I was hoping to hear a few answers from the trenches myself.
I think that there are a variety of answers in use. Here is what I know:
We wrote a custom OMS (order management system) / Trading Accounting systems for a CTA once. We did it his way.
A small mostly-futures Hedge Fund that I knew pretty well depended upon
Risk Metrics to get them up and running on a SaaS (Software as a Service.)
I would think that it would matter depending upon how big you are. Are you trying to wow your uncle by saying that you use VAR? Are you obligated under Basel/Basel II?
On the job boards, I see that people are building their own stochastic integration (Monte Carlo) VAR engines. Given the model construction dependency of factor VAR methods, and given the rather peculiar times in which we trade, I suspect that people are going Monte Carlo to avoid this.
For canned software, take a look at the names at
http://software.nasdaq.com/risk-management-software There are many more entrants than that.
Since portfolio allocation doesn't occur in a vacuum, look at the other pieces that you will be needing. For example, Charles River Development or Eze Castle Software.
If you really just want risk numbers, I would talk with RiskMetrics about getting a starter-rate. They will get you going.