# Best Vendor Security and Privacy Assessment Software

## How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

**Total Products under this Category:** 132

### Category Stats (Aug 2026)

- **Average Rating:** 4.55/5 The average rating of products in this category, based on all submitted ratings
- **Top Trending Product:** SureCloud (+1.41%) - Among all products in this category, SureCloud recorded the largest rating increase compared to last month

_Last updated: August 01, 2026_

## How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

**Why You Can Trust G2's Software Rankings:**

- 30 Analysts and Data Experts
- 15,800+ Authentic Reviews
- 132+ Products
- Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

## G2 Grid® for Vendor Security and Privacy Assessment Software
 ![G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.png?focus%5B%5D=123611&focus%5B%5D=4086&focus%5B%5D=140904&focus%5B%5D=162410&focus%5B%5D=140255&focus%5B%5D=167976&focus%5B%5D=130035&focus%5B%5D=953)

Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Sprinto, Secureframe, Scrut Automation, Thoropass, and IBM OpenPages.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=sprinto-inc&focus%5B%5D=secureframe&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages)

**Sponsored**

### iDonate

iDonate simplifies the complexities of digital fundraising so Nonprofits can raise more support and do more good! We do this in 3 simple ways: 1. Simply Connect with Donors: Deploy digital giving experiences across all donor touch-points with our all-in-one-place comprehensive suite of giving tools to increase donor reach and conversion. - Embedded Giving Experience - Donation Landing Pages - Peer-to-Peer - Events - Text-to-Give - Non-Cash Payments 2. Simply Manage & Adapt: Your back-end systems are unique. You need a simple, adaptable, open, and extensible platform that easily integrates & configures to meet your needs & personalized asks. - Unified Dashboards/ Reporting - Adaptable APIs & Webhooks - Native Top CRM Integrations - Chapters and Parent/ Child - Software Development Kit (SDK) - Data Intelligence Signals 3. Simply Grow Your Impact: Finally, you can easily implement advanced fundraising strategies proven to increase donor acquisition, retention, recurring gifts, and more with only a few simple clicks. - A/B Testing & Optimization - Smart Recurring Gifts - Contextual Giving - "Always On" Fundraising - Automated Playbook - Marketing Intelligence (UTM) iDonate provides powerful tools to help nonprofits of any size take control of the giving experience. Customizable, embedded giving forms, personalized peer-to-peer fundraising pages, quick and easy text-to-give tools, and easy to create event pages within the iDonate platform provide the flexibility and control nonprofits need to create meaningful experiences for donors that improve conversion rates, keep donors on the nonprofit’s website, and help raise more funds. Plus, iDonate’s full-service integrated processing network, iDonate Pay, handles all modern payment methods and allows nonprofits to track giving from gift to settlement in a simple, centralized, and most importantly, secure way.

[Visit website](https://www.g2.com/external_clickthroughs/record?secure%5Bad_program%5D=ppc&secure%5Bad_slot%5D=category_product_list_llm&secure%5Bcategory_id%5D=2445&secure%5Bchosen_at%5D=2026-08-13T23%3A03%3A54Z&secure%5Bdisplayable_resource_id%5D=483&secure%5Bdisplayable_resource_type%5D=Category&secure%5Bmedium%5D=sponsored&secure%5Bplacement_reason%5D=retargeted_product&secure%5Bplacement_resource_ids%5D%5B%5D=88356&secure%5Bprioritized%5D=false&secure%5Bproduct_id%5D=88356&secure%5Bresource_id%5D=2445&secure%5Bresource_type%5D=Category&secure%5Bsource_type%5D=category_page&secure%5Bsource_url%5D=https%3A%2F%2Fwww.g2.com%2Fcategories%2Fvendor-security-and-privacy-assessment&secure%5Btoken%5D=22f6de70dcea88ac840dde112b8ec7028568437e9a0198e666203e466cb06d7c&secure%5Burl%5D=https%3A%2F%2Fhubs.ly%2FQ04qwz7J0&secure%5Burl_type%5D=custom_url)

### [Vanta](https://www.g2.com/products/vanta/reviews)

Vanta is the leading Agentic Trust Platform helping 15k+ companies—like Atlassian, Duolingo, Golden State Warriors, and Icelandair—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management.

**Average Rating:** 4.6/5.0

**Total Reviews:** 2,676

#### How Do G2 Users Rate Vanta?

- **Ease of Admin:** 8.9/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.6/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Vanta?

- **Seller:** [Vanta](https://www.g2.com/sellers/vanta)
- **Company Website:** www.vanta.com
- **Year Founded:** 2018
- **HQ Location:** San Francisco, California
- **Twitter:** @TrustVanta  
4,694 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=2f43ad38aec212995a4ae41a0e8f0e9e73bbc397da8e551a7dea1b22c6d61e74&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fvanta-security%2F&secure%5Burl_type%5D=linkedin_company_website)  
1,871 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 55% Small, 38% Medium

#### What Do G2 Reviewers Say About Vanta?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of Vanta, finding the interface intuitive and implementation straightforward.
- Users value Vanta for transforming **compliance into a business driver** , streamlining processes and enhancing operational efficiency.
- Users value Vanta's **automation** , which enhances compliance efficiency and supports rapid business needs with minimal effort.
- Users value Vanta for its **time-saving features** , enabling efficient automation and streamlined compliance management.
- Users appreciate Vanta's **seamless integrations** that enhance compliance monitoring and streamline processes across platforms.

##### Cons

- Users find **integration issues** with Vanta, as not all vendors connect seamlessly, requiring additional manual efforts.
- Users find Vanta's **limited integrations** restrictive, particularly for more complex or niche tech stacks.
- Users find the **missing features** in Vanta's lower tier limiting, especially in relation to complex tech stacks.
- Users express concerns about the **high pricing** of Vanta, feeling it burdens smaller operations and adds complexity.
- Users feel that Vanta is **very expensive** , raising concerns about its suitability for budget-conscious businesses.

#### What Are Recent G2 Reviews of Vanta?

**["Vanta Streamlines SOC 2 Compliance With Effortless Automated Evidence Collection"](https://www.g2.com/survey_responses/vanta-review-13236286)**

**Rating:** 5.0/5.0 stars

_— Surya Pratap S._

[Read full review](https://www.g2.com/survey_responses/vanta-review-13236286)

**["Vanta Streamlines Compliance with Automated Evidence and Helpful Support"](https://www.g2.com/survey_responses/vanta-review-13264196)**

**Rating:** 4.5/5.0 stars

_— Udayraj C._

[Read full review](https://www.g2.com/survey_responses/vanta-review-13264196)

#### What Are G2 Users Discussing About Vanta?

- [What is Vanta used for?](https://www.g2.com/discussions/what-is-vanta-used-for) - 3 comments, 2 upvotes

### [UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews)

UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board.

**Average Rating:** 4.5/5.0

**Total Reviews:** 727

#### How Do G2 Users Rate UpGuard Vendor Risk?

- **Ease of Admin:** 9.1/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.6/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind UpGuard Vendor Risk?

- **Seller:** [UpGuard](https://www.g2.com/sellers/upguard)
- **Company Website:** upguard.com
- **Year Founded:** 2012
- **HQ Location:** Mountain View, California
- **Twitter:** @UpGuard  
8,705 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8ecef7c625c5848d4830cff08a7ea502854ec4005dbbc0f617bcb2b0f106f0dd&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fupguard%2F&secure%5Burl_type%5D=linkedin_company_website)  
371 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Security Analyst, CISO
- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 47% Large, 39% Medium

#### What Do G2 Reviewers Say About UpGuard Vendor Risk?

_AI-generated summary from verified user reviews_

##### Pros

- Users find UpGuard Vendor Risk to be incredibly **easy to use** , streamlining their workflow and enhancing data security.
- Users value the **user-friendly interface** and reliable information of UpGuard for effective vendor data security.
- Users value the **dynamic scoring system** of UpGuard Vendor Risk, which enhances risk prioritization and monitoring efficiency.
- Users value UpGuard for its **time-saving features** , making risk management and monitoring quick and efficient.
- Users commend UpGuard's **customer support** , highlighting its efficiency and smooth assistance for various queries and tasks.

##### Cons

- Users find a lack of **clarity in remediation recommendations** , often needing additional guidance and specific examples for implementation.
- Users find UpGuard Vendor Risk **expensive** for smaller organizations, wishing for lower pricing and more flexible vendor options.
- Users note the **limited functionality** of UpGuard, especially in areas like customization and workflow adaptability.
- Users feel that UpGuard needs to improve on **false positives** as they complicate vulnerability management and ratings.
- Users find the **limited customization** options in UpGuard Vendor Risk hinder effective use and personalization.

#### What Are Recent G2 Reviews of UpGuard Vendor Risk?

**["Well-Organized Platform for Security Due Diligence"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)**

**Rating:** 4.5/5.0 stars

_— Mohamed S._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13089101)

**["Strong Platform for Managing Vendor Risk"](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)**

**Rating:** 5.0/5.0 stars

_— Utkarsh K._

[Read full review](https://www.g2.com/survey_responses/upguard-vendor-risk-review-13042780)

### [Drata](https://www.g2.com/products/drata/reviews)

Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,328

#### How Do G2 Users Rate Drata?

- **Ease of Admin:** 9.2/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.5/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Drata?

- **Seller:** [Drata](https://www.g2.com/sellers/drata)
- **Company Website:** drata.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, CA 
- **Twitter:** @DrataHQ  
1,525 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=78250d6bf26d782e9bea1bfb184a4d275d7c7c99e5a9bba537cb60809142029a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fdrata%2F&secure%5Burl_type%5D=linkedin_company_website)  
677 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 47% Medium, 46% Small

#### What Do G2 Reviewers Say About Drata?

_AI-generated summary from verified user reviews_

##### Pros

- Users commend the **exceptional customer support** from Drata, enhancing their compliance and security management experience.
- Users value the **intuitive design** of Drata, making setup and integration seamless and efficient for everyone.
- Users highlight the **automation of compliance monitoring** in Drata, significantly easing reporting processes and enhancing efficiency.
- Users value the **time-saving automation** of Drata, streamlining compliance tasks and simplifying audits significantly.
- Users value the **seamless integrations** of Drata, enhancing functionality by connecting various platforms effortlessly.

##### Cons

- Users find Drata's **limited integrations** frustrating, wishing for broader support for third-party tools and self-hosted versions.
- Users face **integration issues** with Drata, leading to a challenging transition and unexpected manual effort required.
- Users note that **configuration limitations** and complex transitions hinder a seamless experience with Drata.
- Users find the **lack of clarity** in Drata's UI can complicate the audit process and task management.
- Users find the **UX confusing at times** , making it difficult to identify missing tasks and necessary fixes.

#### What Are Recent G2 Reviews of Drata?

**["Great framework for information security audits and overall compliance"](https://www.g2.com/survey_responses/drata-review-13225049)**

**Rating:** 4.5/5.0 stars

_— Emre Utku S._

[Read full review](https://www.g2.com/survey_responses/drata-review-13225049)

**["The DRATA system embodies simplicity and intuitiveness."](https://www.g2.com/survey_responses/drata-review-8124415)**

**Rating:** 5.0/5.0 stars

_— Ari B._

[Read full review](https://www.g2.com/survey_responses/drata-review-8124415)

#### What Are G2 Users Discussing About Drata?

- [How are others coping with slower support, chatbot inconsistencies, and login / chat issues?](https://www.g2.com/discussions/how-are-others-coping-with-slower-support-chatbot-inconsistencies-and-login-chat-issues) - 1 comment, 1 upvote
- [Has anyone else felt friction between Drata’s control depth and their own compliance approach or frameworks?](https://www.g2.com/discussions/has-anyone-else-felt-friction-between-drata-s-control-depth-and-their-own-compliance-approach-or-frameworks) - 1 comment, 1 upvote
- [What’s your workaround when Drata’s integrations and automation do not go deep enough?](https://www.g2.com/discussions/what-s-your-workaround-when-drata-s-integrations-and-automation-do-not-go-deep-enough) - 1 comment, 1 upvote
- [How are you all dealing with confusing navigation and policy / control relationships in Drata?](https://www.g2.com/discussions/how-are-you-all-dealing-with-confusing-navigation-and-policy-control-relationships-in-drata) - 1 comment, 1 upvote
- [Complex setup and overloaded templates slow down my first audit cycle](https://www.g2.com/discussions/complex-setup-and-overloaded-templates-slow-down-my-first-audit-cycle) - 1 comment, 1 upvote

### [Sprinto](https://www.g2.com/products/sprinto-inc/reviews)

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

**Average Rating:** 4.7/5.0

**Total Reviews:** 1,662

#### How Do G2 Users Rate Sprinto?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.6/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.9/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Sprinto?

- **Seller:** [Sprinto Technology Private Limited](https://www.g2.com/sellers/sprinto-technology-private-limited)
- **Company Website:** sprinto.com
- **Year Founded:** 2020
- **HQ Location:** San Francisco, US
- **Twitter:** @sprintoHQ  
13,279 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=88a586e2bb472645900fa1b7c798d25a8eec33961ed706d988c804e1de4cdc4a&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsprinto-com&secure%5Burl_type%5D=linkedin_company_website)  
424 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 57% Small, 41% Medium

#### What Do G2 Reviewers Say About Sprinto?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Sprinto's **ease of use** exceptional, appreciating the straightforward deployment and comprehensive support throughout the process.
- Users praise the **helpful customer support** from Sprinto, facilitating smooth deployment and fast compliance management.
- Users praise Sprinto for its **transformative compliance features** and exceptional customer support, streamlining their compliance processes effectively.
- Users highlight the **exceptional customer support** from Sprinto, making deployment and compliance management effortless and efficient.
- Users value Sprinto for its **intuitive compliance management** , enhanced by exceptional support from knowledgeable account managers.

##### Cons

- Users report **integration issues** with some niche tools, though improvements are continuously being made.
- Users note **limited customization options** for certain features, impacting flexibility and initial setup for specific needs.
- Users experience **limited integrations** which can cause delays, yet improvements are ongoing to enhance functionality.
- Users find the **guidance unclear** during onboarding, leading to confusion about auditor accreditation and integrations.
- Users report **UI/UX challenges** with navigation and syncing, but hope for improvements with the new interface update.

#### What Are Recent G2 Reviews of Sprinto?

**["Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support"](https://www.g2.com/survey_responses/sprinto-review-12898116)**

**Rating:** 5.0/5.0 stars

_— Gayathri v._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12898116)

**["Fast path to SOC 2 Type 1 — great platform, outstanding support"](https://www.g2.com/survey_responses/sprinto-review-12885389)**

**Rating:** 5.0/5.0 stars

_— Ignacio B._

[Read full review](https://www.g2.com/survey_responses/sprinto-review-12885389)

### [Secureframe](https://www.g2.com/it/products/secureframe/reviews)

Secureframe consente alle aziende di costruire fiducia con i clienti semplificando la sicurezza delle informazioni e la conformità attraverso l'IA e l'automazione. Migliaia di organizzazioni come AngelList, Nasdaq, Coda e Remote si affidano a Secureframe per aiutarle a ottenere e mantenere la conformità con gli standard globali di sicurezza delle informazioni.

**Average Rating:** 4.7/5.0

**Total Reviews:** 811

#### How Do G2 Users Rate Secureframe?

- **Facilità di amministrazione:** 9.0/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 9.1/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.7/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Secureframe?

- **Venditore:** [Secureframe](https://www.g2.com/it/sellers/secureframe)
- **Sito web dell'azienda:** secureframe.com
- **Anno di Fondazione:** 2020
- **Sede centrale:** San Francisco, US
- **Twitter:** @secureframe  
2,228 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=154d827436e7840ecd54fcd5bea92cefeb28595f6620d0dc82625a40be9119db&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fsecureframe%2F&secure%5Burl_type%5D=linkedin_company_website)  
126 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 66% Small, 30% Medium

#### What Do G2 Reviewers Say About Secureframe?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano la **facilità d'uso** di Secureframe, rendendo il monitoraggio delle attività e la configurazione semplici ed efficienti.
- Gli utenti apprezzano come la **conformità senza sforzo** di Secureframe con SOC 2 richieda una manutenzione minima e un supporto eccellente.
- Gli utenti apprezzano come l' **automazione di Secureframe semplifica la conformità** , rendendola facile e gestibile per tutti gli utenti.
- Gli utenti apprezzano le **forti misure di sicurezza** di Secureframe, aumentando la fiducia mentre gestiscono efficacemente le informazioni sensibili dei clienti.
- Gli utenti apprezzano le **integrazioni senza soluzione di continuità** di Secureframe, migliorando significativamente l'efficienza e la gestione della conformità per i piccoli team.

##### Cons

- Gli utenti affrontano **problemi di integrazione** con strumenti di nicchia, richiedendo sforzo manuale e tempo per una corretta configurazione.
- Gli utenti trovano frustranti le **opzioni di personalizzazione limitate** per i tempi e i programmi di follow-up per le esigenze di conformità e formazione.
- Gli utenti sono delusi dalle **integrazioni limitate** , in particolare per la mancanza di funzionalità automatiche per le principali piattaforme come Azure e Stripe.
- Gli utenti desiderano miglioramenti nella **funzione di audit** , cercando una migliore integrazione all'interno di Secureframe per un'esperienza più fluida.
- Gli utenti trovano che **le funzionalità mancanti** come i miglioramenti nella gestione dei test limitano i miglioramenti complessivi della qualità della vita in Secureframe.

#### What Are Recent G2 Reviews of Secureframe?

**["Secureframe ha semplificato la nostra conformità ISO 27001"](https://www.g2.com/it/survey_responses/secureframe-review-13111175)**

**Rating:** 5.0/5.0 stars

_— Kunal P._

[Read full review](https://www.g2.com/it/survey_responses/secureframe-review-13111175)

**["Automazione che rende la conformità e la preparazione agli audit senza stress"](https://www.g2.com/it/survey_responses/secureframe-review-13140194)**

**Rating:** 5.0/5.0 stars

_— Austin R._

[Read full review](https://www.g2.com/it/survey_responses/secureframe-review-13140194)

#### What Are G2 Users Discussing About Secureframe?

- [How are you getting value from the AI features when first-pass answers and automation feel hit-or-miss?](https://www.g2.com/it/discussions/how-are-you-getting-value-from-the-ai-features-when-first-pass-answers-and-automation-feel-hit-or-miss) - 1 comment, 1 upvote
- [Is anyone else struggling with limited reporting and document/search friction during executive reviews?](https://www.g2.com/it/discussions/is-anyone-else-struggling-with-limited-reporting-and-document-search-friction-during-executive-reviews) - 1 comment, 1 upvote
- [What do you do to make the first-year setup and control mapping less overwhelming?](https://www.g2.com/it/discussions/what-do-you-do-to-make-the-first-year-setup-and-control-mapping-less-overwhelming) - 1 comment, 1 upvote
- [How are other teams handling integrations that are partially supported or keep needing manual work?](https://www.g2.com/it/discussions/how-are-other-teams-handling-integrations-that-are-partially-supported-or-keep-needing-manual-work) - 1 comment
- [Unreliable training and login flows slow down my audits and force awkward deadline conversations](https://www.g2.com/it/discussions/unreliable-training-and-login-flows-slow-down-my-audits-and-force-awkward-deadline-conversations) - 1 comment

### [Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

**Average Rating:** 4.9/5.0

**Total Reviews:** 1,311

#### How Do G2 Users Rate Scrut Automation?

- **Ease of Admin:** 9.6/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.2/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.2/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scrut Automation?

- **Seller:** [Scrut Automation](https://www.g2.com/sellers/scrut-automation)
- **Company Website:** www.scrut.io
- **Year Founded:** 2022
- **HQ Location:** Palo Alto, US
- **Twitter:** @scrutsocial  
120 Twitter followers
- **LinkedIn® Page:** [in.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=bc41c2e597940ae09ba338bf6abec320af78c3999ea4eb88e00635f919f04135&secure%5Burl%5D=https%3A%2F%2Fin.linkedin.com%2Fcompany%2Fscrut-automation&secure%5Burl_type%5D=linkedin_company_website)  
233 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 50% Small, 48% Medium

#### What Do G2 Reviewers Say About Scrut Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users find Scrut Automation's **ease of use** invaluable for tracking tasks and maintaining team access effectively.
- Users commend the **outstanding customer support** of Scrut Automation, highlighting teamwork and effective guidance throughout the process.
- Users appreciate the **exceptional support and guidance** from Scrut's team, significantly enhancing their compliance experience.
- Users value the **exceptional compliance management** by Scrut Automation, finding it efficient and cost-effective for SOC 2 processes.
- Users value the **supportive compliance assistance** from Scrut Automation, enhancing clarity and ease during audits.

##### Cons

- Users feel that Scrut Automation requires **significant improvements** in UI clarity and documentation quality for better usability.
- Users note the **missing features** in Scrut Automation, particularly in auto-answering questionnaires and report customization.
- Users face **technical issues** with complex modules and occasional login problems, impacting the overall user experience.
- Users find the **learning curve steep** , making navigation and understanding challenging for newcomers to Scrut Automation.
- Users express concerns over **lack of clarity** in test results and policy processes, complicating their experience with Scrut Automation.

#### What Are Recent G2 Reviews of Scrut Automation?

**["Automates Compliance and Evidence Collection — Boosts Audit Readiness and Efficiency"](https://www.g2.com/survey_responses/scrut-automation-review-13049695)**

**Rating:** 4.0/5.0 stars

_— Ravindra N._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-13049695)

**["Transforming Compliance and Security Management with Scrut Automation"](https://www.g2.com/survey_responses/scrut-automation-review-10499291)**

**Rating:** 5.0/5.0 stars

_— Karan A._

[Read full review](https://www.g2.com/survey_responses/scrut-automation-review-10499291)

#### What Are G2 Users Discussing About Scrut Automation?

- [What is Scrut Automation used for?](https://www.g2.com/discussions/what-is-scrut-automation-used-for) - 1 comment, 1 upvote

### [Thoropass](https://www.g2.com/it/products/thoropass/reviews)

Thoropass è una moderna azienda di audit di conformità che aiuta organizzazioni di tutte le dimensioni a costruire e dimostrare fiducia con audit di alta qualità, guida esperta e servizi di sicurezza integrati. Combinando una profonda esperienza di auditor con tecnologia intuitiva, Thoropass offre un percorso semplificato per raggiungere e mantenere la conformità con framework tra cui SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS e altri. Come azienda CPA autorizzata e fornitore accreditato CREST, Thoropass porta un livello di credibilità e rigore che si adatta da startup in rapida crescita a imprese complesse e regolamentate. I nostri auditor, ingegneri della sicurezza ed esperti di conformità collaborano strettamente con i clienti per semplificare la raccolta delle prove, ridurre l'attrito dell'audit e garantire risultati che resistano al controllo di regolatori, partner e clienti. Oltre agli audit, Thoropass supporta l'intero ciclo di vita della costruzione della fiducia con test di penetrazione, valutazione del rischio, revisioni degli accessi, valutazioni di governance dell'IA e automazione dei questionari—aiutando i team a unificare le operazioni di conformità senza dover fare affidamento su più fornitori. Le organizzazioni scelgono Thoropass per il nostro supporto esperto e reattivo, risultati di audit coerenti e un'esperienza di servizio costruita per team di sicurezza e conformità moderni. Thoropass è fidato da migliaia di aziende per dimostrare la conformità, rafforzare la postura di sicurezza e soddisfare con fiducia le aspettative di clienti, auditor e regolatori.

**Average Rating:** 4.7/5.0

**Total Reviews:** 580

#### How Do G2 Users Rate Thoropass?

- **Facilità di amministrazione:** 9.0/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 8.8/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.5/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 7.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Thoropass?

- **Venditore:** [Thoropass](https://www.g2.com/it/sellers/thoropass)
- **Sito web dell'azienda:** thoropass.com
- **Anno di Fondazione:** 2019
- **Sede centrale:** New York
- **Twitter:** @thoropass  
379 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b1f297756fc129866b36b217a21369c351ca7d0a7174dc50b89b265a25747e91&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fthoropass%2F&secure%5Burl_type%5D=linkedin_company_website)  
233 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CEO, CTO
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 71% Small, 25% Medium

#### What Do G2 Reviewers Say About Thoropass?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano la **facilità d'uso** di Thoropass, godendo del suo cruscotto intuitivo e dei modelli utili per audit efficienti.
- Gli utenti apprezzano il **supporto eccezionale** di Thoropass, che semplifica il processo di audit e migliora la loro esperienza.
- Gli utenti apprezzano le **ampie integrazioni** di Thoropass, che semplificano gli sforzi di conformità e migliorano l'efficienza operativa.
- Gli utenti elogiano il **team di supporto utile** di Thoropass, che migliora l'esperienza complessiva di audit e conformità.
- Gli utenti apprezzano le **ampie integrazioni** di Thoropass, semplificando notevolmente i processi di conformità con vari fornitori di cloud.

##### Cons

- Gli utenti trovano **mancanza di chiarezza** in Thoropass, lottando con un UX disorganizzato e informazioni essenziali mancanti al punto vendita.
- Gli utenti riscontrano **problemi di integrazione** con Thoropass, portando a eccezioni e connessioni poco utili che ostacolano l'usabilità.
- Gli utenti trovano la **UX disgiunta** , esprimendo la necessità di una guida più chiara e una migliore funzionalità in Thoropass.
- Gli utenti notano la necessità di **migliorare la comunicazione e lo sviluppo delle funzionalità** per migliorare le esperienze di pianificazione e audit.
- Gli utenti trovano la **piattaforma non intuitiva** , portando a confusione e difficoltà nella gestione efficiente della conformità.

#### What Are Recent G2 Reviews of Thoropass?

**["Thoropass e il processo SOC2"](https://www.g2.com/it/survey_responses/thoropass-review-11551425)**

**Rating:** 5.0/5.0 stars

_— Nicole B._

[Read full review](https://www.g2.com/it/survey_responses/thoropass-review-11551425)

**["Centralizza i compiti di conformità in modo efficiente"](https://www.g2.com/it/survey_responses/thoropass-review-10958552)**

**Rating:** 5.0/5.0 stars

_— Monica ._

[Read full review](https://www.g2.com/it/survey_responses/thoropass-review-10958552)

#### What Are G2 Users Discussing About Thoropass?

- [A cosa serve Laika?](https://www.g2.com/it/discussions/what-is-laika-used-for) - 1 comment

### [IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)

OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies.

**Average Rating:** 4.2/5.0

**Total Reviews:** 66

#### How Do G2 Users Rate IBM OpenPages?

- **Ease of Admin:** 7.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.8/10 (Category avg: 7.9/10)

#### Who Is the Company Behind IBM OpenPages?

- **Seller:** [IBM](https://www.g2.com/sellers/ibm)
- **Year Founded:** 1911
- **HQ Location:** Armonk, New York, United States
- **Twitter:** @IBMSecurity  
74,660 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=14b544adaece4fdbc987f1d7f7028048c22259946811200cc751263825586af9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F1009%2F&secure%5Burl_type%5D=linkedin_company_website)  
328,202 employees on LinkedIn®
- **Ownership:** SWX:IBM

#### Who Uses This Product?

- **Top Industries:** Banking, Information Technology and Services
- **Company Size:** 39% Medium, 34% Large

#### What Do G2 Reviewers Say About IBM OpenPages?

_AI-generated summary from verified user reviews_

##### Pros

- Users find IBM OpenPages to offer **effective risk management** , enhancing compliance and streamlining operations for their organizations.
- Users appreciate the **time-saving features** of IBM OpenPages, simplifying workflows and enhancing overall efficiency.
- Users value the **automation capabilities** of IBM OpenPages, enhancing workflows and risk management efficiently.
- Users appreciate the **intuitive interface** of IBM OpenPages, making navigation and usage exceptionally straightforward and efficient.
- Users commend the **security features** of IBM OpenPages, effectively protecting against data breaches and ensuring compliance.

##### Cons

- Users find the **complexity** of IBM OpenPages overwhelming, particularly regarding usability and report generation challenges.
- Users find IBM OpenPages **too expensive** , making it difficult to justify its implementation and ongoing costs.
- Users find **usability improvements necessary** in IBM OpenPages due to its complexity and steep learning curve.
- Users struggle with a **steep learning curve** in IBM OpenPages, finding it complex and challenging, especially for new users.
- Users find the **learning difficulty** with IBM OpenPages can hinder productivity and require extra effort to overcome.

#### What Are Recent G2 Reviews of IBM OpenPages?

**["Automates Security Tasks, But Pricey"](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)**

**Rating:** 4.0/5.0 stars

_— Madhav B._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12229480)

**["Transforms Risk Management and Compliance"](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)**

**Rating:** 5.0/5.0 stars

_— Charlotte W._

[Read full review](https://www.g2.com/survey_responses/ibm-openpages-review-12242779)

#### What Are G2 Users Discussing About IBM OpenPages?

- [What is Watson discovery?](https://www.g2.com/discussions/what-is-watson-discovery)
- [What is the best GRC tool?](https://www.g2.com/discussions/ibm-openpages-with-watson-what-is-the-best-grc-tool)
- [What is IBM OpenPages?](https://www.g2.com/discussions/what-is-ibm-openpages)
- [What is IBM OpenPages with Watson?](https://www.g2.com/discussions/what-is-ibm-openpages-with-watson)

### [OneTrust Tech Risk & Compliance](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

**Average Rating:** 4.6/5.0

**Total Reviews:** 107

#### How Do G2 Users Rate OneTrust Tech Risk & Compliance?

- **Ease of Admin:** 8.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.5/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 8.7/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.4/10 (Category avg: 7.9/10)

#### Who Is the Company Behind OneTrust Tech Risk & Compliance?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Computer Software, Information Technology and Services
- **Company Size:** 46% Medium, 40% Small

#### What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance?

_AI-generated summary from verified user reviews_

##### Pros

- Users appreciate the **ease of use** of OneTrust Tech Risk & Compliance, enhancing tracking and monitoring efficiency.
- Users value the **powerful automation** of OneTrust Tech Risk & Compliance, enhancing risk management and streamlining processes.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing tracking and visibility for risk management.
- Users appreciate the **centralized platform for risk and compliance management** , enhancing tracking, monitoring, and overall efficiency.
- Users appreciate the **centralized platform** of OneTrust Tech Risk & Compliance, enhancing efficiency and accountability in risk management.

##### Cons

- Users find the **complex implementation** of OneTrust Tech Risk & Compliance challenging, requiring significant time and effort to configure.
- Users find the **difficult setup** of OneTrust Tech Risk & Compliance challenging, often requiring significant time and learning.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance to be daunting for newcomers and complex to navigate.
- Users find the **steep learning curve** of OneTrust Tech Risk & Compliance challenging, complicating the initial setup process.
- Users experience **slow loading** times with OneTrust Tech Risk & Compliance, especially when multiple tasks are active.

#### What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance?

**["OneTrust is the only GRC tool that works!"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)**

**Rating:** 5.0/5.0 stars

_— Gerald P._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-10233667)

**["The best GRC Product on the Market"](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)**

**Rating:** 5.0/5.0 stars

_— Chinua K._

[Read full review](https://www.g2.com/survey_responses/onetrust-tech-risk-compliance-review-7634011)

#### What Are G2 Users Discussing About OneTrust Tech Risk & Compliance?

- [What improvements would you suggest for OneTrust GRC to better meet your compliance needs?](https://www.g2.com/discussions/what-improvements-would-you-suggest-for-onetrust-grc-to-better-meet-your-compliance-needs)

### [RiskProfiler - External Threat Exposure Management](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third\_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

**Average Rating:** 4.9/5.0

**Total Reviews:** 118

#### How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

- **Ease of Admin:** 9.7/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.8/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.8/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

- **Seller:** [Riskprofiler](https://www.g2.com/sellers/riskprofiler)
- **Company Website:** riskprofiler.io
- **Year Founded:** 2019
- **HQ Location:** Rock Hill , US
- **Twitter:** @riskprofilerio  
209 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=b24e229941d4d86cfe1c465f2ca6c72933d43e43c05341e557ac04e379d138f3&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Friskprofiler&secure%5Burl_type%5D=linkedin_company_website)  
32 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Software Engineer, Security Consultant
- **Top Industries:** Information Technology and Services, Design
- **Company Size:** 66% Medium, 33% Small

#### What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **effective risk management** capabilities of RiskProfiler, facilitating informed decisions and quick responses to threats.
- Users appreciate the **seamless onboarding and integration** of RiskProfiler, enhancing visibility and monitoring of external threats.
- Users commend the **fast and efficient customer support** of RiskProfiler, enhancing their overall experience and response time.
- Users value the **ease of use** of RiskProfiler, particularly the seamless integration and user-friendly dashboard.
- Users value the **easy setup** of RiskProfiler, appreciating its intuitive dashboard and quick implementation process.

##### Cons

- Users face a **steep learning curve** with RiskProfiler, requiring time for training and customization to navigate effectively.
- Users find the **complexity** of RiskProfiler overwhelming, necessitating significant time for training and adjustment.
- Users find a **difficult learning curve** for RiskProfiler, requiring significant training and time to navigate effectively.
- Users find the **learning difficulty** of RiskProfiler challenging, necessitating extra training and time for effective use.
- Users find the **complex setup** of RiskProfiler challenging, particularly for non-specialist teams trying to integrate it.

#### What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

**["Contextual Intelligence That Connects Risk Across the Attack Surface"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12719957)

**["Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization"](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)**

**Rating:** 5.0/5.0 stars

_— Verified User in Information Technology and Services_

[Read full review](https://www.g2.com/survey_responses/riskprofiler-external-threat-exposure-management-review-12394581)

### [Responsive, formerly RFPIO](https://www.g2.com/it/products/responsive-formerly-rfpio/reviews)

Responsive è il leader globale nel software di gestione delle risposte strategiche, trasformando il modo in cui le organizzazioni condividono e scambiano informazioni critiche. Il nostro impegno per l'innovazione del prodotto e il successo del cliente consente alle aziende di accelerare la crescita, mitigare i rischi e migliorare l'esperienza dei dipendenti sfruttando tecnologie intelligenti per gestire rapidamente e accuratamente RFP, RFI, questionari di sicurezza (VSQ), questionari di due diligence (DDQ), valutazioni del rischio e tutte le altre richieste di informazioni complesse (RFX). Con Responsive, i team in prima linea forniscono risposte superiori automatizzando il completamento di questionari, documenti e fogli di calcolo mentre collaborano con le parti interessate, migliorano i processi con approfondimenti sui dati e accedono rapidamente ai contenuti approvati attraverso le applicazioni aziendali più diffuse.

**Average Rating:** 4.5/5.0

**Total Reviews:** 1,301

#### How Do G2 Users Rate Responsive, formerly RFPIO?

- **Facilità di amministrazione:** 8.7/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 7.1/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 7.7/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 6.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Responsive, formerly RFPIO?

- **Venditore:** [Responsive](https://www.g2.com/it/sellers/responsive)
- **Sito web dell'azienda:** www.responsive.io
- **Anno di Fondazione:** 2016
- **Sede centrale:** Frisco, Texas
- **Twitter:** @responsiveio  
1,735 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=82217c41f6a5e492d82f08bf2e615eda4cafadcdbd2bcc37d9ca3f315e279e7d&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fresponsiveio&secure%5Burl_type%5D=linkedin_company_website)  
716 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Proposal Manager, Proposal Writer
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 48% Medium, 39% Large

#### What Do G2 Reviewers Say About Responsive, formerly RFPIO?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano la **facilità d'uso** di Responsive, rendendo la gestione RFI intuitiva ed efficiente.
- Gli utenti apprezzano l' **interfaccia intuitiva** e le funzionalità efficaci che semplificano i processi di risposta e migliorano la produttività.
- Gli utenti apprezzano l' **efficienza** di Responsive, che semplifica la collaborazione e accelera la consegna delle risposte per le RFP.
- Gli utenti apprezzano le **funzionalità che fanno risparmiare tempo** di Responsive, migliorando l'efficienza nella gestione dei progetti e nel riutilizzo dei contenuti.
- Gli utenti apprezzano le caratteristiche di **collaborazione efficiente del team** di Responsive, migliorando la gestione dei progetti e il coordinamento delle risposte.

##### Cons

- Gli utenti notano una **ripida curva di apprendimento iniziale** per le funzionalità avanzate, nonostante la documentazione di supporto e le risorse utili.
- Gli utenti trovano l' **interfaccia utente non intuitiva** , specialmente per i nuovi utenti che faticano a navigare efficacemente nella piattaforma.
- Gli utenti sentono la mancanza delle **funzionalità mancanti** come le notifiche di coppie di domande e risposte e il supporto per formati aggiuntivi.
- Gli utenti trovano le **funzionalità non intuitive** di Responsive frustranti, complicando la loro esperienza di ricerca e navigazione.
- Gli utenti trovano la **difficile curva di apprendimento** impegnativa inizialmente, ma le risorse di supporto aiutano a facilitare il processo nel tempo.

#### What Are Recent G2 Reviews of Responsive, formerly RFPIO?

**["Gestione RFP senza sforzo, interfaccia pulita e semplice"](https://www.g2.com/it/survey_responses/responsive-formerly-rfpio-review-4305533)**

**Rating:** 5.0/5.0 stars

_— Jack P._

[Read full review](https://www.g2.com/it/survey_responses/responsive-formerly-rfpio-review-4305533)

**["Potente AI e gestione dei documenti per risposte migliori"](https://www.g2.com/it/survey_responses/responsive-formerly-rfpio-review-11884656)**

**Rating:** 4.0/5.0 stars

_— Rui D._

[Read full review](https://www.g2.com/it/survey_responses/responsive-formerly-rfpio-review-11884656)

#### What Are G2 Users Discussing About Responsive, formerly RFPIO?

- [A cosa serve RFPIO?](https://www.g2.com/it/discussions/what-is-rfpio-used-for) - 1 comment
- [A cosa serve RFP360, una società di RFPIO?](https://www.g2.com/it/discussions/what-is-rfp360-an-rfpio-company-used-for) - 1 comment

### [OneTrust Privacy Automation](https://www.g2.com/products/onetrust-privacy-automation/reviews)

OneTrust’s mission is to enable the responsible use of data and AI. Our platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle. The Privacy Automation solution simplifies compliance, automates privacy operations and mitigates risk. Our tools include: -A real-time view of your compliance posture -Evergreen data and activity map -Data subject request automation -Privacy and AI risk workflows OneTrust supports seamless collaboration between data teams and risk teams to drive rapid and trusted innovation. Recognized as a market pioneer and leader, OneTrust boasts over 300 patents and serves more than 14,000 customers globally, ranging from industry giants to small businesses. For more information, visit www.onetrust.com.

**Average Rating:** 4.3/5.0

**Total Reviews:** 143

#### How Do G2 Users Rate OneTrust Privacy Automation?

- **Ease of Admin:** 8.4/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.4/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.0/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 8.1/10 (Category avg: 7.9/10)

#### Who Is the Company Behind OneTrust Privacy Automation?

- **Seller:** [OneTrust](https://www.g2.com/sellers/onetrust)
- **Company Website:** www.onetrust.com
- **Year Founded:** 2016
- **HQ Location:** Atlanta, Georgia
- **Twitter:** @OneTrust  
6,566 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=21052243dbcc83d84c2988edd190ff77868a5cc228fd0e9f19c1958acc052081&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2F10795459%2F&secure%5Burl_type%5D=linkedin_company_website)  
2,487 employees on LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** Data Protection Officer
- **Top Industries:** Information Technology and Services, Financial Services
- **Company Size:** 45% Large, 40% Medium

#### What Do G2 Reviewers Say About OneTrust Privacy Automation?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **ease of use** of OneTrust Privacy Automation, simplifying privacy workflows and enhancing team collaboration.
- Users appreciate the **comprehensive all-in-one platform** of OneTrust Privacy Automation, streamlining privacy workflows and enhancing compliance.
- Users appreciate the **automation capabilities** of OneTrust Privacy Automation, streamlining privacy workflows and enhancing compliance efficiency.
- Users value the **centralized automation** of privacy workflows in OneTrust, enhancing compliance efficiency and scalability.
- Users value the **comprehensive all-in-one platform** of OneTrust Privacy Automation, enhancing efficiency in managing privacy workflows.

##### Cons

- Users find the **complexity** of OneTrust Privacy Automation daunting, requiring extensive time and training for effective setup.
- Users find the **complexity issues** of OneTrust Privacy Automation overwhelming, requiring extensive training and time for proper setup.
- Users find the **complexity of setup** overwhelming, requiring significant time and training to navigate the interface.
- Users desire improved **reporting and dashboard features** in OneTrust Privacy Automation for better usability and functionality.
- Users highlight the **steep learning curve** of OneTrust Privacy Automation, requiring significant time and training for effective use.

#### What Are Recent G2 Reviews of OneTrust Privacy Automation?

**["Intuitive UI and Smooth Onboarding for Workflows and Integrations"](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12641842)**

**Rating:** 4.5/5.0 stars

_— Mark B._

[Read full review](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12641842)

**["Easy-to-Use Compliance Tool That Integrates Seamlessly"](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12589467)**

**Rating:** 5.0/5.0 stars

_— Ryan H._

[Read full review](https://www.g2.com/survey_responses/onetrust-privacy-automation-review-12589467)

### [Bitsight](https://www.g2.com/products/bitsight/reviews)

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

**Average Rating:** 4.5/5.0

**Total Reviews:** 76

#### How Do G2 Users Rate Bitsight?

- **Ease of Admin:** 8.8/10 (Category avg: 9.0/10)
- **Risk Scoring:** 8.7/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 7.6/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 7.7/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Bitsight?

- **Seller:** [Bitsight](https://www.g2.com/sellers/bitsight)
- **Company Website:** www.bitsight.com
- **Year Founded:** 2011
- **HQ Location:** Boston, MA
- **Twitter:** @BitSight  
4,503 Twitter followers
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=56e1c298f7c9929e49118678bddc5bbe3f8b17ba55b522d776985c6f3a6c58e8&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fbitsight%2F&secure%5Burl_type%5D=linkedin_company_website)  
741 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Information Technology and Services, Hospital & Health Care
- **Company Size:** 71% Large, 24% Medium

#### What Do G2 Reviewers Say About Bitsight?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **comprehensive security posture** provided by Bitsight, enhancing protection for their organization and suppliers.
- Users value the **comprehensive security posture** provided by Bitsight, enhancing management of cyber risk and third-party suppliers.
- Users find Bitsight's **ease of use** remarkable, enjoying its intuitive interface and seamless integration with various platforms.
- Users appreciate the **detailed insights** and **collaboration features** of Bitsight, enhancing vendor risk management effectively.
- Users praise the **fantastic customer support** of Bitsight, highlighting their knowledge and eagerness to assist effectively.

##### Cons

- Users find **missing features** in Bitsight, such as lack of transparency and inadequate questionnaire management, frustrating overall.
- Users criticize the **lack of clarity** in BitSight's scoring mechanism and experience occasional inaccuracies in domain reporting.
- Users experience **poor customer support** and inadequate documentation, hindering effective use of the Bitsight platform.
- Users experience **poor notifications** with delayed alerts and irrelevant historical breaches, impacting timely critical monitoring.
- Users experience **slow loading** times and timeouts that hinder workflow and overall satisfaction with Bitsight.

#### What Are Recent G2 Reviews of Bitsight?

**["Finds Public-Facing Security Flaws and Clearly Shows How to Fix Them"](https://www.g2.com/survey_responses/bitsight-review-12760320)**

**Rating:** 4.5/5.0 stars

_— Verified User in Computer Software_

[Read full review](https://www.g2.com/survey_responses/bitsight-review-12760320)

**["Effortless Cyber Risk Scoring for Proactive Security"](https://www.g2.com/survey_responses/bitsight-review-12098656)**

**Rating:** 4.0/5.0 stars

_— Matthew P._

[Read full review](https://www.g2.com/survey_responses/bitsight-review-12098656)

#### What Are G2 Users Discussing About Bitsight?

- [What does Bitsight Security Ratings do?](https://www.g2.com/discussions/what-does-bitsight-security-ratings-do)
- [How is BitSight calculated?](https://www.g2.com/discussions/how-is-bitsight-calculated)
- [What is a BitSight security rating?](https://www.g2.com/discussions/what-is-a-bitsight-security-rating)

### [Scytale](https://www.g2.com/it/products/scytale-g2/reviews)

Scytale è l'unica piattaforma AI GRC e esperti umani che guidano risultati di conformità reali - dal raggiungere la conformità al mantenerla, e costruire fiducia attraverso ogni framework. Fidato da oltre 1.000 aziende in tutto il mondo, Scytale sostituisce i test frammentati con una visibilità continua dei controlli, automatizzando le prove, il cross-mapping dei controlli e la gestione del rischio su oltre 80 framework di sicurezza, privacy e AI, inclusi SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001 e molti altri. Scytale è una piattaforma di fiducia e conformità a tutto campo con tutto ciò di cui hai bisogno per gestire il tuo programma GRC in un unico hub centrale, inclusi: una rete GRC agentica, un Centro Fiducia, sicurezza offensiva integrata con AI e servizi GRC esperti.

**Average Rating:** 4.8/5.0

**Total Reviews:** 704

#### How Do G2 Users Rate Scytale?

- **Facilità di amministrazione:** 9.1/10 (Category avg: 9.0/10)
- **Valutazione del Rischio:** 9.1/10 (Category avg: 8.8/10)
- **Modelli di questionario:** 8.9/10 (Category avg: 8.6/10)
- **Valutazioni di Quarta Parte:** 8.0/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Scytale?

- **Venditore:** [Scytale AI](https://www.g2.com/it/sellers/scytale-ai)
- **Sito web dell'azienda:** scytale.ai
- **Anno di Fondazione:** 2021
- **Sede centrale:** New York, US
- **Twitter:** @scytale\_ai  
76 follower su Twitter
- **Pagina LinkedIn®:** [www.linkedin.com](https://www.g2.com/it/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=813f878dd624db92d69e43a157be813744a37962537ab43cfd42704d3acbbda1&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fscytale-ai%2F&secure%5Burl_type%5D=linkedin_company_website)  
165 dipendenti su LinkedIn®

#### Who Uses This Product?

- **Who Uses This:** CTO, CEO
- **Top Industries:** Software per computer, Tecnologia dell'informazione e servizi
- **Company Size:** 73% Small, 21% Medium

#### What Do G2 Reviewers Say About Scytale?

_AI-generated summary from verified user reviews_

##### Pros

- Gli utenti apprezzano il **supporto pratico** di Scytale, rendendo il loro percorso di conformità efficiente e piacevole.
- Gli utenti apprezzano la **facilità d'uso** di Scytale, che facilita la conformità semplificata e una gestione efficiente delle prove.
- Gli utenti apprezzano Scytale per il suo **design intuitivo** , che semplifica la conformità SOC e migliora la gestione dei compiti e la visibilità.
- Gli utenti elogiano il **supporto clienti eccezionale** di Scytale, evidenziando la loro assistenza proattiva e competente durante tutto il processo.
- Gli utenti elogiano la **disponibilità del Team** , notando un supporto eccezionale che migliora l'esperienza complessiva con Scytale.

##### Cons

- Gli utenti affrontano **problemi di integrazione** con Scytale, riscontrando bug e una mancanza di flusso intuitivo durante il processo.
- Gli utenti sperimentano **integrazioni limitate** con Scytale, affrontando problemi di configurazione frustranti e funzionalità incoerenti.
- Gli utenti esprimono frustrazione per le **opzioni di configurazione limitate** per la raccolta delle prove, portando a integrazioni automatiche inaccurate.
- Gli utenti notano alcuni **elementi UX eccentrici** in Scytale che potrebbero beneficiare di miglioramenti per un'esperienza più fluida.
- Gli utenti trovano le **funzionalità mancanti** in Scytale limitanti, influenzando la sua efficacia per pratiche GRC complete.

#### What Are Recent G2 Reviews of Scytale?

**["Scytale semplifica ISO 27001 con la raccolta automatizzata di prove e integrazioni"](https://www.g2.com/it/survey_responses/scytale-review-13198294)**

**Rating:** 5.0/5.0 stars

_— Arjun Das K._

[Read full review](https://www.g2.com/it/survey_responses/scytale-review-13198294)

**["Semplifica la Certificazione con Grande Efficienza"](https://www.g2.com/it/survey_responses/scytale-review-10285318)**

**Rating:** 5.0/5.0 stars

_— Alan M._

[Read full review](https://www.g2.com/it/survey_responses/scytale-review-10285318)

### [Copla](https://www.g2.com/products/copla/reviews)

Copla is a governance, risk, and compliance (GRC) and compliance automation platform founded in 2023 and focused on companies operating in Europe. It is built for organizations that need to meet a growing set of regulatory and security requirements, including DORA, NIS2, ISO 27001, and SOC 2. Rather than treating compliance as a one-time certification exercise, Copla is designed to keep organizations continuously compliant and audit-ready. The platform combines automation and AI with guidance from in-house CISO experts to manage the full GRC cycle in a single system. Core capabilities include framework compliance across multiple standards, where controls are mapped once and reused across frameworks; third-party and vendor risk management, which helps teams assess and monitor the risk introduced by suppliers and service providers; and multi-entity oversight, which lets organizations manage compliance across several entities or subsidiaries from one place. Copla also supports control monitoring, risk registers, and audit preparation, replacing the spreadsheets and disconnected tools that many teams rely on. Copla is intended to reduce the manual work involved in compliance while keeping the focus on real risk reduction rather than only satisfying framework checklists. Controls are tied to the risks they address, which helps keep a compliance program defensible during audits and reviews. Because each control and register adapts to how an organization actually operates, the platform reflects real business processes instead of applying a generic template. The result is a continuously maintained compliance posture that organizations can demonstrate to auditors, regulators, and customers at any time. Copla is typically used by mid-sized and enterprise companies in regulated sectors such as financial services, fintech, insurance, and IT, along with the third-party providers that support them. Compliance evidence is automatically stored in a central location, making audits faster and always regulator-ready. Features like data extraction, risk assessment, vulnerability scanning, penetration testing, and continuous monitoring ensure businesses stay secure and compliant. We also provide business continuity planning and awareness training to strengthen security posture. Copla includes fractional CISO services, offering expert guidance and strategic leadership to help organizations navigate complex compliance and risk management challenges. With fully guided DORA implementation, compliance analysis, and robust risk management workflows, our platform empowers financial institutions to reduce compliance workloads by up to 80% and save over 60K EUR, ensuring efficient and secure operations.

**Average Rating:** 4.9/5.0

**Total Reviews:** 97

#### How Do G2 Users Rate Copla?

- **Ease of Admin:** 9.3/10 (Category avg: 9.0/10)
- **Risk Scoring:** 9.4/10 (Category avg: 8.8/10)
- **Questionnaire Templates:** 9.4/10 (Category avg: 8.6/10)
- **4th Party Assessments:** 9.6/10 (Category avg: 7.9/10)

#### Who Is the Company Behind Copla?

- **Seller:** [Copla](https://www.g2.com/sellers/copla)
- **Company Website:** www.copla.com
- **Year Founded:** 2023
- **HQ Location:** N/A
- **LinkedIn® Page:** [www.linkedin.com](https://www.g2.com/external_clickthroughs/record?secure%5Bsource_type%5D=product_profile&secure%5Btoken%5D=8d3cbba184440f5340b6a86129c45f55b28c76c52f7010788bfec9a9124f06b9&secure%5Burl%5D=https%3A%2F%2Fwww.linkedin.com%2Fcompany%2Fcyber-upgrade%2F&secure%5Burl_type%5D=linkedin_company_website)  
45 employees on LinkedIn®

#### Who Uses This Product?

- **Top Industries:** Financial Services, Information Technology and Services
- **Company Size:** 69% Small, 37% Medium

#### What Do G2 Reviewers Say About Copla?

_AI-generated summary from verified user reviews_

##### Pros

- Users value the **evidence validation feature** in Copla, which enhances audit preparation and continuity across cycles.
- Users praise the **ease of use** of Copla, appreciating its organized system and helpful prompts that streamline compliance processes.
- Users value the **time-saving automation** of Copla, completing complex tasks in a fraction of the time.
- Users value the **clarity and efficiency in auditing** provided by Copla, streamlining compliance and enhancing security procedures.
- Users value the **efficient evidence collection** of Copla, simplifying compliance tasks and enhancing clarity during reviews.

##### Cons

- Users find the **difficult setup** of Copla requires considerable planning, often leading to preference for email threads.
- Users face **integration issues** requiring manual efforts and workarounds, though support aids in streamlining the process.
- Users find the **complex setup** requires significant planning and adjustments for successful integration and mappings.
- Users find the **UX improvement** necessary due to a basic mobile experience and non-intuitive interface elements.
- Users find the **learning curve challenging** , especially for teams used to traditional task management methods.

#### What Are Recent G2 Reviews of Copla?

**["All Compliance Information in One Place for Clearer Reporting"](https://www.g2.com/survey_responses/copla-review-13058605)**

**Rating:** 5.0/5.0 stars

_— Sofia T._

[Read full review](https://www.g2.com/survey_responses/copla-review-13058605)

**["Copla Unified Our Compliance: One Source of Truth for Risks, Controls, and Evidence"](https://www.g2.com/survey_responses/copla-review-13070875)**

**Rating:** 5.0/5.0 stars

_— Quinn R._

[Read full review](https://www.g2.com/survey_responses/copla-review-13070875)

- ‹ Prev ‹ Prev
- 1
- [2](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)
- [3](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=3#product-list)
- [4](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=4#product-list)
- [5](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=5#product-list)
- …
- [8](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=8#product-list)
- [9](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=9#product-list)
- [Next › Next ›](/categories/vendor-security-and-privacy-assessment?order=g2_score&page=2#product-list)

Spotlight Categories

[Social Media Management Tools](https://www.g2.com/categories/social-media-mgmt)

[Performance Management Software](https://www.g2.com/categories/performance-management)

[Event Registration and Ticketing Software](https://www.g2.com/categories/event-registration-ticketing)

[Mobile Marketing Software](https://www.g2.com/categories/mobile-marketing)

[Employee Intranet Software](https://www.g2.com/categories/employee-intranet)

Similar Categories

- [Disinformation Detection Tools](/categories/disinformation-detection-tools)

- [IT Risk Management](/categories/it-risk-management)

[Browse Vendor Security and Privacy Assessment Themes](/categories/vendor-security-and-privacy-assessment/themes)

 ![Brandon Summers-Miller](/assets/transparent-ad5be28fbcd25b7b08d2cebe1d957125437fb5407d75ee717965ad22c8808791.gif "Brandon Summers-Miller")
BS

Researched and written by [Brandon Summers-Miller](https://research.g2.com/insights/author/brandon-summers-miller)

Updated October 3, 2024

Vendor security and privacy assessment software helps companies manage cybersecurity and privacy risk assessment processes when identifying, evaluating, and regularly reevaluating their vendors, service providers, and other third parties. The purpose of this software is to help companies understand the privacy and cybersecurity risks associated with doing business with specific prospective and existing third parties. Vendor security and privacy assessments often include reviewing and scoring a vendor’s cybersecurity policies, documentation, results of recent audits, certifications, and legal agreements on how sensitive or personally identifying data will be accessed, used, processed, or sold as defined by data privacy laws such as the GDPR or CCPA.

Vendor security and privacy assessment software assists two constituencies—both the company and the third party they do business with. Companies use this software to assess the cybersecurity and data privacy compliance of their third-party vendors, while vendors use this software to more easily reply to buyers’ questionnaires and publish their company’s cybersecurity and data privacy compliance information in a centralized, up-to-date, and referenceable exchange. This software allows vendors to use the same responses across multiple customer assessments, as well as proactively share information with customers, which saves the vendor time instead of manually editing individual spreadsheets or forms. On the customer side, vendor security and privacy assessment software is typically managed by information security teams. On the vendor side, sales teams typically use the software to distribute security and privacy compliance information to prospective customers. Vendor security and privacy assessment software often integrates with other software tools, including [CRM software](https://www.g2.com/categories/crm), [governance, risk & compliance software](https://www.g2.com/categories/governance-risk-compliance) , and [cybersecurity services providers](https://www.g2.com/categories/cybersecurity-services), such as ratings services providers.

Vendor security and privacy assessment software is for evaluating external parties and therefore is different from internal privacy or security risk assessment processes which utilize software such as [privacy impact assessment (PIA) software](https://www.g2.com/categories/privacy-impact-assessment-pia) or [security risk analysis software](https://www.g2.com/categories/security-risk-analysis). This software is also different from [IT risk management software](https://www.g2.com/categories/it-risk-management), which monitors risk of a company’s internal systems or data use. Vendor security and privacy assessment software is similar to, but narrower in scope than [vendor management software](https://www.g2.com/categories/vendor-management) and [third party & supplier risk management software](https://www.g2.com/categories/third-party-supplier-risk-management), which evaluates risk more broadly than security or privacy, such as financial fraud, corruption, or human rights violations.

To qualify for inclusion in the Vendor Security and Privacy Assessment category, a product must:

- Enable vendors to own, manage, and publish a company profile containing cybersecurity and data privacy compliance information and documentation 
- Allow companies to assess vendor profiles in a centralized catalog, as well as by utilizing workflow to engage with vendors and request documentation such as security questionnaires, audits, certifications, etc. 
- Provide customer-facing teams with workflow to easily share access to the company’s vendor profile, including the ability to link to the profile on a company website or in marketing materials 
- Facilitate automated notifications, alerts, and reminders for specific actions including upcoming assessments, profile access requests, etc. 
- Support standardized security and privacy framework questionnaire templates commonly requested by customers, such as CAIQ, SIG, NIST, VSA, GDPR, ISO 27001, Privacy Shield, etc. 

Top Tools at a Glance

| Product | Best for | User Review |
| --- | --- | --- |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_847d3c60a573cb03066985a2e4f32496/vanta.png "Product Avatar Image")](https://www.g2.com/products/vanta/reviews)[Vanta](https://www.g2.com/products/vanta/reviews)[4.6/5(2,702)](https://www.g2.com/products/vanta/reviews) | Continuous SOC 2 compliance with automated evidence collection | "Vanta Streamlines Compliance with Automated Evidence and Helpful Support" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_a04b3e930dd865ce8365efe856a366e2/upguard-vendor-risk.png "Product Avatar Image")](https://www.g2.com/products/upguard-vendor-risk/reviews)[UpGuard Vendor Risk](https://www.g2.com/products/upguard-vendor-risk/reviews)[4.5/5(732)](https://www.g2.com/products/upguard-vendor-risk/reviews) | Automated vendor risk scoring with security questionnaires | "Well-Organized Platform for Security Due Diligence" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2bce95f5e70767dca2076ceceaef23c6/drata.png "Product Avatar Image")](https://www.g2.com/products/drata/reviews)[Drata](https://www.g2.com/products/drata/reviews)[4.7/5(1,337)](https://www.g2.com/products/drata/reviews) | Continuous SOC 2 compliance with automated evidence collection | "The DRATA system embodies simplicity and intuitiveness." |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_a8d8c0062be0817c0a00149a97ef52f1/sprinto-inc%282%29.png "Product Avatar Image")](https://www.g2.com/products/sprinto-inc/reviews)[Sprinto](https://www.g2.com/products/sprinto-inc/reviews)[4.7/5(1,679)](https://www.g2.com/products/sprinto-inc/reviews) | Continuous compliance automation with guided audit readiness | "Smooth, Structured HIPAA Compliance with Sprinto and Outstanding Support" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_d83a80e742be999cb9ddf238edce0fd3/secureframe.png "Product Avatar Image")](https://www.g2.com/products/secureframe/reviews)[Secureframe](https://www.g2.com/products/secureframe/reviews)[4.7/5(814)](https://www.g2.com/products/secureframe/reviews) | SOC 2 audit readiness with automated evidence collection | "Secureframe Streamlined Our ISO 27001 Compliance" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_ab4ffeb80266da30d3a0a2cd41baf402/scrut-automation.jpg "Product Avatar Image")](https://www.g2.com/products/scrut-automation/reviews)[Scrut Automation](https://www.g2.com/products/scrut-automation/reviews)[4.9/5(1,313)](https://www.g2.com/products/scrut-automation/reviews) | AI-powered vendor questionnaire automation with policy mapping | "Transforming Compliance and Security Management with Scrut Automation" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_2e5758f304e971fbd4ab7ab6c96cea90/thoropass.gif "Product Avatar Image")](https://www.g2.com/products/thoropass/reviews)[Thoropass](https://www.g2.com/products/thoropass/reviews)[4.7/5(582)](https://www.g2.com/products/thoropass/reviews) | SOC 2 compliance with bundled audit | "Thoropass and SOC2 process" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_5015a6ccbbe12278ba4392c1c0d806be/ibm-openpages.png "Product Avatar Image")](https://www.g2.com/products/ibm-openpages/reviews)[IBM OpenPages](https://www.g2.com/products/ibm-openpages/reviews)[4.2/5(76)](https://www.g2.com/products/ibm-openpages/reviews) | Third-party risk centralization with GRC workflows | "Automates Security Tasks, But Pricey" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_d37abd66d00b9026c3a4febbd40dfae0/onetrust-tech-risk-compliance.png "Product Avatar Image")](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)[OneTrust Tech Risk &...](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews)[4.6/5(108)](https://www.g2.com/products/onetrust-tech-risk-compliance/reviews) | Automated GRC workflows with multi-framework compliance | "OneTrust is the only GRC tool that works!" |
| [![Product Avatar Image](https://images.g2crowd.com/uploads/product/image/large_detail/large_detail_539d753e03a74e23d71f7a0014f25dc9/riskprofiler-external-threat-exposure-management.png "Product Avatar Image")](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)[RiskProfiler - External...](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews)[4.9/5(118)](https://www.g2.com/products/riskprofiler-external-threat-exposure-management/reviews) | Vendor exposure correlation with attack path mapping | "Single Pane of Truth for External Exposure Correlation and Fast Risk Prioritization" |

* * *

Show More