Thoropass

What do you like best about the product?

I like the team at Thoropass. Everything went very smoothly. It was very simple, very straightforward. Thoropass also handled the penetration tests for us, which was solid.

What do you dislike about the product?

N/A

What problems is the product solving and how is that benefiting you?

Thoropass solved our Vanta requirement for vulnerability scans and provided an overall security compliance report for SOC 2. It also handled the black box and gray box penetration tests, eliminating the need to hire someone else for these tasks.

What do you like best about the product?

The process they have to keep my team track to meet deadlines.

What do you dislike about the product?

I would like the ability to download all documents after they’ve been uploaded.

What problems is the product solving and how is that benefiting you?

They make the complicated audit process manageable.

What do you like best about the product?

I liked Thoropass because while I was working towards my company's SOC 2 Type 1 certification, the project manager met with me on a biweekly basis. They gave me all the inputs I needed to consider, which kept me on track and made the process very efficient. This approach helped me speed up things as much as I could, and that's the best part of working with Thoropass. The setup of Thoropass was also very straightforward.

What do you dislike about the product?

Initially, the process to upload evidence requests were not straightforward. After a session or two with the project manager, it was better.

What problems is the product solving and how is that benefiting you?

I use Thoropass for my company's SOC 2 Type 1 certification. The project manager met with me regularly, providing inputs to keep me on track, saving time and boosting efficiency.

What do you like best about the product?

Integration was very smooth and tasks all had very well defined instructions on how to resolve them.

What do you dislike about the product?

The initial dashboard UI was a bit complex for me to understand. Took a while to fully grasp how to use them

What problems is the product solving and how is that benefiting you?

We were able to get the SOC2 audit without too much hassle.

What do you like best about the product?

I appreciate the dedicated customer success manager who works with us during the process. Thoropass keeps us on track with reminders for recurring tasks and handles policy and security training tracking efficiently. I'm happy with the product and their addition of new features like the access review to enhance our experience. The setup was simple too. The platform let us get everything set up and validated for SOC 2 Type 1 and move right into the monitoring period for the Type 2 audit.

What do you dislike about the product?

There really weren't any pain points for us.

What problems is the product solving and how is that benefiting you?

Thoropass helps control policies, collect evidence for audit preparation, and engages our pen tests. It keeps us on track with reminders for recurring tasks and handles policy and security training tracking.

What do you like best about the product?

I use Thoropass for their compliance platform to manage SOC 1, SOC 2, and GDPR internally and they perform our annual SOC 1 Type 2 and SOC 2 Type 2 audits. I appreciate how their tooling helps streamline our security and compliance efforts, with dramatically better reporting and some data collections being automated. The ability to assign and delegate tasks in one platform is very helpful. I find the usability to be excellent; it's very easy to navigate and use, and I was able to onboard as our compliance lead very quickly. Audit evidence requests were much easier with it. It also pulls data from our other tools for automated evidence collection. The initial setup was trivial, which made understanding the SOC requirements easier.

What do you dislike about the product?

I've hit some bumps with user access management and people management, and custom integrations would be awesome. Their questionnaire tooling is limited

What problems is the product solving and how is that benefiting you?

I use Thoropass to streamline security and compliance efforts, make reporting better, automate data collection, and easily assign tasks. Audit evidence collection is much simpler too.

What do you like best about the product?

The account manager and auditors were responsive to our questions

What do you dislike about the product?

They missed their estimated deadline by 5 days. We wished that they were upfront about how the turnaround for the report would be after everything was submitted.

What problems is the product solving and how is that benefiting you?

Thoropass helped us get SOC2 Type 1 compliance as fast as possible.

What do you like best about the product?

The platform is user-friendly and offers a lot of useful automation features. It is a great all in one location for compliance data.

What do you dislike about the product?

Some questions took a while to get answered, which slowed the overall process. The system is very self-guided, and that can be challenging for users who are new to compliance activities and may need a bit more direction.

What problems is the product solving and how is that benefiting you?

Our customers and prospective customers have security compliance requirements, and Thoropass makes the process of obtaining and maintaining those certifications much less painful.

What do you like best about the product?

I really like Thoropass for the personal assistance and the real-time value it provides. The platform walkthroughs and having auditors at my fingertips to ask questions are fantastic. I also appreciate the roadmap and the platform itself for helping with compliance and certification. The 1:1 conversations to understand the controls better and the breakdown of technical controls are hugely beneficial. Setting it up was easy, and I'd definitely use it again for other clients.

What do you dislike about the product?

The report itself was generic - in which the selected tools my client uses were not within the sections - instead it was listed out in the first 2 sections.

What problems is the product solving and how is that benefiting you?

Thoropass provides best practices, a checklist, and a roadmap for compliance and certifications. I appreciate the personal assistance, real-time value, and ability to converse 1:1 with auditors, helping understand and implement technical controls better.

What do you like best about the product?

I appreciate Thoropass for its extremely well-thought-out and easy-to-follow process. They are always there through email and phone at every step of the way, offering communication that's both personal and professional. I also found their Roadmap very helpful as it allowed me to prepare all the necessary information before the audit, making the process very straightforward. The initial setup was extremely easy since they guided us through every step.

What do you dislike about the product?

Their automated metrics have a few problems. They sometimes disconnect from the service and when they do you have to go to each metric and refresh it. It would be nice if all the metrics would refresh when a connection comes back up.

What problems is the product solving and how is that benefiting you?

Using Thoropass, I can assure customers of our SOC 2 compliance; it also highlighted areas for process improvement, which benefits us internally and our customers.