Overview
Product Information on RegScale
What is RegScale?
RegScale Pricing
RegScale Product Images



Overall experience with RegScale
“Regscale Effectively Supports Complex Compliance Needs Across Multiple Project Types”
“Auto-Population of Controls Benefits Users but Deletion Restrictions Cause Issues”
About Company
Company Description
RegScale is a Continuous Controls Monitoring (CCM) platform designed to be the operational risk tool for the CISO. Built on a compliance as code foundation, RegScale enables extreme automation with our API-first strategy, self-updating paperwork, and powerful AI agents that all but eliminate manual labor and make your program more proactive. Heavily regulated organizations report achieving compliance certifications faster and trimming audit preparation efforts with RegScale. Save money, strengthen security, accelerate time to market, and reduce risk in your operational environment. The CCM platform includes several products which can be purchased together or separately: Rapid Compliance and Certification, Threat-Based Risk Modeling, Third Party Risk Management, DevOps Continuous Compliance Automation, and Issues/Vulnerability Management. All products have OSCAL-native capabilities, including doc generation.
Company Details
Do You Manage Peer Insights at RegScale?
Access Vendor Portal to update and manage your profile.
Key Insights
A Snapshot of What Matters - Based on Validated User Reviews
Reviewer Insights for: RegScale
RegScale Likes & Dislikes
Most importantly, they were able to support our implementation of a very complex environment that includes supporting US Federal projects, State contracts, and International contracts and a myriad of compliance frameworks.
the ability to create an SSP with controls that auto-populate per the standard that is picked
This is very intuitive to use, can be tailored for different situations and provides good value.
Although the product is great, there is an opportunity to build an easier front end for administrators and users.
The fact that once you inherit a control set that you cannot remove it yourself as an end user - if you made a mistake. So if are new to the tool and end up accidently inheriting a long slew of wrong controls you end up scrapping your current SSP and starting over, cause you can't delete them... not productive at all.
None so far
Top RegScale Alternatives
Peer Discussions
RegScale Reviews and Ratings
- Director of AuditGov't/PS/EdGovernmentReview Source
Auto-Population of Controls Benefits Users but Deletion Restrictions Cause Issues
Lots of customization is needed. Some NIST standards are not already in there - like NIST RMF, NIST 800-161, to name a few. - Legal And Compliance Associate50M-1B USDSoftwareReview Source
Setup and Access Straightforward but Evidence Management Features Remain Limited
App is a good start, but is still clunky in some parts: - Evidence saved to the control doesn't automatically carry over to lightning assessments. - When tagged in a comment, no alert is sent to email. - Lacks tagging system to clearly let assessor know when evidence has been uploaded and pending review. - Director, IT Security and Risk ManagementGov't/PS/EdGovernmentReview Source
Regscale Effectively Supports Complex Compliance Needs Across Multiple Project Types
Overall, the product and the support from the Regscale team has been amazing! - IT ManagerGov't/PS/EdGovernmentReview Source
Product Delivers Fast Solutions and Customizable Options for Varied Requirements
They are very responsive to questions and able to provide solutions quickly - Finance Manager10B+ USDTelecommunicationReview Source
Comprehensive Material and Support Praised, Lengthy Workshops Draw Criticism
good experienced staff that provide good support and learning experience



