Verified User in Computer Software
UC
Verified User in Computer Software
Enterprise (> 1000 emp.)
"Helps me get the job done!"
4.5/5
What do you like best about Whistic?

Ease of use to share to my prospects and get their confidence in our security Review collected by and hosted on G2.com.

What do you dislike about Whistic?

I dont use much other than just the share with prospect section Review collected by and hosted on G2.com.

Keeley B.
KB
Keeley B.
Executive Assistant
Information Services
Enterprise (> 1000 emp.)
"Better manage the vendor onboarding process"
3.5/5
What do you like best about Whistic?

By streamlining the review and value processes, we can free up our time to focus on improving the quality of vendor management and refining our ability to measure its effectiveness. This data collection is efficient and reliable; it ensures that the responses come from legitimate users. In addition, with Whistic, all project contributors can quickly and easily work together on their answers, enabling them to respond faster to RFPs with greater accuracy and consistency.

Using Whistic's tools gives you greater visibility and control of your vendor management process. As a result, you may save expenses and simplify vendor management. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

The inability to export questions with replies for the bulk update restricts users from efficiently updating queries and responses in bulk, as they must manually input any desired changes one at a time. Review collected by and hosted on G2.com.

Verified User in Computer Software
CC
Verified User in Computer Software
Mid-Market (51-1000 emp.)
"Great tool for self servicing information"
4.5/5
What do you like best about Whistic?

Easy to access and share information about risk management documents Review collected by and hosted on G2.com.

What do you dislike about Whistic?

Some time the loading time of the portal could be faster. But it's still not bad! Review collected by and hosted on G2.com.

BU
Bryan U.
Security Governance, Risk & Compliance Lead
Enterprise (> 1000 emp.)
"Intuitive and well thought out."
4.5/5
What do you like best about Whistic?

I've used a lot of different platforms for third-party assessments, and I can confidently say Whistic is the best one. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

It is a bit complex to figure out how to do internal assessments. I am not entirely sure if this is one of the goals of the tool, but I can see it being used in the same way that you assess third parties. Review collected by and hosted on G2.com.

Abhishek P.
AP
Abhishek P.
Senior Application Engineer - AE2
Small-Business (50 or fewer emp.)
"It's a nice platform."
5/5
What do you like best about Whistic?

The appearance is good. Content are rich enough. No lags detected. Easy to find relevant requirements. Student friendly as well as researcher friendly interface. Great 👍 Review collected by and hosted on G2.com.

What do you dislike about Whistic?

As of now, I have not find anything to dislike. Everything is working seamlessly. More tabs can be added for better search options. Rest is really good. Great experience. Review collected by and hosted on G2.com.

Verified User in Computer Software
AC
Verified User in Computer Software
Mid-Market (51-1000 emp.)
"Whistic makes my life easier"
5/5
What do you like best about Whistic?

Whistic's easy-to-use interface is a pleasure to use. It removes the stress from managing our vendors. This Risk Recon score and the breakdown by domain are super helpful. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

There's a lack of a threat monitoring and intelligence reporting presence. Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
AI
Verified User in Information Technology and Services
Mid-Market (51-1000 emp.)
"Great tool for Vendor Management!"
4/5
What do you like best about Whistic?

The tool is very user friendly and great for collaborating with business units. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

It doesn't have the extend of cyber security monitoring that we were expecting, but the risk recon feature is an added plus. Review collected by and hosted on G2.com.

Verified User in Computer Networking
UC
Verified User in Computer Networking
Mid-Market (51-1000 emp.)
"Deeper insights into vendors in shortened time frame"
5/5
What do you like best about Whistic?

Gone are the days of collaborating in offline files and Jira tickets. Instead, all stakeholders can collaborate directly in the tool and automatics notify us when a vendor renewal is required. These enhancements have cut the time spent on vendor reviews by more than half. Whistic has not only streamlined our vendor security reviews; but, has also presented our team with more data to make informed decisions. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

Today, Whistic's tooling does not allow customizable fields when issuing an NDA. While this has presented some obstacles within our organization, the feature is slated to be enabled in CY22 Q2. Review collected by and hosted on G2.com.

Jake B.
JB
Jake B.
Head of Information Security
Mid-Market (51-1000 emp.)
"Wouldn't have got SOC 2 certification without Whistic - it does the work no one wants to do!"
5/5
What do you like best about Whistic?

Vendor risk assessments are not the "sexiest" thing in cybersecurity & not something anyone gets excited about doing. Still, they are a fundamental requirement of any effective security program &, as highlighted by recent data breaches, are a real concern to any company using or providing hosted services. Whistic makes this task both much more automatic and effective - it allows me to focus on more critical (& maybe more fun) tasks. If you are trying to run a security program with limited resources, then Whistic is a must. IT allows me to keep on top of assessing 100+ vendors by myself. This effort went under significant scrutiny as part of the SOC 2 & ISO 27001 certification process we recently underwent & I can safely say without Whistic we would not have obtained certification. Its automation & ease of use combined with fantastic reporting & ease of evidence sharing for auditors make it one of my must-have tools to build or mature any security program. Review collected by and hosted on G2.com.

What do you dislike about Whistic?

There are some tweaks I'd like to see, including the ability to sort by multiple columns rather than a single column, a mobile app to give visibility to key metrics on the go, or the ability to scrape from vendor websites & pre-approve larger enterprises (e.g. auto-download security certification from AWS & approve without me having to contact etc).

The other area for improvement is the development of the eco-system. The more vendors they can get to create & maintain security profiles the better this approach becomes & in doing so they will establish themsleves as fundamental to all security leaders. Review collected by and hosted on G2.com.

Verified User in Program Development
UP
Verified User in Program Development
Small-Business (50 or fewer emp.)
"Secury information in a secure way"
3.5/5
What do you like best about Whistic?

They have templates for questions that helps to track way faster the vendors and evaluate them also the whistic catalog Review collected by and hosted on G2.com.

What do you dislike about Whistic?

To consolidate the information everything is in one place which makes it tricky for audits or inter process Review collected by and hosted on G2.com.