MetricStream offers governance. Explore MetricStream CyberGRC, compare key features and see the top Compliance Management alternatives before you buy.
Governance, Risk & Compliance
GRC Software: Compare Governance, Risk & Compliance Tools
Compare GRC software that unifies governance, risk and compliance. Review risk registers, policy management, audit workflows and reporting to simplify your GRC program.
35 vendors100 products
See the Top 20 rankingGRC vendors 35
Companies that offer GRC.
Featured vendors
What does Drata do? It focuses on security compliance automation. See Drata Trust Center and Drata Policies, deployment options and leading alternatives.
These vendors are highlighted by Cyber Rank. This does not affect our rankings, reviews or the order of the list below.
Archer
Overland Park, Kansas, USA
Armis
San Francisco, California, USA
AuditBoard
Los Angeles, California, USA
Bitsight
Boston, Massachusetts, USA
Coalfire
Westminster, Colorado, USA
CyberSaint
Boston, Massachusetts, USA
Diligent
New York, New York, USA
Drata
San Diego, California, USA
Google Cloud
Mountain View, California, USA
Hyperproof
Seattle, Washington, USA
IBM
Armonk, New York, USA
JupiterOne
Morrisville, North Carolina, USA
Liongard
Houston, Texas, USA
LogicGate
Chicago, Illinois, USA
MetricStream
San Jose, California, USA
NAVEX
Lake Oswego, Oregon, USA
OneTrust
Atlanta, Georgia, USA
Onspring
Overland Park, Kansas, USA
Optiv
Denver, Colorado, USA
Qmulos
Chantilly, Virginia, USA
Qualys
Foster City, California, USA
SAI360
Chicago, Illinois, USA
SAP
Walldorf, Germany
Secureframe
San Francisco, California, USA
GRC products 100
Open a product to see its features, pricing and reviews, or compare it with others.
Archer Business Continuity Management
Archer Business Continuity Management is a business continuity & crisis management for business impact analysis. See features and Business Continuity alternatives.
Archer Evolv Compliance
What does Archer Evolv Compliance do? It covers policy distribution and cross-framework mapping. See typical use cases, cloud deployment and how it compares to rivals.
Archer Evolv Risk
Looking for Compliance Management software? Archer Evolv Risk by Archer provides risk taxonomy for enterprise risk register. Compare features and alternatives.
Archer IT & Security Risk Management
Free trial available. Archer IT & Security Risk Management by Archer offers threat modeling. Compare features, use cases and leading GRC alternatives.
Archer Integrated Risk Management
Get the facts on Archer Integrated Risk Management: 360-degree risk view. Built for 360 risk view. Compare it with other Compliance Management options before you decide.
Archer Operational Risk Management
Looking for GRC software? Archer Operational Risk Management by Archer provides scenario modeling for loss event tracking. Compare features and alternatives.
Archer Third Party Governance
Looking for Compliance Management software? Archer Third Party Governance by Archer provides DPA tracking for vendor tiering. Compare features and alternatives.
Armis Centrix for OT/IoT
Armis Centrix for OT/IoT from Armis focuses on industrial OT asset management. Key capabilities: OT asset inventory. Compare it with the leading GRC alternatives.
AuditBoard
Evaluating AuditBoard? See how this GRC tool handles connected GRC, internal audit management and SOX compliance, where it fits best and which alternatives to compare.
AuditBoard IT Risk Management
AuditBoard IT Risk Management by AuditBoard: IT risk registers. Ideal for IT Risk Management. Deployment: cloud. See how it compares with top GRC alternatives.
Bitsight Third-Party Risk Management
Bitsight Third-Party Risk Management: vendor tiering and evidence collection. Built for vendor onboarding assessments. Compare Third-Party Risk Management alternatives.
Coalfire Compliance Essentials
Evaluating Coalfire Compliance Essentials? See how this Compliance Management tool handles control mapping, where it fits best and which alternatives to compare.
Coalfire FedRAMP Services
Evaluating Coalfire FedRAMP Services? See how this Compliance Management tool handles boundary scoping, where it fits best and which alternatives to compare.
Coalfire HEXEON
Shortlisting Compliance Management tools? Coalfire HEXEON by Coalfire brings vulnerability scoring, with cloud deployment. See strengths and alternatives.
CrossComply
CrossComply covers gap analysis, SOC 2, ISO 27001, NIST and automated evidence collection for Security Compliance. Compare top Compliance Management tools.
CyberSaint CyberStrong
CyberSaint CyberStrong: executive risk dashboards and automated audit-ready reports. Built for security posture tracking. Compare Compliance Management alternatives.
CyberSaint Risk Management
See what CyberSaint Risk Management offers: risk registers. It is built for financial risk exposure analysis, supports cloud deployment and competes with other GRC tools.
Diligent Compliance
Diligent Compliance helps teams with audit readiness. Explore features like audit trails, cloud deployment and the closest Compliance Management competitors.
Diligent HighBond
Diligent HighBond: automated control testing, robotic data analytics and internal audit workflow management. Built for fraud detection. Compare GRC alternatives.
Diligent One Platform
Diligent One Platform from Diligent focuses on executive reporting. Key capabilities: ERM integration. Compare it with the leading Compliance Management alternatives.
Diligent ThirdParty Risk Management
Diligent ThirdParty Risk Management helps teams with vendor risk assessment. Explore features like board reporting, cloud deployment and the closest GRC competitors.
Drata Policies
Get the facts on Drata Policies: employee signature tracking. Built for Policy Distribution. Compare it with other Compliance Management options before you decide.
Drata Risk Management
Evaluating Drata Risk Management? See how this Compliance Management tool handles executive dashboards, where it fits best and which alternatives to compare.
Drata Third Party Risk
Evaluating Drata Third Party Risk? See how this Compliance Management tool handles compliance scoring, where it fits best and which alternatives to compare.