Panorays review (2026): features, pros and cons, and what to check before you buy
Panorays is a third-party cyber risk platform that combines automated questionnaires with external attack surface scoring and ongoing monitoring.
Our take for buyers
Panorays is a third-party cyber risk platform that combines automated questionnaires with external attack surface assessment and ongoing monitoring. It covers a lifecycle from inherent risk assessment to remediation and monitoring in one product. G2 shows a 4.3 rating from 52 reviews, and users call it easy to use with an intuitive interface. That makes it a security tool first, so judge it against your risk team's needs.
Shortlist it if you are a security team monitoring a vendor base with outside-in cyber scoring, in North America, the UK or the EU. It is strongest in cyber posture and is not a general vendor management or contract tool. Reviewers say reporting could be more customizable, which matters if you need board-ready output.
Pros
- Easy to use, intuitive interface.
Cons
- Reporting could be more customizable.
- Price high for smaller companies.
- Best for
- Security teams monitoring a vendor base with outside-in cyber scoring.
- Starting price
- Contact sales
- G2 rating
- 4.3 (52 reviews)
What is Panorays?
Panorays is a third-party cyber risk platform that combines automated questionnaires with external attack surface scoring and ongoing monitoring. Security teams in North America, the UK and the EU can pair automated questionnaires with outside-in attack surface scoring, with an inherent risk check up front. Reviewers like the clear interface and ask for more flexible reports. Cost is the common complaint from smaller firms. A trial is listed on G2. Panorays was founded in 2016 and is based in New York, US and Israel.
Category: Vendor Risk Management Software
Panorays key features
| Criterion | What we found |
|---|---|
| Questionnaires / assessments | Automated questionnaires. |
| Continuous monitoring | External attack surface assessment and ongoing monitoring. |
| Vendor tiering | Inherent risk assessment up front (per Globes) |
| Remediation workflow | Covers remediation (per Globes) |
| Pricing / add-on | Custom quote; free trial listed on G2. |
Panorays plans and pricing
Panorays does not publish a price list; pricing is quoted on request.
G2 lists a free trial and average discount of 18% from two reviews. Capterra shows $2500 per user per month, which looks unreliable and is not used as the starting price.
Who should shortlist Panorays
A strong fit for
- Security teams monitoring a vendor base with outside-in cyber scoring.
- Enterprise and mid-market buyers in North America, UK and EU.
A weak fit for
- Small companies sensitive to price (G2 reviewers flag cost)
- Teams wanting heavily customizable reporting.
Panorays alternatives
- UpGuardMid-size security teams that want published entry pricing for vendor risk.
SecurityScorecardSecurity teams that want outside-in continuous monitoring of many vendors.
BitsightTeams that want outside-in security ratings to monitor many vendors continuously.
WhisticSecurity and GRC teams that run questionnaire-based vendor assessments.
Mitratech PrevalentMid-market and enterprise risk teams running structured vendor assessment programs.
VenminderBanks and credit unions needing examiner-ready vendor due diligence.
Contract and buying terms
- Starting price
- Contact sales.
- Pricing model
- Custom.
- Free plan or trial
- Free trial.
What to test in a Panorays demo or trial
Run a pilot on a real slice of your vendor base, ideally ten vendors of different risk levels. Check how the inherent risk assessment tiers them, how automated questionnaires are sent and chased, and how external attack surface findings tie into remediation tasks. Reviewers say reporting could be more customizable, so build the exact report your CISO or auditor expects and see if the tool produces it. Ask how monitoring alerts are tuned, so your team is not flooded, and what free trial scope G2 describes.
Questions to ask Panorays before you sign
These are the points Panorays's public pages leave open. Get the answers in writing before procurement signs off.
- Which plan includes SAML SSO, and what does it cost for our seat count?
- Is SCIM provisioning included, or a paid add-on?
- Which plan includes audit logs, and how long are they kept?
- Where is our data stored, and can we choose the region?
- Can we sign your standard DPA without changes?
- Is there a monthly option, and what are the cancellation and renewal terms?
- What will the price be at renewal, and is the increase capped?
Things to know before a demo
- Covers the lifecycle from inherent risk to remediation and monitoring in one platform.
- No public price; Capterra shows an implausible per-user figure, so ignore it.
- Funding totals conflict widely across sources, so treat size claims carefully.
- Strongest in cyber posture; not a general vendor management or contract tool.
Panorays FAQ
What is Panorays used for?
Security teams in North America, the UK and the EU can pair automated questionnaires with outside-in attack surface scoring, with an inherent risk check up front. Reviewers like the clear interface and ask for more flexible reports. Cost is the common complaint from smaller firms. A trial is listed on G2. It suits security teams monitoring a vendor base with outside-in cyber scoring.
Who is Panorays best for?
Security teams that monitor a vendor base with outside-in cyber scoring, mainly enterprise and mid-market buyers in North America, the UK and the EU. It is less suited to small companies sensitive to price.
Does Panorays cover remediation as well as scoring?
It is described as covering the lifecycle from inherent risk assessment to remediation and ongoing monitoring. Ask for a demo of the remediation workflow with your own vendors.
Does Panorays publish SSO and DPA details?
No. SSO, SCIM, audit logs, data residency and DPA terms are not published, so request them in writing during evaluation.
Vendor profile
- Founded
- 2016.
- Headquarters
- New York, US and Israel.
- Funding or owner
- Series B $42M (Sept 2021); Series C reported at $37.7M (2023, StartupIM); about $62M to $99.7M total depending on source.
Sources
Every fact on this page comes from Panorays's own pricing, product or documentation pages, G2 and company records, checked on October 24, 2026. Unknown values are left out instead of estimated.