Whistic has streamlined our vendor risk assessment process by providing a centralized platform for security questionnaires, compliance documentation, and third-party risk reviews. The platform reduces manual effort, accelerates due diligence, and improves transparency when evaluating vendors and responding to RFP requirements. Its standardized approach helps ensure consistent assessments while giving stakeholders quick access to security and compliance information. Review collected by and hosted on G2.com.

One drawback of Whistic is that its effectiveness relies on vendor adoption. For vendors that do not maintain current profiles or participate in the platform, organizations may still need to conduct manual security reviews and follow-up assessments. Review collected by and hosted on G2.com.

We initially started with spreadsheets, then moved to a VRM tool, and eventually transitioned to Whistic. Since making that switch, Whistic has noticeably improved our workflow and made the process feel more streamlined. I would suggest using the ai features of Whistic to truly take advantage of the application. Vendor Summary and SOC 2 Summary along with Next Assessment are really tremendous features. Review collected by and hosted on G2.com.

The Bulk Assessment was not ideal as Active and Inactive vendors are selected as eligible for the bulk send. The only way to send to just Active is to manually click each vendor. I have requested upgrades to this feature. Review collected by and hosted on G2.com.

Compared to other TPRM solutions, Whistic is very easy to use and saves a ton of time on assessments. Their Trust Catalog model includes a lot of vendors and their security documents to streamline the assessment. For vendors who haven't contributed, it's easy to send requests and questionnaires based on many different assessment frameworks. The AI features allow you to upload audit reports and security documents of any kind and assess them against the framework of your choice. Their implementation services and support are top notch. Review collected by and hosted on G2.com.

Sometimes the docs provided by the vendor aren't kept up to date, but that's really not a Whistic issue so much as it's the vendors. It easy enough to upload updated docs. Review collected by and hosted on G2.com.

What I like best about Whistic is the time it saves and the quality of its customer service. The platform can request documents from vendors, analyze them against our chosen security standard, and show which controls meet our requirements, do not meet them, or need further review. It can also pull data from vendor trust centers, which cuts down on manual research and follow up. Reviews that once took weeks can often be completed in about 20 minutes when the vendor provides the required documents.

The support team has also been excellent. They respond quickly when we need help, and our account managers stay in close contact with us. They are knowledgeable, flexible when we need more time, and willing to help in any way they can. In my experience, Whistic has a strong focus on customer service. Review collected by and hosted on G2.com.

Whistic is still a young and growing company, so some features are not yet as mature or fully developed as they could be. That said, the product in its current form works very well for our needs and has brought clear value to our third-party risk review process. As Whistic continues to carry out its roadmap and refine these features, I expect the platform to become even stronger. Review collected by and hosted on G2.com.

We use Whistic for vendor assessments and to evaluate SOC 2 reports. The platform has met our expectations and performed as advertised. It is user-friendly, intuitive, and easy to navigate, making the vendor assessment process efficient and effective. Overall, we have had a positive experience with the product. Review collected by and hosted on G2.com.

It is user-friendly, intuitive, and easy to navigate, making the vendor assessment process efficient and effective. Review collected by and hosted on G2.com.

Automation and the AI capabilities. The onboarding set up was great. Whistic's support team is responsive and helpful if any issues ever arise. Both reps we have had been great. Review collected by and hosted on G2.com.

With the speed that the platform is expanding, sometimes features are a bit buggy. Review collected by and hosted on G2.com.

I like using Whistic's Trust Center because it saves me time by reducing interactions with documentation requests. I can just direct people to the Trust Center and let them find what they need. I also appreciate the vendor approval process feature as it consolidates everything in one place, so I don't have to use other tools to involve my approvers. It's efficient for managing high-level vendors that require secondary approval. Review collected by and hosted on G2.com.

When I am doing vendor assessments, most Trust Centers for our vendors require an NDA to be signed. This is a blocker for the AI document retrieval features. I'm looking forward to seeing how Whistic finds a way around this. Review collected by and hosted on G2.com.

I find Whistic easy to search and see potential for many more service providers to be connected to it. I appreciate the overview of relevant SOC-2 reports, periodic security assessments, and information security policies that can all be found in one place. It is easy to install and I am glad that there is multi-factor authentication (MFA) on the website login. Review collected by and hosted on G2.com.

I see a number of our other suppliers and I don't know how to request the same insight. A quick video tour of the solution would be great. I see many areas that I haven't explored yet. It would be nice to understand the why and usability of those functionalities. Review collected by and hosted on G2.com.

Whistic’s customer service is top-tier. They are very personable, clearly explain concepts, and swiftly offer solutions. Review collected by and hosted on G2.com.

“Dislike” is a strong term here, but the Knowledge Base could be more organized. The ability to create folders would be very helpful. Review collected by and hosted on G2.com.

Whistic is relatively easy to use from both the analyst perspective, as well as the vendor's perspective. The AI works very well when vendor's submit adequate documentation and answers are well supported with accurate sources. This tool has helped our organization produce faster risk assessment results, improve risk outcomes, and support continuous monitoring across the entire vendor portfolio. Whistic's customer support team is also an extremely valuable resource to our organization. Review collected by and hosted on G2.com.

Since Whistic doesn't allow domain level risk assessments, the process to gather evidence and sequence it to run the AI is manual, which can lead to errors. Review collected by and hosted on G2.com.