Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

The GRC software you've been looking for: Onspring. A flexible, no-code, cloud-based platform, ranked #1 in GRC delivery for 5 years running. Easily manage and share information for risk-based decision-making, monitor risk evaluations and remediation results in real-time, and create reports with with KPIs and single-clicks into details. Whether leaving an existing platform or implementing GRC software for the first time, Onspring has the technology, transparency, and service-minded approach you need to achieve your goals rapidly. Our ready-made product products are designed to get you going as fast as 30 days. SOC, SOX, NIST, ISO, CMMC, NERC, HIPAA, PCI, GDPR, CCPA - name any regulation, framework, or standard, and you can capture, test, and report on controls and then activate remediation of risk findings. Onspring customers love the no-code platform because they can make changes on the fly and build new workflows or reports in minutes, all on their own without the need for IT or developers. When you need nimble, flexible, and fast, Onspring is the best software option on the market.

Description

Ostendio is the only integrated security and risk management platform that leverages the strength of your greatest asset. Your people. Ostendio is the only security platform perfected for more than a decade by security industry leaders and visionaries. We know the daily challenges businesses face, from increasing external threats to complex organizational issues. Ostendio is designed to give you the power of smart security and compliance that grows with you and around you, allowing you to demonstrate trust with customers and excellence with auditors. Ostendio is a HITRUST Readiness Licensee.

API Access

Has API Yes 

API Access

Has API No 

Screenshots View All

Screenshots View All

Integrations

Ascent Yes 
Asset Panda No 
Black Kite Yes 
Box No 
Common Controls Hub Yes 
Confluence No 
Dropbox No 
Freshdesk No 
Google Workspace No 
Jira No 
Jira Work Management No 
KnowBe4 No 
ManageEngine AssetExplorer No 
Okta No 
OneLogin No 
Regology Yes 
RiskRecon Yes 
Salesforce No 
SecurityScorecard Yes 
Zendesk No 

Integrations

Ascent No 
Asset Panda Yes 
Black Kite No 
Box Yes 
Common Controls Hub No 
Confluence Yes 
Dropbox Yes 
Freshdesk Yes 
Google Workspace Yes 
Jira Yes 
Jira Work Management Yes 
KnowBe4 Yes 
ManageEngine AssetExplorer Yes 
Okta Yes 
OneLogin Yes 
Regology No 
RiskRecon No 
Salesforce Yes 
SecurityScorecard No 
Zendesk Yes 

Pricing Details

$20,000/year
Choose your licensing model (by user, by product or a hybrid approach), and choose your platform level (essential features and upgrades) to fit both your needs and your budget.
Free Trial Yes 
Free Version No 

Pricing Details

Learn more by visiting the Pricing page on the Ostendio website.
Free Trial No 
Free Version No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours Yes 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person Yes 

Vendor Details

Company Name

Onspring GRC Software

Founded

2010

Country

United States

Website

www.onspring.com

Vendor Details

Company Name

Ostendio

Founded

2013

Country

United States

Website

ostendio.com

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management Yes 
Issue Management Yes 
Mobile Access Yes 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Business Continuity

Backup Log No 
Backup Scheduling No 
Compression No 
Continuous Backup No 
Encryption No 
Incremental Backup No 
Local Server Options No 
Multiple System Support No 
Remote Server Options No 
Secure Data Storage No 
Web Access / Restoration No 

Compliance

Archiving & Retention Yes 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance Yes 
FDA Compliance Yes 
HIPAA Compliance Yes 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance Yes 
Risk Management Yes 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback Yes 
Version Control Yes 
Workflow / Process Automation Yes 

Disaster Recovery

Administration Policies Yes 
Bare-Metal Recovery No 
Encryption No 
Failover Testing No 
Flexible Data Capture No 
Multi-Platform Support No 
Multiple Data Type Support No 
Offline Storage No 

ESG

Activity Dashboard Yes 
Analytics/Reporting Yes 
Audit Management Yes 
Benchmarking Yes 
Compliance Management Yes 
Data Visualization Yes 
Document Management Yes 
Performance Metrics Yes 
Risk Assessment Yes 

GRC

Auditing Yes 
Disaster Recovery Yes 
Environmental Compliance Yes 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

Incident Management

Audit Trail Yes 
Corrective Actions (CAPA) Yes 
Disaster Recovery Yes 
IT Incident Management Yes 
Incident Reporting Yes 
OSHA Compliance Yes 
Root-Cause Diagnosis Yes 
Safety Management Yes 
Task Management Yes 
Ticket Management Yes 

Incident Response

Attack Behavior Analytics No 
Automated Remediation Yes 
Compliance Reporting Yes 
Forensic Data Retention No 
Incident Alerting Yes 
Incident Database Yes 
Incident Logs Yes 
Incident Reporting Yes 
Privacy Breach Reporting Yes 
SIEM Data Ingestion / Correlation No 
SLA Tracking / Management Yes 
Security Orchestration No 
Threat Intelligence No 
Timeline Analysis No 
Workflow Automation Yes 
Workflow Management Yes 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery Yes 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management Yes 
Vendor Management Yes 

Policy Management

Approval Process Control Yes 
Attestation Yes 
Audit Trails Yes 
Policy Creation Yes 
Policy Library Yes 
Policy Metadata Management Yes 
Policy Training Yes 
Reporting / Analytics Yes 
Version Control Yes 
Workflow Management Yes 

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management Yes 
Mobile Access Yes 
Operational Risk Management Yes 
Predictive Analytics Yes 
Reputation Risk Management Yes 
Response Management Yes 
Risk Assessment Yes 

Vendor Management

Audit Management Yes 
Contact Management Yes 
Customer Database Yes 
Self Service Portal Yes 
Supplier Master Data Yes 
Transaction History Yes 
Vendor Maintained Profiles Yes 
Vendor Managed Inventory Yes 
Vendor Performance Rating Yes 
Vendor Qualification Tracking Yes 

Product Features

Audit

Alerts / Notifications Yes 
Audit Planning Yes 
Compliance Management Yes 
Dashboard Yes 
Exceptions Management Yes 
Forms Management No 
Issue Management Yes 
Mobile Access No 
Multi-Year Planning Yes 
Risk Assessment Yes 
Workflow Management Yes 

Compliance

Archiving & Retention Yes 
Artificial Intelligence (AI) No 
Audit Management Yes 
Compliance Tracking Yes 
Controls Testing Yes 
Environmental Compliance No 
FDA Compliance Yes 
HIPAA Compliance Yes 
ISO Compliance Yes 
Incident Management Yes 
OSHA Compliance Yes 
Risk Management Yes 
Sarbanes-Oxley Compliance Yes 
Surveys & Feedback No 
Version Control Yes 
Workflow / Process Automation Yes 

Cybersecurity

AI / Machine Learning No 
Behavioral Analytics No 
Endpoint Management No 
IOC Verification No 
Incident Management Yes 
Tokenization No 
Vulnerability Scanning No 
Whitelisting / Blacklisting No 

Data Security

Alerts / Notifications Yes 
Antivirus/Malware Detection No 
At-Risk Analysis Yes 
Audits Yes 
Data Center Security No 
Data Classification No 
Data Discovery No 
Data Loss Prevention No 
Data Masking No 
Data-Centric Security No 
Database Security No 
Encryption No 
Identity / Access Management No 
Logging / Reporting No 
Mobile Data Security No 
Monitor Abnormalities No 
Policy Management Yes 
Secure Data Transport No 
Sensitive Data Compliance Yes 

GRC

Auditing Yes 
Disaster Recovery Yes 
Environmental Compliance No 
IT Risk Management Yes 
Incident Management Yes 
Internal Controls Management Yes 
Operational Risk Management Yes 
Policy Management Yes 

HIPAA Compliance

Access Control / Permissions Yes 
Audit Management Yes 
Compliance Reporting Yes 
Data Security Yes 
Documentation Management Yes 
For Healthcare Yes 
Incident Management Yes 
Policy Training Yes 
Remediation Management Yes 
Risk Management Yes 
Vendor Management Yes 

Integrated Risk Management

Audit Management Yes 
Compliance Management Yes 
Dashboard Yes 
Disaster Recovery Yes 
IT Risk Management Yes 
Incident Management Yes 
Operational Risk Management Yes 
Risk Assessment Yes 
Safety Management No 
Vendor Management Yes 

Risk Management

Alerts/Notifications Yes 
Auditing Yes 
Business Process Control Yes 
Compliance Management Yes 
Corrective Actions (CAPA) Yes 
Dashboard Yes 
Exceptions Management Yes 
IT Risk Management Yes 
Internal Controls Management Yes 
Legal Risk Management No 
Mobile Access No 
Operational Risk Management Yes 
Predictive Analytics No 
Reputation Risk Management No 
Response Management Yes 
Risk Assessment Yes 

Alternatives

Alternatives

integrum Reviews

integrum

integrum Management Systems
ClearGRC Reviews

ClearGRC

Clear Infosec