Try our new research platform with insights from 80,000+ expert users

Amazon Inspector vs OneTrust GRC comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Dec 1, 2024

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

Amazon Inspector
Ranking in IT Vendor Risk Management
6th
Average Rating
8.4
Reviews Sentiment
6.4
Number of Reviews
8
Ranking in other categories
Vulnerability Management (17th)
OneTrust GRC
Ranking in IT Vendor Risk Management
1st
Average Rating
8.2
Reviews Sentiment
7.2
Number of Reviews
14
Ranking in other categories
GRC (2nd)
 

Mindshare comparison

As of September 2025, in the IT Vendor Risk Management category, the mindshare of Amazon Inspector is 0.9%, down from 1.1% compared to the previous year. The mindshare of OneTrust GRC is 9.9%, down from 12.5% compared to the previous year. It is calculated based on PeerSpot user engagement data.
IT Vendor Risk Management Market Share Distribution
ProductMarket Share (%)
OneTrust GRC9.9%
Amazon Inspector0.9%
Other89.2%
IT Vendor Risk Management
 

Featured Reviews

Abdalla Kenawy - PeerSpot reviewer
Automated insights streamline data security assessment
For Amazon Inspector, we have many EC2 or virtual machines deployed inside our AWS environment, and the problem is that the existing package deployed inside this EC2 instance has already outdated packages. As we progress with time, this package needs to be updated for security enhancement, which requires us to uninstall the package, install the new version, and then we should be fine. However, the challenge comes with how to scan all our EC2 instances for security vulnerabilities, which is currently managed by Amazon Inspector. Amazon Inspector can scan EC2 instances or ECR, which is the ECR registry where we can save artifacts Docker images. Amazon Inspector can also scan Docker images uploaded to ECR for Elastic Registry service, and it can scan databases and S3 based on the latest updates. I noticed this from a couple of months ago, and it provides huge benefits for security. Regarding the best features of Amazon Inspector, it gives us a list of all existing outdated packages as part of a deployed package on EC2 instances or specific Python packages that are part of the Docker file and the Docker image itself, which are causing security concerns. Amazon Inspector can list these security concerns and offer guidance on how we can remediate it by updating the package to a specific upper version or something similar.
Gerald Pegg - PeerSpot reviewer
Streamlined incident management with user-friendly automation tools and responsive support
I use OneTrust specifically for incident management. For my company, I helped to create the incident management program that we currently use, particularly with gathering the information and sending out assessments to different vendors to collect information for further research and discovery.  I…

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The scalability of the solution itself is unparalleled."
"The assessment reports provided by Amazon Inspector have helped me in identifying security vulnerabilities in my cloud applications by giving us a nicely designed dashboard that provides all the security information we need to work on remediation."
"The vulnerability discovery is valuable, and they also rank those vulnerabilities for you. So, you could rapidly attack some of the higher, severe vulnerabilities as they pop up, if they do pop up."
"It operates continuously, so as soon as resources are created, it scans them for vulnerabilities."
"The automated vulnerability detection aspect is most valuable."
"Amazon Inspector is highly stable, rated ten out of ten, and this stability impacts business security and administration positively."
"The findings dashboards are neat and easy to understand, offering clear demarcations for different types of findings and detailed insights into specific vulnerabilities and their associated instances. It is not a place where everything is dumped together. It offers an easy-to-understand layout."
"I recommend Amazon Inspector because it allows the automation of processes and requires less manual monitoring."
"OneTrust GRC offers policy management, including documentation, distribution, attestation, and policy management."
"The platform is especially useful in startup environments where we're typically starting from scratch."
"The simplicity of OneTrust GRC, particularly its user interface, is valuable as it makes it easy to use and not complex."
"The product helps us streamline audit and incident management processes."
"It does help in the automation of our privacy impact assessments."
"As a solution for IT risks, it is a very good product."
"Vendors can be assessed and rated out of the tool, and assessments can be scheduled for updates at certain intervals."
"We have data from Jira regarding addiction related to Europe as well as California. Additionally, we have data related to the Indian Data Protection Bill. Therefore, GDPR compliance is highly beneficial."
 

Cons

"One major area for improvement is remediation. My team works on remediating findings over time, likely using available patches. However, easier integration with Amazon's patching services would be very helpful."
"There is room for improvement in the scanning capabilities. I'd like to see broader coverage in terms of the vulnerabilities detected."
"There are challenges associated with the interdependencies in AWS services, like requiring an Active Directory for other services, resulting in additional charges."
"There isn't too much to improve right now. Scanning on demand or as a part of the pipeline versus a post pipeline solution would be good, but it is not a deal breaker by any means."
"The other point is that the reporting features of Inspector need improvement. For example, I am in an organization with millions of CVEs, and getting an overview of all this is challenging."
"It has a limited scope. So, AWS Inspector primarily focuses on the security of the EC2 instance. So, if your architecture includes other AWS services, then you may need to use additional tools for your comprehensive security assessment. So that is one con. Another is, like, we have a dependency on agents."
"One area for improvement in Amazon Inspector is the automation aspect."
"It has automated vulnerability assessment, yet I seek more flexibility in defining custom vulnerability checks tailored to my needs, which is more difficult."
"OneTrust GRC's workflows aren't automated and need to be manually driven."
"I haven't seen any return on investment using the solution. If I had the opportunity, I would use a different solution."
"There are limitations to customized workflow automation, and they need to increase both the available automation and the customized workflow."
"The Vendor Risk dashboard is quite basic today and not interactive, but improvements are in coming the next releases."
"We encounter difficulties creating multiple platforms or interfaces and manual processes for changing certain settings."
"The implementation of OneTrust could have been smoother, particularly in terms of scoping for those outside of governance, risk, and compliance."
"I wish there were more customization options, particularly within the privacy rights automation module."
"There could be enhancements related to AI."
 

Pricing and Cost Advice

"It is scaled as you go. There are probably a certain number of scans per month, and there are tiers. If you're under a certain tier, it is free. The second level is pennies, and then all the way up to like a million. So, it has a tiered pricing program. They're pretty good with your initial scanning, and there is room to scale based on being affordable, but it is fairly cheap. There are no additional costs. They pretty much think about it as a pay-per-scan type model."
"The pricing is very transparent and clear."
"The lowest cost would be around $10 for a few small accounts, however, for thousands of accounts, it could be around $5000 to $6000 dollars per month."
"It's priced according to market standards for its services."
"The solution is expensive."
"The platform is expensive."
"OneTrust GRC is an expensive solution."
"I found the pricing and setup cost very reasonable."
"OneTrust GRC's licensing costs about $15,000 per module."
"On a scale from one to ten, where one is cheap, and ten is too expensive, I rate the solution a seven since it falls under the pricey side."
report
Use our free recommendation engine to learn which IT Vendor Risk Management solutions are best for your needs.
867,676 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
13%
Computer Software Company
12%
Government
7%
Manufacturing Company
7%
Financial Services Firm
13%
Computer Software Company
8%
Government
6%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise4
By reviewers
Company SizeCount
Small Business3
Midsize Enterprise2
Large Enterprise9
 

Questions from the Community

What do you like most about Amazon Inspector?
The integration of Amazon Inspector with other AWS services has enhanced our security. Security Hub is a major asset because it allows us to centralize data from various AWS services. We can integ...
What is your experience regarding pricing and costs for Amazon Inspector?
I manage pricing and purchase reserved instances, yet face challenges due to dependencies and lack of options for reserved capacity for EBS volumes. Some services create extensive costs upon launch.
What needs improvement with Amazon Inspector?
There are challenges associated with the interdependencies in AWS services, like requiring an Active Directory for other services, resulting in additional charges. Also, there is no option to buy r...
What do you like most about OneTrust GRC?
We have data from Jira regarding addiction related to Europe as well as California. Additionally, we have data related to the Indian Data Protection Bill. Therefore, GDPR compliance is highly benef...
What is your experience regarding pricing and costs for OneTrust GRC?
I don't have specifics on pricing. I know it's not very cheap, but the budget aspect is outside my wheelhouse.
What needs improvement with OneTrust GRC?
I wish there were more customization options, particularly within the privacy rights automation module. More customization on the backend would allow for adjusting specific category labels tailored...
 

Also Known As

No data available
OneTrust Vendor Risk Management
 

Overview

 

Sample Customers

betterment, caplinked, flatiron, university of nutri dame
randstand, into, halfbrick
Find out what your peers are saying about Amazon Inspector vs. OneTrust GRC and other solutions. Updated: July 2025.
867,676 professionals have used our research since 2012.