---
description: Review of Continuum GRC Software: system overview, features, price and cost information. Get free demos and compare to similar programs on Software Advice New Zealand.
image: https://gdm-localsites-assets-gfprod.imgix.net/images/software_advice/og_logo-55146305bbe7b450bea05c18e9be9c9a.png
title: Continuum GRC | Reviews, Pricing & Demos - SoftwareAdvice NZ
---

Breadcrumb: [Home](/) > [Integrated Risk Management Software](/directory/4101/integrated-risk-management/software) > [Continuum GRC](/software/340557/continuum-grc)

# Continuum GRC

Canonical: https://www.softwareadvice.co.nz/software/340557/continuum-grc

Page: 1 / 2\
Next: [Next page](https://www.softwareadvice.co.nz/software/340557/continuum-grc?page=2)

> A comprehensive Governance, Risk \&amp; Compliance (GRC), and Risk Management SaaS solution in the world in 26 languages. Auto-mapped standards, automated documentation, real-time status, risk \&amp; maturity. Serving the enterprise to the start-up community. Continuum GRC is a software as a service (SaaS) product that is purpose build for users who perform audit \&amp; compliance assessments, risk assessment \&amp; risk management, governance \&amp; policy development, and all other manners of audits and assessments.&#10;&#10;A FedRAMP and StateRAMP Authorized risk management and assessment solution. When National Security, Cybersecurity, and your Organization's Competitive Advantage are at risk, don't trust your data or success to anything less.&#10;&#10;More integrations than any other solution connecting Continuum GRC up to THOUSANDS of critical business solutions.&#10;&#10;Hundreds of ready-made frameworks such as NIST 800-53. DoD SRG, CMMC, 800-171, 800-66, 800-30, FedRAMP, StateRAMP, CJIS, DFARS, HIPAA, ITRM, AICPA SOC 1, SOC 2, GDPR, ISO 27001, NERC CIP, EUCS, C5, PCI DSS, LADMF, and so many more.&#10;&#10;In addition to pre-configured questionnaires, assessment modules, and forms, the Continuum GRC ITAM SaaS application has creation tools that provide drag-n-drop easy custom creation for system administrators to construct their own assessment modules. Real-time reports on Compliance Status, Risk Scores, Maturity Scores, workflows, tasking records, evidence management, and historical performance help you stay proactive; not reactive.&#10;&#10;We replace existing tools, templates, and manual processes to support internal compliance and risk assessment requirements. The automation of Continuum GRC reduces manual labor, complexity of and between frameworks, produces reports, SSPs, POA\&amp;Ms, graphics, dashboards, and related outputs all sustained over the entire lifecycle of the program all within a single view with a unified source for governance, risk, and compliance that supercharges performance and eliminates complexity.
> 
> Verdict: Rated **4.5/5** by 26 users. Top-rated for **Likelihood to recommend**.

-----

## Quick Stats & Ratings

| Metric | Rating | Detail |
| **Overall** | **4.5/5** | 26 Reviews |
| Ease of Use | 4.5/5 | Based on overall reviews |
| Customer Support | 4.9/5 | Based on overall reviews |
| Value for Money | 4.8/5 | Based on overall reviews |
| Features | 4.5/5 | Based on overall reviews |
| Recommendation percentage | 90% | (9/10 Likelihood to recommend) |

## About the vendor

- **Company**: Continuum GRC

## Commercial Context

- **Starting Price**: US$5,800.00
- **Pricing model**: Usage Based (Free version available) (Free Trial)
- **Pricing Details**: Pricing is calculated based on 1) AWS or GovCloud hosting, 2) Admins, Examiners, and User accounts needed, and 3) What frameworks are needed.
- **Target Audience**: Self Employed, 2–10, 11–50, 51–200, 201–500, 501–1,000, 1,001–5,000, 5,001–10,000, 10,000+
- **Deployment & Platforms**: Cloud, SaaS, Web-based
- **Supported Languages**: Arabic, Bulgarian, Chinese, Danish, Dutch, English, Estonian, Finnish, French, German, Greek, Hungarian, Indonesian, Italian, Japanese, Norwegian, Polish, Portuguese, Romanian, Russian, Slovak, Spanish, Swedish, Traditional Chinese
- **Available Countries**: Afghanistan, Albania, Algeria, American Samoa, Andorra, Angola, Anguilla, Antigua & Barbuda, Argentina, Armenia, Aruba, Australia, Austria, Azerbaijan, Bahamas, Bahrain, Bangladesh, Barbados, Belarus, Belgium and 207 more

## Features

- API
- Activity Dashboard
- Activity Tracking
- Alerts/Notifications
- Approval Process Control
- Assessment Management
- Audit Management
- Audit Trail
- Compliance Management
- Configurable Workflow
- Corrective and Preventive Actions (CAPA)
- Customisable Reports
- Dashboard
- Dashboard Creation
- Data Import/Export
- Data Visualisation
- Document Management
- Document Storage
- Enterprise Risk Management
- Environmental Compliance

## Support Options

- Email/Help Desk
- FAQs/Forum
- Knowledge Base
- Phone Support
- 24/7 (Live rep)
- Chat

## Category

- [Integrated Risk Management Software](https://www.softwareadvice.co.nz/directory/4101/integrated-risk-management/software)

## Related Categories

- [Integrated Risk Management Software](https://www.softwareadvice.co.nz/directory/4101/integrated-risk-management/software)
- [Governance, Risk and Compliance (GRC)](https://www.softwareadvice.co.nz/directory/3843/grc/software)
- [Risk Management Software](https://www.softwareadvice.co.nz/directory/4423/risk-management/software)

## Alternatives

1. [Scrut Automation](https://www.softwareadvice.co.nz/software/514978/Scrut) — 4.9/5 (139 reviews)
2. [Hyperproof](https://www.softwareadvice.co.nz/software/185722/hyperproof) — 4.8/5 (116 reviews)
3. [Okta](https://www.softwareadvice.co.nz/software/419181/okta) — 4.7/5 (944 reviews)
4. [AuditBoard](https://www.softwareadvice.co.nz/software/41287/soxhub) — 4.7/5 (414 reviews)
5. [Onspring](https://www.softwareadvice.co.nz/software/165475/onspring) — 4.8/5 (105 reviews)

## Reviews

### "Streamlining IT Audits with Precision and Flexibility" — 5.0/5

> **Adam** | *12 March 2024* | Financial Services | Recommendation rating: 10.0/10
> 
> **Pros**: Streamlined Audit Workflow: One of the standout features of this platform is its ability to streamline the entire audit process. From planning to execution and reporting, every step feels intuitive and efficient. The platform's user-friendly interface and logical workflow design have saved me countless hours, allowing me to focus more on analysis and less on administrative tasks.&#10;&#10;Simplified Multi-Audit Environments: Managing evidentiary documents across multiple audits has always been a cumbersome process. This platform's shared evidentiary management system is a game-changer. It allows for easy access and organization of audit evidence, reducing redundancy and improving accuracy. This feature alone has enhanced my productivity and significantly reduced the potential for errors.
> 
> **Cons**: The MFA entry box doesn't take the Enter keystroke for login, you have to click the button.  That's the thing I like least.
> 
> This is a robust tool that stands out for its ability to streamline audit workflows, simplify management in multi-audit environments, and adapt to user feedback. It has been instrumental in enhancing my productivity and the overall quality of my audit processes. I highly recommend it to any professional looking for an effective solution to manage their audit workflows more efficiently.

-----

### "Review by IH 2025" — 4.0/5

> **Isabelle** | *16 June 2025* | Information Technology & Services | Recommendation rating: 8.0/10
> 
> **Pros**: the new version is user friendly. Easy to understand and use. navigation between controls is made easy
> 
> **Cons**: The bugs at the beginning (uploaded documents not appearing, no possibility to upload a file instead of individual documents)&#10;The lack of possibility of 'full view' and extraction of all controls as written by us for traceability and follow-up purposes&#10;Being obliged to upload over and aver again the same documents / evidence under different controls
> 
> Good. Enables easier collaboration between the stakeholders. correspondence between SOC2 and ISO27 to be confirmed during next audit cycle.

-----

### "Successful CMMC Certification, But Significant Usability Improvements Needed" — 3.0/5

> **Dillon** | *24 July 2026* | Information Technology & Services | Recommendation rating: 4.0/10
> 
> **Pros**: Continuum GRC provided a structured framework for working through a complex CMMC Level 2 assessment and helped centralize controls, evidence, and assessment activities in a single platform. The ability to map documentation to controls, track progress across assessment domains, and maintain a repository of supporting artifacts was valuable during the early stages of our compliance effort. For organizations beginning a CMMC assessment, the platform can provide useful structure and visibility into requirements, documentation needs, and overall assessment progression.
> 
> **Cons**: Several features reduced efficiency during our assessment effort and ultimately limited our reliance on the platform as the engagement matured.&#10;&#10;The AI functionality was the most disappointing aspect of the platform. Responses were frequently inaccurate, lacked meaningful context, and in many cases appeared unrelated to the controls or questions being addressed. After attempting to use the feature across multiple controls, we found the recommendations unreliable and ultimately stopped using it.&#10;&#10;Assessment previews do not display all question content, specifically all \[a\] controls, unless users enter edit mode. This created unnecessary navigation and made reviews and edits more cumbersome than necessary.&#10;&#10;Evidence management also became difficult as the assessment progressed. Many controls require the same supporting documentation, yet evidence often had to be uploaded or referenced repeatedly, creating duplicate entries and unnecessary file clutter. Over time, this made the platform increasingly difficult to navigate and maintain.&#10;&#10;Spreadsheet previews were also limited. Excel files often had to be downloaded and opened locally to properly review content, and secondary worksheets were not easily viewable within the platform.&#10;&#10;In addition, the platform's completion and readiness percentages often felt misleading. While score increases provided a visible measure of platform activity, they did not consistently reflect actual assessment readiness. We frequently found ourselves performing substantial revisions and documentation improvements despite relatively high completion percentages, making it difficult to determine how prepared we truly were for assessment.&#10;&#10;Finally, module terminology and workflow organization can be confusing. For example, control implementation statements and other pre-assessment activities are entered within the "Executive Summary" module rather than the more intuitively named "Pre-Assessment" module, making navigation less intuitive than expected.
> 
> Our overall experience with Continuum GRC was mixed. The platform provided structure for organizing assessment activities and tracking compliance requirements throughout our CMMC Level 2 certification effort. However, several core features limited its effectiveness during day-to-day assessment work.&#10;&#10;As the assessment matured, we found ourselves relying increasingly on processes outside the platform for developing, refining, and reviewing control documentation. Features such as AI-assisted guidance, evidence management, document previews, and assessment scoring often fell short of expectations, reducing their practical value during the engagement.&#10;&#10;While the platform helped establish an initial framework and ultimately supported a successful CMMC Level 2 certification outcome, significant improvements in usability, workflow efficiency, feature maturity, and evidence management would improve its effectiveness for organizations managing large and complex compliance initiatives.&#10;&#10;Thank you\!

-----

### "Align Continuum Review" — 4.0/5

> **Erika** | *19 May 2026* | Airlines/Aviation | Recommendation rating: 8.0/10
> 
> **Pros**: We liked how interactive the platform was, and it showed the progress in a very visual manner. We especially like that if we had any doubts, we could add a note, and it would get sent to the team and vice versa.
> 
> **Cons**: One team member had a problem opening the platform, it could have been a loading issue but besides that it worked fine.
> 
> We liked the platform as it was easy to use and met all the requirements needed from us to clearly paste our information and view notes from Lazarus.

-----

### "Major benefit in our pursuit of State(Gov)RAMP certification" — 5.0/5

> **Jon** | *23 April 2025* | Computer Software | Recommendation rating: 9.0/10
> 
> **Pros**: Intuitive and well organized tool, was a huge help in our efforts to become StateRAMP (GovRAMP) certified.  Provided training was comprehensive and we were off and running.
> 
> **Cons**: Initial performance wasn't great but was addressed shortly after we went live.  No major issues were experienced.
> 
> Found the team at Continuum GRC to be incredibly easy to work with and very responsive when we had questions or needed custom reporting.

-----

Page: 1 / 2\
Next: [Next page](https://www.softwareadvice.co.nz/software/340557/continuum-grc?page=2)

## Links

- [View on SoftwareAdvice](https://www.softwareadvice.co.nz/software/340557/continuum-grc)

## This page is available in the following languages

| Locale | URL |
| en | <https://www.softwareadvice.com/risk-management/continuum-grc-profile/> |
| en-AU | <https://www.softwareadvice.com.au/software/340557/continuum-grc> |
| en-GB | <https://www.softwareadvice.co.uk/software/340557/continuum-grc> |
| en-IE | <https://www.softwareadvice.ie/software/340557/continuum-grc> |
| en-NZ | <https://www.softwareadvice.co.nz/software/340557/continuum-grc> |

-----

## Structured Data

<script type="application/ld+json">
  {"@context":"https://schema.org","@graph":[{"name":null,"address":{"@type":"PostalAddress","addressLocality":null,"addressRegion":null,"postalCode":null,"streetAddress":null},"description":"Software Advice helps businesses in New Zealand find the best software. Compare software options and learn more from our research and user reviews.","email":"info@softwareadvice.co.nz","url":"https://www.softwareadvice.co.nz/","logo":"https://dm-localsites-assets-prod.imgix.net/images/software_advice/logo-white-d2cfd05bdd863947d19a4d1b9567dde8.svg","@id":"https://www.softwareadvice.co.nz/#organization","@type":"Organization","parentOrganization":"G2.com, Inc.","sameAs":[]},{"name":"Continuum GRC","description":"A comprehensive Governance, Risk &amp; Compliance (GRC), and Risk Management SaaS solution in the world in 26 languages. Auto-mapped standards, automated documentation, real-time status, risk &amp; maturity. Serving the enterprise to the start-up community. Continuum GRC is a software as a service (SaaS) product that is purpose build for users who perform audit &amp; compliance assessments, risk assessment &amp; risk management, governance &amp; policy development, and all other manners of audits and assessments.\n\nA FedRAMP and StateRAMP Authorized risk management and assessment solution. When National Security, Cybersecurity, and your Organization's Competitive Advantage are at risk, don't trust your data or success to anything less.\n\nMore integrations than any other solution connecting Continuum GRC up to THOUSANDS of critical business solutions.\n\nHundreds of ready-made frameworks such as NIST 800-53. DoD SRG, CMMC, 800-171, 800-66, 800-30, FedRAMP, StateRAMP, CJIS, DFARS, HIPAA, ITRM, AICPA SOC 1, SOC 2, GDPR, ISO 27001, NERC CIP, EUCS, C5, PCI DSS, LADMF, and so many more.\n\nIn addition to pre-configured questionnaires, assessment modules, and forms, the Continuum GRC ITAM SaaS application has creation tools that provide drag-n-drop easy custom creation for system administrators to construct their own assessment modules. Real-time reports on Compliance Status, Risk Scores, Maturity Scores, workflows, tasking records, evidence management, and historical performance help you stay proactive; not reactive.\n\nWe replace existing tools, templates, and manual processes to support internal compliance and risk assessment requirements. The automation of Continuum GRC reduces manual labor, complexity of and between frameworks, produces reports, SSPs, POA&amp;Ms, graphics, dashboards, and related outputs all sustained over the entire lifecycle of the program all within a single view with a unified source for governance, risk, and compliance that supercharges performance and eliminates complexity.","image":"https://gdm-catalog-fmapi-prod.imgix.net/ProductScreenshot/424da53b-3774-48b8-a5e3-b854d30c38c8.png","url":"https://www.softwareadvice.co.nz/software/340557/continuum-grc","@id":"https://www.softwareadvice.co.nz/software/340557/continuum-grc#software","@type":"SoftwareApplication","publisher":{"@id":"https://www.softwareadvice.co.nz/#organization"},"applicationCategory":"BusinessApplication","aggregateRating":{"@type":"AggregateRating","ratingValue":4.5,"bestRating":5,"ratingCount":26},"offers":{"price":"5800","@type":"Offer","priceCurrency":"USD"},"operatingSystem":"Cloud"},{"@id":"https://www.softwareadvice.co.nz/software/340557/continuum-grc#breadcrumblist","@type":"BreadcrumbList","itemListElement":[{"name":"Home","position":1,"item":"/","@type":"ListItem"},{"name":"Integrated Risk Management Software","position":2,"item":"/directory/4101/integrated-risk-management/software","@type":"ListItem"},{"name":"Continuum GRC","position":3,"item":"/software/340557/continuum-grc","@type":"ListItem"}]}]}
</script>
