No more typing reviews! Try our Samantha, our new voice AI agent.

RSA Archer vs Scytale comparison

Why PeerSpot?
 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

RSA Archer
Ranking in GRC
1st
Ranking in IT Vendor Risk Management
5th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
42
Ranking in other categories
IT Governance (1st)
Scytale
Ranking in GRC
24th
Ranking in IT Vendor Risk Management
20th
Average Rating
5.0
Reviews Sentiment
4.5
Number of Reviews
2
Ranking in other categories
AI Legal & Compliance (11th)
 

Mindshare comparison

As of November 2026, in the GRC category, the mindshare of RSA Archer is 6.2%, down from 10.4% compared to the previous year. The mindshare of Scytale is 0.9%, up from 0.0% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
RSA Archer6.2%
Scytale0.9%
Other92.9%
GRC
 

Featured Reviews

CJ
Information Security Specialist at Dubai Health Authority
Centralized management strengthens compliance with good look and feel
From my perspective as a customer and end user, Archer has an impressive look and feel, but the most adaptive feature is its ease of configuration which helps to enhance our process according to our maturity. It's more about our organization getting centralized with an integrated approach that focuses on risk governance and compliance. When can provide a detailed dashboards to management with the details of risks from top-down or bottom-up prioritizing actions based on its criticality or necessity. This allows us to show end users and management where the issues lie and effectively demonstrate accountability and visibility in compliance.
reviewer2814822 - PeerSpot reviewer
CEO at a tech vendor with 11-50 employees
Sudden access suspension has disrupted compliance work and raises serious trust concerns
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the system and sent a contract to us in full knowledge of what we do as a business. Compliance is a very broad word; we provide compliance into nonprofits, housing associations, markets that these guys do not serve. Somebody inside Scytale likely thought, "Oh my God, these guys must be competitive, so let's just cut them off." I'm assuming that's what happened, but there was no explanation, nothing. Scytale did not help me streamline my compliance processes. It didn't really identify gaps. There was no gap analysis in there that we could see. I didn't really get that far to use the effectiveness of Scytale's real-time insights in identifying potential compliance issues. All my experiences with Scytale have been negative. We haven't used the automated evidence collection of Scytale. Scytale has not helped me allocate resources more efficiently for compliance; it's been the opposite experience. We have put six months of effort into looking at the controls on 27001, talking about auditors, getting audit-ready, and so forth. But we've invested significant time, which has now been a complete waste of time. Scytale is not only unreliable, considering they can suspend access without any notice or formal reason, but this lack of stability results in serious concerns about their dependability as a partner. If they can do that without explanation, my fear is that even if they switch it on again, who's to know in three months' time that the same thing couldn't happen again?

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"RSA Archer's best features are advanced workflow, reports, dashboards, and notifications."
"RSA Archer GRC modules allow you to build efficient, collaborative enterprise governance, risk, and compliance (GRC) programs across IT, finance, operations, and legal domains."
"With this tool, once it was built and designed, we were able to use our own internal resources, we don't need to go outside, all of the questions are already there, the policies and procedures are already built-in and you just need to tweak them a bit, so it helps us just in understanding what's there on the ground and overall it saves us a lot of money to be spent if we are taking care of these services individually."
"In two to three months, even non-technical people can be masters of the product."
"RSA Archer is a good tool and I have found performing the application, ISMS, and TPRM assessments beneficial."
"The most valuable features of RSA Archer are the asset management, risk management, and vendor management."
"With RSA Archer, an admin can set permissions for a normal user to go directly to the tool they need to input some data. Admins can then go through that and approve some requests. Also, they can log in based on these kinds of permissions, including ticketing, service patches, or upgrades."
"The solution's most valuable features are data feeds, templates, reports, dashboards, and workload management."
"Scytale has positively impacted my organization by giving us the ability to really educate our employees and make them aware, providing them more situational awareness when it comes to cybersecurity."
"The processes I participated in during the setup of Scytale were straightforward; it was acceptable and fine."
 

Cons

"The interface just looks old."
"There are certain restrictions on API integrations, and it is not simple or straightforward."
"The solution’s customization features could be better. Its performance and scalability need improvement as well."
"The main improvement I would like to see in the on-premises version is the amount of data the product can hold."
"Solution could use more inbuilt applications."
"The tech support team's turnaround time is often slow."
"In the current version, RSA is a little slow mainly because of Silverlight which I believe has been removed in the next version."
"It would be useful for customers if COBIT 2019 could be translated into different languages."
"Scytale is not reliable at all; not stable. You would be unwise to put a mission-critical function like ISO 27001 on Scytale."
"Scytale can be improved by making the interface a bit more consistent in most areas of the platform, as sometimes it can be confusing, and some information can be inaccessible or cut off."
 

Pricing and Cost Advice

"The license is costly for the solution, but the remaining set up and maintenance is quite cheaper."
"The solution is not at all a cheap product."
"Fairly highly-priced, especially for smaller companies."
"The solution’s pricing is moderate."
"It is not expensive. It is reasonable. We only pay for the licensing."
"The solution's price should be reduced. You only have to pay the license and there are no additional fees."
"As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
"I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
Information not available
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
921,523 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
16%
Outsourcing Company
10%
Insurance Company
9%
Manufacturing Company
8%
Outsourcing Company
26%
Construction Company
22%
Healthcare Company
8%
Wholesaler/Distributor
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise25
No data available
 

Questions from the Community

What needs improvement with RSA Archer?
While it provides benefits in terms of security, the pricing is a bit higher than customers typically expect. It would be helpful if RSA Archer had the capability for two-way integration because, i...
What is your primary use case for RSA Archer?
Regarding the compliance, risk, and governance tools, I am comfortable discussing the tools in the GRC category. The specific module from ServiceNow is the ServiceNow Compliance, Risk, and Governan...
What advice do you have for others considering RSA Archer?
I have been in touch with about three companies who use RSA Archer actively in the compliance area. These companies use RSA Archer for nearly all purposes, including governance, internal risk, and ...
What needs improvement with Scytale?
Scytale unilaterally suspended access because in their opinion, I don't know why they did that. I'm assuming they think that we're competitive, which we're not. They sold us the sys...
What is your primary use case for Scytale?
My usual use case for Scytale is for ISO 27001 compliance.
What advice do you have for others considering Scytale?
We're going to sue Scytale, and we're going to sue Amazon as well because they're technically the people we're paying. My feedback on Scytale is that it's terrible. Currently, i...
 

Comparisons

 

Also Known As

Archer
No data available
 

Overview

 

Sample Customers

T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
Deel, Guesty, Berlitz, AXS Guard, vSure, KOR, Trial X, Tune Insight, Agora, Leen, Upsolver. For a full list of customers and testimonials, please visit: https://scytale.ai/customers/
Find out what your peers are saying about RSA Archer vs. Scytale and other solutions. Updated: November 2026.
921,523 professionals have used our research since 2012.