Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
A Breath of Fresh Air in Compliance
What do you like best about the product?
I honestly love working with Thoropass. Dealing with certifications has always been a major headache in my book - endless policy writing and control setups that drag on for months. Thoropass has significantly streamlined the compliance process for us. Their approach integrates with our operations, providing templates and questionnaires that are straightforward and easy to use. One of the standout features to me is the automated integration with our cloud accounts and SaaS services, which has eliminated much of the manual work required in the past.
Their "Employee Training" module contains security awareness training as well as secure coding training. Both are essentially online PDFs of around 20 and 80 or so pages, respectively. Both have been really high quality. Lots of good, in-depth info without being too high-level but also not too verbose.
I'd also like to point out that everyone at Thoropass I had contact with was a pleasure to work with. Very knowledgeable and super responsive. I used to do certifications in a large org of 110k people, and now I'm in a startup of 6. Our customers were asking for SOC2 and ISO27001 because we're handling some sensitive data. I didn't think that certification at our size could be so streamlined. If you're in a startup and need to obtain a certification, or if you're in the EU and need to comply with NIS2 beginning in October 2024, I can highly recommend doing it with Thoropass.
Their "Employee Training" module contains security awareness training as well as secure coding training. Both are essentially online PDFs of around 20 and 80 or so pages, respectively. Both have been really high quality. Lots of good, in-depth info without being too high-level but also not too verbose.
I'd also like to point out that everyone at Thoropass I had contact with was a pleasure to work with. Very knowledgeable and super responsive. I used to do certifications in a large org of 110k people, and now I'm in a startup of 6. Our customers were asking for SOC2 and ISO27001 because we're handling some sensitive data. I didn't think that certification at our size could be so streamlined. If you're in a startup and need to obtain a certification, or if you're in the EU and need to comply with NIS2 beginning in October 2024, I can highly recommend doing it with Thoropass.
What do you dislike about the product?
There aren't many things I don't like about the app, but if I have to choose one it'd be the "Word" editor you're using to edit policy documents. Sometimes it doesn't load or it makes my browser hang. It's like a bad version of Google Docs and behaves like a sluggish Java applet in the early 2000s. That said you don't spend too much time in it and at the end of the day it gets the job done.
What problems is the product solving and how is that benefiting you?
Thoropass streamlines the entire SOC2/ISO27001 certification process for us.
- Leave a Comment |
- Mark review as helpful
Thoropass team handholds you not only during onboarding, but every week of the year.
What do you like best about the product?
I love Ritu, our Account Manager :-)
Apart from that, the intuitive interface to ensure compliance is a great platform for newbies like me to work in.
Apart from that, the intuitive interface to ensure compliance is a great platform for newbies like me to work in.
What do you dislike about the product?
Not much to be honest. I wish you did have a function that automatically performs compliance reporting.
What problems is the product solving and how is that benefiting you?
It is definitely a platform that has helped us stay HIPPA compliant for sure.
Accelerates planning and project timelines for healthcare startups
What do you like best about the product?
6 things stand out
1. Planning and Execution: the dashboard helps guide the planning and project management of any certification by outlining milestones and action items for each milestone.
2. Communication: WIthin action items are usually very clear, if there's any question, I can reach out to Thoropass directly within the task and they respond quickly.
3. Accelerators: Thoropass provides many policies and procedure templates. I'm not starting from scratch!
4. Monitors: Thoropass monitors are integrated into our production system.
5. Training: Thoropass provides standard training material and ability to manage user's adherence to training.
6. Regular check-ins with Thoropass to ensure we're getting the maximum value from it.
1. Planning and Execution: the dashboard helps guide the planning and project management of any certification by outlining milestones and action items for each milestone.
2. Communication: WIthin action items are usually very clear, if there's any question, I can reach out to Thoropass directly within the task and they respond quickly.
3. Accelerators: Thoropass provides many policies and procedure templates. I'm not starting from scratch!
4. Monitors: Thoropass monitors are integrated into our production system.
5. Training: Thoropass provides standard training material and ability to manage user's adherence to training.
6. Regular check-ins with Thoropass to ensure we're getting the maximum value from it.
What do you dislike about the product?
While Thoropass continues to improve it's offering, this has resulted in many changes to the user experience and policy and procedure templates
What problems is the product solving and how is that benefiting you?
Thoropass is supporting our certifications by guiding us on the requirements and enabling us to provide evidence for contols in one solution.
Compliance made easy with Thoropass
What do you like best about the product?
Peopletree Group has had an outstanding experience using Thoropass as our tool for compliance. Ritu has been incredibly helpful in our meetings, clearly explaining the process and ensuring we understand every step. Their user-friendly customer platform has made it easy for us to navigate, and the integrations and monitors have been a game-changer, automating numerous tasks that would otherwise consume valuable time. Thoropass has taken the gray area out of SOC 1 and SOC 2 compliance, providing us with clear, straightforward guidance and support. We highly recommend Thoropass for anyone seeking a reliable and efficient compliance solution.
What do you dislike about the product?
There are currently no issues that I have encountered with Thoropass
What problems is the product solving and how is that benefiting you?
Thoropass allows us to have a central repository of all our compliance documentation, and gives us a holistic view of what issues remain outstanding, who is delegated to resolve the issue, and allows us to efficiently complete our SOC 1 and 2 audit.
Compliance made easy
What do you like best about the product?
Easy to view and understand progress metrics.
What do you dislike about the product?
Not much, great tool overall. Nice and well made UI
What problems is the product solving and how is that benefiting you?
Understanding where the business was in regards to compliance and mapping out a longer strategy
POP SOC2 Partnership with Thoropass
What do you like best about the product?
Thorpass has been great at guiding us through the process of completing a SOC2 certification. Thoropass's project management team has done a great job at trying to understand the unique aspects of our business.
What do you dislike about the product?
Thoropass is great at taking client feedback and integrated feature requests into their product, however sometimes the feature may not be completely documented or ready for broad use. This Agile technique is typical for SAS applications, so Thoropass has few options for doing something different. I also understand that those features are needed for someone, so getting those features out quickly is usually the best option. So not a big deal, just the only negative thing I have seen.
What problems is the product solving and how is that benefiting you?
Thoropass provides us with much better access and monitoring of our SAS cloud based applications than what we had previously. Each integration has yielded a treasure trove of actionable items that our security team can assess and mitigate. Due to shadow IT and the quick evolution of cloud-based applications having integrations consistently watching for security best practices has significantly evolved our security posture and added to our defense in depth strategy.
Excellent audit experience and support!
What do you like best about the product?
Thoropass has been great to work with from their initial outreach through our most recent SOC 2 Type I and II audits. The journey to compliance can be feel imtimidating, but the Thoropass platform did a great job of managing steps and milestones. Even more helpful have been the individuals that helped us through the audits. The technical team was helpful and transparent, and our Customer Success Manager, Darren Zarandi, has done a terrific job supporting our team and guiding us along the way. The built-in integrations have also been a great help to streamline some of the work and evidence gathering.
What do you dislike about the product?
There have been a few small buggy issues in the platform's UI. Entering notes for evidence was touchy as well as updating documents. As we get through more audits, having an easy reference to our past evidence notes, etc. would be greatly beneficial and this has not been possible. The upside is that our Customer Success Manager has been great at communicating these issues and they have either been addressed or are considered for future product updates.
What problems is the product solving and how is that benefiting you?
Thoropass has helped us guide us through SOC Type 2 compliance, policy management, and security training. Without the Thoropass platform, these items would be difficult to achieve on our own.
Compliance made easy
What do you like best about the product?
I come from a DoD background and am used to a compliance management tool (eMASS) like what Thoropass has set-up. However, unlike eMASS, the Thoropass app has a much easier to navigate interface and contains links to templates and examples to show you what the auditors will be looking for in their review. If you get stuck on a particular control, the app makes it easy to leave a comment on the control itself, tag your Thoropass rep, and get a response back quickly. I love that I am teamed-up with a rep from the company that helps make sure we're not getting stuck on any part of the documentation process. Allie has made it so that I have never felt lost even when there have been language in controls that haven't made a lot on sense in our context.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
What do you dislike about the product?
If I have to find something to dislike about Thoropass, I would say that when you have applications that can't be tied-in to the monitors/integrations that they have set-up, it can be time consuming to collect screenshots and confusing to know what to take screenshots of for the auditors. That said, that's not so much a dislike about Thoropass specifically and more a dislike of these audits in general.
What problems is the product solving and how is that benefiting you?
We needed to obtain a SOC2 Type 1 certification so we can sell our cloud training product to University customers.
Thoropass Review
What do you like best about the product?
Having everything integrated (audit, penetration test, evidence submission, etc.) into a single platform is great.
What do you dislike about the product?
The platform has been enhanced quite a bit since we came on as a customer (~2 years ago) and most of the features I wanted are now in the platform, so there is very little to dislike.
What problems is the product solving and how is that benefiting you?
Having a 3rd party security / compliance audit makes diligence during sales conversations much easier / faster.
Thoropass makes easy the compliance certification process.
What do you like best about the product?
They way how Thoropass braks down the activities in to do's makes really easy to track the progress and focus in the action items needed to be completed.
What do you dislike about the product?
There are manu AWS monitors that are highlighted as failed, but not all of them are needed to be sorted and fixed. I would be nice to have a relevancy level of each of the monitors and tasks to do.
What problems is the product solving and how is that benefiting you?
Thoropass helped us to identify the roadmap and action items needed to be ready to the audit.
showing 101 - 110