NAVEX IRM 2026: Benefits, Features & Pricing

Software Advice offers objective insights based on verified user reviews and independent product and market research. When our advisors match you to a software provider, we may earn a referral fee.

How Software Advice ensures transparency

Software Advice lists all providers across its website—not just those that pay us—so that users can make informed purchase decisions. Users can talk to our advisors for free to receive software recommendations matching their needs. Software providers pay us for sponsored profiles to reach users interested in their products.

How Software Advice verifies reviews

Software Advice carefully verified over 2 million reviews to bring you authentic software experiences from real users. Our human moderators verify that reviewers are real people and that reviews are authentic. They use leading tech to analyze text quality and to detect plagiarism and generative AI.

Independent research methodology

Researchers at Software Advice use a mix of verified reviews, independent research, and objective methodologies to bring you selection and ranking information you can trust. While we may earn a referral fee when you visit a provider through our links or talk to an advisor, this has no influence on our research or methodology.

Wondering if NAVEX IRM is right for your organization?

Our Risk Management Software selection experts can help you in 15 minutes or less.

On this page

Overview
Pricing and Plans
Features
Integrations
User Reviews

Overview

NAVEX IRM

4.7

(20)

Pricing

Starting at $2,600.00 per month

About NAVEX IRM

Recognized as a Leader in the Gartner® Magic Quadrant for both IT Risk Management and IT Vendor Risk Management, NAVEX IRM brings visibility to risks frequently managed in disparate sources. It aggregates internal data points from all corners of the organization, as well as from assessments, audits, authoritative sources and external systems. By having everything centralized, correlated and connected, the platform enables organizations to see dependencies and to make smarter business decisions. Pricing of the product is based on a monthly subscription and support is extended via phone, an online help desk and video tutorials.

Operational disruptions, risks from third parties, and cyber threats are just a few areas that are becoming more complex, expensive, and disruptive to organizations. NAVEX IRM is an easy-to-configure solution that helps find, assess, and continuously bring visibility to risks from across the entire organization. Quickly implement this innovative solution to solve your immediate challenges, and utilize its wide range of features to customize your program over time as your needs evolve:

IT Risk Management: Quickly build an automated, robust and sustainable...

NAVEX IRM Screenshots

NAVEX IRM Pricing and Plans

Starting price: $2,600.00 per month

Free Trial

Free Version

Basic

$2,600.00

per month

No plan information available

Confused about pricing? We've got you covered.

Get a personalized pricing breakdown tailored to your specific needs—no guesswork, no generic estimates.

NAVEX IRM Features

Popular features found in Risk Management
Alerts/Notifications
Audit Management
Compliance Management
Corrective and Preventive Actions (CAPA)
Document Management
Incident Management
Internal Controls Management
Mobile Access
Response Management
Risk Analysis
Risk Scoring
Scenario Planning
More features of NAVEX IRM
Access Controls/Permissions
API
Approval Process Control
Archiving & Retention
Assessment Management
Asset Tracking
Attestation
Audit Planning
Audit Trail
Business Process Control
Collaboration Tools
Compliance Tracking
Configurable Workflow
Configuration Management
Contract/License Management
Cost Tracking
Customizable Fields
Dashboard
Dashboard Creation
Data Security
Disaster Recovery
Documentation Management
Document Storage
Exceptions Management
For Healthcare
Forms Management
Governance
HIPAA Compliant
Inventory Management
Issue Management
IT Risk Management
Maintenance Management
Operational Risk Management
Performance Metrics
Policy Creation
Policy Library
Policy Management
Policy Metadata Management
Predictive Analytics
Procurement Management
Real-Time Reporting
Remediation Management
Reporting/Analytics
Reporting & Statistics
Reputational Risk Management
Requisition Management
Risk Assessment
Risk Management
Risk Reporting
Safety Management
Sarbanes-Oxley Compliance
Self Service Portal
Task Management
Vendor Management
Vendor Master Data Management
Vendor Risk Management
Version Control
Workflow Management

NAVEX IRM Integrations

Acunetix

NAVEX IRM User Reviews

Overall Rating

4.7

Ratings Breakdown

65%

35%

Secondary Ratings

Ease of Use

4.0

Value for money

4.5

Customer support

4.7

Functionality

4.5

Have you used NAVEX IRM and would like to share your experience with others?

Jackie L.

Verified reviewer

Insurance

1001-5000 employees

Used daily for more than 2 years

Reviewed May 2018

Keylight is easy to use and easy to configure to suit your needs.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

Keylight is completely configurable and extremely adaptable. It has powerful yet simple-to-produce reporting capabilities that enable metrics and provide transparency with ease. I can't stress enough how easy the configuration (Admin) capabilities are to learn and to use. And for those times where help is needed, the Lockpath Support and Professional Services teams are first class. Always eager to help and it is evident that customer service is a high priority for the company. Workflows and notifications can be easily built which can provide a centralized location for many use cases, including: Identifying and monitoring risks; Recording regulatory and other requirements, controls associated with those requirements, including assigning ownership and review of those controls, and Audit projects which are tied directly to the controls; Vendor Management, including monitoring compliance and tying to any applicable risks. I guess what I'm trying to say is, the Keylight GRC platform helps take some of the complexity out of GRC. The above are just a few of the many possibilities. Because the tool is so easy to configure, I tell my colleagues to "tell me your dream"-- I'm usually able to get pretty close.

Cons:

Sometimes the tool is less than intuitive. Don't get me wrong-- I still stand by my statement that it is extremely easy to use-- but sometimes the way to do something is not the way you'd imagine. Most times, there is a way to do what you need to do, it's just not always the way you'd expect. Lockpath Support is always an excellent resource to work through these situations.

Rick T.

Used daily for less than 2 years

Review source

Reviewed June 2018

Robust GRC Management Tool

Makes managing GRC tasks, exceptions, vendors, etc much MUCH more efficient. We have seen significant time savings by using this software.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

This is a fully customizable solution to help meet GRC management needs. This has also been expanded into other areas, including assessments, asset reviews, documentation management/reviews, testing management, vendor management, and a host of other things.

Cons:

The online doc is ok, but may need updating. We have also run into reporting limitations, and the software can struggle with graphic reporting if the number of records exceed some preset quantity. The other is very specific; when creating a new field and setting the character parameters, the parameters are permanent for the life of the field. For example, if a text field is set for 100 characters, but a year later, you find a need to allow for 500 characters, the existing field cannot be redefined. A new field needs to be created to allow for the expanded setting. So when you are trying to create a field and be cognizant of the space (i.e. limiting to 100 characters), you are limiting the future-growth of the data this field may manage. The same goes for the tolerances of the numeric fields. Once the parameters (number of spaces before and after a decimal point) are set, there is no changing the field. It must be replaced with a new field, rather than having an effective recalculation process.

Mike L.

Used daily for more than 2 years

Review source

Reviewed June 2018

Keylight has been a good platform and meets our needs

A very good third party management software. It has helped us to streamline and organize our 3rd party risk management process

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

Excellent customer service, intuitive and easy to use. layout and menus are well suited for navigation and functionality.

Cons:

On premise solution has some bugs to work out. software could be faster when clicking through and going from page to page.

Michael G.

Used daily for more than 2 years

Review source

Reviewed June 2018

Excellent GRC platform with phenomenal support.

Excellent customer support and the ability for me to use the product however our organization sees fit. Often a process or workflow design can become a reality within weeks without having to build out new features or wait for software to catch up.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

LockPath Keylight is highly customizable and new features and upgrades are released on a very timely schedule. The platform is highly stable and provides great insights to our data across our environments. Custom dashboards and reporting metrics can be configured for different roles as well which helps provide the most important data to a given user. Be it high level CISO dashboards, to implementation based feeds for system administrators, the customization capabilities are there.

Cons:

There is a slight learning curve with this product but this has become incrementally less with every release. I would not say it is complicated by any means, complexity largely results in how vast you've opted to customize your system and integrate connectivity with other platforms through connectors.

Verified

Reviewer

Hospital & Health Care

1001-5000 employees

Used daily for less than 12 months

Reviewed January 2019

Keylight is nimble, useful system.

Keylight lets us manage our vendors in a very simple way. We can add vendors, provide assessments, provide reviews, and render decisions all within the system and effectively. It has simplified a number of tasks for me personally.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

Keylight makes the complex tasks involved in vendor management easy to handle. From vendor communications to information retention, Keylight does it all and in a fairly user friendly way.

Cons:

Lockpath has traditionally not communicated potential problems in upcoming updates and has not provided system issue notifications very well, if at all. They are pleasant to talk to but work from the basis of regardless the problem, we're only going to discuss issues if you call in.

Nathan G.

Verified reviewer

Computer Software

1001-5000 employees

Used daily for more than 2 years

Review source

Reviewed June 2018

Significant win for our company

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

What I like most about LockPath Keylight is the flexibility and ease of use use. Unlike other GRC tools, I do not need an entire support team to make rapid changes and add value.

Cons:

What I like least about LockPath Keylight is occasional slowness and enhanced historical reporting (which requires additional cost).

Morgan K.

Insurance

1001-5000 employees

Used daily for less than 6 months

Review source

Reviewed October 2018

Seeking Tool for Risk Management and Workflow (Rm & Cm Applications)

The experience with Lockpath has been positive including their attentiveness and responsiveness to meet our needs with their tool.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

Lockpath Keylight is highly configurable and easy to navigate from an administrative perspective with coaching from the Professional Services team. The speed of implementation is primarily based on the tool owner to provide documentation and dedicate time to understanding the system. The user-friendliness of the front end of the tool ultimately falls on the administrator as the system is pretty much a blank slate upon purchase. The Quickstart implementation structured our system’s foundation and the remainder of the configuration was able to be completed either by the Professional Service team or by an internal administrator of the system. The Professional Service and Support teams have been highly responsive to questions and enhancement requests for the system. Professional Service hours have been very useful in working through more advanced requirements and gaining a more robust training to the system.

Cons:

As noted above, the Risk Keylight application is 100% configurable which means there is no direct out-of-the-box workflows or fields. This can be an advantage or disadvantage based on the needs of your company. If your company is able to detail specific requirements, the configuration of basic workflows is quick to implement. The Compliance Keylight application came with a few pre-built workflows and forms which has been helpful to quickly input data and see results in the system.

Verified

Reviewer

Computer Software

1001-5000 employees

Used daily for less than 2 years

Review source

Reviewed June 2018

The Keylight GRC tool helps in managing risks across different business in our organization.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

The customization options along with graphical tools help in visualizing the risks with respect risk scores.

Cons:

It gets slow to load some of the links to its own web pages. IT takes a lot of time to transition between the Keylight modules.

Fran G.

Verified reviewer

Computer Games

1001-5000 employees

Used daily for more than 2 years

Reviewed May 2018

i have been using this product since 2015 & this includes the applications (Am, Cm, Im, Rm, Sm & Vm)

makes life easier in meeting the needs of the various teams i need to build the applications for. the workflow is very easy to work with.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

ease of development and customization of the product, the ease of fitting it to your business operations, not fitting the business to the tool. i also like the responsiveness of the customer support people.

Cons:

a few minor enhancements that they have in their queue to eventually build out and the fact that i have to wait for them.

Verified

Reviewer

Hospital & Health Care

5001-10000 employees

Used weekly for more than 2 years

Reviewed April 2019

Good GRC solution with a robust framework

While the framework required more work than we anticipated, overall the Keylight GRC platform has been a good first step into the GRC tool space.

Ratings Breakdown

Ease of use

Value for money

Customer support

Functionality

Pros:

Framework is very flexible to meet the needs of most organizations, inexpensive for the architecture.

Cons:

Would not be a good fit for companies that want something that is more plug n play where you select the regulatory requirements, you yes/no the risks and it outputs dashboards.

Showing 1 - 10 of 20 Reviews

Load More Reviews