Best Risk-Based Vulnerability Management Software

How Many Risk-Based Vulnerability Management Software Products Does G2 Track?

Total Products under this Category: 194

Category Stats (Aug 2026)

  • Average Rating: 4.48/5 (↓0.02 vs Jul 2026) The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Ivanti Neurons for RBVM (+2.94%) - Among all products in this category, Ivanti Neurons for RBVM recorded the largest rating increase compared to last month

Last updated: August 07, 2026

How Does G2 Rank Risk-Based Vulnerability Management Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 4,800+ Authentic Reviews
  • 194+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Risk-Based Vulnerability Management Software

G2 Grid® for Risk-Based Vulnerability Management Software plotting products by satisfaction and market presence

Highlighted products: Arctic Wolf, Tenable Vulnerability Management, Recorded Future, YesWeHack, RiskProfiler - External Threat Exposure Management, H1 Platform, Check Point Exposure Management, and Pentera.

Underlying data: [Grid® JSON](https://www.g2.com/categories/risk-based-vulnerability-management/grids.json?focus%5B%5D=arctic-wolf&focus%5B%5D=tenable-vulnerability-management&focus%5B%5D=recorded-future&focus%5B%5D=yeswehack&focus%5B%5D=riskprofiler-external-threat-exposure-management&focus%5B%5D=h1-platform&focus%5B%5D=check-point-exposure-management&focus%5B%5D=pentera)

Sponsored

Procedureflow

Procedureflow transforms complex operating procedures into structured visual workflows that people and AI agents can follow in real time. Teams receive step-by-step guidance in the flow of work, while AI agents access governed, structured knowledge through APIs. Procedureflow integrates with enterprise systems to deliver guidance directly where work happens and provide insights into process adoption, execution, and operational performance. Procedureflow is the AI knowledge infrastructure for guided execution: visual by design, governed by default, and machine-readable from day one. Built for regulated, high-stakes operations across financial services, insurance, utilities, healthcare, government, and retail, Procedureflow helps organizations standardize execution at scale. The result is faster onboarding, audit-ready operations, reduced operational risk, and one governed source of truth for both humans and AI. No more static PDFs, outdated wikis, or hallucinated answers for the work that matters most. Proven results across 120+ organizations.

Visit website

Arctic Wolf

Arctic Wolf® is the market leader in security operations. Using the cloud-native Arctic Wolf® Platform, we help organizations end cyber risk by providing security operations as a concierge service. Arctic Wolf solutions include Arctic Wolf® Managed Detection and Response (MDR), Managed Risk, and Managed Security Awareness —each delivered by the industry’s original Concierge Security® Team. Highly-trained Concierge Security experts work as an extension of internal teams to provide 24x7 monitoring, detection, and response, as well as ongoing risk management to give organizations the protection, resilience and guidance they need to defend against cyber threats. Visit arcticwolf.com to get the latest industry resources and learn more about our solutions.

Average Rating: 4.7/5.0

Total Reviews: 276

How Do G2 Users Rate Arctic Wolf?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Reporting: 9.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.6/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Arctic Wolf?

  • Seller: Arctic Wolf Networks
  • Company Website:
  • Year Founded: 2012
  • HQ Location: Eden Prairie, MN
  • Twitter: @AWNetworks
    4,520 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    3,286 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: IT Manager, IT Director
  • Top Industries: Hospital & Health Care, Information Technology and Services
  • Company Size: 71% Medium, 20% Large

What Do G2 Reviewers Say About Arctic Wolf?

AI-generated summary from verified user reviews

Pros
  • Users value the responsive and helpful customer support from Arctic Wolf, ensuring quick resolutions to any inquiries.
  • Users value Arctic Wolf for its proactive threat detection, ensuring swift response to potential security issues.
  • Users appreciate the hands-on and proactive cybersecurity approach of Arctic Wolf, feeling supported and secure in their operations.
  • Users value the ease of use of Arctic Wolf, enjoying its seamless integration and user-friendly interface.
  • Users value the fast notification of events, enabling quick response and engagement with professionals for effective triage.
Cons
  • Users find Arctic Wolf to be quite pricey, wishing the product was more affordable despite its excellent performance.
  • Users experience false positives with Arctic Wolf, which can lead to time-consuming investigations despite good alert tuning.
  • Users note a steep learning curve with Arctic Wolf, requiring time to adapt and some IT knowledge for troubleshooting.
  • Users note that the cybersecurity risks can be overwhelming, suggesting better consolidation and notification methods for clarity.
  • Users note dashboard issues with quirks and alert overload, though updates help address these challenges over time.

What Are Recent G2 Reviews of Arctic Wolf?

What Are G2 Users Discussing About Arctic Wolf?

Tenable Vulnerability Management

Tenable Vulnerability Management provides a risk-based approach to identifying, prioritizing, and remediating vulnerabilities across your entire attack surface. Powered by Nessus technology and AI-driven analytics, it goes beyond CVSS scores to assess exploitability, asset criticality, and business impact—so you can focus on what matters most. With continuous visibility, automated scanning, and real-time risk insights, security teams can quickly expose and close critical vulnerabilities before they’re exploited. Advanced asset identification ensures accurate tracking in dynamic environments, while intuitive dashboards, comprehensive reporting, and seamless third-party integrations help streamline workflows. As a cloud-based solution, Tenable Vulnerability Management scales with your organization, empowering security teams to maximize efficiency, reduce risk, and improve resilience against evolving threats.

Average Rating: 4.5/5.0

Total Reviews: 115

How Do G2 Users Rate Tenable Vulnerability Management?

  • Has the product been a good partner in doing business?: 8.6/10 (Category avg: 9.2/10)
  • Reporting: 8.1/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind Tenable Vulnerability Management?

  • Seller: Tenable
  • Company Website:
  • HQ Location: Columbia, MD
  • Twitter: @TenableSecurity
    87,752 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    2,350 employees on LinkedIn®
  • Ownership: NASDAQ: TENB

Who Uses This Product?

  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 55% Large, 33% Medium

What Do G2 Reviewers Say About Tenable Vulnerability Management?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly interface of Tenable Vulnerability Management, making prioritization and action on vulnerabilities seamless.
  • Users praise the scanning efficiency of Tenable Vulnerability Management, highlighting its speed and comprehensive capabilities.
  • Users value the powerful scanning and reporting features of Tenable Vulnerability Management for enhanced asset management.
  • Users appreciate the fast and efficient automated scanning of Tenable Vulnerability Management, enhancing resource management and reporting.
  • Users value the effective vulnerability identification that helps prioritize remediation efforts efficiently within their environments.
Cons
  • Users find the cost of Tenable Vulnerability Management to be prohibitive, especially for organizations with tight budgets.
  • Users find the reporting capabilities inadequate, often needing external tools for refined and personalized analysis.
  • Users find the reporting capabilities to be limited, often needing external tools for better data insights.
  • Users find the pricing issues of Tenable Vulnerability Management to be a barrier, especially for smaller organizations.
  • Users find the platform's complexity to manage licensing and reporting options challenging, especially under budget constraints.

What Are Recent G2 Reviews of Tenable Vulnerability Management?

What Are G2 Users Discussing About Tenable Vulnerability Management?

Recorded Future

Recorded Future is the world’s largest threat intelligence company. Recorded Future’s Intelligence Cloud provides end-to-end intelligence across adversaries, infrastructure, and targets. Indexing the internet across the open web, dark web, and technical sources, Recorded Future provides real-time visibility into an expanding attack surface and threat landscape, empowering clients to act with speed and confidence to reduce risk and securely drive business forward. Headquartered in Boston with offices and employees around the world, Recorded Future works with over 1,900 businesses and government organizations across 80 countries to provide real-time, unbiased and actionable intelligence. Learn more at recordedfuture.com.

Average Rating: 4.6/5.0

Total Reviews: 225

How Do G2 Users Rate Recorded Future?

  • Has the product been a good partner in doing business?: 9.1/10 (Category avg: 9.2/10)
  • Reporting: 8.4/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.9/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.8/10 (Category avg: 8.8/10)

Who Is the Company Behind Recorded Future?

  • Seller: Recorded Future
  • Company Website:
  • Year Founded: 2009
  • HQ Location: Somerville, US
  • Twitter: @RecordedFuture
    107,965 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    1,150 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Threat Intelligence Analyst, Cyber Threat Intelligence Analyst
  • Top Industries: Financial Services, Information Technology and Services
  • Company Size: 66% Large, 20% Medium

What Do G2 Reviewers Say About Recorded Future?

AI-generated summary from verified user reviews

Pros
  • Users find Recorded Future's ease of use exceptional, appreciating its intuitive interface and centralized features for daily tasks.
  • Users value the enhanced customization features of Recorded Future, allowing for detailed insights and tailored alerts.
  • Users value the comprehensive insights provided by Recorded Future, enhancing their understanding of data relationships and intel.
  • Users highlight the excellent threat detection capabilities of Recorded Future, praising its ease of use and robust support.
  • Users benefit from the precise and actionable threat intelligence provided by Recorded Future, enhancing security management.
Cons
  • Users find the complex navigation of Recorded Future challenging, making it hard to create accurate queries.
  • Users find Recorded Future to be expensive, making budgeting tricky for smaller teams despite its critical role in security.
  • Users find the learning curve steep, requiring significant time investment and commitment to fully understand the platform.
  • Users find the difficult learning curve of Recorded Future challenging, requiring significant time and expertise for effective use.
  • Users experience significant inaccuracy issues with Recorded Future, affecting the reliability of alerts and predictions.

What Are Recent G2 Reviews of Recorded Future?

What Are G2 Users Discussing About Recorded Future?

RiskProfiler - External Threat Exposure Management

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

Average Rating: 4.9/5.0

Total Reviews: 118

How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

  • Has the product been a good partner in doing business?: 9.9/10 (Category avg: 9.2/10)
  • Reporting: 9.9/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.9/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.9/10 (Category avg: 8.8/10)

Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

  • Seller: Riskprofiler
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Rock Hill , US
  • Twitter: @riskprofilerio
    209 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    32 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Security Consultant
  • Top Industries: Information Technology and Services, Design
  • Company Size: 66% Medium, 33% Small

What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

AI-generated summary from verified user reviews

Pros
  • Users value the effective risk management capabilities of RiskProfiler, facilitating informed decisions and quick responses to threats.
  • Users appreciate the seamless onboarding and integration of RiskProfiler, enhancing visibility and monitoring of external threats.
  • Users commend the fast and efficient customer support of RiskProfiler, enhancing their overall experience and response time.
  • Users value the ease of use of RiskProfiler, particularly the seamless integration and user-friendly dashboard.
  • Users value the easy setup of RiskProfiler, appreciating its intuitive dashboard and quick implementation process.
Cons
  • Users face a steep learning curve with RiskProfiler, requiring time for training and customization to navigate effectively.
  • Users find the complexity of RiskProfiler overwhelming, necessitating significant time for training and adjustment.
  • Users find a difficult learning curve for RiskProfiler, requiring significant training and time to navigate effectively.
  • Users find the learning difficulty of RiskProfiler challenging, necessitating extra training and time for effective use.
  • Users find the complex setup of RiskProfiler challenging, particularly for non-specialist teams trying to integrate it.

What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

YesWeHack

YesWeHack is a leading Offensive Security and Exposure Management platform delivering integrated, API-based solutions to secure organisations’ growing attack surfaces. Its human-in-the-loop model combines Bug Bounty (leveraging a global community of 150,000+ skilled ethical hackers), Autonomous Pentesting, Continuous Pentesting and unified vulnerability management to deliver agile, exhaustive security testing at scale. Customers include Louis Vuitton, Ferrero, the European Commission, Tencent and L’Oréal Groupe. ISO 27001-certified, CREST-accredited, and EU-hosted with full GDPR compliance. YesWeHack #1 Bug Bounty Platform in Europe and APAC

Average Rating: 4.8/5.0

Total Reviews: 33

How Do G2 Users Rate YesWeHack?

  • Has the product been a good partner in doing business?: 9.9/10 (Category avg: 9.2/10)
  • Reporting: 9.2/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind YesWeHack?

  • Seller: YesWeHack
  • Company Website:
  • Year Founded: 2015
  • HQ Location: Paris, France
  • LinkedIn® Page: www.linkedin.com
    728 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security
  • Company Size: 42% Large, 36% Small

What Do G2 Reviewers Say About YesWeHack?

AI-generated summary from verified user reviews

Pros
  • Users find YesWeHack to have an intuitive platform, ensuring smooth management and communication for vulnerability management.
  • Users value the exceptional customer support from YesWeHack, enhancing their bug bounty experience and partnership effectiveness.
  • Users admire the exceptional customer support and intuitive user experience of YesWeHack's platform, enhancing engagement and efficiency.
  • Users admire the high quality of bug reports from YesWeHack, appreciating the clarity and thoroughness provided by the triagers.
  • Users value the exceptional quality and support provided by YesWeHack's team, enhancing their bug bounty experience.
Cons
  • Users feel that YesWeHack is somewhat expensive, particularly for smaller organizations looking for accessible solutions.
  • Users find the poor interface design of YesWeHack could be improved for a better user experience.
  • Users find the limited scope of YesWeHack unsuitable for handling a large number of programs efficiently.
  • Users note the missing tracking features in YesWeHack's interface, impacting its overall effectiveness despite responsive support.
  • Users find the pricing issues of YesWeHack to be steep, limiting accessibility for smaller organizations.

What Are Recent G2 Reviews of YesWeHack?

H1 Platform

HackerOne is a global leader in Continuous Threat Exposure Management (CTEM) and the only solution provider that pairs the simultaneous trust of the Fortune 500 and the world's largest community of security researchers to secure the AI-native enterprise. The H1 Platform unites agentic AI solutions with security researchers ingenuity to continuously discover, validate, prioritize, and remediate exposures across code, cloud, and AI systems. Through solutions like bug bounty, vulnerability disclosure, agentic pentesting, AI red teaming, and code security, HackerOne delivers measurable, continuous reduction of cyber risk for enterprises. Industry leaders, including Anthropic, Crypto.com, General Motors, Goldman Sachs, Lufthansa, Uber, UK Ministry of Defence, and the U.S. Department of Defense, trust HackerOne to safeguard their digital ecosystems. HackerOne was recognized in Gartner’s Emerging Tech Impact Radar: AI Cybersecurity Ecosystem report for its leadership in AI Security Testing.

Average Rating: 4.5/5.0

Total Reviews: 79

How Do G2 Users Rate H1 Platform?

  • Has the product been a good partner in doing business?: 9.0/10 (Category avg: 9.2/10)
  • Reporting: 10.0/10 (Category avg: 8.8/10)
  • Risk-Prioritization: 10.0/10 (Category avg: 8.8/10)

Who Is the Company Behind H1 Platform?

  • Seller: HackerOne
  • Company Website:
  • Year Founded: 2012
  • HQ Location: San Francisco, California
  • Twitter: @Hacker0x01
    337,493 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    7,090 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer Software
  • Company Size: 44% Large, 40% Medium

What Do G2 Reviewers Say About H1 Platform?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of HackerOne, enabling quick onboarding and seamless program management.
  • Users value the streamlined interface of H1 Platform, facilitating efficient bug management and collaboration with ethical hackers.
  • Users value the collaboration with skilled ethical hackers, enhancing security and improving vulnerability management effectively.
  • Users value the strong security protection offered by HackerOne, enhancing overall safety through expert vulnerability management.
  • Users value the responsive customer support of H1 Platform, consistently providing guidance and assistance when needed.
Cons
  • Users experience complexity issues with triage workflows and credentials management, affecting overall efficiency and satisfaction.
  • Users note the expensive pricing of the H1 Platform, which can strain budgets despite its valuable features.
  • Users find time management challenging on H1 Platform due to inconsistent triage speeds and complexities in report handling.
  • Users report poor customer support with slow response times and unresolved tickets affecting their overall experience.
  • Users find the poor interface design confusing and difficult to navigate, impacting their overall experience.

What Are Recent G2 Reviews of H1 Platform?

What Are G2 Users Discussing About H1 Platform?

Check Point Exposure Management

Exposure Management is changing how organizations react to cyber risk. Attackers exploit exposed assets, leaked credentials, and misconfigurations within hours, while security teams are left sorting through dashboards, alerts, and disconnected tools. For a limited time only, we are providing an Agentic Exposure Validation Scan at no cost. It delivers proven, evidence-backed findings your team can act on immediately. Request scan here - https://checkpoint.cyberint.com/limited-time-offer-aev-scan Check Point Exposure Management closes that gap by combining billions of external intelligence signals into a Unified Intelligence Fabric. The platform continuously identifies, validates, prioritizes, and safely remediates the exposures attackers are most likely to exploit. With Cyber Asset Attack Surface Management (CAASM), security teams gain a real-time inventory across cloud, SaaS, on-premises infrastructure, endpoints, and identities through 150+ agentless integrations. Unlike traditional vulnerability management, Check Point prioritizes exposures based on real-world exploitability, active threat intelligence, business context, and existing security controls, eliminating duplicate alerts and reducing remediation noise. It does so while maintaining business continuity. Safe-by-design remediation then validates every action before enforcement, enabling capabilities such as virtual patching, IPS activation, configuration hardening, and policy enforcement without disrupting business operations. Organizations using the platform achieve a 93% true positive rate, 12-hour average takedown MTTR, and 504 safe remediations per organization every month. Built around Gartner's Continuous Threat Exposure Management (CTEM) framework, Check Point helps organizations move from visibility to measurable risk reduction. Gartner predicts organizations adopting CTEM with mobilization will experience 50% fewer successful cyberattacks by 2028. Ready to see Exposure Management in action? Get a 15-minute demo: https://l.cyberint.com/exposure-management-demo

Average Rating: 4.6/5.0

Total Reviews: 173

How Do G2 Users Rate Check Point Exposure Management?

  • Has the product been a good partner in doing business?: 9.4/10 (Category avg: 9.2/10)
  • Reporting: 9.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind Check Point Exposure Management?

Who Uses This Product?

  • Who Uses This: Security Threat Analyst, Cyber Security Analyst
  • Top Industries: Banking, Financial Services
  • Company Size: 68% Large, 20% Medium

What Do G2 Reviewers Say About Check Point Exposure Management?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of Cyberint, enjoying its intuitive interface and seamless integration into workflows.
  • Users value the comprehensive threat intelligence of Check Point Exposure Management, enhancing proactive threat detection and response capabilities.
  • Users find Cyberint's threat detection valuable for enhancing situational awareness and proactive threat response in sensitive environments.
  • Users commend the comprehensive threat intelligence of Check Point Exposure Management, enhancing detection and response to potential cyber threats.
  • Users commend the responsive and proactive support from Cyberint, enhancing their ability to manage complex threats effectively.
Cons
  • Users experience inefficient alerts due to occasional false positives, requiring extra time for verification and impacting productivity.
  • Users experience false positives in alerts, necessitating extra analyst time for validation and slowing response efforts.
  • Users experience inefficient alert systems, finding the volume of alerts overwhelming and slow threat intel response frustrating.
  • Users often face integration issues, particularly with centralizing alerts and security tool compatibility.
  • Users note the limited features of Check Point Exposure Management, particularly regarding alert tuning and third-party integrations.

What Are Recent G2 Reviews of Check Point Exposure Management?

What Are G2 Users Discussing About Check Point Exposure Management?

Pentera

Pentera is the category leader for Automated Security Validation, allowing every organization to test with ease the integrity of all cybersecurity layers, unfolding true, current security exposures at any moment, at any scale. Thousands of security professionals and service providers around the world use Pentera to guide remediation and close security gaps before they are exploited. Its customers include Casey's General Stores, Emeria, LuLu International Exchange, IP Telecom PT, BrewDog, City National Bank, Schmitz Cargobull, and MBC Group. Pentera is backed by leading investors such as K1 Investment Management, Insight Partners, Blackstone, Evolution Equity Partners, and AWZ. Visit https://pentera.io for more information.

Average Rating: 4.5/5.0

Total Reviews: 171

How Do G2 Users Rate Pentera?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 7.8/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind Pentera?

  • Seller: Pentera
  • Company Website:
  • Year Founded: 2015
  • HQ Location: Boston, MA
  • Twitter: @penterasec
    3,291 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    483 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Government Administration, Banking
  • Company Size: 52% Large, 36% Medium

What Do G2 Reviewers Say About Pentera?

AI-generated summary from verified user reviews

Pros
  • Users value the automation features of Pentera, enhancing ease of use and enabling efficient continuous operation.
  • Users recognize the powerful automation and detailed remediation suggestions of Pentera for effective vulnerability detection.
  • Users value Pentera's effective vulnerability scanning and remediation suggestions, enhancing their overall security posture and testing efficacy.
  • Users value the responsive customer support of Pentera, enhancing their overall vulnerability scanning experience.
  • Users appreciate the efficiency of Pentera, notably for its quick implementation and time-saving automation.
Cons
  • Users find the reporting inadequate, particularly for enterprise-level assessments, necessitating significant improvements.
  • Users experience a lack of essential features, including limited TTP updates and inadequate user permissions management.
  • Users find the reporting in Pentera lacking, especially for enterprise-level needs and multilingual support.
  • Users find Pentera demands a high amount of system resources, which can hinder overall performance and efficiency.
  • Users report technical issues, particularly with module compatibility and unexpected upgrade failures, though support is responsive.

What Are Recent G2 Reviews of Pentera?

ServiceNow Security Operations

ServiceNow Security Operations is a sophisticated software solution designed to enhance threat and vulnerability management as well as incident response for organizations. By leveraging artificial intelligence, this platform empowers security teams to operate more efficiently and effectively, allowing for streamlined collaboration across IT, security, and risk management departments. The primary goal of ServiceNow Security Operations is to simplify complex security processes while minimizing risks associated with cybersecurity threats. Targeted at security teams within organizations of various sizes, ServiceNow Security Operations addresses the need for a cohesive approach to managing security incidents and vulnerabilities. It is particularly beneficial for organizations that utilize multiple security tools, as it integrates security and vulnerability data from these existing systems. This integration enables teams to respond to threats more rapidly by automating critical workflows and processes, thus reducing the manual effort traditionally required in incident response. The platform is suitable for both small businesses and large enterprises, making it a versatile choice for organizations looking to enhance their cybersecurity measures. Key features of ServiceNow Security Operations include intelligent workflows that automate routine tasks, allowing security professionals to focus on more strategic initiatives. The platform’s AI-driven capabilities facilitate the automatic correlation of threat intelligence from diverse sources, such as the MITRE ATT&CK framework. This feature enhances situational awareness and enables teams to prioritize threats effectively based on real-time data. Additionally, the ability to take action within other security or IT management tools from a centralized console streamlines operations, ensuring that teams can respond to incidents without unnecessary delays. This centralized approach not only improves efficiency but also fosters better communication among different departments involved in security management. Moreover, the use of digital security workflows and orchestration significantly accelerates tasks such as analysis, prioritization, and remediation. By automating these processes, organizations can improve their response times and enhance their overall cybersecurity posture. The integration of AI-driven automation within the ServiceNow AI Platform® further strengthens the platform's capabilities, enabling organizations to drive cyber resilience and reduce their exposure to potential threats. This proactive approach to cybersecurity ensures that organizations are not only reacting to incidents but are also prepared to prevent them. ServiceNow Security Operations stands out in the cybersecurity landscape by offering a comprehensive solution that addresses the complexities of modern cybersecurity challenges. By automating and simplifying threat and vulnerability management, it empowers security teams to respond more effectively, thereby enhancing the overall security framework of an organization. This makes it an essential tool for any organization looking to bolster its defenses against the ever-evolving landscape of cyber threats.

Average Rating: 4.3/5.0

Total Reviews: 86

How Do G2 Users Rate ServiceNow Security Operations?

  • Has the product been a good partner in doing business?: 8.8/10 (Category avg: 9.2/10)
  • Reporting: 8.9/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.5/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.5/10 (Category avg: 8.8/10)

Who Is the Company Behind ServiceNow Security Operations?

  • Seller: ServiceNow
  • Company Website:
  • Year Founded: 2004
  • HQ Location: Santa Clara, CA
  • Twitter: @servicenow
    55,548 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    35,081 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 55% Large, 20% Medium

What Do G2 Reviewers Say About ServiceNow Security Operations?

AI-generated summary from verified user reviews

Pros
  • Users value the integration capabilities of ServiceNow Security Operations, enabling seamless connections with essential third-party tools.
  • Users value the remarkable integration capabilities of ServiceNow Security Operations, enhancing incident management and data processing efficiency.
  • Users appreciate the ease of use of ServiceNow Security Operations, enhancing productivity with seamless integration and setup.
  • Users value the robust integration capabilities of ServiceNow Security Operations, enhancing workflow and incident management efficiency.
  • Users appreciate the end-to-end incident management capabilities in ServiceNow, making it a comprehensive security solution.
Cons
  • Users find the difficult setup of ServiceNow Security Operations a barrier, impacting overall usability and cost-effectiveness.
  • Users face integration issues, struggling with field mapping, initial setup, and documentation, affecting overall usability.
  • Users find the restrictive licensing issues limiting for playbooks, impacting remediation efficiency and security operations.
  • Users face complexity in building playbooks within ServiceNow Security Operations, finding the process challenging and costly.
  • Users find difficult customization in ServiceNow Security Operations hinders their ability to effectively build playbooks.

What Are Recent G2 Reviews of ServiceNow Security Operations?

What Are G2 Users Discussing About ServiceNow Security Operations?

Cortex Cloud

Cortex Cloud by Palo Alto Networks, the next version of Prisma Cloud, understands a unified security approach is essential for effectively addressing AppSec, CloudSec, and SecOps. Connecting cloud security and SOC workflows enables teams to achieve holistic visibility, trace risk across the lifecycle, and correlate real-time threat activity with development and runtime contexts. Cortex Cloud is a unified platform built on three core pillars: data integration, AI-driven intelligence, and automation. Now you can safeguard applications, data, and infrastructure across multicloud and hybrid environments with a unified data model that consolidates telemetry from code, runtime, identity, and endpoints, all into a single data source. Empower teams with precise, AI-powered insights and 2200+ machine learning models to identify and stop zero-day threats with real-time advanced threat detection and response. And automate with 1000+ prebuilt playbooks across your cloud stack to reduce manual workloads, accelerate remediations, and cut response times tenfold. Cortex Cloud delivers more than tools—it transforms how organizations secure their cloud environments.

Average Rating: 4.1/5.0

Total Reviews: 125

How Do G2 Users Rate Cortex Cloud?

  • Has the product been a good partner in doing business?: 8.0/10 (Category avg: 9.2/10)
  • Reporting: 7.8/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.5/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.1/10 (Category avg: 8.8/10)

Who Is the Company Behind Cortex Cloud?

  • Seller: Palo Alto Networks
  • Company Website:
  • Year Founded: 2005
  • HQ Location: Santa Clara, CA
  • Twitter: @PaloAltoNtwks
    128,951 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    22,313 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 38% Large, 32% Medium

What Do G2 Reviewers Say About Cortex Cloud?

AI-generated summary from verified user reviews

Pros
  • Users find Cortex Cloud to be extremely easy to use, appreciating its intuitive interface and seamless integration.
  • Users value strong cloud security and appreciate the intuitive interface and effective compliance support of Cortex Cloud.
  • Users value the ease of managing cloud security with Cortex Cloud, enhancing focus on critical threats efficiently.
  • Users value the clear visibility provided by Cortex Cloud, enhancing their management of cloud security and team coordination.
  • Users value the ease of integration with operations, enhancing the management of cloud security efficiently.
Cons
  • Users find the high cost of Cortex Cloud to be a significant drawback, impacting budget for mid-sized organizations.
  • Users find the difficult learning curve challenging, especially with complex features and insufficient documentation for beginners.
  • Users find the learning curve steep due to time-intensive onboarding and a cluttered user interface.
  • Users express concerns about pricing issues with Cortex Cloud, as costs can rise significantly in larger setups.
  • Users find the complex setup of Cortex Cloud to be time-consuming and challenging to navigate effectively.

What Are Recent G2 Reviews of Cortex Cloud?

vRx by Vicarius

vRx by Vicarius goes beyond patch management to offer the most advanced vulnerability remediation solution in the market. vRx offers 3 built-in methods to keep you covered at all times: 1) Automated Patching: vRx catalogs all your apps and finds the patches they need, and applies them - automatically and on the schedule or frequency of your choosing. 2) Scripting: For more complex vulnerabilities or configuration based vulnerabilities, vRx includes a fully fledged scripting engine. 3) Patchless Protection: x_protect or patchless protection is a compensating control that reduces the risk of an affected app even when a patch is not yet developed or cannot be deployed vRx helps 500+ customers across 50 countries find AND immediately remediate vulns that impact their business.

Average Rating: 4.9/5.0

Total Reviews: 61

How Do G2 Users Rate vRx by Vicarius?

  • Has the product been a good partner in doing business?: 9.6/10 (Category avg: 9.2/10)
  • Reporting: 8.7/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 9.2/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.6/10 (Category avg: 8.8/10)

Who Is the Company Behind vRx by Vicarius?

  • Seller: Vicarius
  • Company Website:
  • Year Founded: 2016
  • HQ Location: New York, New York
  • Twitter: @vicariusltd
    2,018 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    109 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer & Network Security, Information Technology and Services
  • Company Size: 44% Medium, 32% Small

What Do G2 Reviewers Say About vRx by Vicarius?

AI-generated summary from verified user reviews

Pros
  • Users highlight the ease of use of vRx, appreciating its user-friendly interface and quick setup process.
  • Users value the automation capabilities of vRx, enhancing efficiency in vulnerability management and patching processes.
  • Users value the intuitive interface of vRx, which simplifies task management and enhances overall efficiency.
  • Users appreciate the comprehensive vulnerability management of Vicarius vRx, simplifying processes and enhancing team efficiency immensely.
  • Users highlight the intuitive interface and exceptional support of vRx, making patch management efficient and user-friendly.
Cons
  • Users note the missing features like automatic asset addition and advanced reporting that limit vRx's capabilities.
  • Users note inadequate reporting features, expressing a desire for more customization and compliance capabilities in vRx.
  • Users find vRx's complexity in deployment and integration challenging, especially for those lacking technical expertise.
  • Users often face dashboard issues, seeking more customization options for better adaptation to different audiences.
  • Users face inaccurate information regarding reporting and risk scoring, leading to confusion about vulnerabilities management.

What Are Recent G2 Reviews of vRx by Vicarius?

What Are G2 Users Discussing About vRx by Vicarius?

Titania Nipper InfraSight

Award-winning Risk-Based Vulnerability Management. Nipper InfraSight analyzes network device configurations in the way Advances Persistent Threat (APT) groups do, to identify misconfigurations that could create attack paths. This analysis offers unparalleled, pen-tester accuracy, finding critical vulnerabilities in firewalls, routers, switches that other tools simply cannot see. Our solutions then prioritize the biggest risks to your business and provide device-specific remediation guidance, right down to specific command line prompts.  By analyzing device configurations against key compliance standards and security frameworks (including STIGs/CIS Benchmarks/PCI DSS/CMMC/CORA/NIST SP 800-53), Nipper solutions tell you precisely which devices are at risk of failing, how significant that risk is, and how you can solve it, with auditor-ready reports. Whether your focus is taking pragmatic, risk-based security measures to minimize known vulnerabilities or ensuring compliance with industry security standards, Nipper solutions provide the targeted insights you need. No other security provider looks at the network in the same way. That’s why Nipper can uniquely provide the network configuration coverage that organizations urgently require. 30+ U.S. federal agencies and 800+ organizations globally trust Nipper solutions to deliver vulnerability analysis and compliance automation while supporting air-gapped environments, sovereign cloud requirements, and complex regulated infrastructures.

Average Rating: 4.3/5.0

Total Reviews: 28

How Do G2 Users Rate Titania Nipper InfraSight?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
  • Reporting: 9.1/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 6.0/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.6/10 (Category avg: 8.8/10)

Who Is the Company Behind Titania Nipper InfraSight?

  • Seller: Titania
  • Company Website:
  • Year Founded: 2009
  • HQ Location: London, GB
  • Twitter: @TitaniaLtd
    2,821 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    104 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 43% Large, 25% Medium

What Do G2 Reviewers Say About Titania Nipper InfraSight?

AI-generated summary from verified user reviews

Pros
  • Users find the ease of use of Titania Nipper InfraSight remarkable, appreciating its straightforward and user-friendly design.
  • Users appreciate the reporting quality of Titania Nipper InfraSight, as it provides clear assessments and actionable recommendations.
  • Users value the scanning efficiency of Titania Nipper InfraSight, enabling quick detection of network misconfigurations.
  • Users value the effective vulnerability detection in Titania Nipper, providing actionable insights and continuous improvement for network security.
  • Users value the clear and user-friendly interface of Titania Nipper InfraSight, enhancing their assessment experience significantly.
Cons
  • Users express concerns about the licensing model, noting it requires a minimum of 100 devices, complicating usage.
  • Users encounter issues with false positives, leading to confusion and frustration when checking actual device findings.
  • Users find the lack of cloud support frustrating, particularly with device-specific recommendations that are often inaccurate.
  • Users face limited compatibility issues, resulting in the need for maintaining outdated versions and difficulties with integrations.
  • Users note the limited device support of Titania Nipper InfraSight, which complicates maintenance and functionality.

What Are Recent G2 Reviews of Titania Nipper InfraSight?

What Are G2 Users Discussing About Titania Nipper InfraSight?

Bitsight

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

Average Rating: 4.5/5.0

Total Reviews: 76

How Do G2 Users Rate Bitsight?

  • Has the product been a good partner in doing business?: 9.3/10 (Category avg: 9.2/10)
  • Reporting: 7.4/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 7.4/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 7.9/10 (Category avg: 8.8/10)

Who Is the Company Behind Bitsight?

  • Seller: Bitsight
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Boston, MA
  • Twitter: @BitSight
    4,503 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    741 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Hospital & Health Care
  • Company Size: 71% Large, 24% Medium

What Do G2 Reviewers Say About Bitsight?

AI-generated summary from verified user reviews

Pros
  • Users value the comprehensive security posture provided by Bitsight, enhancing protection for their organization and suppliers.
  • Users value the comprehensive security posture provided by Bitsight, enhancing management of cyber risk and third-party suppliers.
  • Users find Bitsight's ease of use remarkable, enjoying its intuitive interface and seamless integration with various platforms.
  • Users appreciate the detailed insights and collaboration features of Bitsight, enhancing vendor risk management effectively.
  • Users praise the fantastic customer support of Bitsight, highlighting their knowledge and eagerness to assist effectively.
Cons
  • Users find missing features in Bitsight, such as lack of transparency and inadequate questionnaire management, frustrating overall.
  • Users criticize the lack of clarity in BitSight's scoring mechanism and experience occasional inaccuracies in domain reporting.
  • Users experience poor customer support and inadequate documentation, hindering effective use of the Bitsight platform.
  • Users experience poor notifications with delayed alerts and irrelevant historical breaches, impacting timely critical monitoring.
  • Users experience slow loading times and timeouts that hinder workflow and overall satisfaction with Bitsight.

What Are Recent G2 Reviews of Bitsight?

What Are G2 Users Discussing About Bitsight?

ZeroFox

ZeroFox is the solution used to illuminate threat actor intent, mitigate threats and exposures, remove threats from the internet, and preemptively safeguard your reputation. ZeroFox uniquely fuses the core capabilities of Cyber Threat Intelligence, Brand and Domain Protection, Attack Surface Intelligence, Executive Protection and Physical Security Intelligence in one platform packed with intelligence you’ll actually use. ZeroFox defends your business from the everyday attacks that impact revenue, erode trust, and frustrate teams by: Discovering exposed assets, brands, domains, accounts, and emerging threats Validating the risks that matter most to you and your digital estate Disrupting attacks before they harm your business, your customers, and your people Our continuous cycle—Discover, Validate, Disrupt—delivers outcomes and helps organizations achieve deeper threat contextualization, faster detection and response times, and longer-term cost savings by anticipating, understanding, and mitigating external digital threats at scale. Join thousands of customers, including some of the largest public sector organizations and leaders in finance, media, technology, retail, and healthcare, and let ZeroFox deliver timely, personal, and usable intelligence so you can stay ahead of what’s next and reclaim what’s right.

Average Rating: 4.4/5.0

Total Reviews: 165

How Do G2 Users Rate ZeroFox?

  • Has the product been a good partner in doing business?: 9.2/10 (Category avg: 9.2/10)
  • Reporting: 9.0/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.8/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 9.0/10 (Category avg: 8.8/10)

Who Is the Company Behind ZeroFox?

  • Seller: ZeroFox
  • Company Website:
  • Year Founded: 2013
  • HQ Location: Baltimore, MD
  • Twitter: @ZeroFOX
    5,205 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    859 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Cyber Security Analyst
  • Top Industries: Financial Services, Banking
  • Company Size: 50% Large, 27% Medium

What Do G2 Reviewers Say About ZeroFox?

AI-generated summary from verified user reviews

Pros
  • Users find ZeroFox to be very user-friendly, appreciating its smooth onboarding and effective brand protection.
  • Users appreciate the effective brand protection of ZeroFox, highlighting its ability to identify and combat scam sites efficiently.
  • Users value the real-time threat detection of ZeroFox, enhancing their security awareness across various digital platforms.
  • Users appreciate the quick and effective alert notifications from ZeroFox, enhancing daily operational efficiency and responsiveness.
  • Users value the quick and effective alerts from ZeroFox, enhancing daily operations and reducing false positives.
Cons
  • Users are frustrated with the inefficient alerts of ZeroFox, experiencing delays in takedown processing and incomplete actions.
  • Users find the repetitive false alerts cumbersome, requiring time-consuming manual reviews that disrupt efficiency.
  • Users experience slow performance with ZeroFox, including delays in alert reporting and UI loading times.
  • Users experience false positive alerts with ZeroFox, leading to time-consuming manual reviews and frustration in monitoring.
  • Users experience issues with the inefficient alert system, facing delays and false positives that hinder timely responses.

What Are Recent G2 Reviews of ZeroFox?

What Are G2 Users Discussing About ZeroFox?

HeroDevs

HeroDevs Never-Ending Support provides secure drop-in replacements and updates for end-of-life open source libraries, protecting businesses from vulnerabilities in deprecated software. Our team delivers proactive security updates—often before CVEs are publicly disclosed—and maintains continuous monitoring of your technology stack to identify potential threats before they impact your systems. Our solution eliminates the need for costly, time-consuming rewrites when open source libraries reach end-of-life by extending support indefinitely. HeroDevs' expert engineers maintain your existing codebase with security patches, bug fixes, and compatibility updates, allowing your development team to focus on innovation rather than remediation. This approach preserves your investment in current applications while ensuring they remain secure and compliant. HeroDevs partners directly with your security and development teams to rapidly assess vulnerabilities, prioritize remediation efforts, and implement fixes with minimal disruption. Our service includes detailed reporting on security posture, comprehensive documentation of all changes, and dedicated technical support from engineers specialized in your specific technologies. By extending the life of critical open source components, we help organizations maintain business continuity while significantly reducing security risks and compliance concerns. Keep your business secure and your applications running without costly rewrites or risky exposure.

Average Rating: 4.7/5.0

Total Reviews: 18

How Do G2 Users Rate HeroDevs?

  • Has the product been a good partner in doing business?: 9.5/10 (Category avg: 9.2/10)
  • Reporting: 7.5/10 (Category avg: 8.8/10)
  • Vulnerability Intelligence: 8.3/10 (Category avg: 8.7/10)
  • Risk-Prioritization: 8.3/10 (Category avg: 8.8/10)

Who Is the Company Behind HeroDevs?

  • Seller: HeroDevs
  • Year Founded: 2018
  • HQ Location: Sandy, Utah
  • Twitter: @herodevs
    2,672 Twitter followers
  • LinkedIn® Page: www.linkedin.com
    102 employees on LinkedIn®

Who Uses This Product?

  • Company Size: 61% Medium, 39% Small

What Do G2 Reviewers Say About HeroDevs?

AI-generated summary from verified user reviews

Pros
  • Users highly value the responsive and professional customer support from HeroDevs, ensuring seamless integration and peace of mind.
  • Users commend the seamless integrations of HeroDevs, enhancing their development workflow with reliable support and peace of mind.
  • Users highlight the ease of use of HeroDevs, praising its smooth integration and straightforward implementation.
  • Users value the reliable security support from HeroDevs, ensuring peace of mind without urgent migration demands.
  • Users value the reliable authentication security of HeroDevs, ensuring peace of mind through extended support and professional guidance.
Cons
  • Users note the expensive pricing, particularly for smaller teams, although they acknowledge the overall value.
  • Users find the current dashboard issues hindered communication and tracking, impacting overall effectiveness in managing requests.
  • Users report missing features like a dashboard, subscription management, and support for deprecated package managers.
  • Users wish for a monthly billing option for better cash flow management, but it is not available.
  • Users report a complex implementation process due to version incompatibilities and limited support for package managers.

What Are Recent G2 Reviews of HeroDevs?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024