Whistic Reviews & Product Details

Whistic has streamlined our vendor risk assessment process by providing a centralized platform for security questionnaires, compliance documentation, and third-party risk reviews. The platform reduces manual effort, accelerates due diligence, and improves transparency when evaluating vendors and responding to RFP requirements. Its standardized approach helps ensure consistent assessments while giving stakeholders quick access to security and compliance information. Review collected by and hosted on G2.com.

One drawback of Whistic is that its effectiveness relies on vendor adoption. For vendors that do not maintain current profiles or participate in the platform, organizations may still need to conduct manual security reviews and follow-up assessments. Review collected by and hosted on G2.com.

We initially started with spreadsheets, then moved to a VRM tool, and eventually transitioned to Whistic. Since making that switch, Whistic has noticeably improved our workflow and made the process feel more streamlined. I would suggest using the ai features of Whistic to truly take advantage of the application. Vendor Summary and SOC 2 Summary along with Next Assessment are really tremendous features. Review collected by and hosted on G2.com.

The Bulk Assessment was not ideal as Active and Inactive vendors are selected as eligible for the bulk send. The only way to send to just Active is to manually click each vendor. I have requested upgrades to this feature. Review collected by and hosted on G2.com.

Compared with other TPRM solutions, Whistic is very easy to use and saves me a ton of time on assessments. The Trust Catalog model includes a large number of vendors along with their security documents, which really helps streamline the assessment process. For vendors who haven’t contributed yet, it’s straightforward to send requests and questionnaires, and you can base them on a variety of assessment frameworks. The AI features also make it easy to upload audit reports and other security documents and assess them against whichever framework you choose. They recently added the ability to link to vendors' trust portals and automatically download evidence. On top of that, their implementation services and overall support have been top-notch. They continue to add new features to make the product even better. Review collected by and hosted on G2.com.

Sometimes the documentation provided by the vendor isn’t kept up to date, but that’s less of a Whistic issue and more on the vendors themselves. When it comes up, it’s straightforward to upload updated docs as needed. Review collected by and hosted on G2.com.

What I like best about Whistic is the time it saves and the quality of its customer service. The platform can request documents from vendors, analyze them against our chosen security standard, and show which controls meet our requirements, do not meet them, or need further review. It can also pull data from vendor trust centers, which cuts down on manual research and follow up. Reviews that once took weeks can often be completed in about 20 minutes when the vendor provides the required documents.

The support team has also been excellent. They respond quickly when we need help, and our account managers stay in close contact with us. They are knowledgeable, flexible when we need more time, and willing to help in any way they can. In my experience, Whistic has a strong focus on customer service. Review collected by and hosted on G2.com.

Whistic is still a young and growing company, so some features are not yet as mature or fully developed as they could be. That said, the product in its current form works very well for our needs and has brought clear value to our third-party risk review process. As Whistic continues to carry out its roadmap and refine these features, I expect the platform to become even stronger. Review collected by and hosted on G2.com.

We use Whistic for vendor assessments and to evaluate SOC 2 reports. The platform has met our expectations and performed as advertised. It is user-friendly, intuitive, and easy to navigate, making the vendor assessment process efficient and effective. Overall, we have had a positive experience with the product. Review collected by and hosted on G2.com.

It is user-friendly, intuitive, and easy to navigate, making the vendor assessment process efficient and effective. Review collected by and hosted on G2.com.

Automation and the AI capabilities. The onboarding set up was great. Whistic's support team is responsive and helpful if any issues ever arise. Both reps we have had been great. Review collected by and hosted on G2.com.

With the speed that the platform is expanding, sometimes features are a bit buggy. Review collected by and hosted on G2.com.

In theory, any good assessment platform can be a huge time saver for everyone, but Whistic isn't there yet. Review collected by and hosted on G2.com.

The workflow just isn't there. It's unclear which questions are still open, how to submit responses, etc. And the AI autofill was simply not sufficient. Review collected by and hosted on G2.com.

I like using Whistic's Trust Center because it saves me time by reducing interactions with documentation requests. I can just direct people to the Trust Center and let them find what they need. I also appreciate the vendor approval process feature as it consolidates everything in one place, so I don't have to use other tools to involve my approvers. It's efficient for managing high-level vendors that require secondary approval. Review collected by and hosted on G2.com.

When I am doing vendor assessments, most Trust Centers for our vendors require an NDA to be signed. This is a blocker for the AI document retrieval features. I'm looking forward to seeing how Whistic finds a way around this. Review collected by and hosted on G2.com.

I find Whistic easy to search and see potential for many more service providers to be connected to it. I appreciate the overview of relevant SOC-2 reports, periodic security assessments, and information security policies that can all be found in one place. It is easy to install and I am glad that there is multi-factor authentication (MFA) on the website login. Review collected by and hosted on G2.com.

I see a number of our other suppliers and I don't know how to request the same insight. A quick video tour of the solution would be great. I see many areas that I haven't explored yet. It would be nice to understand the why and usability of those functionalities. Review collected by and hosted on G2.com.

Whistic’s customer service is top-tier. They are very personable, clearly explain concepts, and swiftly offer solutions. Review collected by and hosted on G2.com.

“Dislike” is a strong term here, but the Knowledge Base could be more organized. The ability to create folders would be very helpful. Review collected by and hosted on G2.com.