Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Recent Thoropass Soc 2 Type 1 report completed
What do you like best about the product?
The team at Thoropass is very involved and always available to answer compliance questions, review your evidence, and help you think long term. The platform was easy to navigate and the roadmap was so easy to follow and gather evidence for. I just learned what Soc 2 was earlier last year and was able to lead and complete the project with ease using Thoropass.
What do you dislike about the product?
Thoropass is smaller than some of their competitors which means they don't have some of the more niche integrations that my company uses. Their roadmap made up for this and I didn't find it very challenging to gather evidence without an integration.
What problems is the product solving and how is that benefiting you?
Thoropass helped us get our Soc 2 Type 1 report, our pen test, and now our Type 2 report. Auditors are built into the platform so I didn't have to do any external searching.
- Leave a Comment |
- Mark review as helpful
An efficiet way to navigate the SOC2 process.
What do you like best about the product?
I liked having a guide for the process that answered qiestions and communicated with the auditor on my behalf.
What do you dislike about the product?
There were some inconsistent answers from the rep. So, that caused some confusion and delays in the process.
What problems is the product solving and how is that benefiting you?
They were assisitng us with gett our SOC 2 type 1 and type 2.
Thoropass recommended!
What do you like best about the product?
Thoropass has developed a comprehensive platform that effectively monitors and tracks all of the requirements essential for the audit process. This solution ensures that every necessary aspect of the audit is accounted for and systematically organized. And the quick tests and excellent communication via email and Slack.
What do you dislike about the product?
It's quite difficult to find too many things to dislike about the platform as a whole, but we did encounter some challenges during our experience. Specifically, there were certain tasks that required us to make updates, and we found those processes to be somewhat unwieldy and clunky.
What problems is the product solving and how is that benefiting you?
Thoropass provided invaluable assistance to us during the process of conducting penetration testing on our software to ensure that we meet the necessary security compliance standards. Their expertise played a crucial role in helping us identify potential vulnerabilities and strengthen our overall security posture.
Best Customer Service and Onboarding
What do you like best about the product?
The onboarding and implementation team are great. One thing that sets Thoropass apart from its competitors are all hand-holding meetings and support meetings we had at the beginnging.
The platform was great to work with to check the status of your controls and audit status.
The platform was great to work with to check the status of your controls and audit status.
What do you dislike about the product?
The sales person could have been more transparent on the timeline of getting SOC 2 Type 2 certification.
What problems is the product solving and how is that benefiting you?
It is solving our compliance and security compliance requirements for gaining enterprise customers.
Excellent way to stay organized and streamline the compliance processes
What do you like best about the product?
Roadmaps and Status markers. Ease of use. Ease of implementation & Customer Support.
What do you dislike about the product?
Nothing off hand. Maybe more features in the data rooms.
What problems is the product solving and how is that benefiting you?
Organizing Vendors, security and compliance.
Thoropass Made our Audit Easy
What do you like best about the product?
The platform itself is easy to follow and makes the audit process very digestible with examples and templates. We could not have achieved our SOC1 type I in 2months without Thoropass platform and their team helping us.
What do you dislike about the product?
There were a few tiny bugs/nuances with how it works, but there's not much (if anything) bad to say.
What problems is the product solving and how is that benefiting you?
Audit compliance automation
Thoropass simplifies the compliance process with its skilled support and seamless handoff to audit.
What do you like best about the product?
I liked that I did not have to find my audit partner and then explain to that partner where all the evidence was located. Thoropass made that effort very easy.
What do you dislike about the product?
Integration with Microsoft Intune didn't seem to provide any value.
What problems is the product solving and how is that benefiting you?
Thoropass has helped us to establish SOC 2 Type 1 compliance and has our team on track for Type 2
Changing for the best
What do you like best about the product?
I enjoyed working with this platform. In our case we have started working with a different platform, making little progress. Switching to Thoropass was the best decision we could have made.
What do you dislike about the product?
They don't have a live chat. Some errors happen when editing policies.
What problems is the product solving and how is that benefiting you?
Tracking the status of tasks, controls and activities.
Speedy response and great communication
What do you like best about the product?
Good communication with the team, speedy response and completion of deliverables
What do you dislike about the product?
Price as a small business is always a factor
What problems is the product solving and how is that benefiting you?
Pen Testing and Audit for SOC II
Superior to Vanta/Drata, but still room for improvement
What do you like best about the product?
With Thoropass, you have hands-on help to get over the audit hump. The pre-provided reports are great if you've never had a SOC audit before, the testing coverage is broad and the team is extraordinarily helpful. You get the distinct feeling that these folks were auditors first, and software developers second, rather than the other way around.
We arrived having already established our procedures and controls from a traditional audit and had built our engineering processes around those controls. Some of them did not align with the default policies, so we worked with the team to adjust the controls to match making sure the SOC standard was adhered to. This allowed us to stick with our original policy docs that our team was already trained around.
Further, the team continues to meet with you throughout the year so that the Type 2 audit is a breeze and virtually all the materials have been collected over the period already.
Major distinction from Vanta/Drata: they don't insert expensive systems into your AWS or Azure environment for continuous monitoring. I've heard those folks end up costing their customers a lot just in increased AWS costs.
Also, the price is exceptional.
We arrived having already established our procedures and controls from a traditional audit and had built our engineering processes around those controls. Some of them did not align with the default policies, so we worked with the team to adjust the controls to match making sure the SOC standard was adhered to. This allowed us to stick with our original policy docs that our team was already trained around.
Further, the team continues to meet with you throughout the year so that the Type 2 audit is a breeze and virtually all the materials have been collected over the period already.
Major distinction from Vanta/Drata: they don't insert expensive systems into your AWS or Azure environment for continuous monitoring. I've heard those folks end up costing their customers a lot just in increased AWS costs.
Also, the price is exceptional.
What do you dislike about the product?
We ran into some issues with the actual auditors not wanting to find a policy in our documents because our documents weren't their default standard documents. The tool asks you to link the policy for the auditor to review and many times the auditor came back asking us to screenshot the exact place in the documents where the policy existed rather than reading it themselves. I would have preferred that they reviewed our documents thoroughly before asking for assistance.
What problems is the product solving and how is that benefiting you?
Helps us stay SOC compliant without a huge annual auditor headache
showing 11 - 20