IRM Navigator™ Research
IRM Navigator™ Vendor Compass
Vendor placements across the five IRM market segments. The 2025–2026 research series produced 77 placements across 37 technology and services providers, evaluated on Solution Coverage and Level of Integration.
The Three Placement Tiers
Integrator
Vendors that unify broad segment functionality with strong IRM integration. Best fit for organizations at the Extended stage of IRM maturity, where cross-domain evidence and consistent enterprise decision routines are required.
Accelerator
Vendors with broad or deep segment capabilities that help enterprises move from Coordinated to Embedded maturity. They offer strong coverage and integration potential but may require configuration or partner ecosystems for full IRM enablement.
Pace Setter
Vendors offering targeted capabilities, often aligned to mid-market needs or specific enterprise use cases. They can accelerate discrete outcomes and serve as stepping stones toward more comprehensive platforms.
Placements at a Glance
| Vendor | Type | Segments | GRC2025 | ERM2025 | ORM2025 | TRM2026 | RMC2025 |
|---|---|---|---|---|---|---|---|
| Archer ★ | Technology | 4 | I | I | A | I | · |
| IBM OpenPages | Technology | 4 | A | A | I | A | · |
| LogicGate | Technology | 4 | P | P | A | P | · |
| MetricStream | Technology | 4 | A | A | A | A | · |
| Riskonnect ★ | Technology | 4 | I | A | I | I | · |
| ServiceNow ★ | Technology | 4 | A | A | A | I | · |
| Corporater | Technology | 3 | A | A | · | P | · |
| Diligent | Technology | 3 | A | I | · | P | · |
| LogicManager | Technology | 3 | · | A | A | P | · |
| Mitratech | Technology | 3 | · | A | I | A | · |
| NAVEX | Technology | 3 | A | · | A | P | · |
| Optro Rebranded from AuditBoard, March 2026 | Technology | 3 | I | A | · | A | · |
| SAI360 | Technology | 3 | A | · | A | P | · |
| Fusion Risk Management | Technology | 2 | · | · | P | A | · |
| OneTrust ★ | Technology | 2 | I | · | · | A | · |
| Onspring | Technology | 2 | P | · | · | P | · |
| Origami Risk | Technology | 2 | P | · | P | · | · |
| ProcessUnity | Technology | 2 | P | · | P | · | · |
| Resolver | Technology | 2 | P | P | · | · | · |
| Safe Security | Technology | 2 | · | · | A | P | · |
| Workiva | Technology | 2 | A | P | · | · | · |
| CyberSaint | Technology | 1 | · | · | · | P | · |
| Deloitte | Services | 1 | · | · | · | · | I |
| dss+ | Services | 1 | · | · | · | · | A |
| EY ★ | Services | 1 | · | · | · | · | I |
| FTI Consulting | Services | 1 | · | · | · | · | A |
| Grant Thornton | Services | 1 | · | · | · | · | P |
| Hyperproof | Technology | 1 | · | · | A | · | · |
| J.S. Held | Services | 1 | · | · | · | · | P |
| KPMG ★ | Services | 1 | · | · | · | · | I |
| Microsoft | Technology | 1 | · | · | · | A | · |
| Ncontracts | Technology | 1 | · | P | · | · | · |
| Protiviti | Services | 1 | · | · | · | · | A |
| PwC | Services | 1 | · | · | · | · | I |
| RSM | Services | 1 | · | · | · | · | P |
| Sphera | Technology | 1 | · | · | P | · | · |
| Wolters Kluwer Enablon and TeamMate | Technology | 1 | · | · | A | · | · |
Placements by Segment
Governance, Risk and Compliance
Integrators: Archer, OneTrust, Optro, and Riskonnect.
Accelerators: Corporater, Diligent, IBM OpenPages, MetricStream, NAVEX, SAI360, ServiceNow, and Workiva.
Pace Setters: LogicGate, Onspring, Origami Risk, ProcessUnity, and Resolver.
Enterprise Risk Management
Integrators: Archer and Diligent.
Accelerators: Corporater, IBM OpenPages, LogicManager, MetricStream, Mitratech, Optro, Riskonnect, and ServiceNow.
Pace Setters: LogicGate, Ncontracts, Resolver, and Workiva.
Operational Risk Management
Integrators: IBM OpenPages, Mitratech, and Riskonnect.
Accelerators: Archer, Hyperproof, LogicGate, LogicManager, MetricStream, NAVEX, Safe Security, SAI360, ServiceNow, and Wolters Kluwer.
Pace Setters: Fusion Risk Management, Origami Risk, ProcessUnity, and Sphera.
Technology Risk Management
Integrators: Archer, Riskonnect, and ServiceNow.
Accelerators: Fusion Risk Management, IBM OpenPages, MetricStream, Microsoft, Mitratech, OneTrust, and Optro.
Pace Setters: Corporater, CyberSaint, Diligent, LogicGate, LogicManager, NAVEX, Onspring, Safe Security, and SAI360.
Risk Management Consulting
Integrators: Deloitte, EY, KPMG, and PwC.
Accelerators: dss+, FTI Consulting, and Protiviti.
Pace Setters: Grant Thornton, J.S. Held, and RSM.
Cross-Segment Coverage
Breadth of placement is itself a signal of integration capability. Because the RMC segment evaluates services providers rather than technology platforms, four segments is the maximum attainable for any technology vendor in the 2025–2026 series. Riskonnect holds the strongest profile, placing as an Integrator in three of its four segments. Archer places as an Integrator in three segments and an Accelerator in the fourth. ServiceNow places as an Integrator in TRM and an Accelerator across GRC, ERM, and ORM.
Archer, IBM OpenPages, LogicGate, MetricStream, Riskonnect, and ServiceNow
Corporater, Diligent, LogicManager, Mitratech, NAVEX, Optro, and SAI360
Fusion Risk Management, OneTrust, Onspring, Origami Risk, ProcessUnity, Resolver, Safe Security, and Workiva
CyberSaint, Hyperproof, Microsoft, Ncontracts, Sphera, and Wolters Kluwer
Source and scope. Placements are drawn from the 2025–2026 IRM Navigator™ Vendor Compass series: GRC (v1.1), ERM (v1.0), ORM (v1.1), TRM (v1.0), and RMC (v1.3). The 2025-2026 IRM50 Market Leader designation reflects the 2025 IRM Navigator™ Viewpoint Report. Six vendors qualified: Archer, EY, KPMG, OneTrust, Riskonnect, and ServiceNow. Placement reflects Wheelhouse Advisors' independent research as of each report's publication date. Vendor self-reporting alone does not qualify as placement evidence. Absence from a segment indicates the vendor was not evaluated for that segment in the current research cycle.
IRM Knowledge Hub: what is Integrated Risk Management Full reports and placement rationale