Suggestions appear as you type. Use the up and down arrows to choose one and Enter to open it.

This page's audience our own tag's counts — open to see them
–Visits
–Page views
–Clicks to vendors
–Time on page
–Reading now
Clicks to vendors, by tool
  • –
Top countries
  • –
Devices
  • –

– · visits, page views and clicks counted by our own tag, which counts more than our checked analytics; every figure rounded down · how we count

ISMS.online review

#21 of 24 in Security Management software

A broad ISMS workspace for managing risks, controls, frameworks, incidents and suppliers.

7.0/10Editor score
ISMS.online7.0 Visit ISMS.online

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

ISMS.online is an information security and compliance management platform for organisations implementing and maintaining frameworks such as ISO 27001, SOC 2 and NIS 2. Its web workspace and API cover policies, controls, risks, information assets, audits, incidents, corrective actions and supplier oversight. Small, mid-market and enterprise teams can use it to organise an information-security management system, with cloud deployment and self-hosted support available.

Pricing is supplied by quote, with plans tailored to an organisation’s frameworks and requirements; there is no free plan. That approach suits teams that need a scoped compliance programme rather than a self-directed subscription, but buyers should expect a sales-led evaluation. The platform connects with Jira, ServiceNow, Slack, Microsoft Teams, Outlook Calendar, Google Drive, SharePoint, Google Workspace, Azure, SAML2, Okta, Microsoft Entra, Intune and Zapier. Its API can connect tracks, incidents, vulnerabilities and asset inventory, helping organisations fit ISMS work into existing service, identity and collaboration systems.

The strongest case for ISMS.online is its breadth within ISMS work: risk registers include assessment, treatment plans, reminders and reporting; asset records include ownership and review reminders; and linked records provide oversight across controls, policies and evidence. Framework templates and guided certification workflows add structure, while incident, corrective-action and supplier-risk features extend coverage beyond policy storage. The trade-off is focus: automated asset discovery is not included, so teams seeking continuous discovery should consider a complementary or alternative tool. Choose ISMS.online when connected governance and framework management are priorities; look elsewhere when discovery automation or transparent self-service pricing matters more.

ISMS.online pros and cons

  • Where it wins
    • Links risks, assets, controls, policies and evidence in connected workspaces
    • Framework templates support ISO 27001, SOC 2, NIS 2 and other standards
    • Integrates with Jira, ServiceNow, Slack, Microsoft 365, Google and identity tools
  • Where it doesn't
    • No free plan for initial evaluation
    • Pricing is bespoke and requires a sales quotation
    • Automated asset discovery is not provided

ISMS.online fact sheet, pricing and score →

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated · How we research and update