--- title: "NAVEX IRM Software Pricing, Alternatives & More 2026 | Capterra" description: "With the help of Capterra, learn about NAVEX IRM Software - reviews, pricing plans, popular comparisons to other Energy Management products and more." source_url: "https://www.capterra.com/p/150187/Navex-IRM/" page_type: "product" language: "en" --- # NAVEX IRM Software Review 2026: Features, Integrations, Pros & Cons Last updated on September 16, 2026 Provider data verified by our Software Research team, and reviews moderated by our Reviews Verification team. [Description](#description)[Use cases](#use-cases)[Alternatives](#alternatives)[FAQs](#faqs)[Features](#features)[Pricing](#pricing)[Integrations](#integrations)[Support](#support)[Reviews](#reviews) NAVEX IRM ## What is NAVEX IRM? NAVEX IRM (formerly Lockpath) brings visibility to risks frequently managed in disparate sources. It aggregates internal data points from all corners of the organization, as well as from assessments, audits, authoritative sources and external systems. By having everything centralized, correlated and connected, the platform enables organizations to see dependencies and to make smarter business decisions. ## What is NAVEX IRM used for? [Business Continuity](https://www.capterra.com/business-continuity-software/)[Risk Management](https://www.capterra.com/risk-management-software/)[ERM](https://www.capterra.com/erm-software/) Top alternative Featured Overall rating Based on 20 user reviews Reviews sentiment Positive 100% Neutral 0% Negative 0% Starting price $2600 Per Month Free trial not available Free version not included Capterra Shortlist charts the highest-rated and most popular products... Our "Best of" badge program showcases products with the highest ratings... Our "Best of" badge program showcases products with the highest ratings... Do you work for NAVEX IRM?[Manage this product listing](https://www.g2.com/products/virtual-operations-center/claim_requests/new?auto=true) ## NAVEX IRM Overview Updated September 2026 AI summary NAVEX IRM offers businesses of all sizes a centralized platform to manage risk, compliance, audits, and vendor oversight across cloud or on-premise environments. Covering categories such as integrated risk management, GRC, and policy management, it includes features like dashboards, alerts, audit trails, workflow automation, and predictive analytics to support risk assessment, internal controls, and ongoing compliance needs. ## Compare with a popular alternative Capterra selects software alternatives based on relevant features, verified user reviews and user interactions. Placement may be influenced by client status. ### NAVEX IRM 4.7 (20) VS. [4.8 (105)](https://www.capterra.com/p/138931/Audit-Software/reviews/) Starting Price $2600 Per Month Starting Price Contact vendor Free Trial Free Version Pricing Options Free Trial Free Version Ease Of Use 4.1 (20) Ease Of Use 4.7 (105) Value For Money 4.5 (19) Value For Money 4.8 (97) Customer Service 4.7 (20) Customer Service 5.0 (102) ## NAVEX IRM alternatives [4.6 (39)](https://www.capterra.com/p/151388/teammate-risk-compliance/reviews/) Starting price $0.01 Per User, Per Month Pricing Options Free Trial Free Version User Rating 97% of reviewers rated it above 4 stars [4.7 (414)](https://www.capterra.com/p/148230/SOXHUB/reviews/) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 98% of reviewers rated it above 4 stars [LogicGate](https://www.capterra.com/p/148648/LogicGate/) [4.7 (83)](https://www.capterra.com/p/148648/LogicGate/reviews/) Starting price Contact vendor for pricing Pricing Options Free Trial Free Version User Rating 96% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/148648/LogicGate/) [Diligent One Platform](https://www.capterra.com/p/268087/Diligent-One/) [4.5 (86)](https://www.capterra.com/p/268087/Diligent-One/reviews/) Starting price $5000.00 Per User, Per Month Pricing Options Free Trial Free Version User Rating 97% of reviewers rated it above 4 stars [Learn More](https://www.capterra.com/p/268087/Diligent-One/) ## FAQs about NAVEX IRM Overview ### Which roles and teams benefit most from NAVEX IRM? NAVEX IRM is most used by information security, GRC, and compliance teams that manage risk assessments, policy oversight, and audit readiness. Security analysts, engineers, and architects rely on it to track controls and remediation, while third-party risk specialists and program managers use it to standardize vendor reviews and reporting. Answer based on 20 reviews Overview ### What company size and specific industries is NAVEX IRM built for? NAVEX IRM is designed for mid-market and enterprise companies that want to automate manual processes, consolidate asset management tools, replace rigid or outdated systems, or connect asset management with broader enterprise risk programs. The vendor description does not specify any particular industries or sectors. Features and Usability ### What are the key features of NAVEX IRM? NAVEX IRM offers governance and vendor risk management, plus risk assessment, incident management, and issue management. It also includes audit management, compliance management, policy management, workflow management, and approval process control. Additional features include dashboards, real-time reporting, access controls/permissions, alerts/notifications, and document storage. Integrations ### Which third-party tools and platforms does NAVEX IRM integrate with? NAVEX IRM integrates with Acunetix. Answer based on 3 reviews Getting Started and Support ### What training and onboarding options does NAVEX IRM offer? NAVEX IRM provides in-person training, live online sessions, webinars, documentation, and videos. In-person and live online formats support guided instruction, webinars cover scheduled topic-based learning, documentation offers written reference material, and videos provide visual guidance for reviewing product steps and features. Answer based on 4 reviews Getting Started and Support ### What customer support options does NAVEX IRM offer? NAVEX IRM provides email/help desk, phone support, and chat. Users describe support as responsive and helpful, with teams that answer questions quickly and assist with configuration, training, and enhancement requests. Some also note that advanced setup works best when internal administrators or professional services have enough time to learn the system. Answer based on 5 reviews ## Features AI summary Based on 1,730 Energy Management reviews Capterra data shows that buyers of risk management software rank the following features as their top priorities: - **Risk Analysis** (**47%** of reviewers rated this feature as critical) - **Risk Reporting** (**46%**) - **Risk Scoring** (**49%**) NAVEX IRM includes **Risk Reporting**, but it does not include **Risk Analysis** or **Risk Scoring**. Instead, the product offers other features that reviewers also rate as important, including **Risk Assessment** (**54%**) and **Compliance Management** (**46%**). These capabilities help businesses identify potential issues, track regulatory obligations, and document findings clearly, providing teams with better visibility into risk exposure and compliance needs. Access Controls/Permissions Define levels of authorization for access to specific files or systems Alerts/Notifications Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges API Application programming interface that allows for integration with other systems/databases Approval Process Control Manage the process of evaluating documents or requests submitted for approval Archiving & Retention Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes Assessment Management Creation, administration, and evaluation of assessments or tests NAVEX IRM 67 features ### All Features - Access Controls/Permissions: Define levels of authorization for access to specific files or systems - Alerts/Notifications: Alerts or notifications of various types such as pop-up messages, sounds, banners, or badges - API: Application programming interface that allows for integration with other systems/databases - Approval Process Control: Manage the process of evaluating documents or requests submitted for approval - Archiving & Retention: Moving and separately storing data that is not actively used or continuous storage of data for compliance purposes - Assessment Management: Creation, administration, and evaluation of assessments or tests - Asset Tracking: Monitor the usage of assets, such as equipment, tools, software, etc., throughout their lifecycle - Attestation: Collect, track and store acknowledgements that policies have been read and understood - Audit Management: Plan, schedule, and execute organization's accounts and assets to ensure compliance with policies and laws - Audit Planning: Create a targeted plan, schedule resources, and determine long-term goals for the audit process - Audit Trail: A record of all activities within the system, including user access, changes made, etc. - Business Process Control: Define and maintain business rules that determine workflow capabilities and criteria - Collaboration Tools: Provides a channel for team members to share AI models, media files, communicate, and work together - Compliance Management: Track and manage adherence to policies for any service, product, process, or supplier - Compliance Tracking: Track and report regulatory data to either internal management or external stakeholders - Configurable Workflow: Configure existing workflows to meet your organization's needs - Configuration Management: Identify component attributes like servers, hardware, software, and manage relationships across all services - Contract/License Management: Track, store, and access client contracts or licenses - Corrective and Preventive Actions (CAPA): Investigate and take action at root cause or error in processes to prevent recurring issues - Cost Tracking: Process to track, record, and analyze expenses that occurred over the entire duration of a given project - Customizable Fields: Customize data fields to support various needs and use cases - Dashboard: Assembly of graphs and charts for visualizing and tracking statistics/metrics - Dashboard Creation: Creation and customization of dashboards - Data Security: Protect sensitive data for digital privacy - Disaster Recovery: Plan and implement business continuity measures in case of unforeseen events - Document Storage: Store and organize documents in a centralized system - Documentation Management: Manage product specific documents in a categorized order - Energy Monitoring: Monitoring energy production and consumption trends - Exceptions Management: Automated handling of non-compliant EDI transmissions. - For Healthcare: Software designed for the healthcare industry - Forms Management: Store, manage and track all forms in a centralized location - Governance: Management of rules, practices, and processes of a company - HIPAA Compliant: Compliant with HIPAA, which sets standards for sensitive patient data protection - Incident Management: Manage and track all disruptions and incidents - Internal Controls Management: Ensure internal objectives and compliance with policies are met - Inventory Management: Track and manage inventory levels to maintain proper supply - ISO Compliance: Guidelines set by the International Organization for Standardization - Issue Management: Identify and respond to unexpected problems or failures (ie. "negative events") - IT Risk Management: Manage risks related to IT systems - Maintenance Management: Manage, maintain and track the performance of assets and equipment - Operational Risk Management: Manage risk that occurs from systems failure or inadequate processes - OSHA Compliance: Enforces guidelines set by the Occupational Safety and Health Administration to remain legally compliant - Performance Metrics: A set of indicators that tracks the performance of networks, applications, systems, teams, etc. - Policy Creation: Create new policies or alter existing policies - Policy Library: A repository of all past and existing policies - Policy Management: Create, manage, and track policies and procedures within an organization - Policy Metadata Management: Group policies by type for easy classification and discovery - Predictive Analytics: Predict future data based on historical data sets - Procurement Management: Organize and manage all processes/procedures involved in purchasing goods and/or services - Real-Time Reporting: Active reporting of data and metrics - Remediation Management: Identify and orchestrate execution of actions needed to restore systems to optimal conditions - Reporting & Statistics: Collection, analysis, and representation of numerical data and generation of reports to understand various patterns - Reporting/Analytics: View and track pertinent metrics to find patterns and gain insights from data - Reputational Risk Management: Identify, monitor, and assess risks to brands - Requisition Management: Review, approve and cancel requests for goods/services to be purchased - Risk Assessment: Initiate collection and analysis of known risks - Risk Management: Process of identifying, evaluating, mitigating, addressing and reporting on potential risks or uncertainties - Risk Reporting: Reporting of risks associated with specific actions, events, or entities - Safety Management: Identify and assess hazards to ensure the well-being of employees, assets, and the environment - Sarbanes-Oxley Compliance: Regulations on a company's internal process when dealing with financial reporting - Self Service Portal: Online portal through which end users can access the system, manage tasks, or obtain information - Task Management: Create, manage and track all task activities and progression - Vendor Management: Ability to track and store all vendor-related information, such as contacts, services offered, terms, etc. - Vendor Master Data Management: Create and maintain quality vendor data through data validation, maintenance, and audit trails to ensure proper compliance and sourcing - Vendor Risk Management: Pinpoint and mitigate risk from third-party vendors and suppliers. - Version Control: Track revisions and updates made to files and navigate between different versions - Workflow Management: Create, design and manage workflows for repetitive tasks --- Get Advice We can help you find the software with the features you need. Features 4.5 (20) 4.5 Based on 20 reviews ## Pricing Value for money 4.5 (19) Basic $2,600 Per Month Value for money 4.5 (19) 4.5 Based on 19 reviews ## Integrations [ Acunetix](https://www.capterra.com/p/171379/Acunetix/) Connect with a Capterra advisor for a free 15-minute consultation Get a personalized software list aligned to your business needs with guidance from our expert advisors. Our team has helped 1 million+ businesses like yours find options that fit their needs. ## Support, customer service and training options Customer Service 4.7 (20) Support - Email/Help Desk - FAQs/Forum - Knowledge Base - Phone Support - 24/7 (Live rep) - Chat Training - In Person - Live Online - Webinars - Documentation - Videos Deployment - Web - Android - iPhone/iPad Typical users - Freelancers - Small businesses - Mid size businesses - Enterprises Customer Service 4.7 (20) 4.7 Based on 20 reviews ## User reviews Overall rating 4.7 Based on 20 reviews Filter by rating 5(13) 4(7) 3(0) 2(0) 1(0) Mentioned topic Sorted by most recent CS Christopher S. Intern Information Technology and Services ### "Powerful with steep learning curve" 4.0 Overall Rating 4.0 4.0 Ease of Use 3.0 3.0 Features 5.0 5.0 Customer Service 4.0 4.0 Likelihood to Recommend 7/10 April 4, 2019 So far we only have the Vendor manager operational, and once I read up and practiced a bit, setting up tables is pretty straight forward, but we have to be careful because setting up a practice questionnaire and issuing it in a test means we now have a sample questionnaire that we apparently can never delete or get rid of. I feel it's going to be a great asset, but getting it operational seems time-consuming and labor-intensive. Pros The number of features is pretty great and it seems like it's going to be a powerful tool once it's operational. Cons It's pretty complicated to set up and make ready for use. Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. JL Joi L. Senior IT Security Analyst Hospital & Health Care ### "Great Experience with Lockpath's Keylight Tool" 5.0 Overall Rating 5.0 5.0 Ease of Use 5.0 5.0 Features 4.0 4.0 Customer Service 5.0 5.0 Likelihood to Recommend 9/10 April 3, 2019 Keylight has been a great tool and has assisted with streamlining our third party review process. Using the tool, we are able to weight questions, calculate a score based on the vendor’s response, obtain information regarding the security scorecard rating, document a summary regarding the review, easily update questions to be completed by the third party, administer user access for the tool, and keep track of the progress of completion of the questionnaire. Also, Lockpath is quick to respond whenever I have questions regarding the tool. Additionally, I meet with a representative from Lockpath on a regular basis to touch base and discuss any issues, questions, or provide feedback. I’ve had an excellent experience with Lockpath’s Keylight tool and highly recommend it. Pros Ability to weight questions Ability to calculate score based on vendor's response to questionnaire Ease of updating questions/info in questionnaire Ease of providing user administration Ease of monitoring progress of completion of questionnaire Good customer service Cons The reporting functionality could be improved Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. DB Deborah B. Information Security Analyst Management Consulting ### "LockPath experience" 5.0 Overall Rating 5.0 5.0 Ease of Use 3.0 3.0 Features 4.0 4.0 Customer Service 5.0 5.0 Likelihood to Recommend 10/10 April 3, 2019 Pros I like that it helps me organize my GRC functions, helps automate things and takes out a lot of the manual work that GRC usually requires. It is like another resource . Cons It can be confusing at times knowing where to go to connect different documents and functions. It is not the most user friendly software. It does take a mindset that is not afraid to explore and ask questions. Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. AN Anonymous User Manager, Information Security Systems Hospital & Health Care ### "Good GRC solution with a robust framework" 4.0 Overall Rating 4.0 4.0 Ease of Use 3.0 3.0 Features 5.0 5.0 Customer Service 4.0 4.0 Likelihood to Recommend 8/10 April 3, 2019 While the framework required more work than we anticipated, overall the Keylight GRC platform has been a good first step into the GRC tool space. Pros Framework is very flexible to meet the needs of most organizations, inexpensive for the architecture. Cons Would not be a good fit for companies that want something that is more plug n play where you select the regulatory requirements, you yes/no the risks and it outputs dashboards. Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. MS Melissa S. Manager Information Risk management Legal Services ### "Excellent platform and model vendor" 5.0 Overall Rating 5.0 5.0 Ease of Use 5.0 5.0 Features 5.0 5.0 Customer Service 5.0 5.0 Likelihood to Recommend 10/10 January 15, 2019 The platform has enabled the risk function to have broad management capabilities in all GRC areas with a minimal amount of staff to support the platform. Pros Highly extensible and customizable for our workflows and reporting requirements Cons The administrator UI isn't in the usual structure which takes some time to get used to but it is the same in every module so once you are used to the layout it is the same for every piece in the platform. Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. AN Anonymous User Information Security Compliance Analyst Hospital & Health Care ### "Keylight is nimble, useful system." 4.0 Overall Rating 4.0 4.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 4.0 4.0 Likelihood to Recommend 8/10 January 9, 2019 Keylight lets us manage our vendors in a very simple way. We can add vendors, provide assessments, provide reviews, and render decisions all within the system and effectively. It has simplified a number of tasks for me personally. Pros Keylight makes the complex tasks involved in vendor management easy to handle. From vendor communications to information retention, Keylight does it all and in a fairly user friendly way. Cons Lockpath has traditionally not communicated potential problems in upcoming updates and has not provided system issue notifications very well, if at all. They are pleasant to talk to but work from the basis of regardless the problem, we're only going to discuss issues if you call in. Review source Vendor Referred - Incentive Offered: This reviewer was invited by the software vendor to submit an honest review and offered a nominal incentive as a thank you. MK Morgan K. Sr. Analyst Insurance ### "Seeking Tool for Risk Management and Workflow (Rm & Cm Applications)" 5.0 Overall Rating 5.0 5.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 5.0 5.0 Likelihood to Recommend 10/10 October 8, 2018 The experience with Lockpath has been positive including their attentiveness and responsiveness to meet our needs with their tool. Pros Lockpath Keylight is highly configurable and easy to navigate from an administrative perspective with coaching from the Professional Services team. The speed of implementation is primarily based on the tool owner to provide documentation and dedicate time to understanding the system. The user-friendliness of the front end of the tool ultimately falls on the administrator as the system is pretty much a blank slate upon purchase. The Quickstart implementation structured our system’s foundation and the remainder of the configuration was able to be completed either by the Professional Service team or by an internal administrator of the system. The Professional Service and Support teams have been highly responsive to questions and enhancement requests for the system. Professional Service hours have been very useful in working through more advanced requirements and gaining a more robust training to the system. Cons As noted above, the Risk Keylight application is 100% configurable which means there is no direct out-of-the-box workflows or fields. This can be an advantage or disadvantage based on the needs of your company. If your company is able to detail specific requirements, the configuration of basic workflows is quick to implement. The Compliance Keylight application came with a few pre-built workflows and forms which has been helpful to quickly input data and see results in the system. Review source Non-incentivized review: any software user can leave a review for any product listed on our site. All submitted reviews are subject to our verification process prior to publication. RT Rick T. System Security Analyst ### "Robust GRC Management Tool" 5.0 Overall Rating 5.0 5.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 5.0 5.0 Likelihood to Recommend 8/10 June 8, 2018 Makes managing GRC tasks, exceptions, vendors, etc much MUCH more efficient. We have seen significant time savings by using this software. Pros This is a fully customizable solution to help meet GRC management needs. This has also been expanded into other areas, including assessments, asset reviews, documentation management/reviews, testing management, vendor management, and a host of other things. Cons The online doc is ok, but may need updating. We have also run into reporting limitations, and the software can struggle with graphic reporting if the number of records exceed some preset quantity. The other is very specific; when creating a new field and setting the character parameters, the parameters are permanent for the life of the field. For example, if a text field is set for 100 characters, but a year later, you find a need to allow for 500 characters, the existing field cannot be redefined. A new field needs to be created to allow for the expanded setting. So when you are trying to create a field and be cognizant of the space (i.e. limiting to 100 characters), you are limiting the future-growth of the data this field may manage. The same goes for the tolerances of the numeric fields. Once the parameters (number of spaces before and after a decimal point) are set, there is no changing the field. It must be replaced with a new field, rather than having an effective recalculation process. Review source Vendor Referred: This reviewer was invited by the software vendor to submit an honest review. CN Chris N. Security Administrator ### "Great Product For Regulatory Compliance " 4.0 Overall Rating 4.0 4.0 Ease of Use 4.0 4.0 Features 4.0 4.0 Customer Service 4.0 4.0 Likelihood to Recommend 0/10 June 7, 2018 Pros We like using Keylight because it allows us to keep track of all of and stay up to date with all of our policy and compliance documentation. The platform also holds people (performers) accountable and ensures due diligence with regards to their relevant tasks. Cons The roles can be a little confusing, when we set up users, it is sometimes a challenge to determine what access they need, especially for people in IT. Review source Vendor Referred: This reviewer was invited by the software vendor to submit an honest review. VL Verna L. Information Security Engineer ### "LockPath is flexible and customer support team very knowledgeable." 5.0 Overall Rating 5.0 5.0 Ease of Use 4.0 4.0 Features 5.0 5.0 Customer Service 5.0 5.0 Likelihood to Recommend 9/10 June 7, 2018 Pros Improvements of the tool with each upgrade makes it even more flexible for all users and skill levels. Cons I find that building out workflows involves too many steps and can be a bit cumbersome. Additionally, converting compliance documents to MS Word formats could be improved. Review source Vendor Referred: This reviewer was invited by the software vendor to submit an honest review. [View all Reviews](https://www.capterra.com/p/150187/Navex-IRM/reviews/) ## Top-rated software of 2026 ### Fill out the form and we'll send a list of the top-rated software based on real user reviews directly to your inbox.