Best Vendor Security and Privacy Assessment Software

How Many Vendor Security and Privacy Assessment Software Products Does G2 Track?

Total Products under this Category: 143

Category Stats (Nov 2026)

  • Average Rating: 4.56/5 The average rating of products in this category, based on all submitted ratings
  • Top Trending Product: Secfix (+0.17%) - Among all products in this category, Secfix recorded the largest rating increase compared to last month

Last updated: November 01, 2026

How Does G2 Rank Vendor Security and Privacy Assessment Software Products?

Why You Can Trust G2's Software Rankings:

  • 30 Analysts and Data Experts
  • 16,700+ Authentic Reviews
  • 143+ Products
  • Unbiased Rankings

G2's software rankings are built on verified user reviews, rigorous moderation, and a consistent research methodology maintained by a team of analysts and data experts. Each product is measured using the same transparent criteria, with no paid placement or vendor influence. While reviews reflect real user experiences, which can be subjective, they offer valuable insight into how software performs in the hands of professionals. Together, these inputs power the G2 Score, a standardized way to compare tools within every category.

G2 Grid® for Vendor Security and Privacy Assessment Software

G2 Grid® for Vendor Security and Privacy Assessment Software plotting products by satisfaction and market presence

Highlighted products: Vanta, UpGuard Vendor Risk, Drata, Secureframe, Sprinto, Scrut Automation, Thoropass, and IBM OpenPages.

Underlying data: [Grid® JSON](https://www.g2.com/categories/vendor-security-and-privacy-assessment/grids.json?focus%5B%5D=vanta&focus%5B%5D=upguard-vendor-risk&focus%5B%5D=drata&focus%5B%5D=secureframe&focus%5B%5D=sprinto-inc&focus%5B%5D=scrut-automation&focus%5B%5D=thoropass&focus%5B%5D=ibm-openpages)

Vanta

Vanta is the leading Agentic Trust Platform helping 15k+ companies—like Atlassian, Duolingo, Golden State Warriors, and Icelandair—start and scale their security programs and build trust with buyers. Vanta saves security teams time and improves program visibility by automating 35+ compliance frameworks, such as SOC 2 and ISO 27001, and GRC workflows, like risk management.

Average Rating: 4.5/5.0

Total Reviews: 2,891

How Do G2 Users Rate Vanta?

  • Ease of Admin: 8.8/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.6/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.4/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.7/10 (Category avg: 8.0/10)

Who Is the Company Behind Vanta?

  • Seller: Vanta
  • Company Website:
  • Year Founded: 2018
  • HQ Location: San Francisco, California
  • LinkedIn® Page: www.linkedin.com
    1,990 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 55% Small, 39% Medium

What Do G2 Reviewers Say About Vanta?

AI-generated summary from verified user reviews

Pros
  • Users find the intuitive interface easy to navigate, even without compliance experience, helping them understand what to do.
  • Users appreciate the broad range of integrations with existing tools, which helps connect their systems and workflows easily.
  • Users like having organized, manageable compliance workflows that simplify tracking and coordinating ongoing programs.
  • Users find the initial setup straightforward and smooth, helping teams get started quickly.
  • Users value time and effort saved on compliance tasks, evidence gathering, and audit preparation.
Cons
  • Users find the pricing expensive, especially for startups and smaller teams.
  • Users find the interface cluttered and confusing to navigate, with too many menus, clicks, and unclear pathways to information.
  • Users find the platform’s customization and configurability too limited, especially for adapting workflows, controls, and settings to their needs.
  • Users say integrations are missing or too limited in coverage and depth.
  • Users find the platform overwhelming and difficult to learn at first, especially when navigating its features, configurations, and compliance workflows.

What Are Recent G2 Reviews of Vanta?

What Are G2 Users Discussing About Vanta?

UpGuard Vendor Risk

UpGuard Vendor Risk is an AI-powered third-party cyber risk management (TPCRM) solution that empowers security teams to eliminate the response gap and take control of their vendor ecosystem. As part of the UpGuard Cyber Risk Posture Management (CRPM) platform, it integrates seamlessly with Breach Risk and User Risk to provide a unified defense against modern cyber threats. As organizations scale, their reliance on third-party vendors expands, creating dangerous blind spots across their supply chain. Traditional assessment methods often rely on point-in-time questionnaires, leaving teams vulnerable to hidden control gaps and unmonitored shifts in a vendor's security posture. Vendor Risk solves this by combining continuous monitoring, AI-powered document analysis, and security questionnaire automation into a single, scalable platform. Key Capabilities: • Continuous Monitoring & Security Ratings: Get a complete picture of your vendor ecosystem. Vendor Risk proactively monitors all your vendors with daily scanning and objective, industry-leading security ratings. Continuous monitoring ensures you are instantly alerted to critical shifts in a vendor's security posture, even between assessments. • AI-Powered Vendor Assessments: Double your assessment speed. UpGuard AI instantly analyzes vendor documentation to uncover control gaps and risks in minutes. It gives you a clear view of which controls are met or failed, the exact risks present, and the actionable remediation steps required—meaning far less evidence chasing. • Security Questionnaire Automation: Move beyond manual spreadsheets. Leverage automation and a complete library of pre-configured questionnaires—including NIST, ISO, SIG, and regional regulations like DORA—to quickly fill any information gaps. Centralized intelligence consolidates vendor communications, cutting manual assessment work by up to 90%. • Reporting & Program Oversight: Scale without limits. Generate accurate, point-in-time risk assessment reports in under a minute using UpGuard AI. With intuitive, one-click reporting, security teams can easily communicate current risks and compliance status to stakeholders like the board or C-Suite. By translating complex third-party risks into objective, quantifiable Security Ratings, UpGuard Vendor Risk enables security leaders to benchmark vendor performance, accelerate onboarding workflows, and confidently prove supply chain risk reduction to the board.

Average Rating: 4.5/5.0

Total Reviews: 776

How Do G2 Users Rate UpGuard Vendor Risk?

  • Ease of Admin: 9.1/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.9/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.6/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.9/10 (Category avg: 8.0/10)

Who Is the Company Behind UpGuard Vendor Risk?

  • Seller: UpGuard
  • Company Website:
  • Year Founded: 2012
  • HQ Location: Mountain View, California
  • LinkedIn® Page: www.linkedin.com
    402 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Security Analyst, CISO
  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 47% Large, 38% Medium

What Do G2 Reviewers Say About UpGuard Vendor Risk?

AI-generated summary from verified user reviews

Pros
  • Users find UpGuard Vendor Risk incredibly easy to use, with a user-friendly interface and straightforward implementation process.
  • Users appreciate the clear visibility into security risks provided by UpGuard, enabling confident vendor management and decision-making.
  • Users highlight the user-friendly interface of UpGuard Vendor Risk, making risk management easy and efficient.
  • Users appreciate the time-saving benefits of UpGuard Vendor Risk, simplifying vendor management and enhancing operational efficiency.
  • Users commend the responsive and knowledgeable customer support of UpGuard Vendor Risk, enhancing their overall experience.
Cons
  • Users experience occasional lack of clarity in findings, requiring extra validation and customization for better navigation and reporting.
  • Users find UpGuard Vendor Risk to be expensive, especially due to required upgrades and additional paid packages.
  • Users find limited functionality in UpGuard, particularly in vendor outreach and customization of reports, impacting efficiency.
  • Users find that bulk features need improvement, causing inefficiencies in vendor communication and assessment processes.
  • Users note the limited customization options in UpGuard, which may hinder adaptations for unique security requirements.

What Are Recent G2 Reviews of UpGuard Vendor Risk?

Drata

Founded in 2020 and headquartered in San Francisco, California, Drata provides the trust network that enables businesses to operate, scale, and partner with confidence. Born from experience in mission-critical aerospace work and the painful reality of manual security audits, Drata was created to turn trust into an always-on state instead of a point-in-time exercise. Today, the Drata Agentic Trust Management Platform helps more than 8,500 organizations worldwide build continuous trust across the cloud and prove their posture to customers, partners, and auditors. Drata unifies governance, risk, compliance, and assurance so security and GRC teams can manage everything in one place. Drata's core capabilities include Automated Governance to streamline policy management, control monitoring, evidence collection, and access reviews; Integrated Risk Management to centralize internal and third-party risk with real-time visibility and ownership; Continuous Compliance to automate evidence collection and control testing across frameworks; and Accelerated Security Assurance to show your security posture in real time and shorten review cycles while supporting faster, more confident sales and vendor decisions. Together, these capabilities deliver Continuous Real-Time Trust, Enterprise-Grade Flexibility, and Agentic AI Productivity. Drata continuously monitors controls, flags risks immediately, and makes always-current proof easy to share so you're demonstrating effective security every day—not just at audit time. The platform scales across multiple frameworks and connects to hundreds of tools to fit complex environments, and AI-driven automation helps assess vendors, collect evidence, and draft questionnaire responses—eliminating repetitive manual work, reducing operational overhead, and turning assurance into a strategic business enabler for modern, trust-driven organizations.

Average Rating: 4.7/5.0

Total Reviews: 1,389

How Do G2 Users Rate Drata?

  • Ease of Admin: 9.1/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.8/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.6/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.0/10 (Category avg: 8.0/10)

Who Is the Company Behind Drata?

  • Seller: Drata
  • Company Website:
  • Year Founded: 2020
  • HQ Location: San Francisco, CA
  • LinkedIn® Page: www.linkedin.com
    4,534 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 47% Medium, 46% Small

What Do G2 Reviewers Say About Drata?

AI-generated summary from verified user reviews

Pros
  • Users admire the excellent customer support of Drata, facilitating a smooth setup and ongoing assistance through webinars.
  • Users commend Drata for its exceptional ease of use, simplifying certification management and integration with user-friendly design.
  • Users value the automation of compliance in Drata, allowing for continuous audit readiness and less stress.
  • Users appreciate the time-saving features of Drata, streamlining compliance processes and improving overall efficiency.
  • Users value the seamless integrations of Drata, enhancing their experience and supporting efficient audit processes.
Cons
  • Users find the limited integrations of Drata to be a challenge, often requiring extra manual effort with customizations.
  • Users note that there are improvements needed in the audit section for a smoother navigation experience.
  • Users find the integration issues frustrating, as some require excessive manual effort and lack support for on-premise solutions.
  • Users express concern over the lack of clarity in policy renewal steps and support throughout the process.
  • Users find Drata lacking in missing features, particularly regarding Quality Management System support and user interface improvements.

What Are Recent G2 Reviews of Drata?

What Are G2 Users Discussing About Drata?

AI can help you find the answers. G2 helps you trust them.

Connect G2 to Claude or ChatGPT for answers grounded in G2's trusted reviews, comparisons, and pricing from real user insights.

How it works
Connect G2 to ChatGPTConnect G2 to Claude

Secureframe

Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards.

Average Rating: 4.7/5.0

Total Reviews: 842

How Do G2 Users Rate Secureframe?

  • Ease of Admin: 9.0/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.1/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.7/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.0/10 (Category avg: 8.0/10)

Who Is the Company Behind Secureframe?

  • Seller: Secureframe
  • Company Website:
  • Year Founded: 2020
  • HQ Location: San Francisco, US
  • LinkedIn® Page: www.linkedin.com
    130 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 67% Small, 29% Medium

What Do G2 Reviewers Say About Secureframe?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Secureframe, making task tracking and setup straightforward and efficient.
  • Users appreciate that Secureframe ensures easy SOC 2 compliance with minimal maintenance and excellent team support.
  • Users value how Secureframe's automation simplifies compliance, making it easy and manageable for all users.
  • Users value Secureframe's strong security measures, enhancing trust while managing sensitive client information effectively.
  • Users value the seamless integrations of Secureframe, significantly enhancing efficiency and compliance management for small teams.
Cons
  • Users face integration issues with niche tools, requiring manual effort and time for proper setup.
  • Users express frustration with limited integrations, noting challenges in automating connections with key platforms like Azure Dev Ops.
  • Users find limited customization options for timing and follow-up schedules frustrating for compliance and training needs.
  • Users feel that the audit function needs improvement, as reliance on external tools complicates the process.
  • Users note the need for missing features in Secureframe, particularly around policy test management enhancements.

What Are Recent G2 Reviews of Secureframe?

What Are G2 Users Discussing About Secureframe?

Sprinto

Sprinto is the world's first Autonomous Trust Platform, detecting change across your posture, determining what's at risk, and acting across compliance, vendor risk, AI governance, and more, so your organization stays trustworthy without the operational chaos. Sprinto is trusted by 3,000+ companies across 75 countries, including Emergent, CodeRabbit, Anaconda, and Whatfix. The platform supports 200+ global standards, including SOC 2, ISO 27001, GDPR, HIPAA, PCI-DSS, and ISO 42001, for AI governance across 300+ integrations.

Average Rating: 4.7/5.0

Total Reviews: 1,675

How Do G2 Users Rate Sprinto?

  • Ease of Admin: 9.3/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.6/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.3/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.9/10 (Category avg: 8.0/10)

Who Is the Company Behind Sprinto?

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 57% Small, 42% Medium

What Do G2 Reviewers Say About Sprinto?

AI-generated summary from verified user reviews

Pros
  • Users value the ease of use of Sprinto, appreciating its simplicity and thorough support during deployment.
  • Users appreciate the knowledgeable and accommodating customer support from Sprinto, facilitating a smooth deployment and setup.
  • Users value the intuitive compliance management of Sprinto, enhanced by exceptional support from knowledgeable account managers.
  • Users find Sprinto's customer support exceptional, making deployment and management straightforward and efficient.
  • Users value the intuitive compliance management of Sprinto, enhanced by exceptional support from knowledgeable account managers.
Cons
  • Users note integration issues with some niche tools, but improvements are being made over time.
  • Users experience limited integrations with Sprinto, leading to bugs and necessitating additional efforts for problem resolution.
  • Users note a need for more customization options in features and reporting to better fit their unique environments.
  • Users find the guidance unclear at times, especially with auditor recommendations and onboarding documentation.
  • Users notice some software bugs in Sprinto, including syncing delays and issues with certain browsers.

What Are Recent G2 Reviews of Sprinto?

Scrut Automation

Scrut Automation is a leading compliance automation platform designed for fast-growing businesses looking to streamline security, risk, and compliance without disrupting operations. It centralizes compliance functions, automates evidence collection, and simplifies audits, helping security teams reduce compliance efforts. Scrut supports 70+ out-of-the-box frameworks, including SOC 2, ISO 27001, GDPR, HIPAA, and PCI-DSS, with the flexibility to add custom frameworks for unique regulatory needs. With 150+ integrations, Scrut seamlessly integrates into your security and IT ecosystem, automating compliance, eliminating manual work, and improving risk visibility. Join 2500+ industry leaders who trust Scrut for simplified compliance and risk management. Schedule a demo today.

Average Rating: 4.9/5.0

Total Reviews: 1,340

How Do G2 Users Rate Scrut Automation?

  • Ease of Admin: 9.5/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.2/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.2/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.7/10 (Category avg: 8.0/10)

Who Is the Company Behind Scrut Automation?

  • Seller: Scrut Automation
  • Company Website:
  • Year Founded: 2022
  • HQ Location: Palo Alto, US
  • LinkedIn® Page: in.linkedin.com
    237 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 50% Small, 48% Medium

What Do G2 Reviewers Say About Scrut Automation?

AI-generated summary from verified user reviews

Pros
  • Users commend Scrut Automation for its ease of use, enabling seamless integration and efficient compliance management.
  • Users commend the responsive customer support of Scrut Automation, ensuring seamless guidance throughout the certification process.
  • Users value the ease of use and integration with Scrut Automation, significantly enhancing their compliance management experience.
  • Users value the exceptional support and streamlined compliance features of Scrut Automation, enhancing their overall experience.
  • Users value the ease of use and integration of Scrut Automation, enhancing compliance monitoring and performance.
Cons
  • Users find improvement needed in Scrut Automation's configuration process, sync delays, and user experience challenges.
  • Users report technical issues such as bugs and login problems that disrupt the experience with Scrut Automation.
  • Users highlight missing features in Scrut Automation, particularly in IT device management and integration options.
  • Users identify a need for better UX improvements, including easier setup, enhanced reporting, and streamlined UI navigation.
  • Users find the learning curve steep for Scrut Automation, making initial setup and advanced features challenging to navigate.

What Are Recent G2 Reviews of Scrut Automation?

What Are G2 Users Discussing About Scrut Automation?

Thoropass

Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.

Average Rating: 4.7/5.0

Total Reviews: 585

How Do G2 Users Rate Thoropass?

  • Ease of Admin: 9.0/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.8/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.5/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.8/10 (Category avg: 8.0/10)

Who Is the Company Behind Thoropass?

  • Seller: Thoropass
  • Company Website:
  • Year Founded: 2019
  • HQ Location: New York
  • LinkedIn® Page: www.linkedin.com
    206 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CEO, CTO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 71% Small, 25% Medium

What Do G2 Reviewers Say About Thoropass?

AI-generated summary from verified user reviews

Pros
  • Users find Thoropass to be very easy to use, with excellent support and straightforward processes for compliance.
  • Users appreciate the flexibility and responsiveness of Thoropass, making compliance management easier and more efficient.
  • Users highlight the excellent customer support from Thoropass, praising their responsiveness and dedicated agent assistance.
  • Users praise Thoropass for its comprehensive compliance support, making the SOC 2 process smooth and straightforward.
  • Users commend the team's helpful support throughout the process, making audits straightforward and seamless.
Cons
  • Users face a lack of clarity in instructions and UI, making setup and navigation challenging.
  • Users report integration issues with Thoropass, leading to confusion and inefficiencies in managing compliance objectives.
  • Users report audit issues, including navigation challenges and frustrating duplicate document uploads during the audit process.
  • Users highlight the need for significant improvements in automation, platform design, and overall functionality of Thoropass.
  • Users find the limited integrations with other platforms frustrating, complicating workflows and requiring additional manual steps.

What Are Recent G2 Reviews of Thoropass?

What Are G2 Users Discussing About Thoropass?

IBM OpenPages

OpenPages is an AI-powered, easy-to-use, and highly scalable GRC management solution that runs on any cloud and centralizes siloed risk management functions into a single environment. OpenPages lays emphasis upon ‘GRC is Everyone’s Business’ strategy by establishing a risk and compliance culture that promotes inclusiveness, consistency and transparency Easy-to-use, highly configurable and requires little/no training Saves time - Users are guided by an AI powered virtual assistant giving real-time answers to users. Improves data quality - AI suggested classifications help users reduce errors, mitigate risks and promote accuracy and efficiency in incident reporting and risk mitigation efforts. Reduces the knowledge gap - Users are guided by AI in the interface for areas like risk and compliance taxonomies.

Average Rating: 4.2/5.0

Total Reviews: 66

How Do G2 Users Rate IBM OpenPages?

  • Ease of Admin: 7.3/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.8/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.8/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 9.8/10 (Category avg: 8.0/10)

Who Is the Company Behind IBM OpenPages?

  • Seller: IBM
  • Year Founded: 1911
  • HQ Location: Armonk, New York, United States
  • LinkedIn® Page: www.linkedin.com
    344,328 employees on LinkedIn®
  • Ownership: SWX:IBM
  • Phone: 1-866-277-7488

Who Uses This Product?

  • Top Industries: Banking, Information Technology and Services
  • Company Size: 39% Medium, 34% Large

What Do G2 Reviewers Say About IBM OpenPages?

AI-generated summary from verified user reviews

Pros
  • Users value the visibility into risk and compliance that IBM OpenPages offers, enhancing proactive management and structured processes.
  • Users value the time-saving automation of IBM OpenPages, enhancing efficiency in workflow and decision-making processes.
  • Users value the automation capabilities of IBM OpenPages, enhancing control and accelerating decision-making in compliance management.
  • Users find IBM OpenPages to be easy to use, enabling smoother workflows and improved decision-making once familiar with it.
  • Users value the enhanced security and risk visibility provided by IBM OpenPages, improving decision-making and compliance processes.
Cons
  • Users find the complexity of IBM OpenPages challenging, especially during onboarding and when making necessary customizations.
  • Users find IBM OpenPages to be too expensive, complicating their ability to justify the investment.
  • Users find the usability needing improvement due to complexity and challenges with customization and reporting.
  • Users face a steep learning curve with IBM OpenPages, finding it complex, especially for occasional users or teams.
  • Users find the learning difficulty of IBM OpenPages challenging, with a steep learning curve for new users.

What Are Recent G2 Reviews of IBM OpenPages?

What Are G2 Users Discussing About IBM OpenPages?

OneTrust Privacy Automation

OneTrust’s mission is to enable the responsible use of data and AI. Our platform simplifies the collection of data with consent and preferences, automates the governance of data with integrated risk management across privacy, security, IT/tech, third-party, and AI risk, and activates the responsible use of data by applying and enforcing data policies across the entire data estate and lifecycle. The Privacy Automation solution simplifies compliance, automates privacy operations and mitigates risk. Our tools include: -A real-time view of your compliance posture -Evergreen data and activity map -Data subject request automation -Privacy and AI risk workflows OneTrust supports seamless collaboration between data teams and risk teams to drive rapid and trusted innovation. Recognized as a market pioneer and leader, OneTrust boasts over 300 patents and serves more than 14,000 customers globally, ranging from industry giants to small businesses. For more information, visit www.onetrust.com.

Average Rating: 4.3/5.0

Total Reviews: 144

How Do G2 Users Rate OneTrust Privacy Automation?

  • Ease of Admin: 8.5/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.4/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.0/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.1/10 (Category avg: 8.0/10)

Who Is the Company Behind OneTrust Privacy Automation?

  • Seller: OneTrust
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Atlanta, Georgia
  • LinkedIn® Page: www.linkedin.com
    2,522 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Data Protection Officer
  • Top Industries: Information Technology and Services, Financial Services
  • Company Size: 46% Large, 40% Medium

What Do G2 Reviewers Say About OneTrust Privacy Automation?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the ease of use of OneTrust Privacy Automation, benefiting from its centralized and automated privacy workflows.
  • Users appreciate the comprehensive all-in-one platform of OneTrust Privacy Automation, streamlining privacy operations effectively.
  • Users value the all-in-one platform of OneTrust Privacy Automation, streamlining privacy workflows and enhancing compliance efficiency.
  • Users value the centralized automation for privacy workflows, enhancing compliance efficiency and proactive program management.
  • Users value the regulatory compliance features of OneTrust Privacy Automation, streamlining their tasks and ensuring up-to-date compliance.
Cons
  • Users find the steep learning curve of OneTrust Privacy Automation challenging, requiring significant time and training for setup.
  • Users find the complexity of OneTrust Privacy Automation overwhelming, requiring extensive time and training to navigate effectively.
  • Users face significant complexity issues with OneTrust Privacy Automation, requiring extensive time and training for proper setup.
  • Users find the steep learning curve of OneTrust Privacy Automation challenging, requiring significant time and training for effective use.
  • Users find the complex implementation process challenging and time-consuming, requiring extensive training and support for success.

What Are Recent G2 Reviews of OneTrust Privacy Automation?

SecurityScorecard

Stopping sophisticated cyberattacks requires visibility beyond your organization. Security teams need a complete understanding of their attack surface and business ecosystem risk—including partners, contractors, third- and fourth-party vendors, and supply chains. As the industry leader in security ratings, SecurityScorecard provides actionable insights for over 12 million organizations so you can quantify trustworthiness, quickly respond to cyber risks, and strengthen cyber defenses. SecurityScorecard is a security ratings, response, and resilience company. As the industry leader in security ratings, we provide actionable insights so you can make fast, informed decisions that improve your defenses. SecurityScorecard offers the world’s most comprehensive platform for quantifying and reducing risk, so you can instantly know whether an organization deserves your trust and show others that you deserve theirs. With SecurityScorecard, you can quantify trustworthiness and instantly know the cyber risk of any company worldwide, including your business, competitors, vendors, and downstream suppliers. You can strengthen cyber defenses by accessing a stream of risk intelligence that pinpoints vulnerabilities, prioritizes next steps, and clarifies remediation plans. And you can verify vendor readiness by identifying cyber-risks posed by vendors and sub-tier suppliers throughout your ecosystem– and take action to ensure their problems don’t become your problems. What we offer: Supply Chain Cyber Risk: Your supply chain consists of your third and fourth parties as well as Nth parties that are all connected to your business. Vulnerabilities and threats in your supply chain can pose risks to your business operations. With SecurityScorecard, you can significantly reduce or eliminate the risk of compromise from a vendor or business partner. Offerings include: Third-Party Cyber Risk Management, Automatic Vendor Detection, Supply Chain Risk Intelligence, and Security Questionnaires. Threat Landscape: Go outside the wire to identify threats facing your organization and your supply chain. Leverage terabytes of data and AI-driven analytics to identify the threats that put your business at risk. Offerings include: Attack Surface Intelligence, Intelligence Feeds, and Vulnerability Intelligence. Security and Risk Operations: SecurityScorecard enables companies to see what a hacker sees across their own external attack surface so they can identify threats and take action before the bad guys have a chance to exploit critical vulnerabilities. Offerings include: External Attack Surface Management and Cyber Risk Quantification. Services: A focus on expert-led continuous improvement, actionable insights, and tailored strategies positions SecurityScorecard as a trusted partner in achieving and maintaining a robust cybersecurity posture. Offerings include: Digital Forensics & Incident Response, Advisory Services, Penetration Testing, Red Team, and Tabletop Exercises. MAX: SecurityScorecard MAX is a technology-enabled supply chain cyber risk managed service. Organizations leverage SecurityScorecard's technology, expertise, and partner ecosystem to minimize supply chain risk and gain tangible business outcomes.

Average Rating: 4.3/5.0

Total Reviews: 92

How Do G2 Users Rate SecurityScorecard?

  • Ease of Admin: 8.8/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.9/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 7.6/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.7/10 (Category avg: 8.0/10)

Who Is the Company Behind SecurityScorecard?

  • Seller: SecurityScorecard
  • Company Website:
  • Year Founded: 2013
  • HQ Location: New York, New York
  • LinkedIn® Page: www.linkedin.com
    592 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Computer & Network Security
  • Company Size: 49% Large, 34% Medium

What Do G2 Reviewers Say About SecurityScorecard?

AI-generated summary from verified user reviews

Pros
  • Users value the comprehensive cybersecurity insights SecurityScorecard provides for effective risk management and vendor evaluation.
  • Users value the ease of use of SecurityScorecard, appreciating its simple interface and comprehensive functionality.
  • Users value the insightful likelihood reports that aid customer preparation for potential security attacks.
  • Users value the responsive customer support that enhances their security preparedness and user experience with SecurityScorecard.
  • Users appreciate the user-friendly platform of SecurityScorecard, which delivers valuable insights and supports proactive risk management.
Cons
  • Users express frustration over the lack of clarity in score changes, which makes understanding insights challenging.
  • Users find the limited reporting capabilities hinder their ability to create customized reports for presentations and audits.
  • Users experience scoring issues due to false positives and lack of aggregate scoring, complicating cross-communication with third parties.
  • Users indicate that improvement is needed in automated reporting due to frequent false positives affecting reliability.
  • Users report inefficient risk management due to false positives and a lack of strong evidence in scoring criteria.

What Are Recent G2 Reviews of SecurityScorecard?

What Are G2 Users Discussing About SecurityScorecard?

Bitsight

Bitsight is the global leader in cyber risk intelligence, leveraging advanced AI to empower organizations with precise insights derived from the industry’s most extensive external cybersecurity dataset. With more than 3,500 customers and over 68,000 organizations active on its platform, Bitsight delivers real-time visibility into cyber risk and threat exposure, enabling teams to rapidly identify vulnerabilities, detect emerging threats, prioritize remediation, and mitigate risks across their extended attack surface. Bitsight proactively uncovers security gaps across infrastructure, cloud environments, digital identities, and third- and fourth-party ecosystems. From security operations and governance teams to executive boardrooms, Bitsight provides the unified intelligence backbone required to confidently manage cyber risk and address exposures before they impact performance.

Average Rating: 4.5/5.0

Total Reviews: 76

How Do G2 Users Rate Bitsight?

  • Ease of Admin: 8.8/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.7/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 7.6/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.7/10 (Category avg: 8.0/10)

Who Is the Company Behind Bitsight?

  • Seller: Bitsight
  • Company Website:
  • Year Founded: 2011
  • HQ Location: Boston, MA
  • LinkedIn® Page: www.linkedin.com
    694 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Information Technology and Services, Hospital & Health Care
  • Company Size: 71% Large, 24% Medium

What Do G2 Reviewers Say About Bitsight?

AI-generated summary from verified user reviews

Pros
  • Users value the simple daily security score from BitSight, providing clear insights into cyber risk management.
  • Users appreciate the simple daily "security score" for cyber risk, enhancing safety and risk management easily.
  • Users appreciate the ease of use of BitSight, finding it straightforward and user-friendly for managing security risks.
  • Users value the powerful insights from BitSight's AI features and comprehensive risk monitoring capabilities.
  • Users commend the responsive customer support of Bitsight, ensuring quick assistance and effective use of the platform.
Cons
  • Users express concerns about missing features in Bitsight, particularly regarding transparency and proactive remediation management.
  • Users are frustrated by the lack of clarity in Bitsight's scoring mechanism and accuracy of findings.
  • Users experience poor notifications from Bitsight, with alerts being untimely and often missing critical information.
  • Users experience slow performance with Bitsight, facing lag and delayed updates on remediation efforts and scores.
  • Users report delay issues with BitSight's response times and vulnerability updates, impacting their overall experience.

What Are Recent G2 Reviews of Bitsight?

What Are G2 Users Discussing About Bitsight?

RiskProfiler - External Threat Exposure Management

RiskProfiler is an advanced cybersecurity platform purpose-built for Continuous Threat Exposure Management (CTEM). It unifies external, cloud, vendor, and brand risk intelligence into a single ecosystem—providing organizations with real-time visibility, contextual threat insights, and actionable remediation guidance. Through its integrated suite, External Attack Surface Managemnet, Third_party Risk Management, Cloud Attack Surface Management, and Brand Risk Protection; the platform continuously discovers, classifies, and evaluates external-facing assets and risks across the internet, multi-cloud environments, and third-party ecosystems. Powered by AI-enabled risk questionnaires, RiskProfiler automates the exchange, validation, and scoring of security assessments, dramatically accelerating third-party due diligence and compliance validation. The platform’s context-enriched graph engine correlates vulnerabilities, exposures, and configurations with real-world threat data, revealing how attackers might exploit an organization’s digital footprint. Its newly enhanced Cyber Threat Intelligence (CTI) module provides live insights into industry-specific attack trends, threat actor profiles, and evolving TTPs, directly embedded within the dashboard. By analyzing CVEs, IOCs, and exploit patterns, it maps these to relevant assets and potential attack paths, enabling focused, prioritized mitigation. From identifying exposed cloud resources across AWS, Azure, and Google Cloud to uncovering brand impersonation, phishing campaigns, or logo abuse, RiskProfiler delivers unified visibility and continuous monitoring that extends beyond the perimeter. It helps organizations anticipate, contextualize, and neutralize threats before they turn into breaches, transforming exposure management into a truly intelligent, predictive defense capability.

Average Rating: 5.0/5.0

Total Reviews: 135

How Do G2 Users Rate RiskProfiler - External Threat Exposure Management?

  • Ease of Admin: 9.7/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.8/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 9.8/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 9.7/10 (Category avg: 8.0/10)

Who Is the Company Behind RiskProfiler - External Threat Exposure Management?

  • Seller: Riskprofiler
  • Company Website:
  • Year Founded: 2019
  • HQ Location: Rock Hill , US
  • LinkedIn® Page: www.linkedin.com
    35 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Software Engineer, Security Consultant
  • Top Industries: Information Technology and Services, Design
  • Company Size: 65% Medium, 30% Small

What Do G2 Reviewers Say About RiskProfiler - External Threat Exposure Management?

AI-generated summary from verified user reviews

Pros
  • Users value the multi-dimensional threat intelligence of RiskProfiler, enabling efficient management of external threats and vendor risks.
  • Users value the seamless integration features of RiskProfiler, enhancing real-time monitoring and adaptability in their workflows.
  • Users praise the fast and efficient customer support of RiskProfiler, enhancing their overall experience and threat management.
  • Users value the ease of use of RiskProfiler, as it seamlessly integrates and enhances external threat management.
  • Users highlight the easy setup of RiskProfiler, facilitating quick implementation and seamless integration for effective threat management.
Cons
  • Users face a steep learning curve with RiskProfiler, needing sufficient time for training and customization.
  • Users find the complexity of RiskProfiler challenging, requiring time for training and adjustment to navigate effectively.
  • Users find the difficult learning curve challenging, requiring significant time and training for effective platform use.
  • Users find a steep learning curve with RiskProfiler, requiring time and training for effective use.
  • Users find the complex setup of RiskProfiler challenging, hindering smooth adoption and integration for non-specialist teams.

What Are Recent G2 Reviews of RiskProfiler - External Threat Exposure Management?

OneTrust Tech Risk & Compliance

OneTrust's Tech Risk & Compliance solution simplifies compliance and effectively manage risks. You can scale your resources and optimize your risk and compliance lifecycle by automating governance with business-ready content, guidance, and mapping. Simplify business collaboration by turning complex regulations into simple, actionable tasks that fit into your existing processes, and ensure continuous compliance. You can also mature your risk program and contextualize risk across the business to monitor over time, educate stakeholders, report to leadership, and prioritize action. Tech Risk and Compliance includes Compliance Automation and IT & Risk Management tools. Compliance Automation scales your resources while optimizing compliance processes to efficiently scope, manage, and communicate your compliance posture, empowering InfoSec and IT Compliance professionals to automate regulatory guidance, reinforce program governance, and maintain audit readiness. With Compliance Automation you can: -Simplify business collaboration to streamline compliance workflows -Deploy pre-built integrations to automate evidence collection -Collect once, comply many with 50+ ready-to-use frameworks IT Risk Management allows you to proactively identify and mitigate risk, streamline data collection, and map risk relationships to assess and quantify risk across your IT and business ecosystem. Identify risk across complex IT ecosystems by discovering information systems vulnerabilities and cybersecurity risks across an inventory of assets, processes, and vendors. Reflect the interconnected nature of how systems, data, and risk flow throughout your business to monitor changes over time. Standardize and quantify risk with context by balancing qualitative and quantitative metrics with a scalable risk methodology that can mature from a standard matrix to automated calculations to inform risk mitigation prioritization without losing critical business context. You can enhance risk ownership across the business through automation of key enterprise risk management activities such as assessments and control management to effectively engage the business, collect information, evaluate impact, and execute remediation strategies. 

Average Rating: 4.6/5.0

Total Reviews: 109

How Do G2 Users Rate OneTrust Tech Risk & Compliance?

  • Ease of Admin: 8.7/10 (Category avg: 9.0/10)
  • Risk Scoring: 8.5/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.7/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 7.4/10 (Category avg: 8.0/10)

Who Is the Company Behind OneTrust Tech Risk & Compliance?

  • Seller: OneTrust
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Atlanta, Georgia
  • LinkedIn® Page: www.linkedin.com
    2,522 employees on LinkedIn®

Who Uses This Product?

  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 45% Medium, 40% Small

What Do G2 Reviewers Say About OneTrust Tech Risk & Compliance?

AI-generated summary from verified user reviews

Pros
  • Users appreciate the user-friendly interface of OneTrust Tech Risk & Compliance, enhancing navigation and task management effortlessly.
  • Users value the powerful automation capabilities of OneTrust Tech Risk & Compliance, which enhance efficiency and streamline workflows.
  • Users highly value the centralized risk and compliance management of OneTrust Tech Risk & Compliance for enhancing efficiency.
  • Users value the centralized platform of OneTrust Tech Risk & Compliance, enhancing efficiency in risk and compliance management.
  • Users appreciate the centralized platform of OneTrust Tech Risk & Compliance, enhancing efficiency in risk and compliance management.
Cons
  • Users find the initial setup complex and challenging, requiring significant time, effort, and careful planning.
  • Users often find the difficult setup of OneTrust Tech Risk & Compliance to be complex and time-consuming.
  • Users find the initial setup complex and time-consuming, posing challenges for newcomers to the OneTrust platform.
  • Users report a steep learning curve with OneTrust, making initial setup and advanced features challenging for newcomers.
  • Users find the learning difficulty of OneTrust Tech Risk & Compliance to be high, causing challenges in setup and navigation.

What Are Recent G2 Reviews of OneTrust Tech Risk & Compliance?

What Are G2 Users Discussing About OneTrust Tech Risk & Compliance?

Scytale

Scytale is the only AI GRC platform and human experts that drive real compliance outcomes - from getting compliant to staying compliant, and building trust across every framework. Trusted by 1,000+ companies worldwide, Scytale replaces fragmented testing with continuous control visibility, automating evidence, control cross-mapping, and risk management across 80+ security, privacy, and AI frameworks, including SOC 2, ISO 27001, GDPR, SOX ITGC, ISO 42001, and many more. Scytale is a full-scope trust and compliance platform with everything you need to run your GRC program in one central hub, including: an agentic GRC network, a Trust Center, AI-integrated offensive security and expert GRC services.

Average Rating: 4.7/5.0

Total Reviews: 787

How Do G2 Users Rate Scytale?

  • Ease of Admin: 9.1/10 (Category avg: 9.0/10)
  • Risk Scoring: 9.2/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 8.9/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 8.1/10 (Category avg: 8.0/10)

Who Is the Company Behind Scytale?

  • Seller: Scytale AI
  • Company Website:
  • Year Founded: 2021
  • HQ Location: New York, US
  • LinkedIn® Page: www.linkedin.com
    170 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: CTO, CEO
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 74% Small, 21% Medium

What Do G2 Reviewers Say About Scytale?

AI-generated summary from verified user reviews

Pros
  • Users highlight the exceptional support from Scytale, praising their helpful representatives and effective assistance.
  • Users find Scytale to have great ease of use, simplifying certification processes and enhancing productivity effectively.
  • Users appreciate Scytale’s compliance efficiency, facilitating quick audits and providing excellent support throughout the process.
  • Users commend the exceptional customer support of Scytale, aiding them through compliance processes effortlessly.
  • Users commend the helpfulness of the team, highlighting their responsive support and guidance throughout the auditing process.
Cons
  • Users find integration issues with Scytale, particularly with DigitalOcean and Dependabot, hinder overall platform effectiveness.
  • Users find the limited integration support of Scytale a challenge, affecting ease of use and functionality.
  • Users report inconsistent evidence collection, as some tools are buggy and show unchecked controls as completed.
  • Users feel that the missing features hinder efficiency, such as cumbersome integrations and lack of bulk update options.
  • Users experience software bugs impacting UI navigation and integration reliability, though support aids in resolution.

What Are Recent G2 Reviews of Scytale?

Responsive, formerly RFPIO

Responsive is the global leader in strategic response management software, transforming how organizations share and exchange critical information. Our commitment to product innovation and customer success empowers companies to accelerate growth, mitigate risk and improve the employee experience by leveraging intelligent technologies to quickly and accurately manage RFPs, RFIs, security questionnaires (VSQs), due diligence questionnaires (DDQs), risk assessments and all other complex information requests (RFXs). With Responsive, frontline teams deliver superior responses by automating the completion of questionnaires, documents and spreadsheets while collaborating with stakeholders, improving processes with data insights, and quickly accessing approved content across popular business applications.

Average Rating: 4.5/5.0

Total Reviews: 1,304

How Do G2 Users Rate Responsive, formerly RFPIO?

  • Ease of Admin: 8.7/10 (Category avg: 9.0/10)
  • Risk Scoring: 7.0/10 (Category avg: 8.8/10)
  • Questionnaire Templates: 7.7/10 (Category avg: 8.7/10)
  • 4th Party Assessments: 6.6/10 (Category avg: 8.0/10)

Who Is the Company Behind Responsive, formerly RFPIO?

  • Seller: Responsive
  • Company Website:
  • Year Founded: 2016
  • HQ Location: Frisco, Texas
  • LinkedIn® Page: www.linkedin.com
    709 employees on LinkedIn®

Who Uses This Product?

  • Who Uses This: Proposal Manager, Proposal Writer
  • Top Industries: Computer Software, Information Technology and Services
  • Company Size: 48% Medium, 39% Large

What Do G2 Reviewers Say About Responsive, formerly RFPIO?

AI-generated summary from verified user reviews

Pros
  • Users find Responsive's ease of use remarkable, saving time with quick setups and efficient RFP response crafting.
  • Users value the regular updates and powerful features of Responsive, enhancing collaboration and content management.
  • Users value the time-saving capabilities of Responsive, allowing for quick project completion and efficient collaboration.
  • Users value the efficiency of Responsive, enabling quick project completion and effective collaboration on responses.
  • Users value the collaborative environment of Responsive, enhancing team coordination and streamlining response processes.
Cons
  • Users note a steep learning curve for new users, impacting efficient use of Responsive's features and content library.
  • Users find the interface not intuitive, making navigation and feature usage challenging, especially for new users.
  • Users find that inaccurate responses occasionally arise, especially in complex queries and content searches.
  • Users find non-intuitive features in Responsive, leading to confusion and inefficiencies during collaboration and library management.
  • Users report missing features in Responsive, particularly in chat functionality, translation, and search capabilities.

What Are Recent G2 Reviews of Responsive, formerly RFPIO?

What Are G2 Users Discussing About Responsive, formerly RFPIO?

Brandon Summers-Miller
BS
Researched and written by Brandon Summers-Miller
Updated October 3, 2024