G2

Alex S.

Head of Security

Small-Business (50 or fewer emp.)

8/24/2026

"A practical security partner, not just a compliance adviser"

5/5

What do you like best about Kobalt.io?

What I value most is how collaborative and practical the Kobalt team is. They combine strategic vCISO guidance with hands-on compliance support and help us turn requirements such as ISO 27001 into workable policies, evidence, risk reviews, access reviews, and Vanta workflows rather than simply giving us recommendations.

They also take on much of the coordination burden involved in running a security programme. Their support across audits, vendor reviews, incident-response exercises, awareness activities, and regular security reviews keeps the work moving while remaining grounded in our actual risks and business priorities. Review collected by and hosted on G2.com.

What do you dislike about Kobalt.io?

There is very little we actively dislike. The main area for improvement would be making ownership, meeting purpose, and handoffs even clearer as the engagement grows. At times, we have needed to clarify which activities Kobalt owns versus our internal team and how different recurring reviews fit together. Review collected by and hosted on G2.com.

Recommendations to others considering Kobalt.io:

Kobalt is a strong fit for organisations looking for a practical security partner rather than advice alone. They provide a useful combination of vCISO leadership, compliance engineering, and project management across audit readiness, Vanta administration, policy and evidence management, risk management, and incident-response exercises.

To get the most from the engagement, establish a clear internal owner, agree responsibilities early, and maintain a regular working cadence. Kobalt can provide structure, expertise, and momentum, but the internal organisation still needs to own its risks, complete remediation, maintain evidence, and remain engaged in decision-making. Review collected by and hosted on G2.com.

What problems is Kobalt.io solving and how is that benefiting you?

Kobalt has helped us tackle the challenge of running a credible, practical security and compliance programme despite limited internal time and specialist capacity. They have taken what could easily have become a fragmented mix of policies, evidence requests, risk reviews, and audit tasks and turned it into a structured programme, managed through Vanta and supported by their vCISO team, compliance engineers, and project management.

Their support has been particularly valuable around ISO 27001 and audit readiness: configuring Vanta, establishing ownership, developing and maintaining policies, collecting evidence, identifying control gaps, and preparing for internal and external audits. This has made our compliance position more visible and defensible while significantly reducing the coordination burden on our internal teams.

They have also helped us mature from treating security as a collection of individual tasks to managing it as an ongoing risk discipline. Risk assessments, vendor reviews, regular security reviews, and incident-response tabletop exercises give us much better visibility of our priorities and preparedness.

More broadly, Kobalt gives us access to security and compliance expertise that would be difficult to maintain fully in-house. The result is a more mature security function with clearer accountability, stronger evidence, more consistent risk management, and better incident preparedness. Review collected by and hosted on G2.com.