No more typing reviews! Try our Samantha, our new voice AI agent.

NAVEX One vs RSA Archer comparison

 

Comparison Buyer's Guide

Executive Summary

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

NAVEX One
Ranking in GRC
25th
Ranking in IT Governance
14th
Ranking in IT Vendor Risk Management
12th
Average Rating
7.0
Reviews Sentiment
7.3
Number of Reviews
1
Ranking in other categories
No ranking in other categories
RSA Archer
Ranking in GRC
1st
Ranking in IT Governance
1st
Ranking in IT Vendor Risk Management
5th
Average Rating
8.0
Reviews Sentiment
6.7
Number of Reviews
42
Ranking in other categories
No ranking in other categories
 

Mindshare comparison

As of August 2026, in the GRC category, the mindshare of NAVEX One is 1.5%, up from 1.3% compared to the previous year. The mindshare of RSA Archer is 6.0%, down from 15.8% compared to the previous year. It is calculated based on PeerSpot user engagement data.
GRC Mindshare Distribution
ProductMindshare (%)
RSA Archer6.0%
NAVEX One1.5%
Other92.5%
GRC
 

Featured Reviews

EV
Information Security Business Enablement Mgr. at a insurance company with 5,001-10,000 employees
Useful for risk assessment and has customization capability
The tool helps us with security incidents, policies, business continuity, disaster recovery, and internal audits. The feature I like the most is its customization capability. It acts like a blank canvas where you can construct forms and workflows according to your needs. You can configure and customize a lot yourself, whether starting from scratch or using some out-of-the-box options. The solution has impacted our operations by helping us manage and prioritize environmental risks. It also assists in establishing ownership of risks and enables us to mitigate or mediate existing risks. Additionally, it facilitates tracking risks throughout their entire lifecycle.
CJ
Information Security Specialist at Dubai Health Authority
Centralized management strengthens compliance with good look and feel
From my perspective as a customer and end user, Archer has an impressive look and feel, but the most adaptive feature is its ease of configuration which helps to enhance our process according to our maturity. It's more about our organization getting centralized with an integrated approach that focuses on risk governance and compliance. When can provide a detailed dashboards to management with the details of risks from top-down or bottom-up prioritizing actions based on its criticality or necessity. This allows us to show end users and management where the issues lie and effectively demonstrate accountability and visibility in compliance.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The tool helps us with security incidents, policies, business continuity, disaster recovery, and internal audits. The feature I like the most is its customization capability. It acts like a blank canvas where you can construct forms and workflows according to your needs. You can configure and customize a lot yourself, whether starting from scratch or using some out-of-the-box options."
"Once Archer was implemented, everybody had a role to play, it was just a matter of logging in, doing the work, and moving the workflow to the next stage."
"The risks which impact the organization or the IT section are presented in a well-displayed manner, which helps us to plan for, manage, or even mitigate risks."
"RSA is a very rich application. I like its adaptive suggestion, where based on your users and the class of data, it can actually recommend you the proper control to choose. For example, we have been using PCI DSS as an NIST. So based on application feedback, it will provide you with a suggestion on which control objective needs to be set. Based on that, you can make a decision—you don't need to take the suggestion, but you can customize that particular provided suggestion. RSA Archer's workflow is also good, in terms of process automation."
"One of the useful features is the ability to connect to various systems in order to accommodate data."
"This solution helped us with the centralization of our governance data, so we could house all of our controls in one place. We could use that central repository of all our controls to build our risk management strategy and our policy and governance. So we could use controls as a central library and build policy, and then build risk management around it."
"It is a very friendly tool, we can easily understand what is going on inside the tool, work with it for the ERP platform, create automated applications based on the requirements, and it is very secure with three levels of access at the field level, application level, and code level."
"Reporting is excellent for all types of aggregators, as well as for different types of integrators."
"The most valuable features of RSA Archer are the asset management, risk management, and vendor management."
 

Cons

"We think there's room for improvement, especially with customizing NAVEX One. Their development on the roadmap can be slow."
"The design and advanced workflow need to be improved."
"The ticket handling process could be improved."
"It would be nice if RSA Archer featured more customization. When customers are updating, they should be notified whether certain updates are optional. The install screen should not proceed to the next page unless we make some selections about which updates we want to install."
"The technology's a little outdated."
"There is no inbuilt alert in Archer to let us know that a data feed has failed or did not run for different reasons. So, we don't even get to know that a feed has not run until somebody reports it to us. This has been a problem all the time. Data feeds have always been a big headache for us because there is no feature to let us know if a feed has not run or has failed. If Archer had a feature to send us an email notification when a feed has failed, it would've been very helpful. This is the reason why our users are slowly moving away to another platform. Some of the modules that I have been managing are being moved to ServiceNow. Next year, a lot of our modules will be moved from RSA Archer to ServiceNow, and the data feed issue has been one of the main reasons."
"I find the tech support to be inadequately knowledgeable."
"If I were to rate RSA technical support on a scale from one to ten, I would give it about four, as there is definitely room for improvement, but support is available."
"The solution’s customization features could be better. Its performance and scalability need improvement as well."
 

Pricing and Cost Advice

"NAVEX One's pricing comes in the middle range when compared to other products."
"It is not expensive. It is reasonable. We only pay for the licensing."
"Fairly highly-priced, especially for smaller companies."
"The pricing is okay. The licensing costs are very reasonable; it is very affordable to us."
"The license is costly for the solution, but the remaining set up and maintenance is quite cheaper."
"The initial purchase is cheap. You pay a nominal price to start then renew the license annually. You also must buy a license for each module. I'm not too fond of that aspect of the licensing model. You buy the elephant and then spend more money to feed the elephant."
"As I am a developer and responsible for providing production support, I do not have personal knowledge of the pricing. However, my colleagues claim that it is very expensive in comparison with other tools."
"I am not 100% familiar with that, especially with their new model. I just know that the way they've licensed per user to scale is good."
"RSA Archer's price is justifiable and not as expensive, compared to ServiceNow. I have heard that the licensing for ServiceNow is much more expensive. I'm unaware whether there are any additional costs after licensing fees."
report
Use our free recommendation engine to learn which GRC solutions are best for your needs.
908,834 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Financial Services Firm
15%
Construction Company
9%
Outsourcing Company
9%
Educational Organization
7%
Financial Services Firm
18%
Insurance Company
10%
Manufacturing Company
6%
Construction Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
No data available
By reviewers
Company SizeCount
Small Business9
Midsize Enterprise6
Large Enterprise25
 

Questions from the Community

Ask a question
Earn 20 points
What needs improvement with RSA Archer?
While it provides benefits in terms of security, the pricing is a bit higher than customers typically expect. It would be helpful if RSA Archer had the capability for two-way integration because, i...
What is your primary use case for RSA Archer?
Regarding the compliance, risk, and governance tools, I am comfortable discussing the tools in the GRC category. The specific module from ServiceNow is the ServiceNow Compliance, Risk, and Governan...
What advice do you have for others considering RSA Archer?
I have been in touch with about three companies who use RSA Archer actively in the compliance area. These companies use RSA Archer for nearly all purposes, including governance, internal risk, and ...
 

Comparisons

 

Also Known As

Lockpath Keylight
Archer
 

Overview

 

Sample Customers

Claims Recovery Financial Services (CRFS), Surescript, The University of Chicago
T-Systems, Bridge Point, Equifax, First Data, Global Imaging Company, Manulife Financial
Find out what your peers are saying about RSA, MetricStream, Diligent and others in GRC. Updated: August 2026.
908,834 professionals have used our research since 2012.