Whistic Reviews

I find Whistic easy to search and see potential for many more service providers to be connected to it. I appreciate the overview of relevant SOC-2 reports, periodic security assessments, and information security policies that can all be found in one place. It is easy to install and I am glad that there is multi-factor authentication (MFA) on the website login.

I see a number of our other suppliers and I don't know how to request the same insight. A quick video tour of the solution would be great. I see many areas that I haven't explored yet. It would be nice to understand the why and usability of those functionalities.

I use Whistic to verify vendor assessments and reports. It gathers all the latest versions of documentation in one place and allows us to view relevant SOC-2 reports and security assessments. Vendors manage their information better with watermarks on downloaded files.

Whistic’s customer service is top-tier. They are very personable, clearly explain concepts, and swiftly offer solutions.

“Dislike” is a strong term here, but the Knowledge Base could be more organized. The ability to create folders would be very helpful.

Our TPRM program used to be endless spreadsheet reviews. Managing those was time consuming and it was difficult to review legacy information. Sharing our security documentation and an endless email tag among internal teams and the customer. Whistic allows us to amalgamate resources and automate permissions.

Whistic is relatively easy to use from both the analyst perspective, as well as the vendor's perspective. The AI works very well when vendor's submit adequate documentation and answers are well supported with accurate sources. This tool has helped our organization produce faster risk assessment results, improve risk outcomes, and support continuous monitoring across the entire vendor portfolio. Whistic's customer support team is also an extremely valuable resource to our organization.

Since Whistic doesn't allow domain level risk assessments, the process to gather evidence and sequence it to run the AI is manual, which can lead to errors.

Implementation of AI within the organization.

The vendor catalog is a tremendous time saver for due diligence. It gives me the ability to quickly find and search some of our key indicators.

Simpler access to trust catalogs. It may be more of a responsibility of the vendors themselves, but we all need a standard NDA or agreement that allows us to share critical information with each other faster.

Quick and fast supplier/vendor assessments for due diligence and continuous monitoring.

Compared to other TPRM solutions, Whistic is very easy to use and saves a ton of time on assessments. Their Trust Catalog model includes a lot of vendors and their security documents to streamline the assessment. For vendors who haven't contributed, it's easy to send requests and questionnaires based on many different assessment frameworks. The AI features allow you to upload audit reports and security documents of any kind and assess them against the framework of your choice. Their implementation services and support are top notch.

Sometimes the docs provided by the vendor aren't kept up to date, but that's really not a Whistic issue so much as it's the vendors. It easy enough to upload updated docs.

3rd party risk assessments can be very time consuming. Whistic helps streamline the process.

Ease of Use, Easy to Maintain and Clarity of Action Buttons. Support is immediate and efficient.

Really there is nothing I dislike about Whistic.

Implementation of the Whistic Profiles reduces the number of Security Questionnaires annually required by Customers and Prrospects.

Vendor management inventory, documenting and followups.

Ability to send custom questionnaires.

Automation and scheduling of questionnaires.

The UI/UX needs to improve a bit, it's not very intuitive. Also the help menu should contain a lot more details as the learning curve is awful.

Sending security questionnaires it's easy and fast. The profiles sent to clients can be customized well.

It is easy to evaluate and manage your vendors.

The whistic profiles can be a improved to be more to have a better UI.

Sometimes the usage it's a little bit confusing.

The thing I like most about whistic is how seamlessly everything integrates together. The issues, the trust catalog, reporting on vendor entries. It took what used to be a process spanning multiple spreadsheets and make it whole into one centralized location.

I'm stretching here trying to find a negative, but if anything, the only true negative is the current risk recon integration. It's handy having the high level scores, but having the ability to potentially drill down into the issues or findings would be a fantastic addition.

Otherwise, regarding whistic itself, there is nothing that I truly dislike!

Ease of use to share to my prospects and get their confidence in our security

I dont use much other than just the share with prospect section

It helps me share our security profile and accomplishments with my potential prospects and customers in deal cycles.