IBM OpenPages vs RSA Archer comparison

IBM and RSA are both solutions in the GRC category. IBM is ranked #7 with an average rating of 8.0, while RSA is ranked #1 with an average rating of 7.5. IBM holds a 2.2% mindshare in G, compared to RSA’s 5.5% mindshare. Additionally, 71% of IBM users are willing to recommend the solution, compared to 92% of RSA users who would recommend it.

IBM OpenPages

Read 9 IBM OpenPages reviews

2,628 Views
2,391 Comparison Views

71% willing to recommend

RSA Archer

Read 42 RSA Archer reviews

7,279 Views
6,333 Comparison Views

92% willing to recommend

IBM OpenPages

RSA Archer

Comparison Buyer's Guide

Download the report

Executive SummaryUpdated on Feb 4, 2025

RSA Archer and IBM OpenPages compete in the comprehensive GRC tools category. RSA Archer might have the upper hand due to its adaptability and strong community support, contributing to higher user satisfaction.

Features: RSA Archer is robustly recognized for its advanced workflow, intuitive configuration, and automated notifications. It stands out in asset, risk, and vendor management. Users praise its dashboards, reports, and community support. IBM OpenPages highlights out-of-the-box functionality and AI integration, flexible reporting tools, and a strong workflow engine.

Room for Improvement: RSA Archer faces challenges like outdated technologies and API integration restrictions. Users call for better error reporting, enhanced browser compatibility, and improved data feed reliability. IBM OpenPages requires improvements in connecting external data sources, enhancing the reporting tool's self-service ability, and better documentation and integration capabilities in its relationship model.

Ease of Deployment and Customer Service: RSA Archer offers deployment flexibility across on-premise, hybrid, and cloud environments. Users report slow technical support and a need for better first-level support responsiveness. IBM OpenPages offers public and hybrid cloud deployment. Users note delays in technical support but find overall responsiveness satisfactory once engaged. Both benefit from active support, with RSA Archer having a slight edge due to community-driven feature proposals.

Pricing and ROI: RSA Archer is considered expensive for small to medium businesses despite its licensing transparency. It offers ROI through time savings and streamlined operations. IBM OpenPages has a similar pricing point, considered high, yet offers a high ROI through quick implementation and efficient data centralization. Both tools, if aligned with organizational needs, provide substantial returns through risk mitigation and enhanced governance.

To learn more, read our detailed IBM OpenPages vs. RSA Archer Report (Updated: June 2026).

Buyer's Guide

IBM OpenPages vs. RSA Archer

June 2026

Download the complete report

Helped 900,747 peers since 2012

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Categories and Ranking

IBM OpenPages

Ranking in GRC

7th

Ranking in IT Governance

4th

Average Rating

7.2

Reviews Sentiment

7.2

Number of Reviews

Ranking in other categories

No ranking in other categories

RSA Archer

Ranking in GRC

1st

Ranking in IT Governance

1st

Average Rating

8.0

Reviews Sentiment

6.7

Number of Reviews

Ranking in other categories

IT Vendor Risk Management (5th)

Mindshare comparison

As of June 2026, in the GRC category, the mindshare of IBM OpenPages is 2.2%, down from 6.0% compared to the previous year. The mindshare of RSA Archer is 5.5%, down from 17.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.

GRC Mindshare Distribution
Product	Mindshare (%)
RSA Archer	5.5%
IBM OpenPages	2.2%
Other	92.3%

GRC

Featured Reviews

Gabriele Meneguzzi

GRC Practice Leader at Stratos Analytics

Have improved operational control and simplified internal workflows through a clear user interface

The most useful features in IBM OpenPages are the workflow features and front-end. The workflow feature in IBM OpenPages is very flexible, easy to configure, and can help design every kind of process, while the front-end is very useful, clear, simple, and dynamic. The benefit of a centralized platform in risk management, such as IBM OpenPages, is that it allows sharing information and guarantees a central framework of risk and control. The dashboards in IBM OpenPages help with monitoring processes for different users and profiles, and we use the dashboard extensively to show the state of different processes to control them. IBM OpenPages integrates effectively with other tools and existing infrastructure for my customers as we integrate other tools, using APIs to match different information, though some other tools may better support integration. IBM offers Connect, an add-on for integration, but we do not use it, relying solely on API. The reporting tools in IBM OpenPages have very strong potential because they are linked with Cognos IBM, a business intelligence tool, allowing for very good and complex reports, though creating these reports requires skills in business intelligence to get the most out of IBM OpenPages.

Read full review

Celda Juby

Information Security Specialist at Dubai Health Authority

Centralized management strengthens compliance with good look and feel

From my perspective as a customer and end user, Archer has an impressive look and feel, but the most adaptive feature is its ease of configuration which helps to enhance our process according to our maturity. It's more about our organization getting centralized with an integrated approach that focuses on risk governance and compliance. When can provide a detailed dashboards to management with the details of risks from top-down or bottom-up prioritizing actions based on its criticality or necessity. This allows us to show end users and management where the issues lie and effectively demonstrate accountability and visibility in compliance.

Read full review

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:

Pros

"The content, reporting, and workflow features stand out as the most valuable aspects."

"The most useful features in IBM OpenPages are the workflow features and front-end, as noted by Ian Francis, an IBM expert lab, with the workflow feature being very flexible, easy to configure, and able to help design every kind of process, while the front-end is very useful, clear, simple, and dynamic."

"With OpenPages, the risks and controls are registered and monitored continuously."

"Everything about IBM OpenPages is valuable, particularly when compared to other solutions in the market like MetricStream, from which we switched due to its feasibility, user-friendliness, and performance."

"The ability to keep a record of internal incidents in the company, and also the monitoring of Key Indicators."

"IBM OpenPages saves time in my work as a developer."

"The most valuable features are the workflow engine, calculations, and security rules."

"IBM OpenPages provides time savings in recording risk management components."

More IBM OpenPages pros

"Its ROI is quite high when you look at how long it takes for people to input stuff for compliance risk, vulnerability management, and threat management."

"Archer seamlessly integrates data systems without requiring additional software."

"This solution helped us with the centralization of our governance data, so we could house all of our controls in one place. We could use that central repository of all our controls to build our risk management strategy and our policy and governance. So we could use controls as a central library and build policy, and then build risk management around it."

"Its user interface is pretty neat, and there is flexibility in generating the data. You can customize reports at any level. You can directly get reports in Tableau format. If you want to generate statistical data, you can create reports with graphs. There is an adequate amount of flexibility for changing the format, the type of graphs, etc."

"RSA Archer's best features are advanced workflow, reports, dashboards, and notifications."

"Reporting is excellent for all types of aggregators, as well as for different types of integrators."

"The Advance Workflow feature simplifies things."

"Our clients are using RSA Archer to automate their manual processes and activies to avoid manual intervention and have a clear visibility to leadership."

More RSA Archer pros

Cons

"Pricing! It's very expensive just for the licenses."

"IBM OpenPages could improve by adding more conditions to workflows, as some existing conditions might not work and can produce errors."

"IBM needs to work on pricing for organizations with around 100 users, as the licensing model is not competitive enough for SMEs."

"IBM OpenPages needs improvement in its UI. Currently, it is difficult to see the relationships (associations/parents) between all items unless you click on the item itself."

"I believe there's room for improvement in establishing connections with external information."

"It would be useful to have more out-of-the-box functionality, especially triggers and calculations."

"The reporting tools in IBM OpenPages have very strong potential because they are linked with Cognos IBM, a business intelligence tool, allowing for very good and complex reports, though creating these reports requires skills in business intelligence to get the most out of IBM OpenPages."

"Some self-relationships are not available in OpenPages' relationship model."

"It's resource-hungry, that's the best way of putting it."

"A remaining area for improvement is integration. There should be built-in integration mechanisms, for example, for organizations switching from platforms like ServiceNow to Archer, instead of custom integrations for each client."

"The tech support team's turnaround time is often slow."

"RSA Archer somehow lags behind in the user interface. Additionally, the reporting capability of Archer should be improved."

"Other tools, specifically designed for audit management have a better GUI than Archer."

"There is no inbuilt alert in Archer to let us know that a data feed has failed or did not run for different reasons. So, we don't even get to know that a feed has not run until somebody reports it to us. This has been a problem all the time. Data feeds have always been a big headache for us because there is no feature to let us know if a feed has not run or has failed. If Archer had a feature to send us an email notification when a feed has failed, it would've been very helpful. This is the reason why our users are slowly moving away to another platform. Some of the modules that I have been managing are being moved to ServiceNow. Next year, a lot of our modules will be moved from RSA Archer to ServiceNow, and the data feed issue has been one of the main reasons."

"The user interface needs work. There are many small text boxes, like credit card size's boxes, where we need to input a lot of text. You can't see what you're typing beyond the tiny window, so you have to scroll or type elsewhere and copy-paste it. It's very inconvenient."

"In terms of what can be improved, our client always says their user experience, IU/UX in RSA Archer. They found it is not as user friendly as other tools."

More RSA Archer cons

Pricing and Cost Advice

Information not available

"The solution is not at all a cheap product."

"I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."

"The license is costly for the solution, but the remaining set up and maintenance is quite cheaper."

"The solution's price should be reduced. You only have to pay the license and there are no additional fees."

"At the higher end of the price scale, but provides better, more accessible functionality and customization than cheaper products."

"RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."

"The price of RSA Archer is good. The price isn't too high considering it is a leading tool in the market."

"It is not expensive. It is reasonable. We only pay for the licensing."

More RSA Archer pricing and cost advice

See which vendors are best for you

Use our free recommendation engine to learn which GRC solutions are best for your needs.

See recommendations

900,747 professionals have used our research since 2012.

Top Industries

By visitors reading reviews

Financial Services Firm

23%

Manufacturing Company

10%

Comms Service Provider

Outsourcing Company

Financial Services Firm

18%

Insurance Company

11%

Manufacturing Company

Construction Company

Company Size

By reviewers

Large Enterprise

Midsize Enterprise

Small Business

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	1

By reviewers
Company Size	Count
Small Business	9
Midsize Enterprise	6
Large Enterprise	25

Questions from the Community

What needs improvement with IBM OpenPages?

There is nothing in particular that needs improvement in IBM OpenPages, although reporting could be improved to make it easier to create reports.

See all answers

What is your primary use case for IBM OpenPages?

My customers' main use cases for IBM OpenPages include ICT risk, operational risk management, and regulatory and compliance management.

See all answers

What advice do you have for others considering IBM OpenPages?

For those planning to use IBM OpenPages, I recommend defining exactly what you want and understanding how IBM OpenPages can help you before starting to use it. I rate IBM OpenPages a nine out of ten.

See all answers

What needs improvement with RSA Archer?

While it provides benefits in terms of security, the pricing is a bit higher than customers typically expect. It would be helpful if RSA Archer had the capability for two-way integration because, i...

See all answers

What is your primary use case for RSA Archer?

Regarding the compliance, risk, and governance tools, I am comfortable discussing the tools in the GRC category. The specific module from ServiceNow is the ServiceNow Compliance, Risk, and Governan...

See all answers

What advice do you have for others considering RSA Archer?

I have been in touch with about three companies who use RSA Archer actively in the compliance area. These companies use RSA Archer for nearly all purposes, including governance, internal risk, and ...

See all answers

Comparisons

MetricStream vs IBM OpenPages

Compared 13% of the time

ConvergePoint Policy Management Software vs IBM OpenPages

Compared 5% of the time

ACL Analytics vs IBM OpenPages

Compared 4% of the time

Formalize vs IBM OpenPages

Compared 4% of the time

ARIS Risk and Compliance Manager vs IBM OpenPages

Compared 4% of the time

More IBM OpenPages Competitors

MetricStream vs RSA Archer

Compared 6% of the time

OneTrust GRC vs RSA Archer

Compared 5% of the time

AuditBoard vs RSA Archer

Compared 3% of the time

LogicManager vs RSA Archer

Compared 3% of the time

Diligent One Platform (formerly Highbond) vs RSA Archer

Compared 3% of the time

More RSA Archer Competitors

Product Reports

Buyer's Guide

GRC

May 2026

Download IBM OpenPages product report

Buyer's Guide

RSA Archer

June 2026

Download RSA Archer product report

Also Known As

OpenPages

Archer

Overview

IBM OpenPages provides a robust platform for reporting, content management, and workflows. Its integration with Cognos supports advanced reporting alongside enhanced risk management, compliance, and workflow capabilities catering to complex operational needs.

IBM OpenPages stands out as a comprehensive platform that integrates rich reporting and risk management features. Cognos integration allows access to standard reports, charts, and dashboards, enhancing analytic capabilities. Valuable functionalities include compliance support, workflow flexibility, and a user-centric front-end experience. Its centralized risk management framework and effective information-sharing capabilities make it highly reliable. Strong data extraction and API integrations further its utility, particularly appreciated in industries for operational risk management and policy enforcement. However, areas such as integration with external data systems, navigation improvements, and more competitive pricing for smaller enterprises offer scope for enhancement.

What are the key features of IBM OpenPages?

Reporting: Offers insightful standard reports, charts, and dashboards.
Risk Management: Centralized framework for effective risk sharing.
Content Management: Integrates with workflows for comprehensive management.
Compliance Support: Robust functionalities that support compliance needs.
Workflow Flexibility: Adaptable workflows catering to varied needs.
User-Friendly Front-End: Designed for ease of use and effectiveness.

What benefits should users look for in reviews?

Centralized Risk Management: Effective sharing and management of risk information.
Robust Data Extraction: Enhanced data handling through strong extraction capabilities.
API Integrations: Supports diverse functionalities through API connections.
Performance: Often outperforming alternatives like MetricStream.
Operational Utility: Widely used for operational risk management.

IBM OpenPages is predominantly used in financial services to manage risks related to operations, IT, ESG, data privacy, compliance, and audits. Its capabilities in scenario planning, reporting, dashboards, and IT governance support users across different sectors in effective control management, risk assessments, and workflows, backed by integrated tools and document management features.

IBM

RSA Archer provides robust risk management, compliance, and vendor management with intuitive features for customizable and streamlined governance tasks.

RSA Archer delivers integrated solutions supporting risk management and compliance tasks. Its adaptive interface and customizable options enhance workflows, making it valuable for organizations requiring automation, advanced workflows, and easy integration capabilities. While offering flexibility and configuration power, users note potential enhancements for integration, reporting, and interface updates.

What are the key features of RSA Archer?

Easy Implementation: Facilitates quick setup and deployment.
Automation: Streamlines routine tasks for efficiency.
Advanced Workflows: Allows configuration of complex processes.
Dashboards: Provides visual insights into organizational data.
Integration Capabilities: Ensures seamless connectivity with external systems.
Reporting Features: Generates detailed reports for informed decision-making.
Customizable Permissions: Enhances control over access and roles.

What benefits or ROI should be considered?

Streamlined Processes: Reduces time spent on regulatory compliance tasks.
Improved Data Integration: Offers cohesive and actionable insights.
Configuration Flexibility: Adapts to specific business requirements.
Risk Mitigation: Enhances the ability to manage potential risks proactively.
Enhanced Governance: Strengthens adherence to industry standards and policies.

In the finance, public, and IT sectors, RSA Archer is utilized for managing risk and compliance. Organizations leverage its capabilities for third-party risk, policy management, and security assessments, providing tailored solutions for regulatory compliance and operational risk management. Integration with platforms like ServiceNow enhances its utility within enterprise environments.

RSA

Sample Customers

Nationwide, Process Innovation AG, OSRAM Licht AG, Dep‹sito Central de Valores (DCV), Delta Lloyd Group, Unum

T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial

Buyer's Guide

IBM OpenPages vs. RSA Archer

June 2026

Free Report: IBM OpenPages vs. RSA Archer

Find out what your peers are saying about IBM OpenPages vs. RSA Archer and other solutions. Updated: June 2026.

DOWNLOAD NOW

900,747 professionals have used our research since 2012.

See our IBM OpenPages vs. RSA Archer report.

See our list of best GRC vendors and best IT Governance vendors.

We monitor all GRC reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.