Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
569 reviews
from
External reviews are not included in the AWS star rating for the product.
Simplifies Audits with Reliable Support
What do you like best about the product?
I really liked the people I worked with, especially Ritu, who was amazing, and the auditors were all super understanding and helpful. They really helped us get to the right spot. The evidence request feature is something I use the most, and I spent a lot of my time working in it and commenting back and forth with the auditors. The setup of Thoropass was very easy.
What do you dislike about the product?
The interface could maybe be a little bit more directed towards the audit experience. It's a little bit hard to get into all the evidence requests. Just from opening the application, but once you know how to do it, it's not too bad. It's just several clicks to get to it. But an audit, I would assume that that would be front and center.
What problems is the product solving and how is that benefiting you?
Thoropass is our system of record for auditing documents, keeping track of all documentation. It connects with many of our systems and helps manage administrative documentation for employees, doing a great job at keeping everything organized.
Automation Disappointment, Manual Work Still Needed
What do you like best about the product?
I like that Thoropass started well with sales support, where we got the relevant team members on board, which was promising for relevant areas. The kickoff was relatively prompt, and the policies in general were of pretty good quality.
What do you dislike about the product?
The main issue I have is with Thoropass's platform and evidence collection, which are extremely basic and manual. We were promised automated evidence collection, but it simply wasn't delivered. For companies undergoing ISO 27001 and SOC 2 type 2 certifications, the platform requires submitting identical evidence twice, wasting valuable time. It doesn't feel fit for purpose and we might have been oversold during the sales pitch with claims of automation and AI that are overstated. Additionally, ChatGPT provides faster and better responses in some areas compared to Thoropass tools, especially on the AI side, and even the team has confirmed not to rely on Thoropass's AI suggestions.
What problems is the product solving and how is that benefiting you?
I use Thoropass to create policies, organize evidence, and automate submissions for ISO 27001 and SOC 2 certification, making it easier for a small team to handle without hiring consultants. It reduces time spent on simple tasks with coordinated evidence collection.
Quick Audit Turnaround, Needs UI Improvement
What do you like best about the product?
I like that Thoropass is very easy to set up and is transparent in Slack. It's impressive that the audit was completed in just a few days.
What do you dislike about the product?
The browser UI is confusing, with lots of windows and confusing designations between tasks and audit items. The initial setup was unclear because of the UI confusion.
What problems is the product solving and how is that benefiting you?
Thoropass helps satisfy SOC II audit requirements and validate security measures. It's easy to set up, transparent in Slack, and completes audits in a few days.
Thorough, Easy Tool That Helped Us Catch Issues Before the Pentest
What do you like best about the product?
Very thorough and the tool made the process very easy. The account manager is very responsive and explained the entire process very well. With regards to the Pentest, the tool helped us identify a few issues ahead of the actual pentest, saving time for us and the pen-testers.
What do you dislike about the product?
Some of our documentation tools are not yet supported by the tools.
What problems is the product solving and how is that benefiting you?
SOC-2 compliance
Easy to Use, Supportive Auditors, and a Terrific Pentest Team
What do you like best about the product?
Relatively easy to use. Auditors are there to guide, not castigate. Pentest team is terrific and easy to work with too.
Roadmap is super helpful.
Roadmap is super helpful.
What do you dislike about the product?
Sometimes roadmap + audit ERs feel disconnected. E.g. lots of work to put them into the roadmap items, then re-populating them in ERs.
AI review is not terrifically helpful - often misunderstands dates, etc.
AI review is not terrifically helpful - often misunderstands dates, etc.
What problems is the product solving and how is that benefiting you?
Customer requirement to get SOC 2 PII
Our requirement to do so at a good $ value and without having to become experts
Our requirement to do so at a good $ value and without having to become experts
Instrumental in Helping Us Achieve SOC 2 Certification
What do you like best about the product?
Thoropass was instrumental in helping us gain our SOC2 certification.
What do you dislike about the product?
The annual renewal process is a bit of a burden to go through.
What problems is the product solving and how is that benefiting you?
We needed a SOC2 certification for our VR and LMS learning platforms, all run on the Azure cloud infrastructure.
Keeps Us SOC 2-Ready with Outstanding Support
What do you like best about the product?
Keeps us prepared for SOC 2. Great customer support manager and auditors.
What do you dislike about the product?
Learning the platform was a little difficult for a new learner to the SOC 2 topic. However, this could be to just that. New environment for me.
What problems is the product solving and how is that benefiting you?
Reminds to keep us compliant are very helpful.
Thoropass Guides You End-to-End to Certification with User-Friendly Support for SMB
What do you like best about the product?
Thoropass’s solution and support guide you all the way from the initial discovery phase through to final certification. They help at every step, provide solutions when needed, and the process is user-friendly even for non-technical users.
What do you dislike about the product?
This isn’t specific to Thoropass, but the required proof is often odd and difficult to demonstrate.
What problems is the product solving and how is that benefiting you?
Getting a SOC 2 certification for an SMB that is service-oriented in a non-IT environment means having to navigate between an MSP and third-party software, while keeping pricing affordable for an SMB.
Exceptional Clarity and Accessibility Throughout the Process
What do you like best about the product?
They are super clear on processes and procedures and are super accessible throughout the process via slack and regular meetings.
What do you dislike about the product?
We had a strong experience, nothing to dislike
What problems is the product solving and how is that benefiting you?
Thoropass streamlined our compliance processes, pentests, and audits.
Outstanding Experience from Start to Finish
What do you like best about the product?
I’ve worked with Thoropass twice for SOC 2—once at a previous company and again at my current company—and both experiences were excellent.
The platform is easy to use, well-structured, and clearly shows what’s required, in progress, and audit-ready. Implementation is straightforward, even across organizations with different levels of security maturity.
Thoropass really stands out in customer support—their team is responsive, knowledgeable, and great at turning SOC 2 requirements into practical, actionable steps.
Feature-wise, Thoropass covers everything needed for SOC 2 in one place, including control management, evidence tracking, policies, vendor risk, and audit coordination.
Overall, Thoropass makes SOC 2 far more manageable and repeatable. I’d highly recommend it to any company pursuing or maintaining SOC 2 compliance.
The platform is easy to use, well-structured, and clearly shows what’s required, in progress, and audit-ready. Implementation is straightforward, even across organizations with different levels of security maturity.
Thoropass really stands out in customer support—their team is responsive, knowledgeable, and great at turning SOC 2 requirements into practical, actionable steps.
Feature-wise, Thoropass covers everything needed for SOC 2 in one place, including control management, evidence tracking, policies, vendor risk, and audit coordination.
Overall, Thoropass makes SOC 2 far more manageable and repeatable. I’d highly recommend it to any company pursuing or maintaining SOC 2 compliance.
What do you dislike about the product?
There’s very little to dislike overall. Some advanced features and reporting options may take a bit of time for first-time users to fully explore, but the learning curve is minor and well-supported by their customer success team.
What problems is the product solving and how is that benefiting you?
Thoropass solves the complexity and operational overhead of SOC 2 by centralizing controls, evidence, policies, and audit workflows into a single, easy-to-use platform. It removes the need for spreadsheets, scattered documents, and manual tracking while providing clear guidance on what’s required. This has saved significant time, reduced audit stress, and made SOC 2 a repeatable, scalable process across multiple organizations.
showing 1 - 10