- ### 3. [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) Descartes Denied Party Screening (also known as Descartes Visual Compliance and Descartes MK Data) provides a range of best-in-class compliance software solutions covering third-party risk management requirements as they relate to international trade regulations, including restricted and denied party screening, OFAC compliance (incl. sanctioned ownership screening and OFAC 50), automation, classification, documentation and license management, and beyond. Choose from flexible pricing options that fit organizations of all sizes and across industries. Descartes Denied Party Screening software pricing ranges from a few thousand dollars a year for a basic implementation covering small screening volumes and one user. At the other end of the spectrum, the annual price of compliance tools could run up to $100,000 or more for enterprise-level solutions. **Average Rating:** 4.8/5.0 **Total Reviews:** 213 **How Do G2 Users Rate Descartes Denied Party Screening?** - **Oversight:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Centralized Data:** 8.7/10 (Category avg: 8.9/10) - **KPIs:** 8.3/10 (Category avg: 8.5/10) **Who Is the Company Behind Descartes Denied Party Screening?** - **Seller:** [Descartes Systems Group](https://www.g2.com/sellers/descartes-systems-group) - **Company Website:** https://www.descartes.com - **Year Founded:** 1981 - **HQ Location:** Waterloo, Ontario - **Twitter:** @descartessg (3,222 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/descartes-systems-group/ (1,683 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Manager, Rm - **Top Industries:** Airlines/Aviation, Manufacturing - **Company Size:** 44% Enterprise, 38% Mid-Market #### What Are Descartes Denied Party Screening's Pros and Cons? **Pros:** - Ease of Use (36 reviews) - Efficiency (17 reviews) - Time-saving (11 reviews) - Setup Ease (10 reviews) - Compliance Management (9 reviews) **Cons:** - Time-Consuming (6 reviews) - Inefficient Search (4 reviews) - Integration Issues (4 reviews) - Data Management (3 reviews) - Learning Curve (3 reviews) ### What Do G2 Reviewers Say About Descartes Denied Party Screening? *AI-generated summary from verified user reviews* **Pros:** - Users find the **ease of use** of Descartes Denied Party Screening impressive, streamlining their workflows effectively. - Users appreciate the **efficiency** of Descartes Denied Party Screening, finding it quick and easy to use daily. - Users value the **time-saving capabilities** of Descartes Denied Party Screening, making daily tasks more efficient and manageable. - Users find the **setup ease** of Descartes Denied Party Screening highly beneficial, enabling quick and intuitive search processes. - Users appreciate the **ease of use and detailed compliance information** provided by Descartes Denied Party Screening. **Cons:** - Users report that the **time-consuming setup and manual review** processes can hinder efficiency and extend project timelines. - Users find the **inefficient search** function cumbersome, suggesting improvements for a more streamlined experience. - Users find **integration issues** time-consuming and costly, especially for small businesses facing manual upload requirements. - Users desire **enhanced data management features** , such as better report downloads and improved visibility of screening results. - Users experience a **slower learning curve** with Descartes, requiring training and adjustments for optimal use. #### What Are Recent G2 Reviews of Descartes Denied Party Screening? **"[Descartes Screening: Extremely Easy to Use with Customizable Precision](https://www.g2.com/survey_responses/descartes-denied-party-screening-review-13053321)"** **Rating:** 5.0/5.0 stars *— Cyndi M.* [Read full review](https://www.g2.com/survey_responses/descartes-denied-party-screening-review-13053321) --- **"[Comprehensive Compliance Platform Paired with Risk Reduction](https://www.g2.com/survey_responses/descartes-denied-party-screening-review-12079363)"** **Rating:** 5.0/5.0 stars *— Connie J.* [Read full review](https://www.g2.com/survey_responses/descartes-denied-party-screening-review-12079363) --- ### 4. [Creditsafe](https://www.g2.com/products/creditsafe/reviews) Creditsafe is a comprehensive data intelligence solution designed to help organizations manage credit risk, compliance, and data hygiene with confidence. By delivering global coverage breadth across more than 430 million businesses in over 200 countries, Creditsafe provides the data freshness & source diversity companies need to make informed, data-driven decisions that fuel growth and operational efficiency. The platform is built around key business drivers that address modern credit and compliance challenges. With continuous monitoring & alerts, users are instantly notified of material changes impacting customers, suppliers, or prospects, ensuring proactive risk management. Creditsafe’s insolvency prediction strength and cross-border score consistency further enhance the accuracy of credit evaluations, allowing organizations to identify potential risks early and maintain financial stability. For businesses seeking speed and flexibility, Creditsafe offers instant vs. investigated delivery, enabling onboarding in under 60 seconds when needed, while still supporting deeper due diligence where required. Its powerful portfolio analytics & dashboards give decision-makers actionable insights at scale, while API integration depth ensures seamless connectivity to existing systems. Flexible pricing & access models make it suitable for both SMBs and large enterprises, with SMB-friendly access options designed to meet the needs of growing companies. Beyond credit risk, Creditsafe strengthens compliance processes with KYB/AML compliance bundling and corporate linkage & UBO insight, helping organizations meet regulatory obligations and uncover hidden ownership structures. In addition, collections and recovery support tools aid in maintaining healthy cash flow by optimizing recovery strategies. With its combination of advanced analytics, dedicated account managers, and scalable delivery models, Creditsafe empowers businesses of all sizes to navigate the complexities of credit management. By uniting trusted data, portfolio insights, and robust compliance tools under one platform, Creditsafe positions itself as a strategic partner for organizations seeking to enhance resilience, streamline processes, and unlock sustainable growth. **Average Rating:** 4.5/5.0 **Total Reviews:** 242 **How Do G2 Users Rate Creditsafe?** - **Oversight:** 7.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Centralized Data:** 4.2/10 (Category avg: 8.9/10) **Who Is the Company Behind Creditsafe?** - **Seller:** [Creditsafe](https://www.g2.com/sellers/creditsafe) - **Company Website:** https://www.Creditsafe.com/us - **Year Founded:** 1997 - **HQ Location:** Dublin, Ireland - **LinkedIn® Page:** https://www.linkedin.com/company/creditsafe/ (1,661 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Controller, Credit Analyst - **Top Industries:** Manufacturing, Accounting - **Company Size:** 51% Mid-Market, 34% Small-Business #### What Are Creditsafe's Pros and Cons? **Pros:** - Ease of Use (54 reviews) - Setup Ease (17 reviews) - Ease of Setup (14 reviews) - Data Management (12 reviews) - Efficiency (12 reviews) **Cons:** - Inaccuracy (15 reviews) - Inefficient Search (12 reviews) - Data Management (9 reviews) - Limited Functionality (7 reviews) - Poor Navigation (7 reviews) ### What Do G2 Reviewers Say About Creditsafe? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Creditsafe, helping them efficiently monitor customer credit and save time. - Users appreciate the **ease of setup** with Creditsafe, finding it straightforward and intuitive for monitoring credit. - Users praise the **ease of setup** for Creditsafe, enjoying a smooth onboarding process and quick access to reports. - Users appreciate the **extensive data management** in Creditsafe, enabling detailed insights for assessing potential customers' creditworthiness. - Users value the **efficient credit assessment** of Creditsafe, allowing quick and informed decisions on potential business partners. **Cons:** - Users express concern over **inaccuracy** in corporate linkages and limited data, impacting reliability and international assessments. - Users struggle with the **inefficient search** capabilities of Creditsafe, making it difficult to find essential information accurately. - Users caution about **inaccurate or outdated data** within Creditsafe, affecting decision-making and limiting international assessment capabilities. - Users find the **limited functionality** of Creditsafe frustrating, as not all companies or their details are searchable. - Users often face **poor navigation** , making it difficult to locate information on companies and related parties. #### What Are Recent G2 Reviews of Creditsafe? **"[Valuable Company Search and KYC Protect Insights with Helpful Credit Status Alerts](https://www.g2.com/survey_responses/creditsafe-review-13060923)"** **Rating:** 5.0/5.0 stars *— Lisa F.* [Read full review](https://www.g2.com/survey_responses/creditsafe-review-13060923) --- **"[Quick Financial Insights and Alerts That Strengthen Credit Decisions](https://www.g2.com/survey_responses/creditsafe-review-13080007)"** **Rating:** 4.0/5.0 stars *— Andrew R.* [Read full review](https://www.g2.com/survey_responses/creditsafe-review-13080007) --- #### What Are G2 Users Discussing About Creditsafe? - [What is creditsafe pass?](https://www.g2.com/discussions/what-is-creditsafe-pass) - [What is a creditsafe rating?](https://www.g2.com/discussions/what-is-a-creditsafe-rating) - [Where does creditsafe get their data?](https://www.g2.com/discussions/where-does-creditsafe-get-their-data) - [What is creditsafe used for?](https://www.g2.com/discussions/what-is-creditsafe-used-for) ### 5. [osapiens](https://www.g2.com/products/osapiens/reviews) osapiens develops software that empowers companies to drive sustainable growth across their entire value chain. The osapiens HUB, a multi-tenant hyperscaler platform designed to enable cross-company collaboration and AI-automation, combines over 25 solutions in two categories: Transparency solutions enable companies to report on financial and non-financial data, manage supply chains, mitigate risk of all kinds (including cyber-risks and trade- and geo-political risks), and ensure compliance with product, reporting and supply chain regulations. Efficiency solutions enable AI-driven supplier collaboration, maintenance, service, and distribution processes to improve operational performance and strengthen competitiveness. osapiens was founded in 2018. Headquartered in Mannheim, Germany, with offices across Europe and the United States, the company works with an international team of over 550 employees. It supports more than 2,500 customers worldwide, from SMEs to global enterprises across industries. Learn more about the osapiens HUB: https://osapiens.com Follow us on LinkedIn: https://www.linkedin.com/company/osapiens **Average Rating:** 4.4/5.0 **Total Reviews:** 241 **How Do G2 Users Rate osapiens?** - **Oversight:** 8.8/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.1/10 (Category avg: 9.2/10) - **Centralized Data:** 8.5/10 (Category avg: 8.9/10) - **KPIs:** 7.6/10 (Category avg: 8.5/10) **Who Is the Company Behind osapiens?** - **Seller:** [osapiens](https://www.g2.com/sellers/osapiens) - **Company Website:** https://www.osapiens.com - **Year Founded:** 2018 - **HQ Location:** Mannheim, Germany - **Twitter:** @osapiens_ (79 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/osapiens/ (595 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Hospital & Health Care, Automotive - **Company Size:** 54% Enterprise, 28% Mid-Market #### What Are osapiens's Pros and Cons? **Pros:** - Ease of Use (24 reviews) - Customer Support (21 reviews) - Features (15 reviews) - Implementation Ease (14 reviews) - Helpful (9 reviews) **Cons:** - Limited Functionality (13 reviews) - Learning Curve (5 reviews) - Missing Functionality (5 reviews) - Complexity (4 reviews) - Missing Features (4 reviews) ### What Do G2 Reviewers Say About osapiens? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Osapiens, making data management and collaboration simple and efficient. - Users commend the **excellent customer support** of Osapiens, appreciating quick responses and effective resolutions to inquiries. - Users value the **intuitive data integration** of Osapiens, enhancing collaboration and efficiency across various tools and teams. - Users value the **implementation ease** of Osapiens, enjoying quick onboarding and intuitive data management across platforms. - Users value the **ease of use** in Osapiens, appreciating its simple data transfer and collaboration capabilities. **Cons:** - Users express concerns over **limited functionality** , noting inconvenience and basic features in handling complex scenarios. - Users face a **steep learning curve** due to self-guided onboarding and complex software updates without clear guidance. - Users find the **missing functionality** limits efficiency, especially when handling complex supplier situations and integrations. - Users find the **complexity** of creating questionnaires and workflows cumbersome, affecting their overall experience with osapiens. - Users find the **missing features** in osapiens limiting, hindering potential improvements and necessary functionalities. #### What Are Recent G2 Reviews of osapiens? **"[Continuous Improvement Meets Strong Customer Partnership](https://www.g2.com/survey_responses/osapiens-review-12692485)"** **Rating:** 5.0/5.0 stars *— Bahia F.* [Read full review](https://www.g2.com/survey_responses/osapiens-review-12692485) --- **"[Reliable Support and Efficient Solutions from Osapiens](https://www.g2.com/survey_responses/osapiens-review-12830057)"** **Rating:** 5.0/5.0 stars *— Genesis V.* [Read full review](https://www.g2.com/survey_responses/osapiens-review-12830057) --- ### 6. [Secureframe](https://www.g2.com/products/secureframe/reviews) Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards. **Average Rating:** 4.7/5.0 **Total Reviews:** 804 **How Do G2 Users Rate Secureframe?** - **Oversight:** 8.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Centralized Data:** 9.0/10 (Category avg: 8.9/10) - **KPIs:** 8.7/10 (Category avg: 8.5/10) **Who Is the Company Behind Secureframe?** - **Seller:** [Secureframe](https://www.g2.com/sellers/secureframe) - **Company Website:** https://secureframe.com/ - **Year Founded:** 2020 - **HQ Location:** San Francisco, US - **Twitter:** @secureframe (2,228 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/secureframe/ (126 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** CEO, CTO - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 66% Small-Business, 30% Mid-Market #### What Are Secureframe's Pros and Cons? **Pros:** - Ease of Use (663 reviews) - Compliance (560 reviews) - Automation (422 reviews) - Security (406 reviews) - Integrations (390 reviews) **Cons:** - Integration Issues (188 reviews) - Limited Integrations (145 reviews) - Limited Customization (141 reviews) - Improvements Needed (110 reviews) - Missing Features (109 reviews) ### What Do G2 Reviewers Say About Secureframe? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** of Secureframe, making task tracking and setup straightforward and efficient. - Users value the **ease of use** in structuring the compliance approval process for their teams. - Users value how Secureframe's **automation simplifies compliance** , making it easy and manageable for all users. - Users value Secureframe's **strong security measures** , enhancing trust while managing sensitive client information effectively. - Users value the **seamless integrations** of Secureframe, significantly enhancing efficiency and compliance management for small teams. **Cons:** - Users face **integration issues** with niche tools, requiring manual effort and time for proper setup. - Users find the **limited integrations** with platforms like Azure Dev Ops frustrating, hindering seamless automation and audits. - Users find **limited customization** options for timing and follow-up schedules frustrating for compliance and training needs. - Users express a need for **improvements in the audit function** to enhance integration and streamline their experience. - Users note some **missing features** in Secureframe, especially regarding test management and policy association improvements. #### What Are Recent G2 Reviews of Secureframe? **"[Streamlined Task Management for Teams with Stellar Usability](https://www.g2.com/survey_responses/secureframe-review-12921074)"** **Rating:** 5.0/5.0 stars *— Jon W.* [Read full review](https://www.g2.com/survey_responses/secureframe-review-12921074) --- **"[SecureFrame Makes SOC 2 Evidence Uploads Easy With Helpful Templates](https://www.g2.com/survey_responses/secureframe-review-12572245)"** **Rating:** 5.0/5.0 stars *— Lucy L.* [Read full review](https://www.g2.com/survey_responses/secureframe-review-12572245) --- #### What Are G2 Users Discussing About Secureframe? - [How are you getting value from the AI features when first-pass answers and automation feel hit-or-miss?](https://www.g2.com/discussions/how-are-you-getting-value-from-the-ai-features-when-first-pass-answers-and-automation-feel-hit-or-miss) - 1 comment, 1 upvote - [Is anyone else struggling with limited reporting and document/search friction during executive reviews?](https://www.g2.com/discussions/is-anyone-else-struggling-with-limited-reporting-and-document-search-friction-during-executive-reviews) - 1 comment, 1 upvote - [What do you do to make the first-year setup and control mapping less overwhelming?](https://www.g2.com/discussions/what-do-you-do-to-make-the-first-year-setup-and-control-mapping-less-overwhelming) - 1 comment, 1 upvote - [How are other teams handling integrations that are partially supported or keep needing manual work?](https://www.g2.com/discussions/how-are-other-teams-handling-integrations-that-are-partially-supported-or-keep-needing-manual-work) - 1 comment - [Unreliable training and login flows slow down my audits and force awkward deadline conversations](https://www.g2.com/discussions/unreliable-training-and-login-flows-slow-down-my-audits-and-force-awkward-deadline-conversations) - 1 comment ### 7. [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews) OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies. **Average Rating:** 4.2/5.0 **Total Reviews:** 66 **How Do G2 Users Rate IBM OpenPages?** - **Oversight:** 9.3/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 7.9/10 (Category avg: 9.2/10) - **Centralized Data:** 9.3/10 (Category avg: 8.9/10) - **KPIs:** 9.8/10 (Category avg: 8.5/10) **Who Is the Company Behind IBM OpenPages?** - **Seller:** [IBM](https://www.g2.com/sellers/ibm) - **Year Founded:** 1911 - **HQ Location:** Armonk, New York, United States - **Twitter:** @IBMSecurity (74,660 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/1009/ (328,202 employees on LinkedIn®) - **Ownership:** SWX:IBM **Who Uses This Product?** - **Top Industries:** Banking, Information Technology and Services - **Company Size:** 39% Mid-Market, 34% Enterprise #### What Are IBM OpenPages's Pros and Cons? **Pros:** - Risk Management (12 reviews) - Time-saving (9 reviews) - Automation (7 reviews) - Ease of Use (7 reviews) - Security (7 reviews) **Cons:** - Complexity (3 reviews) - Expensive (3 reviews) - Improvement Needed (3 reviews) - Learning Curve (3 reviews) - Learning Difficulty (3 reviews) ### What Do G2 Reviewers Say About IBM OpenPages? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **effective risk management** capabilities of IBM OpenPages, enhancing compliance and streamlining processes. - Users value the **time-saving capabilities** of IBM OpenPages, streamlining activities and enhancing internal monitoring. - Users appreciate the **automation capabilities** of IBM OpenPages, enhancing efficiency with AI-driven insights and task management. - Users appreciate the **ease of use** of IBM OpenPages, highlighting its intuitive interface and supportive features. - Users value the **strong security and compliance visibility** of IBM OpenPages, enhancing risk management and trust during audits. **Cons:** - Users find **IBM OpenPages complex** , with a steep learning curve and challenging customization, hindering efficiency and usability. - Users find IBM OpenPages to be **expensive** , which may deter potential adopters despite its functionality. - Users indicate that **usability improvements** are necessary due to complexity and a steep learning curve for new users. - Users face a **steep learning curve** with IBM OpenPages, making it less accessible for new and occasional users. - Users find the **steep learning curve** of IBM OpenPages a challenge, impacting usability for occasional users. #### What Are Recent G2 Reviews of IBM OpenPages? **"[Automates Security Tasks, But Pricey](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)"** **Rating:** 4.0/5.0 stars *— Madhav B.* [Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480) --- **"[Transforms Risk Management and Compliance](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)"** **Rating:** 5.0/5.0 stars *— Charlotte W.* [Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779) --- #### What Are G2 Users Discussing About IBM OpenPages? - [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery) - [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool) - [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages) - [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson) ### 8. [SAP Ariba](https://www.g2.com/products/sap-ariba/reviews) SAP Ariba automates management of the purchasing lifecycle for indirect goods and services, to streamline workflows, expedite approvals, and eradicate errors and exceptions. By increasing procurement efficiency, it helps users to manage more spend with less effort, and meet demands with agility and speed. For smaller companies relying on manual methods and simple automation, or a large global enterprises using multiple applications and ERP systems, SAP Ariba solutions deliver end-to-end spend visibility, control, and compliance, to help organizations become more flexible, responsive, and fiscally effective. **Average Rating:** 4.1/5.0 **Total Reviews:** 742 **How Do G2 Users Rate SAP Ariba?** - **Oversight:** 7.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.1/10 (Category avg: 9.2/10) - **Centralized Data:** 8.3/10 (Category avg: 8.9/10) - **KPIs:** 7.0/10 (Category avg: 8.5/10) **Who Is the Company Behind SAP Ariba?** - **Seller:** [SAP](https://www.g2.com/sellers/sap) - **Company Website:** https://www.sap.com/ - **Year Founded:** 1972 - **HQ Location:** Walldorf - **Twitter:** @SAP (297,052 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/sap/ (141,955 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Manager, Consultant - **Top Industries:** Information Technology and Services, Accounting - **Company Size:** 55% Enterprise, 29% Mid-Market #### What Are SAP Ariba's Pros and Cons? **Pros:** - Ease of Use (174 reviews) - Procurement Efficiency (129 reviews) - Efficiency (120 reviews) - Supplier Management (113 reviews) - Procurement Management (101 reviews) **Cons:** - Complexity (77 reviews) - Learning Curve (76 reviews) - Steep Learning Curve (60 reviews) - Poor Interface Design (58 reviews) - Not User-Friendly (55 reviews) ### What Do G2 Reviewers Say About SAP Ariba? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** in SAP Ariba, finding it simplifies procurement and enhances collaboration effectively. - Users value the **centralized procurement efficiency** of SAP Ariba, enhancing visibility, compliance, and collaboration throughout the process. - Users benefit from the **enhanced efficiency** of SAP Ariba, which streamlines procurement and fosters collaboration with suppliers. - Users appreciate the **transparent procurement environment** of SAP Ariba, streamlining supplier management and enhancing visibility throughout the process. - Users value the **centralized procurement processes** in SAP Ariba, enhancing efficiency, visibility, and supplier collaboration. **Cons:** - Users find SAP Ariba's **complexity** overwhelming, making navigation and learning the system notably challenging. - Users experience a **steep learning curve** with SAP Ariba, necessitating initial training and practice for navigation. - Users face a **steep learning curve** with SAP Ariba, as its complexity can hinder immediate usability and efficiency. - Users find the **poor interface design** of SAP Ariba to be slow, unintuitive, and cumbersome to navigate. - Users find SAP Ariba to be **not user-friendly** , citing its complex interface and steep learning curve as major issues. #### What Are Recent G2 Reviews of SAP Ariba? **"[Modern API-First Ariba on SAP BTP That Reduces Integration Friction](https://www.g2.com/survey_responses/sap-ariba-review-12825444)"** **Rating:** 4.5/5.0 stars *— Akansha C.* [Read full review](https://www.g2.com/survey_responses/sap-ariba-review-12825444) --- **"[SAP Ariba is user friendly and Recommended](https://www.g2.com/survey_responses/sap-ariba-review-4773604)"** **Rating:** 4.0/5.0 stars *— Jeet S.* [Read full review](https://www.g2.com/survey_responses/sap-ariba-review-4773604) --- #### What Are G2 Users Discussing About SAP Ariba? - [What is SAP Ariba used for?](https://www.g2.com/discussions/what-is-sap-ariba-used-for) - 4 comments - [How do you use Ariba software?](https://www.g2.com/discussions/how-do-you-use-ariba-software) - 2 comments - [Is SAP Ariba the same as SAP?](https://www.g2.com/discussions/is-sap-ariba-the-same-as-sap) - 4 comments - [How does Ariba work with SAP?](https://www.g2.com/discussions/how-does-ariba-work-with-sap) - [What is SAP Ariba software?](https://www.g2.com/discussions/what-is-sap-ariba-software) - 2 comments ### 9. [Bitsight](https://www.g2.com/products/bitsight/reviews) Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance. **Average Rating:** 4.5/5.0 **Total Reviews:** 76 **How Do G2 Users Rate Bitsight?** - **Oversight:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Centralized Data:** 7.5/10 (Category avg: 8.9/10) - **KPIs:** 8.7/10 (Category avg: 8.5/10) **Who Is the Company Behind Bitsight?** - **Seller:** [Bitsight](https://www.g2.com/sellers/bitsight) - **Company Website:** https://www.bitsight.com/ - **Year Founded:** 2011 - **HQ Location:** Boston, MA - **Twitter:** @BitSight (4,503 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/bitsight/ (741 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Hospital & Health Care - **Company Size:** 71% Enterprise, 24% Mid-Market #### What Are Bitsight's Pros and Cons? **Pros:** - Security (15 reviews) - Risk Management (14 reviews) - Ease of Use (13 reviews) - Features (11 reviews) - Customer Support (10 reviews) **Cons:** - Lack of Clarity (5 reviews) - Missing Features (5 reviews) - Poor Customer Support (4 reviews) - Poor Notifications (4 reviews) - Slow Loading (4 reviews) ### What Do G2 Reviewers Say About Bitsight? *AI-generated summary from verified user reviews* **Pros:** - Users value the **easy-to-understand security rating** from Bitsight for quick assessments and benchmarking. - Users value the **detailed risk scanning** capabilities of BitSight, enabling effective vendor and partner evaluations. - Users value the **ease of use** of BitSight, finding the interface intuitive and implementation fast for effective security management. - Users value the **rich insights** provided by Bitsight, enhancing risk management through comprehensive reporting and collaboration. - Users appreciate the **responsive customer support** from Bitsight, enhancing their overall experience and satisfaction. **Cons:** - Users find a **lack of clarity** in BitSight's scoring, leading to confusion and trust issues with the findings. - Users find **missing features** like limited questionnaire options and absence of a mobile app frustrating in Bitsight. - Users face **poor customer support** with BitSight, citing inadequate documentation and unhelpful responses from support teams. - Users face issues with **poor notifications** , including delayed alerts and reliance on outdated breach information. - Users find that Bitsight has **slow loading times** , which can hinder their overall experience and efficiency. #### What Are Recent G2 Reviews of Bitsight? **"[Finds Public-Facing Security Flaws and Clearly Shows How to Fix Them](https://www.g2.com/survey_responses/bitsight-review-12760320)"** **Rating:** 4.5/5.0 stars *— Verified User in Computer Software* [Read full review](https://www.g2.com/survey_responses/bitsight-review-12760320) --- **"[Effortless Cyber Risk Scoring for Proactive Security](https://www.g2.com/survey_responses/bitsight-review-12098656)"** **Rating:** 4.0/5.0 stars *— Matthew P.* [Read full review](https://www.g2.com/survey_responses/bitsight-review-12098656) --- #### What Are G2 Users Discussing About Bitsight? - [What does Bitsight Security Ratings do?](https://www.g2.com/discussions/what-does-bitsight-security-ratings-do) - [How is BitSight calculated?](https://www.g2.com/discussions/how-is-bitsight-calculated) - [What is a BitSight security rating?](https://www.g2.com/discussions/what-is-a-bitsight-security-rating) ### 10. [EcoVadis](https://www.g2.com/products/ecovadis/reviews) EcoVadis is a purpose-driven company whose mission is to provide the world's most trusted business sustainability ratings. Businesses of all sizes rely on EcoVadis’ expert intelligence and evidence-based ratings to monitor and improve the sustainability performance of their business and trading partners. Its actionable scorecards, benchmarks, carbon action tools, and insights guide an improvement journey for environmental, social and ethical practices across 200 industry categories and 175 countries. Industry leaders such as Johnson & Johnson, L’Oréal, Unilever, LVMH, Bridgestone, BASF and JPMorgan are among the 100,000 businesses that collaborate with EcoVadis to drive resilience, sustainable growth and positive impact worldwide. **Average Rating:** 4.2/5.0 **Total Reviews:** 93 **How Do G2 Users Rate EcoVadis?** - **Oversight:** 7.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 7.6/10 (Category avg: 9.2/10) - **Centralized Data:** 8.3/10 (Category avg: 8.9/10) **Who Is the Company Behind EcoVadis?** - **Seller:** [EcoVadis](https://www.g2.com/sellers/ecovadis) - **Company Website:** https://ecovadis.com/ - **Year Founded:** 2007 - **HQ Location:** Paris, Ile-de-France - **Twitter:** @ecovadis (5,268 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/250378 (1,816 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Manufacturing, Chemicals - **Company Size:** 32% Mid-Market, 29% Small-Business #### What Are EcoVadis's Pros and Cons? **Pros:** - Ease of Use (19 reviews) - Sustainability (15 reviews) - Sustainability Monitoring (12 reviews) - Impact (10 reviews) - Quality Enhancement (10 reviews) **Cons:** - Limited Functionality (18 reviews) - Expensive (10 reviews) - Time-Consuming (10 reviews) - Poor Customer Support (8 reviews) - Missing Functionality (6 reviews) ### What Do G2 Reviewers Say About EcoVadis? *AI-generated summary from verified user reviews* **Pros:** - Users praise EcoVadis for its **ease of use** , facilitating smooth onboarding and efficient implementation for teams. - Users value EcoVadis for its **clear insights into supplier sustainability** , aiding compliance and promoting sustainable development. - Users value the **sustainability insights** from EcoVadis, enhancing compliance and promoting responsible practices in agribusiness. - Users value EcoVadis for its **comprehensive sustainability assessments** , aiding in supplier development and corporate responsibility efforts. - Users value EcoVadis for its **comprehensive assessments** , enhancing supplier evaluations and supporting sustainability initiatives effectively. **Cons:** - Users find EcoVadis has **limited functionality** , citing slow reporting and challenges with questionnaire depth and customization. - Users find EcoVadis **extremely expensive** , limiting its usage and increasing overall costs for compliance and assessments. - Users find the process of **locating specific suppliers** on EcoVadis to be quite time-consuming and cumbersome. - Users face challenges with **slow customer support** from EcoVadis, delaying issue resolution and impacting the assessment process. - Users criticize the **lack of tailored assessments** for specialized sectors, hindering the platform's effectiveness in measuring sustainability. #### What Are Recent G2 Reviews of EcoVadis? **"[Streamlines ESG Reporting with Ease and Efficiency](https://www.g2.com/survey_responses/ecovadis-review-13000497)"** **Rating:** 5.0/5.0 stars *— Samuel S.* [Read full review](https://www.g2.com/survey_responses/ecovadis-review-13000497) --- **"[EcoVadis: Resourceful ESG Assessments with Clear Scorecards and Supply Chain Transparency](https://www.g2.com/survey_responses/ecovadis-review-12864755)"** **Rating:** 4.5/5.0 stars *— Luciana S.* [Read full review](https://www.g2.com/survey_responses/ecovadis-review-12864755) --- #### What Are G2 Users Discussing About EcoVadis? - [What does Ecovadis do?](https://www.g2.com/discussions/what-does-ecovadis-do) - [What is EcoVadis system?](https://www.g2.com/discussions/what-is-ecovadis-system) - [Why is EcoVadis important?](https://www.g2.com/discussions/why-is-ecovadis-important) - 1 comment ### 11. [Formalize](https://www.g2.com/products/formalize/reviews) Formalize transforms overwhelming compliance demands into actionable compliance workflows. No chaos, just clarity. Formalize streamlines compliance workflows and automates processes for, such as NIS2, ISO27001, SOC2, DORA, and more. Our GRC software provides flexibility in the compliance space where legal requirements for information security are continuously increasing. With our finger on the legal-tech pulse, we make sure our tool enables you to meet compliance with confidence. 5,000,000+ people have access to Formalize ApS compliance software products, which focus on customisability, ease of use, and building relationships with our users. **Average Rating:** 4.8/5.0 **Total Reviews:** 42 **How Do G2 Users Rate Formalize?** - **Has the product been a good partner in doing business?:** 9.8/10 (Category avg: 9.2/10) - **Centralized Data:** 10.0/10 (Category avg: 8.9/10) **Who Is the Company Behind Formalize?** - **Seller:** [Formalize](https://www.g2.com/sellers/formalize) - **Company Website:** https://formalize.com/en - **Year Founded:** 2021 - **HQ Location:** Copenhagen, DK - **LinkedIn® Page:** https://www.linkedin.com/company/formalize-com/ (235 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Insurance - **Company Size:** 57% Small-Business, 38% Mid-Market #### What Are Recent G2 Reviews of Formalize? **"[A clear recommendation for Formalize if you need a good overview and want helpful support.](https://www.g2.com/survey_responses/formalize-review-13058724)"** **Rating:** 4.5/5.0 stars *— Verified User in Automotive* [Read full review](https://www.g2.com/survey_responses/formalize-review-13058724) --- **"[A simplified DORA register with a customizable workflow and excellent support](https://www.g2.com/survey_responses/formalize-review-13019686)"** **Rating:** 5.0/5.0 stars *— Verified User in Insurance* [Read full review](https://www.g2.com/survey_responses/formalize-review-13019686) --- #### What Are G2 Users Discussing About Formalize? - [What is Formalize used for?](https://www.g2.com/discussions/what-is-formalize-used-for) ### 12. [D&B Risk Analytics](https://www.g2.com/products/d-b-risk-analytics/reviews) D&B Risk Analytics - Supplier Intelligence provides supply and compliance teams with a revolutionary solution that leverages AI-powered data to achieve a new level of visibility for managing risks. Utilizing the Dun & Bradstreet Data Cloud – D&B Risk Analytics - Supplier Intelligence allows you to screen suppliers, actively monitor risk changes, radically streamline your reporting process, and drive operational efficiency through automation. **Average Rating:** 4.4/5.0 **Total Reviews:** 68 **How Do G2 Users Rate D&B Risk Analytics?** - **Oversight:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.9/10 (Category avg: 9.2/10) - **Centralized Data:** 8.2/10 (Category avg: 8.9/10) - **KPIs:** 8.4/10 (Category avg: 8.5/10) **Who Is the Company Behind D&B Risk Analytics?** - **Seller:** [Dun & Bradstreet](https://www.g2.com/sellers/dun-bradstreet) - **Company Website:** https://www.dnb.com - **HQ Location:** Short Hills, NJ - **Twitter:** @DunBradstreet (22,541 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/2385/ (5,747 employees on LinkedIn®) - **Ownership:** NYSE: DNB **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Manufacturing - **Company Size:** 37% Enterprise, 37% Mid-Market #### What Are D&B Risk Analytics's Pros and Cons? **Pros:** - Ease of Use (9 reviews) - Helpful (5 reviews) - Navigation Ease (5 reviews) - Dashboard Usability (4 reviews) - Data Management (4 reviews) **Cons:** - Expensive (2 reviews) - Inefficient Search (2 reviews) - Learning Curve (2 reviews) - Complex Setup (1 reviews) - Connection Issues (1 reviews) ### What Do G2 Reviewers Say About D&B Risk Analytics? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **user-friendly design** of D&B Risk Analytics, enjoying easy access to information and features. - Users find D&B Risk Analytics to be **consumer-friendly and reliable** , enhancing their auditing experience with comprehensive data access. - Users appreciate the **intuitive and standardized reports** in D&B Risk Analytics, making navigation exceptionally easy. - Users value the **easy-to-navigate dashboard** of D&B Risk Analytics, which simplifies monitoring supplier credit and compliance. - Users appreciate the **detailed and comprehensive data** provided by D&B Risk Analytics, enhancing their risk assessment processes. **Cons:** - Users find the pricing **expensive** and suggest more flexibility for trials and competitive report costs. - Users often face **inefficient searches** , struggling to locate companies without a Duns number and experiencing inconsistent results. - Users desire more upfront training on **specific ratings** , as understanding them is crucial for effective product utilization. - Users find the **interface complex for new users** , which can hinder ease of use and accessibility. - Users experience significant **connection issues** with D&B Risk Analytics, leading to prolonged downtime and frustration. #### What Are Recent G2 Reviews of D&B Risk Analytics? **"[Effortlessly Simplifies Compliance Tasks](https://www.g2.com/survey_responses/d-b-risk-analytics-review-12318483)"** **Rating:** 4.0/5.0 stars *— Alissa R.* [Read full review](https://www.g2.com/survey_responses/d-b-risk-analytics-review-12318483) --- **"[Stay Informed with Seamless Credit Monitoring](https://www.g2.com/survey_responses/d-b-risk-analytics-review-12007222)"** **Rating:** 4.5/5.0 stars *— Katie G.* [Read full review](https://www.g2.com/survey_responses/d-b-risk-analytics-review-12007222) --- ### 13. [Omnea](https://www.g2.com/products/omnea-omnea/reviews) Omnea is an AI-native platform designed to reshape procurement processes, making them simple, secure, and efficient for organizations. By orchestrating the interactions between people, processes, and systems, Omnea transforms the buying experience for both employees and suppliers. This AI-native solution aims to create a unified source of truth for supplier management while embedding consistent commercial and risk governance throughout the procurement lifecycle. Omnea caters to organizations that require a robust procurement solution to manage complex supplier relationships and procurement workflows. With its user-friendly interface and intelligent automation capabilities, Omnea is particularly beneficial for procurement teams looking to enhance their operational efficiency and decision-making processes. The platform is designed to support a wide range of use cases, from managing supplier onboarding and compliance to optimizing purchasing decisions and mitigating risks associated with supplier relationships. One of the key features of Omnea is its ability to provide real-time insights into supplier performance and procurement activities. This feature enables organizations to make informed decisions based on accurate data, reducing the likelihood of errors and inefficiencies. Additionally, Omnea’s AI-driven analytics tools help identify trends and opportunities for cost savings, allowing procurement teams to strategically negotiate better terms with suppliers. Another significant benefit of Omnea is its emphasis on governance and compliance. By embedding risk management protocols within the procurement process, the platform ensures that organizations adhere to regulatory requirements and internal policies. This not only protects the organization from potential compliance issues but also fosters trust among suppliers and stakeholders. Omnea has quickly gained the trust of leading global enterprises such as Spotify, Adecco Group, Adyen, MongoDB, and Monzo since its founding in 2022. Supported by some of the world's most respected investors including Khosla Ventures, Insight Partners, and Accel the platform stands out in the procurement orchestration category by combining advanced AI capabilities with a focus on user experience and governance. This unique approach positions Omnea as a valuable tool for organizations aiming to enhance their procurement strategies while navigating the complexities of supplier management. **Average Rating:** 4.8/5.0 **Total Reviews:** 54 **How Do G2 Users Rate Omnea?** - **Oversight:** 8.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.7/10 (Category avg: 9.2/10) - **Centralized Data:** 8.3/10 (Category avg: 8.9/10) **Who Is the Company Behind Omnea?** - **Seller:** [Omnea](https://www.g2.com/sellers/omnea) - **Company Website:** https://www.omnea.co/ - **Year Founded:** 2022 - **HQ Location:** London, GB - **LinkedIn® Page:** https://www.linkedin.com/company/omnea (179 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Computer Software - **Company Size:** 33% Enterprise, 33% Mid-Market #### What Are Omnea's Pros and Cons? **Pros:** - Ease of Use (36 reviews) - Implementation Ease (27 reviews) - Customer Support (24 reviews) - Features (23 reviews) - Collaboration (17 reviews) **Cons:** - Missing Features (6 reviews) - Complex Setup (5 reviews) - Improvement Needed (5 reviews) - Integration Issues (5 reviews) - Limited Features (4 reviews) ### What Do G2 Reviewers Say About Omnea? *AI-generated summary from verified user reviews* **Pros:** - Users value the **ease of use** in Omnea for managing supplier relationships and streamlining workflows effectively. - Users appreciate the **implementation ease** of Omnea, highlighting its user-friendly UI and smooth onboarding process. - Users appreciate the **outstanding customer support** of Omnea, noting the team's responsiveness and collaborative approach. - Users appreciate the **frequent new features** of Omnea, enhancing value and fostering effective user collaboration. - Users value the **seamless collaboration** enabled by Omnea, enhancing interactions across teams for improved productivity. **Cons:** - Users find Omnea lacking **key features** that hinder workflow efficiency and potential AI utilization. - Users find the **complex setup** process of Omnea challenging initially, particularly when migrating from other platforms. - Users believe there is **improvement needed** in communication, AI utilization, and reporting capabilities within Omnea. - Users report **integration issues** , finding the migration process cumbersome and time-consuming, affecting overall satisfaction with Omnea. - Users note **limited features** that hinder workflow efficiency and suggest improvements for enhanced functionality and compliance. #### What Are Recent G2 Reviews of Omnea? **"[Best-in-Class Supplier Onboarding with Standout Support](https://www.g2.com/survey_responses/omnea-review-13068152)"** **Rating:** 5.0/5.0 stars *— Parker M.* [Read full review](https://www.g2.com/survey_responses/omnea-review-13068152) --- **"[The best procurement & compliance platform: intuitive, configurable, with outstanding support](https://www.g2.com/survey_responses/omnea-review-12974180)"** **Rating:** 5.0/5.0 stars *— Mario G.* [Read full review](https://www.g2.com/survey_responses/omnea-review-12974180) --- ### 14. [Ethixbase360](https://www.g2.com/products/ethixbase360/reviews) Ethixbase360 is a comprehensive third-party risk management platform that helps organizations identify, assess, manage, and monitor risk across their global third-party ecosystem. Combining advanced technology with expert due diligence, the platform enables organizations to strengthen compliance, improve supply chain transparency, and build more resilient business relationships. Designed for mid-market and enterprise organizations operating in complex regulatory environments, Ethixbase360 supports organizations across industries including healthcare and life sciences, manufacturing, extraction, energy, technology, transportation, and logistics. It helps companies address a broad range of third-party risks, including anti-bribery and corruption, sanctions, modern slavery, human rights, cybersecurity, ESG, and reputational risk. The platform provides configurable risk-based workflows, enhanced due diligence, sanctions and adverse media screening, continuous monitoring, supplier engagement tools, and comprehensive reporting, giving organizations a defensible, audit-ready approach to managing third-party risk. Its modular, scalable architecture enables organizations to adapt to evolving regulatory requirements while driving greater transparency, resilience, and accountability throughout their value chains. **Average Rating:** 4.5/5.0 **Total Reviews:** 33 **How Do G2 Users Rate Ethixbase360?** - **Oversight:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Centralized Data:** 6.7/10 (Category avg: 8.9/10) **Who Is the Company Behind Ethixbase360?** - **Seller:** [Ethixbase360](https://www.g2.com/sellers/ethixbase360) - **Company Website:** https://ethixbase360.com/ - **Year Founded:** 2011 - **HQ Location:** London, England, United Kingdom - **Twitter:** @ethixbase360 (1,298 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/ethixbase360 (215 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 64% Enterprise, 33% Mid-Market #### What Are Ethixbase360's Pros and Cons? **Pros:** - Ease of Use (17 reviews) - Customer Support (12 reviews) - Customization (5 reviews) - Easy Integrations (5 reviews) - Implementation Ease (5 reviews) **Cons:** - Complex Setup (2 reviews) - Lack of Clarity (2 reviews) - Poor Notifications (2 reviews) - Poor Reporting (2 reviews) - Slow Loading (2 reviews) ### What Do G2 Reviewers Say About Ethixbase360? *AI-generated summary from verified user reviews* **Pros:** - Users find Ethixbase360 **very user-friendly** , allowing for quick results and efficient counterparty screening. - Users commend the **outstanding customer support** from Ethixbase360, enhancing their overall experience with the software. - Users value the **customization** options of Ethixbase360, enabling tailored solutions for unique third-party risk management needs. - Users praise the **easy integrations** with Ethixbase360, enhancing collaboration and workflow efficiency seamlessly. - Users value the **ease of implementation** of Ethixbase360, finding it simple and supportive for their administrative needs. **Cons:** - Users find the **complex setup** of Ethixbase360 overwhelming, requiring extra training to navigate its features effectively. - Users find a **lack of clarity** in third-party responses, often requiring extra guidance to make sense of results. - Users find the **poor notifications** frustrating, noting a lack of customization and frequent false alerts. - Users struggle with **poor reporting** due to hard-to-use tools and missed alerts on critical business changes. - Users experience **slow loading** times, especially when processing large results in the UBO section, hindering efficiency. #### What Are Recent G2 Reviews of Ethixbase360? **"[Platforms is Super Easy to Use](https://www.g2.com/survey_responses/ethixbase360-review-12967402)"** **Rating:** 5.0/5.0 stars *— Tami H.* [Read full review](https://www.g2.com/survey_responses/ethixbase360-review-12967402) --- **"[Great Due Diligence Service](https://www.g2.com/survey_responses/ethixbase360-review-12963454)"** **Rating:** 5.0/5.0 stars *— Vincent Q.* [Read full review](https://www.g2.com/survey_responses/ethixbase360-review-12963454) --- ### 15. [Ncontracts](https://www.g2.com/products/ncontracts-ncontracts/reviews) Ncontracts is a leading provider of SaaS-based risk management and compliance solutions for financial services companies. Our GRC solutions help more than 5,000 banks, credit unions, mortgage companies, fintechs, and trusts achieve their risk management and compliance goals with a powerful combination of user-friendly, cloud-based software and expert services. **Average Rating:** 4.7/5.0 **Total Reviews:** 178 **How Do G2 Users Rate Ncontracts?** - **Oversight:** 8.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.5/10 (Category avg: 9.2/10) - **Centralized Data:** 9.0/10 (Category avg: 8.9/10) - **KPIs:** 8.3/10 (Category avg: 8.5/10) **Who Is the Company Behind Ncontracts?** - **Seller:** [Ncontracts](https://www.g2.com/sellers/ncontracts) - **Company Website:** https://www.ncontracts.com/ - **Year Founded:** 2009 - **HQ Location:** Brentwood, TN - **Twitter:** @Ncontracts (1,794 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/ncontracts/ (470 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Banking, Financial Services - **Company Size:** 80% Mid-Market, 12% Small-Business #### What Are Ncontracts's Pros and Cons? **Pros:** - Customer Support (18 reviews) - Ease of Use (18 reviews) - Compliance Management (13 reviews) - Useful (13 reviews) - Features (11 reviews) **Cons:** - Data Management Issues (5 reviews) - Integration Issues (5 reviews) - Import Issues (4 reviews) - Inadequate Reporting (4 reviews) - Limited Integration (4 reviews) ### What Do G2 Reviewers Say About Ncontracts? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **dedicated customer support** of Ncontracts, appreciating their attentiveness and commitment to improving user experience. - Users find Ncontracts to be **user-friendly and easy to use** , streamlining vendor management and risk assessments effectively. - Users appreciate the **ease of use and comprehensive compliance management** that Ncontracts provides, enhancing vendor management efficiency. - Users appreciate the **streamlined processes** of Ncontracts, significantly enhancing efficiency and compliance management in their workflows. - Users appreciate the **exceptional support and user-friendly features** of Ncontracts, making implementation and usage seamless. **Cons:** - Users face **data management issues** , struggling with complicated navigation, manual processes, and inadequate reporting in Ncontracts. - Users find the **integration capabilities lacking** , limiting the full potential of Ncontracts' offerings and creating sync issues. - Users report significant **import issues** with Ncontracts, including challenges with data transfer and lack of automated workflows. - Users find the **reporting capabilities inadequate** , leading to frustrations with manual processes and inefficient workflows. - Users are frustrated by the **limited integration** capabilities of Ncontracts, hindering overall product effectiveness and data syncing. #### What Are Recent G2 Reviews of Ncontracts? **"[Centralized Contracts with User-Friendly Interface](https://www.g2.com/survey_responses/ncontracts-review-12432305)"** **Rating:** 4.5/5.0 stars *— Laciu .* [Read full review](https://www.g2.com/survey_responses/ncontracts-review-12432305) --- **"[Simplifies Compliance with Efficient Vendor Management](https://www.g2.com/survey_responses/ncontracts-review-12212319)"** **Rating:** 4.5/5.0 stars *— Sadaf S.* [Read full review](https://www.g2.com/survey_responses/ncontracts-review-12212319) --- #### What Are G2 Users Discussing About Ncontracts? - [What is Ncontracts used for?](https://www.g2.com/discussions/what-is-ncontracts-used-for) ### 16. [apexanalytix](https://www.g2.com/products/apex-analytics-apexanalytix/reviews) apexanalytix delivers enterprise risk resolution with touchless onboarding, auto-acting risk management and profit recovery outcomes. Over 300 of the world’s largest companies protect more than $9T in annual spend with the apexanalytix platform. Powered by Private Generative AI, 100M+ golden records, and integrated global data sources, organizations collaborate with suppliers and customers to build trust, create value, and resolve complex risk. Founded in 1988, apexanalytix has a proven history of enterprise risk resolution. Visit www.apexanalytix.com for more information. **Average Rating:** 4.6/5.0 **Total Reviews:** 52 **How Do G2 Users Rate apexanalytix?** - **Oversight:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Centralized Data:** 9.3/10 (Category avg: 8.9/10) - **KPIs:** 9.6/10 (Category avg: 8.5/10) **Who Is the Company Behind apexanalytix?** - **Seller:** [apexanalytix](https://www.g2.com/sellers/apexanalytix) - **Year Founded:** 1988 - **HQ Location:** Greensboro, US - **LinkedIn® Page:** http://www.linkedin.com/company/apex-analytix (519 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Manufacturing, Accounting - **Company Size:** 81% Enterprise, 11% Mid-Market #### What Are apexanalytix's Pros and Cons? **Pros:** - Customer Support (12 reviews) - Customer Satisfaction (10 reviews) - Team Helpfulness (10 reviews) - Helpful (8 reviews) - Collaboration (7 reviews) **Cons:** - Complexity (4 reviews) - Complex Setup (3 reviews) - Customization Difficulty (3 reviews) - Supplier Issues (3 reviews) - UX Improvement (3 reviews) ### What Do G2 Reviewers Say About apexanalytix? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **exceptional customer support** from Apexanalytix, noting their promptness and genuine investment in success. - Users appreciate the **exceptional customer service** from Apex, praising their prompt and caring support throughout the implementation process. - Users highly value the **helpfulness of the Apex team** , noting their investment in successful implementation and responsiveness. - Users appreciate the **responsive and helpful team** at apexanalytix, dedicated to ensuring successful implementations. - Users appreciate the **transparency and collaboration** at apexanalytix, fostering a positive and supportive work environment. **Cons:** - Users find the **integration complexity** of Apexanalytix challenging, impacting efficiency and usability in complex environments. - Users find the **integration process complex** and suggest improvements for a more streamlined, plug-and-play experience. - Users face **customization difficulties** , often finding it a challenging and time-consuming process to implement adjustments. - Users find it challenging to engage suppliers due to **supplier issues** affecting collaboration and usability. - Users find the **current UI for registration lacking** , but anticipate improvements in future updates enhancing usability. #### What Are Recent G2 Reviews of apexanalytix? **"[Apexanalytix Delivers a Tailored Solution with Real, No-Pressure Support](https://www.g2.com/survey_responses/apexanalytix-review-12622024)"** **Rating:** 5.0/5.0 stars *— Tammy C.* [Read full review](https://www.g2.com/survey_responses/apexanalytix-review-12622024) --- **"[Evolving Capabilities with Proactive Feature Activation Needed](https://www.g2.com/survey_responses/apexanalytix-review-12623189)"** **Rating:** 4.0/5.0 stars *— Jaya N.* [Read full review](https://www.g2.com/survey_responses/apexanalytix-review-12623189) --- ### 17. [ProcessUnity TPRM Platform](https://www.g2.com/products/processunity-tprm-platform/reviews) ProcessUnity is THE Third-Party Risk Management (TPRM) company. Our software platforms and data services protect customers from cybersecurity threats, breaches, and outages that originate from their ever-growing ecosystem of business partners. With ProcessUnity, customers can assess more of their contractors, suppliers, vendors, and service providers faster and more thoroughly, securing intellectual property and customer data so business operations can continue to operate uninterrupted. Our unique combination of the world’s largest third-party risk data exchange, the leading TPRM workflow platform, and powerful artificial intelligence powers the industry’s most complete solution for Third-Party Risk Management. Our solutions, platforms, and people extend third-party risk, procurement, and cybersecurity teams to cover 100 percent of their vendor ecosystem and build a comprehensive controls framework that extends to their business partners. This results in measurable value to our customers through inherent risk assessments on their portfolio, reduced vendor onboarding cycle times, the elimination of assessment backlogs, the ability to get assessment data from hard-to-assess third parties, and a streamlined threat response. Ultimately, using ProcessUnity, our customers can close any gaps in their third-party risk programs. Organizations of all sizes utilize ProcessUnity to reduce assessment work while improving quality, automate processes across their entire TPRM lifecycle, respond to and manage emerging threats and vulnerabilities, and minimize risk posed by their third-party ecosystem. To learn more or request a demo, visit www.processunity.com. **Average Rating:** 4.5/5.0 **Total Reviews:** 54 **How Do G2 Users Rate ProcessUnity TPRM Platform?** - **Oversight:** 9.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10) - **Centralized Data:** 10.0/10 (Category avg: 8.9/10) - **KPIs:** 9.3/10 (Category avg: 8.5/10) **Who Is the Company Behind ProcessUnity TPRM Platform?** - **Seller:** [ProcessUnity](https://www.g2.com/sellers/processunity) - **Company Website:** https://www.processunity.com - **Year Founded:** 2003 - **HQ Location:** Concord, US - **Twitter:** @ProcessUnity (739 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/processunity/ (234 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Banking, Financial Services - **Company Size:** 54% Enterprise, 31% Mid-Market #### What Are ProcessUnity TPRM Platform's Pros and Cons? **Pros:** - Ease of Use (11 reviews) - Customization (8 reviews) - Customizability (7 reviews) - Risk Management (7 reviews) - Security Management (7 reviews) **Cons:** - Limitations (4 reviews) - Slow Loading (4 reviews) - Limited Features (3 reviews) - Slow Performance (3 reviews) - Steep Learning Curve (3 reviews) ### What Do G2 Reviewers Say About ProcessUnity TPRM Platform? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **ease of use** of ProcessUnity TPRM Platform, enabling quick customization for efficient workflows. - Users value the **high degree of customization** in ProcessUnity TPRM Platform, enabling tailored and efficient risk management workflows. - Users value the **high degree of customizability** in ProcessUnity TPRM, enhancing tailored workflows and efficient risk management. - Users value the **high degree of customization and automation** in ProcessUnity, streamlining complex third-party risk management effectively. - Users appreciate the **strong security management** of ProcessUnity, ensuring consistency and governance throughout the third-party risk lifecycle. **Cons:** - Users express frustration over **poor performance and limited capabilities** , affecting usability and overall satisfaction with the platform. - Users often express frustration with the **slow loading** times of ProcessUnity's TPRM Platform, impacting their overall experience. - Users express dissatisfaction with the **limited features** of ProcessUnity's TPRM Platform, particularly in Contract Lifecycle Management and dashboards. - Users frequently experience **slow performance** with ProcessUnity's TPRM Platform, impacting their overall satisfaction and productivity. - Users note a **steep learning curve** for admins and end users, complicating effective use of the ProcessUnity platform. #### What Are Recent G2 Reviews of ProcessUnity TPRM Platform? **"[ProcessUnity Delivers Consistent, Auditable Third-Party Risk Governance at Scale](https://www.g2.com/survey_responses/processunity-tprm-platform-review-12300636)"** **Rating:** 4.0/5.0 stars *— Ana Paula M.* [Read full review](https://www.g2.com/survey_responses/processunity-tprm-platform-review-12300636) --- **"[Highly Configurable with Minor Vendor Contact Hurdles](https://www.g2.com/survey_responses/processunity-tprm-platform-review-12664231)"** **Rating:** 4.5/5.0 stars *— Chad N.* [Read full review](https://www.g2.com/survey_responses/processunity-tprm-platform-review-12664231) --- ### 18. [Whistic](https://www.g2.com/products/whistic/reviews) Whistic is the fastest and most efficient way to exchange, evaluate, and manage security information — whether you’re assessing third-party vendors or responding to customer questionnaires. Designed for today’s fast-moving security and compliance teams, Whistic helps organizations build trust faster, reduce manual work, and move at the speed of business. Unlike other TPRM solutions that focus on just one side of the process, Whistic bridges both. Our platform combines AI-powered automation with the Trust Center Exchange™, a dynamic network where companies proactively publish and share their security posture. This eliminates repetitive back-and-forth communication, accelerates due diligence, and ensures transparency across the entire vendor ecosystem. With Whistic Assessment AI, teams can automate up to 90% of manual tasks, cut assessment time from weeks to minutes, and refocus valuable resources on high-impact security initiatives — all without increasing headcount. The result is a modern, scalable Third-Party Risk Management (TPRM) program that strengthens trust, enhances visibility, and transforms risk management from a roadblock into a competitive advantage. **Average Rating:** 4.5/5.0 **Total Reviews:** 53 **How Do G2 Users Rate Whistic?** - **Oversight:** 7.6/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.6/10 (Category avg: 9.2/10) - **Centralized Data:** 8.3/10 (Category avg: 8.9/10) - **KPIs:** 7.6/10 (Category avg: 8.5/10) **Who Is the Company Behind Whistic?** - **Seller:** [Whistic](https://www.g2.com/sellers/whistic) - **Company Website:** https://www.whistic.com - **Year Founded:** 2015 - **HQ Location:** Pleasant Grove, Utah - **Twitter:** @Whistic_Inc (1,210 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/6611250/ (48 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Computer Software, Information Technology and Services - **Company Size:** 47% Mid-Market, 34% Enterprise #### What Are Whistic's Pros and Cons? **Pros:** - Ease of Use (6 reviews) - Vendor Management (6 reviews) - Customer Support (4 reviews) - Documentation (4 reviews) - Efficiency (4 reviews) **Cons:** - Non-Intuitive Features (4 reviews) - Improvement Needed (3 reviews) - Not Intuitive (3 reviews) - UX Improvement (3 reviews) - Inefficient Risk Management (2 reviews) ### What Do G2 Reviewers Say About Whistic? *AI-generated summary from verified user reviews* **Pros:** - Users praise the **ease of use** of Whistic, finding it helpful for managing and evaluating vendors swiftly. - Users appreciate the **efficient vendor management** features of Whistic, enhancing collaboration and saving time in evaluations. - Users appreciate the **top-tier customer support** from Whistic, noting their personable and efficient service in resolving issues. - Users value the **thorough documentation** provided by Whistic, simplifying interactions with vendors and customers effectively. - Users value the **efficiency** of Whistic, enabling faster risk assessments and streamlined vendor management processes. **Cons:** - Users find Whistic's **non-intuitive features** and confusing UI negatively impact their overall experience and efficiency. - Users feel that Whistic needs **improvement in user-friendliness and organization** to enhance overall experience and ease of use. - Users find Whistic's interface **not intuitive** , leading to confusion and a challenging learning curve for effective usage. - Users feel the **UI/UX needs improvement** , finding it unintuitive and challenging to navigate effectively. - Users find the **inefficient risk management** process in Whistic cumbersome, leading to manual errors and limited analysis capabilities. #### What Are Recent G2 Reviews of Whistic? **"[Streamlined Vendor Assessments with Time-Saving Features](https://www.g2.com/survey_responses/whistic-review-12966187)"** **Rating:** 4.0/5.0 stars *— Korey K.* [Read full review](https://www.g2.com/survey_responses/whistic-review-12966187) --- **"[Simple Overview of Supplier Documentation](https://www.g2.com/survey_responses/whistic-review-12291639)"** **Rating:** 4.5/5.0 stars *— Kino V.* [Read full review](https://www.g2.com/survey_responses/whistic-review-12291639) --- #### What Are G2 Users Discussing About Whistic? - [What does Whistic do?](https://www.g2.com/discussions/what-does-whistic-do) - [How much does Whistic cost?](https://www.g2.com/discussions/how-much-does-whistic-cost) - [How does risk recon work?](https://www.g2.com/discussions/how-does-risk-recon-work) - [Who owns Whistic?](https://www.g2.com/discussions/who-owns-whistic) ### 19. [Ivalua](https://www.g2.com/products/ivalua/reviews) Ivalua is the only truly unified, enterprise AI platform for managing spend and suppliers. We seamlessly connect people, AI agents, workflows, and data, making businesses more profitable, resilient, and sustainable. We are trusted by over 500 of the world’s most admired brands and consistently recognized as a leader by Gartner and other analysts. Built natively on a single code base and a single data model, the platform eliminates the traditional friction of disconnected point solutions. It delivers common functionality, absolute data orchestration, and a unified user experience across the entire enterprise to ensure maximum user adoption and total process digitization. To support a comprehensive, general platform campaign, we explicitly connect our high-level enterprise AI capabilities to the pragmatic, operational pillars of Source-to-Pay. The platform's modular architecture allows organizations to build a distinct procurement competitive advantage by scaling across these core capability layers: Intake Management: A central, conversational Gen-AI portal that instantly triages and streamlines employee requests. Supplier Risk & Performance: Consolidates onboarding, scorecards, and tier-N visibility into a single supplier record for a true 360-degree view. Sourcing: Automates simple to complex RFXs, projects, and auctions across all spend types—including Direct, Indirect, CapEx, and Services. Contract Lifecycle Management (CLM): Speeds up execution using collaborative authoring, AI data capture, and a centralized searchable repository. eProcurement: Delivers a consumer-like enterprise shopping experience that drives user adoption and enforces contract compliance. Invoicing (AP Automation): Achieves touchless matching and automates compliance while cutting vendor inquiries via a free self-service portal. Payments & Expenses: Unifies global multi-currency payments, corporate card programs, and fraud alerts into one audited workflow. Spend Analysis: Leverages a native BI engine for on-demand classification to instantly surface tail-spend and cost savings. Direct Sourcing & Supply Chain Collaboration: Connects product teams and vendors directly through real-time BOM tracking, forecasting, and order confirmation. Environmental Impact Center: Provides an automated framework to track Scope 3 emissions and reduce footprints at the category and product level. **Average Rating:** 4.3/5.0 **Total Reviews:** 96 **How Do G2 Users Rate Ivalua?** - **Has the product been a good partner in doing business?:** 8.3/10 (Category avg: 9.2/10) **Who Is the Company Behind Ivalua?** - **Seller:** [Ivalua](https://www.g2.com/sellers/ivalua) - **Company Website:** https://www.ivalua.com - **Year Founded:** 2000 - **HQ Location:** Redwood City, CA - **Twitter:** @ivalua (2,200 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/82978/ (1,159 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Telecommunications, Manufacturing - **Company Size:** 78% Enterprise, 14% Mid-Market #### What Are Ivalua's Pros and Cons? **Pros:** - Features (30 reviews) - Customization (21 reviews) - Ease of Use (21 reviews) - Customizability (19 reviews) - Efficiency (13 reviews) **Cons:** - Implementation Challenges (8 reviews) - Learning Curve (8 reviews) - Steep Learning Curve (8 reviews) - Integration Issues (7 reviews) - Slow Performance (7 reviews) ### What Do G2 Reviewers Say About Ivalua? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **intuitive and customizable UI** of Ivalua, enhancing ease of use and tailored workflows. - Users value the **customization** offered by Ivalua, enabling tailored solutions that fit specific business needs effectively. - Users appreciate the **ease of use** of Ivalua, benefiting from its intuitive UI and streamlined procurement processes. - Users admire the **high level of customizability** in Ivalua, allowing adaptation to unique and complex business needs. - Users highlight Ivalua's **efficiency** in streamlining procurement processes, saving time and reducing overall operational cycle times. **Cons:** - Users face **implementation challenges** with Ivalua, requiring specific support and encountering complications with AI features. - Users find the **learning curve challenging** , making the initial setup and adoption process complex and time-consuming. - Users experience a **steep learning curve** with Ivalua, struggling to master its complex configuration options and settings. - Users face **integration issues** with Ivalua, including unstable environments and the need for custom connector rebuilding. - Users experience **slow performance** with Ivalua, facing issues like system lag and frustrating response times. #### What Are Recent G2 Reviews of Ivalua? **"[All-in-One Solution with Configurable Processes](https://www.g2.com/survey_responses/ivalua-review-12470280)"** **Rating:** 4.5/5.0 stars *— Gabriele R.* [Read full review](https://www.g2.com/survey_responses/ivalua-review-12470280) --- **"[Intuitive Platform with Customization Flexibility but Implementation Hurdles](https://www.g2.com/survey_responses/ivalua-review-12465999)"** **Rating:** 5.0/5.0 stars *— Giada O.* [Read full review](https://www.g2.com/survey_responses/ivalua-review-12465999) --- #### What Are G2 Users Discussing About Ivalua? - [Is Ivalua cloud based?](https://www.g2.com/discussions/is-ivalua-cloud-based) - 1 comment - [Is Ivalua an ERP?](https://www.g2.com/discussions/is-ivalua-an-erp) - [What does procurement software do?](https://www.g2.com/discussions/what-does-procurement-software-do) - 1 comment - [What is Ivalua used for?](https://www.g2.com/discussions/what-is-ivalua-used-for) ### 20. [Gatekeeper](https://www.g2.com/products/gatekeeper/reviews) Gatekeeper cuts vendor costs by an average of $1.3 million in year one, while reducing contract cycle times by 75% and saving 400+ hours per audit. Powered by LuminIQ agentic AI, Gatekeeper is the only unified platform combining contract lifecycle management (CLM), third-party and supplier risk management, and spend management software. Built for procurement, finance, and legal teams, Gatekeeper features industry-first AI agents for business operations that function as a digital workforce, autonomously handling contract management, contract analytics, vendor management, and compliance validation. Gatekeeper AI agents read, reason, and act on data securely within the platform, explaining every decision for complete transparency and auditability. Organizations accelerate contracting through AI-powered contract summaries, clause extraction, automated redlining, intelligent approval routing, and integrated e-signature capabilities, while 24/7 third-party surveillance across financial, cybersecurity, and regulatory news sources automatically flags anomalies and non-compliant terms. The platform orchestrates procurement workflows and supplier relationship management while providing vendor security and privacy assessment tools. Gatekeeper's spend module reveals consolidation opportunities and tracks actual versus forecasted expenditures. With 1,700+ business application integrations, branded vendor portals, workflow management automation, and unlimited user access on all plans, Gatekeeper keeps organizations perpetually audit-ready. **Average Rating:** 4.5/5.0 **Total Reviews:** 82 **How Do G2 Users Rate Gatekeeper?** - **Oversight:** 9.0/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.3/10 (Category avg: 9.2/10) - **Centralized Data:** 9.0/10 (Category avg: 8.9/10) - **KPIs:** 8.3/10 (Category avg: 8.5/10) **Who Is the Company Behind Gatekeeper?** - **Seller:** [Gatekeeper](https://www.g2.com/sellers/gatekeeper) - **Company Website:** https://www.gatekeeperhq.com - **Year Founded:** 2010 - **HQ Location:** London, United Kingdom - **Twitter:** @gatekeeperhq (100 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/gatekeeperhq/ (115 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Information Technology and Services, Financial Services - **Company Size:** 49% Mid-Market, 29% Enterprise #### What Are Gatekeeper's Pros and Cons? **Pros:** - Ease of Use (23 reviews) - Customer Support (14 reviews) - Contract Management (11 reviews) - Implementation Ease (11 reviews) - Customization (9 reviews) **Cons:** - Missing Features (8 reviews) - Limited Customization (6 reviews) - Expensive (5 reviews) - High Fees (5 reviews) - Poor Customer Support (4 reviews) ### What Do G2 Reviewers Say About Gatekeeper? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **user-friendly design** of Gatekeeper, making it easy to implement and manage contracts efficiently. - Users value the **responsive and helpful customer support** from Gatekeeper, ensuring timely assistance whenever needed. - Users value the **ease of contract management** in Gatekeeper, with efficient processes and helpful customer support. - Users find the **implementation straightforward** , with exceptional support making onboarding seamless and efficient for teams. - Users value the **customization options** of Gatekeeper, enhancing their contract management and approval workflows effectively. **Cons:** - Users find **missing features** in Gatekeeper, including customization limits and lack of ERP integration, frustrating. - Users find **limited customization** frustrating, requiring significant time and effort for modifications and support. - Users find the **additional modules expensive** , noting the significant cost jump and limited development options. - Users find the **high fees** for additional modules and features a significant drawback of Gatekeeper. - Users report **poor customer support** , facing difficulties in resolving issues and obtaining timely assistance from Gatekeeper. #### What Are Recent G2 Reviews of Gatekeeper? **"[Easy-to-Connect CLM with a Powerful API](https://www.g2.com/survey_responses/gatekeeper-review-12409063)"** **Rating:** 4.5/5.0 stars *— David d.* [Read full review](https://www.g2.com/survey_responses/gatekeeper-review-12409063) --- **"[Gatekeeper, it just works well!](https://www.g2.com/survey_responses/gatekeeper-review-11129491)"** **Rating:** 4.5/5.0 stars *— Lawrence B.* [Read full review](https://www.g2.com/survey_responses/gatekeeper-review-11129491) --- #### What Are G2 Users Discussing About Gatekeeper? - [Is GateKeeper free?](https://www.g2.com/discussions/is-gatekeeper-free) - [What is GateKeeper review?](https://www.g2.com/discussions/what-is-gatekeeper-review) - [Is GateKeeper cloud-based?](https://www.g2.com/discussions/is-gatekeeper-cloud-based) - [What is a GateKeeper software?](https://www.g2.com/discussions/what-is-a-gatekeeper-software) ### 21. [Optro](https://www.g2.com/products/optro/reviews) Optro (Formerly AuditBoard) is a GRC software solution that helps enterprises manage audit, risk, and compliance workflows through an agentic system of action. By using GRC-trained AI, centralizing disparate data points, and automating manual processes, the platform enables organizations to transition from reactive risk management to proactive strategic planning. The platform functions as a comprehensive ecosystem for risk managers, assurance leaders, internal auditors, and compliance officers. It addresses the increasing complexity of modern regulatory environments by providing tools for real-time monitoring and reporting. Optro facilitates a streamlined flow of information between teams, ensuring that risk data is not siloed but instead used to inform high-level business decisions. Optro’s approach allows companies to identify emerging threats and operational vulnerabilities before they impact the bottom line, ultimately turning risk management into a driver of organizational opportunity. **Average Rating:** 4.6/5.0 **Total Reviews:** 1,586 **How Do G2 Users Rate Optro?** - **Oversight:** 8.5/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.0/10 (Category avg: 9.2/10) - **Centralized Data:** 8.7/10 (Category avg: 8.9/10) - **KPIs:** 8.4/10 (Category avg: 8.5/10) **Who Is the Company Behind Optro?** - **Seller:** [Optro](https://www.g2.com/sellers/optro) - **Company Website:** https://optro.ai/ - **Year Founded:** 2014 - **HQ Location:** Cerritos, California - **Twitter:** @optrohq (2,975 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/optro/ (821 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Internal Audit Manager, Senior Internal Auditor - **Top Industries:** Financial Services, Accounting - **Company Size:** 59% Enterprise, 20% Mid-Market #### What Are Optro's Pros and Cons? **Pros:** - Ease of Use (243 reviews) - Audit Management (150 reviews) - Intuitive (113 reviews) - Features (100 reviews) - Audit Efficiency (84 reviews) **Cons:** - Limited Functionality (71 reviews) - Improvement Needed (63 reviews) - Limited Customization (54 reviews) - Not Intuitive (54 reviews) - Limitations (51 reviews) ### What Do G2 Reviewers Say About Optro? *AI-generated summary from verified user reviews* **Pros:** - Users commend the **ease of use** of Optro, finding it efficient for various audit functions and assessments. - Users find the **efficiency of audit management** in Optro exceptional, facilitating a seamless end-to-end auditing process. - Users love the **intuitive interface** of AuditBoard, making it easy to navigate and manage assessments effectively. - Users praise the **versatile modules and integrations** of Optro, highlighting its ease of use and comprehensive design. - Users appreciate the **audit efficiency** of Optro, as it streamlines processes and enhances clarity throughout audits. **Cons:** - Users find Optro's **limited functionality** hampers analytics and makes project creation cumbersome at times. - Users express frustration over the **need for improvement** in Optro, particularly regarding audit assessments and lack of guidance. - Users find the **limited customization** of Optro challenging, especially regarding dashboard creation and role complexities. - Users find Optro's interface **not intuitive** , leading to challenges in navigating and utilizing its features effectively. - Users face challenges due to the **limited formatting options** on Optro, affecting organization and usability. #### What Are Recent G2 Reviews of Optro? **"[Overall a great user experience and easy to administer](https://www.g2.com/survey_responses/optro-review-9615543)"** **Rating:** 4.5/5.0 stars *— Verified User in Accounting* [Read full review](https://www.g2.com/survey_responses/optro-review-9615543) --- **"[Optro, the great ally in Risk Management, Controls, and Audits](https://www.g2.com/survey_responses/optro-review-10064397)"** **Rating:** 5.0/5.0 stars *— Marco Polo M.* [Read full review](https://www.g2.com/survey_responses/optro-review-10064397) --- #### What Are G2 Users Discussing About Optro? - [What is AuditBoard used for?](https://www.g2.com/discussions/what-is-auditboard-used-for) - 1 comment - [What is the best audit software?](https://www.g2.com/discussions/what-is-the-best-audit-software) - [What is audit management software?](https://www.g2.com/discussions/what-is-audit-management-software) - 1 comment - [What is Soxhub?](https://www.g2.com/discussions/what-is-soxhub) - 1 comment - [What is AuditBoard?](https://www.g2.com/discussions/what-is-auditboard) ### 22. [ServiceNow Governance, Risk, and Compliance (GRC)](https://www.g2.com/products/servicenow-governance-risk-and-compliance-grc/reviews) ServiceNow for Governance, Risk and Compliance (GRC) is an AI-native platform that connects enterprise risk management, compliance, cyber risk, operational resilience, third-party risk management, privacy compliance, AI governance, and ESG on a single platform and data model. Designed for midsize to large enterprises in all industries, it runs every program on the same AI platform powering the rest of your business, so your teams can sense emerging risk, decide what to do about it, act before it becomes a problem, and govern everything in between. Strong operations start with knowing where your risk is and building your business to withstand it. ServiceNow helps you quantify and manage risk across your enterprise, from process failures and privacy exposure to loss events, with AI native workflows that surface issues, assess impact, and connect risk directly to the operations and processes you depend on. The strongest organizations are built to withstand disruption, not just recover from it. Designed for frameworks like DORA, ServiceNow gives you the tools to assess exposure, strengthen critical operations, and build resilience into the way your business runs. When disruption hits, the impact is minimal and recovery is fast because business continuity plans and recovery workflows are connected and in place. The cyber threat landscape is expanding faster than most organizations can track, with threats growing in volume, sophistication, and speed from every direction. ServiceNow helps you translate cyber risk into business risk you can act on, with continuous control monitoring, risk quantification, and visibility into third-party exposure. Because everything runs on one platform, cyber risk data has the business context you need to make faster, more confident decisions. ServiceNow also gives you visibility into third-party risk across the full relationship lifecycle, so you always know where your risk is and can act before it becomes a problem. With AI-native assessments and real-time risk scoring, your vendor ecosystem never becomes a blind spot. Regulatory expectations are expanding faster than most compliance programs were built to handle. New frameworks, evolving privacy laws, and emerging AI regulations mean your team is constantly absorbing change while keeping existing obligations current. ServiceNow brings your entire compliance program onto one platform, from regulatory compliance and change management to audit readiness, privacy obligations, and sustainability disclosures. And as AI regulations take effect, keeping pace becomes part of that same compliance mandate. Govern every AI asset, from ServiceNow or any third party, with the visibility and controls needed to ensure every model operates safely, ethically, and in line with regulatory requirements. ServiceNow runs everything on one platform with one data model. Risk data is always current and flows freely across every program without manual reconciliation or duplicate effort. The result is a complete, contextualized, and connected picture of risk across your enterprise. **Average Rating:** 4.2/5.0 **Total Reviews:** 105 **How Do G2 Users Rate ServiceNow Governance, Risk, and Compliance (GRC)?** - **Oversight:** 7.9/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 8.2/10 (Category avg: 9.2/10) - **Centralized Data:** 7.7/10 (Category avg: 8.9/10) - **KPIs:** 5.8/10 (Category avg: 8.5/10) **Who Is the Company Behind ServiceNow Governance, Risk, and Compliance (GRC)?** - **Seller:** [ServiceNow](https://www.g2.com/sellers/servicenow) - **Company Website:** https://www.servicenow.com/ - **Year Founded:** 2004 - **HQ Location:** Santa Clara, CA - **Twitter:** @servicenow (55,548 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/29352/ (35,081 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Banking, Insurance - **Company Size:** 45% Enterprise, 18% Mid-Market #### What Are ServiceNow Governance, Risk, and Compliance (GRC)'s Pros and Cons? **Pros:** - Risk Management (8 reviews) - Automation (5 reviews) - Compliance Management (5 reviews) - Ease of Use (5 reviews) - Audit Management (4 reviews) **Cons:** - Complex Setup (2 reviews) - Expensive (2 reviews) - Learning Curve (2 reviews) - Learning Difficulty (2 reviews) - Limited Customization (2 reviews) ### What Do G2 Reviewers Say About ServiceNow Governance, Risk, and Compliance (GRC)? *AI-generated summary from verified user reviews* **Pros:** - Users find the **efficient structure and transparency** of Risk Management in ServiceNow enhancing their incident and task tracking. - Users value the **automation of tasks** in ServiceNow GRC, streamlining ESG reporting and enhancing compliance. - Users value the **unified platform for ESG management** , which automates tasks and enhances compliance and reporting efficiency. - Users find ServiceNow GRC to be **very easy to use** , consolidating tasks and updates in one efficient portal. - Users appreciate the **effective risk management capabilities** of ServiceNow GRC, enabling timely responses to risks in real time. **Cons:** - Users find the **complex setup** process time-consuming and requiring significant resources for proper configuration and deployment. - Users find the **expensive pricing** challenging, especially in the current economy, but still see its value. - Users find the **learning curve steep** , citing difficulties in understanding concepts and navigating the interface effectively. - Users find the **learning difficulty** significant, as the concept and navigation are not intuitive for newcomers. - Users express concerns about the **limited customization** in ServiceNow GRC, complicating tailored solutions and workflows. #### What Are Recent G2 Reviews of ServiceNow Governance, Risk, and Compliance (GRC)? **"[Single platform for enterprise-wide risk visibility](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12759445)"** **Rating:** 4.0/5.0 stars *— Verified User in Banking* [Read full review](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12759445) --- **"[Robust Traceability, Needs Better Workspace Functionality](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12776098)"** **Rating:** 4.0/5.0 stars *— Michael A.* [Read full review](https://www.g2.com/survey_responses/servicenow-governance-risk-and-compliance-grc-review-12776098) --- #### What Are G2 Users Discussing About ServiceNow Governance, Risk, and Compliance (GRC)? - [What is a governance risk and compliance tool?](https://www.g2.com/discussions/what-is-a-governance-risk-and-compliance-tool) - [Does ServiceNow have a GRC module?](https://www.g2.com/discussions/does-servicenow-have-a-grc-module) - [What are the features of IT GRC?](https://www.g2.com/discussions/what-are-the-features-of-it-grc) - [What can ServiceNow governance risk and compliance help?](https://www.g2.com/discussions/what-can-servicenow-governance-risk-and-compliance-help) ### 23. [1Exiger Platform](https://www.g2.com/products/1exiger-platform/reviews) Exiger’s award-winning, purpose-built technology platform, 1Exiger, is the only open-source, third-party and supply chain management software that helps companies and government agencies achieve cost savings, resilience, and compliance in real time. Created and launched in collaboration with our 550+ customers, the platform makes supply chain management simple, intuitive and accessible. The 1Exiger user experience is housed in an integrated suite that is scalable and secure. Using our powerful AI technology, you can uncover risks and reveal insights that enable confident decision-making. **Average Rating:** 4.5/5.0 **Total Reviews:** 17 **How Do G2 Users Rate 1Exiger Platform?** - **Oversight:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.4/10 (Category avg: 9.2/10) - **Centralized Data:** 9.0/10 (Category avg: 8.9/10) - **KPIs:** 8.3/10 (Category avg: 8.5/10) **Who Is the Company Behind 1Exiger Platform?** - **Seller:** [Exiger](https://www.g2.com/sellers/exiger) - **Company Website:** https://www.exiger.com/ - **HQ Location:** New York, NY - **Twitter:** @exigerllc (1,851 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/exiger (800 employees on LinkedIn®) **Who Uses This Product?** - **Company Size:** 53% Enterprise, 47% Mid-Market #### What Are 1Exiger Platform's Pros and Cons? **Pros:** - Risk Management (6 reviews) - Ease of Use (5 reviews) - Automation Efficiency (3 reviews) - Compliance Management (3 reviews) - Comprehensive Coverage (3 reviews) **Cons:** - Limited Customization (4 reviews) - Limited Functionality (4 reviews) - Difficult Usability (3 reviews) - Limited Features (3 reviews) - Poor Navigation (3 reviews) ### What Do G2 Reviewers Say About 1Exiger Platform? *AI-generated summary from verified user reviews* **Pros:** - Users appreciate the **strong risk visibility** of the 1Exiger Platform, enabling proactive management of compliance and regulatory risks. - Users find 1Exiger Platform to be **easy to use** , enabling seamless implementation and efficient risk management for all suppliers. - Users value the **automation efficiency** of the 1Exiger Platform, streamlining risk management and compliance workflows effectively. - Users value the **centralized compliance management** of the 1Exiger Platform, streamlining risk assessment and reporting effectively. - Users appreciate the **comprehensive coverage** of 1Exiger, finding it user-friendly and effective for risk management. **Cons:** - Users find the **limited customization** options of the 1Exiger Platform restrict their ability to meet specific business needs. - Users note the **limited functionality** of the 1Exiger Platform, especially regarding customization and mobile accessibility. - Users experience **difficult usability** with the 1Exiger Platform, citing a steep learning curve and complex navigation. - Users find **customization options limited** on the 1Exiger Platform, especially for mobile access and specific modules. - Users report that the **navigation can be confusing** and slow, particularly for new users handling complex tasks. #### What Are Recent G2 Reviews of 1Exiger Platform? **"[Easy-to-Use Platform That Centralizes Risk & Compliance Data and Saves Time](https://www.g2.com/survey_responses/1exiger-platform-review-10545189)"** **Rating:** 4.5/5.0 stars *— Verified User in Package/Freight Delivery* [Read full review](https://www.g2.com/survey_responses/1exiger-platform-review-10545189) --- **"[Great Visibility Into HQ Practices for Remote Teams](https://www.g2.com/survey_responses/1exiger-platform-review-12726616)"** **Rating:** 4.0/5.0 stars *— carl l.* [Read full review](https://www.g2.com/survey_responses/1exiger-platform-review-12726616) --- #### What Are G2 Users Discussing About 1Exiger Platform? - [What is DDIQ used for?](https://www.g2.com/discussions/what-is-ddiq-used-for) ### 24. [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews) RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third\_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability. **Average Rating:** 4.9/5.0 **Total Reviews:** 118 **How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?** - **Has the product been a good partner in doing business?:** 9.9/10 (Category avg: 9.2/10) **Who Is the Company Behind RiskProfiler - External Threat Exposure Management?** - **Seller:** [Riskprofiler](https://www.g2.com/sellers/riskprofiler) - **Company Website:** https://riskprofiler.io/ - **Year Founded:** 2019 - **HQ Location:** Rock Hill , US - **Twitter:** @riskprofilerio (209 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/riskprofiler (32 employees on LinkedIn®) **Who Uses This Product?** - **Who Uses This:** Software Engineer, Security Consultant - **Top Industries:** Information Technology and Services, Design - **Company Size:** 66% Mid-Market, 33% Small-Business #### What Are RiskProfiler - External Threat Exposure Management's Pros and Cons? **Pros:** - Risk Management (70 reviews) - Features (32 reviews) - Customer Support (31 reviews) - Ease of Use (30 reviews) - Easy Setup (29 reviews) **Cons:** - Learning Curve (17 reviews) - Complexity (16 reviews) - Difficult Learning (16 reviews) - Learning Difficulty (10 reviews) - Complex Setup (8 reviews) ### What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management? *AI-generated summary from verified user reviews* **Pros:** - Users value the **effective threat intelligence** of RiskProfiler, enabling efficient management of external and vendor threats. - Users appreciate the **seamless onboarding and integration** of RiskProfiler, enhancing their threat monitoring and management capabilities. - Users commend the **fast and efficient customer support** of RiskProfiler, enhancing their overall experience and response time. - Users praise the **ease of use** of RiskProfiler, enabling quick integration and seamless onboarding into existing workflows. - Users value the **easy setup** of RiskProfiler, allowing quick implementation and effective monitoring of security threats. **Cons:** - Users face a **steep learning curve** with RiskProfiler, necessitating time for training and customization for effective use. - Users find the **complexity** of RiskProfiler can lead to a steep learning curve and information overload. - Users find the **difficult learning** curve challenging, requiring substantial training to navigate the platform effectively. - Users face a **steep learning curve** with RiskProfiler, necessitating significant time for training and customization. - Users find the **complex setup** of RiskProfiler challenging, hindering adoption for non-specialist teams. #### What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management? **"[Contextual Intelligence That Connects Risk Across the Attack Surface](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)"** **Rating:** 5.0/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957) --- **"[Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)"** **Rating:** 5.0/5.0 stars *— Verified User in Information Technology and Services* [Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581) --- ### 25. [Panorays](https://www.g2.com/products/panorays/reviews) Panorays is a type of third-party cyber risk management solution designed to help businesses optimize their defenses against potential threats posed by external partners and suppliers. By focusing on the unique risks associated with each third-party relationship, Panorays enables organizations to proactively identify vulnerabilities and implement effective strategies to mitigate them. The product primarily targets businesses operating within complex supply chains, where the interdependence on various third-party vendors can introduce significant cyber risks. Industries such as finance, healthcare, and technology, which often handle sensitive data and are subject to strict regulatory requirements, can particularly benefit from Panorays. The solution is designed for risk management professionals, compliance officers, and IT security teams who need to ensure that their third-party relationships do not compromise their cybersecurity posture. Key use cases for Panorays include continuous monitoring of third-party vendors, conducting risk assessments, and managing compliance with industry regulations. The platform allows users to automate the collection of security data from third parties, enabling organizations to gain real-time visibility into their partners' security practices. This proactive approach helps businesses to not only identify potential threats but also to respond effectively with actionable remediations tailored to each vendor's specific risk profile. Panorays stands out in the cyber risk management category due to its comprehensive features that facilitate a streamlined risk assessment process. The solution offers automated questionnaires, risk scoring, and detailed reporting capabilities, allowing users to evaluate third-party security postures efficiently. Additionally, the platform integrates seamlessly with existing security frameworks, enhancing the overall risk management strategy without disrupting current workflows. By providing a centralized dashboard, Panorays empowers organizations to make informed decisions based on accurate data, ultimately strengthening their cybersecurity defenses against evolving threats. In summary, Panorays is a robust tool for businesses looking to enhance their third-party cyber risk management capabilities. By offering a combination of automation, real-time insights, and tailored remediation strategies, it equips organizations with the necessary resources to navigate the complexities of third-party relationships while maintaining a strong security posture. **Average Rating:** 4.3/5.0 **Total Reviews:** 52 **How Do G2 Users Rate Panorays?** - **Oversight:** 8.7/10 (Category avg: 8.8/10) - **Has the product been a good partner in doing business?:** 9.2/10 (Category avg: 9.2/10) - **Centralized Data:** 8.1/10 (Category avg: 8.9/10) - **KPIs:** 7.7/10 (Category avg: 8.5/10) **Who Is the Company Behind Panorays?** - **Seller:** [Panorays](https://www.g2.com/sellers/panorays) - **Company Website:** https://panorays.com/ - **Year Founded:** 2016 - **HQ Location:** New York, New York, United States - **Twitter:** @panorays (1,135 Twitter followers) - **LinkedIn® Page:** https://www.linkedin.com/company/panorays (123 employees on LinkedIn®) **Who Uses This Product?** - **Top Industries:** Financial Services, Information Technology and Services - **Company Size:** 56% Enterprise, 33% Mid-Market #### What Are Panorays's Pros and Cons? **Pros:** - Ease of Use (25 reviews) - Intuitive (10 reviews) - Automation Efficiency (9 reviews) - Vendor Management (9 reviews) - Risk Management (8 reviews) **Cons:** - Lack of Clarity (7 reviews) - Limited Customization (6 reviews) - Poor Reporting (6 reviews) - Improvement Needed (5 reviews) - Inefficient Risk Management (5 reviews) ### What Do G2 Reviewers Say About Panorays? *AI-generated summary from verified user reviews* **Pros:** - Users find Panorays **accessible and easy to use** , enhancing efficiency and simplifying third-party risk management processes. - Users value the **intuitive user interface** of Panorays, which simplifies navigation and enhances the overall experience. - Users value the **automation efficiency** of Panorays, significantly reducing their workload during vendor risk assessments. - Users value the **user-friendly platform** of Panorays, appreciating its visual dashboards and efficient vendor management capabilities. - Users value the **automated vendor risk assessments** of Panorays, significantly enhancing efficiency in evaluating third-party security. **Cons:** - Users experience a **lack of clarity** regarding research requirements, leading to confusion and missed deadlines. - Users find the **limited customization** options of Panorays less effective for tailored reporting and dashboard needs. - Users highlight the need for improved **reporting** capabilities to enhance insights and customization in Panorays. - Users indicate that **improvements are needed** in reporting and overall workflow for better vendor management functionality. - Users experience **inefficient risk management** with Panorays, facing challenges in scanning, tracking, and reporting vendor risks. #### What Are Recent G2 Reviews of Panorays? **"[A Complete Flexible and Efficient Third-Party Security Management Solution](https://www.g2.com/survey_responses/panorays-review-12079253)"** **Rating:** 5.0/5.0 stars *— Wayne P.* [Read full review](https://www.g2.com/survey_responses/panorays-review-12079253) --- **"[Effortless Third-Party Risk Management in One Platform](https://www.g2.com/survey_responses/panorays-review-12091737)"** **Rating:** 4.5/5.0 stars *— Oleg B.* [Read full review](https://www.g2.com/survey_responses/panorays-review-12091737) --- #### What Are G2 Users Discussing About Panorays? - [What is Panorays used for?](https://www.g2.com/discussions/what-is-panorays-used-for) ## What Is Third Party & Supplier Risk Management Software? [Governance, Risk & Compliance Software](https://www.g2.com/categories/governance-risk-compliance) ## What Software Categories Are Similar to Third Party & Supplier Risk Management Software? - [Audit Management Software](https://www.g2.com/categories/audit-management) - [Regulatory Change Management Software](https://www.g2.com/categories/regulatory-change-management) - [IT Risk Management Software](https://www.g2.com/categories/it-risk-management) - [Operational Risk Management Software](https://www.g2.com/categories/operational-risk-management) - [Enterprise Risk Management (ERM) Software](https://www.g2.com/categories/enterprise-risk-management-erm) - [Vendor Security and Privacy Assessment Software](https://www.g2.com/categories/vendor-security-and-privacy-assessment) - [Security Compliance Software](https://www.g2.com/categories/security-compliance) --- ## How Do You Choose the Right Third Party & Supplier Risk Management Software? ### What You Should Know About Third Party & Supplier Risk Management Software ### Third-Party Supplier Risk Management Software FAQs ### Most Popular FAQs #### Which third-party supplier risk management software has the best reviews? Based on verified user ratings across G2 reviews, these third-party and supplier risk management platforms consistently earn top marks for overall satisfaction: - [UpGuard](https://www.g2.com/products/upguard/reviews) — A widely adopted third-party risk management platform recognized for its continuous vendor security monitoring, attack surface intelligence, and data breach detection capabilities that give security and procurement teams real-time visibility into their supplier risk exposure. - [Vanta](https://www.g2.com/products/vanta/reviews) — A trust management platform praised for its automated compliance monitoring, vendor risk questionnaire workflows, and framework coverage across SOC 2, ISO 27001, and HIPAA — giving growing businesses a structured approach to third-party risk without a dedicated GRC team. - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) — A sanctions and denied party screening platform rated highly by trade compliance teams for its comprehensive watchlist coverage, automated screening processes, and audit-ready documentation that reduces the manual overhead of global supplier due diligence. - [Creditsafe](https://www.g2.com/products/creditsafe/reviews) — A business intelligence and supplier risk platform valued for its global company data coverage, financial health scoring, and automated monitoring that gives procurement and finance teams continuous visibility into the creditworthiness and stability of their supplier base. #### What is the TPRM lifecycle? The TPRM lifecycle is the end-to-end process organizations use to identify, assess, monitor, and manage the risks introduced by third-party vendors, suppliers, and service providers across the entire relationship, from initial onboarding through offboarding. The lifecycle typically begins with vendor identification and scoping, where organizations catalog all third parties and classify them by the type of access, data, or operational dependency they represent. This is followed by due diligence and risk assessment, which involves gathering vendor security questionnaires, reviewing certifications, analyzing financial stability, and evaluating compliance posture against internal standards or regulatory requirements.  Once a vendor is onboarded, the lifecycle moves into continuous monitoring, tracking changes in the vendor's security posture, financial health, sanctions exposure, and regulatory status on an ongoing basis rather than at fixed annual review points. When risks are identified, organizations move into remediation and exception management, working with vendors to close gaps or formally accepting residual risk with documented rationale. Finally, the offboarding phase ensures that access is revoked, data is returned or destroyed, and contractual obligations are fulfilled when a vendor relationship ends. Modern TPRM platforms automate significant portions of this lifecycle, replacing manual spreadsheet-based processes with structured processes, automated questionnaire scoring, and real-time risk signal monitoring. #### What is the leading third-party risk management software? The leading TPRM platforms go beyond static vendor questionnaires to deliver continuous risk monitoring, automated assessment workflows, and risk intelligence that keeps organizations ahead of emerging supplier threats rather than discovering them in annual reviews. - [Ethixbase360](https://www.g2.com/products/ethixbase360/reviews) — A global third-party due diligence and compliance platform recognized for its integrated screening, risk assessment, and ongoing monitoring capabilities that help organizations manage supplier integrity risk across complex international supply chains. - [Bitsight](https://www.g2.com/products/bitsight/reviews) — A cybersecurity risk ratings platform used by enterprise security teams to continuously monitor the security posture of vendors and third parties, providing objective outside-in risk scores that replace or supplement traditional questionnaire-based assessments. - [Ncontracts](https://www.g2.com/products/ncontracts-ncontracts/reviews) — A vendor and contract risk management platform built for financial institutions, combining third-party risk assessment processes, contract management, and regulatory compliance reporting in a single system designed around the requirements of banking examiners and auditors. - [ProcessUnity TPRM Platform](https://www.g2.com/products/processunity-tprm-platform/reviews) — A purpose-built third-party risk management platform recognized for its configurable risk assessment frameworks, automated questionnaire management, and risk intelligence integrations that allow large organizations to scale TPRM programs without proportionally increasing team size. #### Which supplier risk management app is best for handling third-party risks? The strongest third-party risk management apps centralize vendor intake, automate risk scoring, and surface actionable intelligence across the supplier portfolio, replacing disconnected spreadsheets and email-based assessment processes with a structured, repeatable risk management workflow. - [Optro](https://www.g2.com/products/optro/reviews) — A supplier risk management platform built around automated vendor onboarding, continuous risk monitoring, and compliance workflow management that gives procurement and risk teams a structured system for handling third-party risks across their entire supplier base. - [Omnea](https://www.g2.com/products/omnea-omnea/reviews) — A procurement and third-party risk platform praised by enterprise teams for combining intake and triage, security review automation, and supplier approval workflows in a single interface that reduces the friction and cycle time of onboarding new vendors safely. - [apexanalytix](https://www.g2.com/products/apex-analytics-apexanalytix/reviews) — A supplier risk and recovery platform used by large organizations for its comprehensive supplier master data management, duplicate payment detection, and continuous monitoring of financial and compliance risk signals across complex multi-tier supply chains. - [Venminder](https://www.g2.com/products/venminder/reviews) — A third-party risk management platform designed for regulated industries, offering vendor due diligence, contract document management, and risk assessment workflows that help compliance and vendor management teams satisfy examiner expectations for structured TPRM programs. #### What is an example of third-party risk management? A practical example of third-party risk management is a financial services company assessing the cybersecurity posture of a cloud software vendor before granting it access to customer financial data. In this scenario, the organization would begin by classifying the vendor as high risk because it stores or processes sensitive customer information. The risk team would then send a standardized security questionnaire to the vendor, asking it to document its data encryption practices, access controls, incident response procedures, and compliance certifications, such as SOC 2 Type II.  The responses would be reviewed against the organization's minimum security standards, and a security ratings platform might be used to independently verify the vendor's external-facing security posture without relying solely on self-reported answers. If gaps are identified, the organization would request a remediation plan before proceeding, or formally accept the residual risk with executive sign-off. Once the vendor is onboarded, continuous monitoring tools would track changes in the vendor's security posture, any data breach disclosures, and sanctions exposure on an ongoing basis, triggering a review if the risk score falls below an acceptable threshold.  This full process, from classification through monitoring, is what a mature TPRM program applies consistently across every vendor relationship in proportion to the risk each vendor represents. ### Small Business FAQs #### What is the most affordable third-party risk management software for small businesses? For operators evaluating [small business third-party supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/small-business), the strongest affordable platforms deliver vendor risk assessment, compliance monitoring, and supplier due diligence capabilities at a price point accessible to lean security and procurement teams without a dedicated GRC function. - [Vanta](https://www.g2.com/products/vanta/reviews) — A cost-accessible trust management platform that small businesses use to automate vendor security reviews alongside their own compliance programs, covering both internal control monitoring and third-party risk workflows within a single subscription. - [Secureframe](https://www.g2.com/products/secureframe/reviews) — A compliance automation platform with vendor risk management capabilities that small businesses use to manage security questionnaires, track vendor compliance status, and maintain audit-ready evidence without the overhead of a dedicated compliance team. - [Creditsafe](https://www.g2.com/products/creditsafe/reviews) — An affordable supplier intelligence platform that small businesses use to screen new vendors, monitor the financial health of their supplier base, and receive alerts when a supplier's risk profile changes, replacing manual credit checks with automated ongoing monitoring. - [Venminder](https://www.g2.com/products/venminder/reviews) — A third-party risk platform designed for smaller regulated businesses that need structured vendor due diligence and risk assessment workflows, with tiered pricing and a managed services option that gives lean teams access to expert TPRM support alongside the software. #### What is the best third-party risk management software for startups? Startups managing their first vendor relationships need TPRM software that sets up quickly, integrates with existing procurement tools, and provides the compliance documentation needed to satisfy customer security questionnaires as the business scales. You can explore the full [small business third-party risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/small-business) category on G2 to see the top-rated options. - [Vanta](https://www.g2.com/products/vanta/reviews) — A popular choice among startups for its fast onboarding, guided compliance framework setup, and vendor risk questionnaire automation that helps early-stage companies build a credible TPRM program alongside SOC 2 or ISO 27001 certification from day one. - [UpGuard](https://www.g2.com/products/upguard/reviews) — Startup security teams use UpGuard to get immediate visibility into their vendor attack surface without waiting for questionnaire responses, with continuous outside-in monitoring that surfaces real-time security risks across the tools and services a startup depends on. - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) — Startups operating internationally use Descartes for automated sanctions and denied-party screening to ensure new supplier relationships are compliant from the outset, with fast integration into procurement workflows and audit-ready screening records. - [Secureframe](https://www.g2.com/products/secureframe/reviews) — Startup teams appreciate Secureframe's streamlined vendor questionnaire management and the way it connects third-party risk documentation directly to their ongoing compliance program, making it easier to demonstrate supply chain security controls during customer security reviews. #### Which third-party risk management software is the most user-friendly for small businesses? Small business teams managing vendor risk alongside multiple other responsibilities need TPRM software with intuitive workflows, minimal configuration requirements, and clear dashboards that make it easy to track supplier risk status without specialized GRC expertise. - [UpGuard](https://www.g2.com/products/upguard/reviews) — Consistently praised for its accessible dashboard that gives non-specialist users an immediate, visual overview of vendor risk scores and security findings, making it straightforward for small business owners and IT managers to understand their third-party exposure without security analyst experience. - [Creditsafe](https://www.g2.com/products/creditsafe/reviews) — Small business users highlight Creditsafe's clean search and monitoring interface that makes supplier financial screening feel as simple as a web search, with clear risk indicators and automated alerts that require no configuration to start delivering actionable supplier intelligence. - [Venminder](https://www.g2.com/products/venminder/reviews) — Valued for its structured, guided approach to vendor due diligence that walks small business users through each assessment step without requiring them to build their own risk framework, particularly appreciated by teams in regulated industries navigating examiner expectations for the first time. - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) — Small business compliance and procurement teams cite Descartes' straightforward screening workflow and clear results interface as key usability advantages, allowing teams without trade compliance backgrounds to screen vendors and document results confidently. #### What is the best third-party risk management software for compliance-focused small businesses? Small businesses in regulated industries, including financial services, healthcare, and professional services, need TPRM software that maps vendor risk to specific compliance frameworks and generates the audit documentation that examiners, auditors, and enterprise customers require. Browse the full [small business third-party risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/small-business) category on G2 to compare options. - [Vanta](https://www.g2.com/products/vanta/reviews) — Compliance-focused small businesses use Vanta for its framework-mapped vendor risk controls that connect third-party security requirements directly to SOC 2, ISO 27001, HIPAA, and other frameworks, making it straightforward to demonstrate that vendor risk management is part of a functioning compliance program. - [Secureframe](https://www.g2.com/products/secureframe/reviews) — Used by compliance-driven SMBs for its structured vendor questionnaire workflows and automated evidence collection that maps third-party risk documentation to specific framework controls, reducing the manual effort of compiling vendor risk evidence for audits and customer reviews. - [SAP Ariba](https://www.g2.com/products/sap-ariba/reviews) — Small businesses already operating on SAP infrastructure use Ariba for its supplier qualification and compliance screening capabilities, which integrate procurement and vendor risk workflows with existing financial systems to maintain compliance documentation across the supplier lifecycle. - [D&B Risk Analytics](https://www.g2.com/products/d-b-risk-analytics/reviews) — Compliance and procurement teams at small businesses use D&B Risk Analytics for its deep supplier data coverage, financial risk scoring, and regulatory watchlist screening, which provide the third-party intelligence needed to satisfy due diligence requirements across financial, trade, and operational risk dimensions. #### What is the best third-party risk management software for small businesses focused on cybersecurity risk? Small businesses increasingly face security requirements from customers and regulators that include demonstrating active management of vendor cybersecurity risk. These platforms give lean security teams the monitoring and assessment capabilities to meet those expectations without a large GRC operation. - [UpGuard](https://www.g2.com/products/upguard/reviews) — The most widely adopted vendor cybersecurity risk platform among small businesses, providing continuous outside-in security monitoring of the entire vendor portfolio with automated risk scoring, data breach alerts, and remediation tracking that replaces annual point-in-time assessments. - [Secureframe](https://www.g2.com/products/secureframe/reviews) — Small business security teams use Secureframe to manage vendor security questionnaire intake and track their software vendors' compliance certifications, with automated reminders and centralized evidence storage that keeps vendor security documentation organized and audit-ready. - [Creditsafe](https://www.g2.com/products/creditsafe/reviews) — Used by small businesses to continuously monitor vendor financial stability alongside operational risk signals, giving procurement and finance teams early warning of supplier instability that could translate into service disruption or supply chain cybersecurity exposure. - [Venminder](https://www.g2.com/products/venminder/reviews) — Small businesses in regulated sectors use Venminder for its structured vendor risk assessment workflows and pre-built due diligence templates that cover cybersecurity, operational, and compliance risk dimensions, giving teams a repeatable process for assessing and documenting vendor security posture. ### Enterprise FAQs #### What is the best-rated third-party risk management software for tech enterprises? Technology enterprises need [enterprise third-party supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/enterprise) with continuous monitoring at scale, API-driven integrations into procurement and GRC systems, and the ability to manage thousands of vendor relationships with risk intelligence that goes beyond static questionnaire responses. - [UpGuard](https://www.g2.com/products/upguard/reviews) — Adopted by enterprise technology organizations for its scalable continuous vendor monitoring, attack surface intelligence, and data leak detection capabilities that give security teams real-time visibility into third-party risk across large vendor portfolios without manual assessment cycles. - [Bitsight](https://www.g2.com/products/bitsight/reviews) — A cybersecurity risk ratings platform recognized by enterprise tech buyers for its objective, continuously updated vendor security scores, peer benchmarking data, and board-level risk reporting that makes third-party cyber risk quantifiable and communicable across the organization. - [SAFE](https://www.g2.com/products/safe-security-safe/reviews) — An AI-powered cyber risk quantification platform used by enterprise technology teams to measure and communicate third-party risk in financial terms, providing CISOs and risk committees with the business-impact context needed to prioritize vendor risk remediation decisions. - [Ethixbase360](https://www.g2.com/products/ethixbase360/reviews) — An enterprise third-party due diligence platform used by technology organizations managing global supplier networks for its integrated screening, enhanced due diligence workflows, and ongoing monitoring capabilities that address integrity, compliance, and reputational risk across complex vendor ecosystems. #### What is the most reliable third-party supplier risk management tool for enterprises? Enterprise risk buyers prioritize platform consistency, data accuracy, and the reliability of risk intelligence signals, particularly when TPRM platforms are integrated into procurement approval workflows or regulatory reporting processes where errors have direct compliance consequences. - [Descartes Denied Party Screening](https://www.g2.com/products/descartes-denied-party-screening/reviews) — Enterprise compliance teams cite Descartes as the most reliable denied party screening platform for mission-critical trade compliance workflows, trusted for the accuracy and timeliness of its watchlist updates and the consistency of its screening results across high-volume global supplier transactions. - [osapiens](https://www.g2.com/products/osapiens/reviews) — An enterprise supply chain compliance platform recognized for its reliable regulatory monitoring across ESG, supply chain due diligence, and sustainability reporting requirements — giving large organizations confidence that their supplier compliance data reflects the latest regulatory obligations across multiple jurisdictions. - [Optro](https://www.g2.com/products/optro/reviews) — Enterprise procurement and risk teams highlight Optro's data reliability and consistent supplier risk scoring as key reasons for adoption in environments where vendor risk assessments feed directly into sourcing decisions and internal audit processes. - [Risk Ledger](https://www.g2.com/products/risk-ledger/reviews) — A supply chain security network platform recognized for the reliability of its shared vendor assessment data, enabling enterprises to access and contribute verified security assessments across a connected ecosystem of suppliers and buyers rather than repeating assessments independently. #### What is the best-reviewed third-party risk management software for enterprise app integration? Integration capability is a primary evaluation criterion for enterprise TPRM buyers whose risk workflows must connect to ERP, procurement, GRC, and security operations systems. Explore the full [enterprise third-party risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/enterprise) category on G2 for detailed integration comparisons. - [Panorays](https://www.g2.com/products/panorays/reviews) — An enterprise third-party security risk management platform recognized for its integration capabilities with security tools and GRC platforms, enabling large organizations to embed automated vendor security assessments and continuous monitoring into existing risk and compliance workflows. - [Risk Ledger](https://www.g2.com/products/risk-ledger/reviews) — Enterprises use Risk Ledger for its network-based integration model, which connects buyers and suppliers in a shared assessment ecosystem, reducing duplicate effort in questionnaire exchange while integrating supplier risk data with internal GRC and procurement approval systems. - [Secureframe](https://www.g2.com/products/secureframe/reviews) — Enterprise teams value Secureframe's native integrations with cloud infrastructure, HR, identity, and productivity tools that automatically collect vendor risk evidence and map to to compliance controls, reducing the manual effort of assembling third-party risk documentation for enterprise audits. - [Ethixbase360](https://www.g2.com/products/ethixbase360/reviews) — Enterprise compliance teams highlight Ethixbase360's integration connectors to procurement platforms and ERP systems as a key enabler of automated supplier due diligence at the point of onboarding, ensuring that risk screening and enhanced due diligence are embedded into the vendor approval workflow rather than managed as a separate process. #### What is the best enterprise software for ESG and supply chain supplier risk management? Enterprise organizations facing mandatory supply chain due diligence legislation, including the EU Corporate Sustainability Due Diligence Directive and Germany's LkSG, require TPRM platforms that address environmental, social, and governance risk across multi-tier supplier networks. Browse the full [enterprise third-party risk management software](https://www.g2.com/categories/third-party-supplier-risk-management/enterprise) category on G2 for detailed capability comparisons. - [osapiens](https://www.g2.com/products/osapiens/reviews) — An enterprise ESG and supply chain compliance platform purpose-built for organizations subject to supply chain due diligence laws, offering automated supplier risk assessments, regulatory reporting workflows, and sustainability data collection that address both LkSG and CSDDD requirements. - [EcoVadis](https://www.g2.com/products/ecovadis/reviews) — A widely adopted supplier sustainability ratings platform used by large enterprises to assess and benchmark the ESG performance of their supply chains across environment, labor, ethics, and sustainable procurement criteria, with standardized scorecards that suppliers share across multiple customer relationships. - [SAP Ariba](https://www.g2.com/products/sap-ariba/reviews) — Enterprise procurement organizations use SAP Ariba for supply chain risk management as part of a broader source-to-pay workflow, with supplier qualification, compliance screening, and risk segmentation capabilities that integrate directly with SAP financial and operations systems. - [Bitsight](https://www.g2.com/products/bitsight/reviews) — Enterprise risk and sustainability teams use Bitsight's supply chain cyber risk intelligence alongside ESG risk frameworks to build a more complete picture of third-party exposure, adding objective cybersecurity risk data to supplier assessments that traditionally focus on operational and sustainability dimensions. #### What is the best enterprise third-party risk management software for cybersecurity risk? Enterprise cybersecurity teams managing vendor risk at scale need TPRM platforms that provide continuous, outside-in monitoring, risk quantification, and automated risk scoring to thousands of vendor relationships, rather than manual assessment cycles. - [Bitsight](https://www.g2.com/products/bitsight/reviews) — The most widely adopted third-party cybersecurity risk ratings platform at enterprise scale, used by security teams to continuously monitor vendor security postures, benchmark against industry peers, and provide board-level risk reports that translate technical vulnerability data into business risk context. - [SAFE](https://www.g2.com/products/safe-security-safe/reviews) — Enterprise CISOs use SAFE for its AI-powered cyber risk quantification that converts third-party security findings into financial risk estimates, enabling risk committees to make vendor risk prioritization decisions based on potential business impact rather than technical severity scores alone. - [Optro](https://www.g2.com/products/optro/reviews) — An enterprise TPRM platform used by security and procurement teams for automating vendor cybersecurity assessments, tracking remediation commitments, and maintaining a continuously updated risk register across large supplier portfolios that would be unmanageable through manual assessment processes. - [Vanta](https://www.g2.com/products/vanta/reviews) — Enterprise security teams use Vanta to manage vendor security questionnaire programs at scale, with automated follow-up workflows, centralized compliance documentation, and integrations that connect vendor risk data to the organization's broader trust and compliance management infrastructure. **Last updated on April 24, 2026**