Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
548 reviews
from
External reviews are not included in the AWS star rating for the product.
Super easy and integrated experience
What do you like best about the product?
Everything is integrated, from the tech and monitoring, to the audit. Makes it very easy to deal with.
What do you dislike about the product?
Help in defining more customizable policies that take into account uniqueness of the business could be helpful.
What problems is the product solving and how is that benefiting you?
Automates large portion of SOC2 compliance.
Thoropass: A Project Manager's Essential Ally for ISO 27001 Compliance
What do you like best about the product?
As a Project Manager deeply embedded in the ISO 27001 compliance process, Thoropass has proven to be an invaluable and highly supportive partner. What I particularly appreciate is its comprehensive approach to guiding us through the complexities of information security management. The platform’s ability to centralize documentation, track progress, and provide clear insights into our compliance posture has significantly streamlined what could otherwise be an overwhelming undertaking. The automated reminders and integrated task management features ensure we stay on track, and the readily available support resources have been instrumental in clarifying specific requirements, ultimately making the entire journey towards ISO 27001 certification much more manageable and efficient.
What do you dislike about the product?
While Thoropass generally excels in its support for compliance, there are areas where the user experience could be refined. I've occasionally found the tool to be a bit slow, which can disrupt workflow during critical phases. Furthermore, there are instances where defining what is precisely necessary for certain controls isn't as straightforward as it could be, requiring a bit more effort to interpret. Optimizing the user experience to be even more intuitive and simplifying the navigation for complex tasks would greatly enhance the overall efficiency and user satisfaction, especially when dealing with tight deadlines and intricate compliance requirements.
But these are just details and my own personal considerations. Overall the tool is great and a great support to whoever is working on complicance related processes.
But these are just details and my own personal considerations. Overall the tool is great and a great support to whoever is working on complicance related processes.
What problems is the product solving and how is that benefiting you?
Thoropass is significantly assisting me in my role as a Project Manager responsible for ISO 27001 compliance by providing an all-in-one platform that automates and streamlines the complex process. It acts as a central hub for managing documentation, tracking progress, and understanding our compliance posture, effectively reducing the manual effort typically associated with ISO 27001. The platform's expert guidance, combined with automated evidence collection and continuous monitoring, is making the journey to certification far more efficient and manageable, enabling us to confidently navigate the intricacies of information security management.
Early Stage Startup Founder
What do you like best about the product?
Implementation manager made navigating complexity much easier. Customer support team was particularly friendly and helpful.
What do you dislike about the product?
Sometimes can be difficult to parse technical language, or know which tools are relevant.
What problems is the product solving and how is that benefiting you?
Thoropass is making it easy for us to get SOC2 Compliance
Thoropass streamlines HIPAA compliance
What do you like best about the product?
Thoropass turned our HIPAA program from spreadsheets and guesswork into a clear, repeatable process. The control mapping to the HIPAA Security Rule, policy templates, and evidence automations (cloud/IDP/code repo integrations) saved our team a ton of time and kept us audit-ready year-round. Their support and in-platform auditors were responsive and pragmatic.
What do you dislike about the product?
There is not a lot to dislike about using Thoropass.
What problems is the product solving and how is that benefiting you?
It solves fragmented compliance—policy writing, evidence collection, risk/vendor tracking—by centralizing and automating it. We spend fewer hours chasing screenshots and more time developing our service.
Seamless SOC Audit Support with Intuitive Use
What do you like best about the product?
I appreciate the seamless setup process with Thoropass, which was greatly aided by having a dedicated account manager like Herson, who made the transition smooth and straightforward. The platform's automation features are incredibly helpful, especially with automatic integrations for tools we use, simplifying artifact gathering. Additionally, I value the intuitive nature of the platform and the reasonable, discounted pricing we received, which aligns well with our business needs.
What do you dislike about the product?
I find it inconvenient that within Thoropass, the audit module cannot directly utilize vendor security reviews without the need for manual export and re-upload. This adds unnecessary steps and feels like there could be a more seamless user experience.
What problems is the product solving and how is that benefiting you?
I use Thoropass to enhance customer trust by demonstrating a mature cybersecurity approach with SOC 2 compliance, supported by helpful automations and a dedicated account manager simplifying our setup with seamless artifact gathering.
Audits made simple
What do you like best about the product?
The platform is very easy to use, keeps info organized on one place and offers great customer service support when needed.
What do you dislike about the product?
Audits are never fun and can be very tedious so that's the only hang up but that's not really a Thoropass issue.
What problems is the product solving and how is that benefiting you?
Thoropass helps streamline and manage the SOC 2 Type 2 audit process. It keeps our company organized, reducing stress, and ensuring we meet all requirements efficiently.
I am a repeat customer for Thoropass
What do you like best about the product?
The portal where we enter our information and keep track of the progress of the SOC 2 process, train or team and enter our evidence. Very easy to use.
What do you dislike about the product?
The price is very high for startups like mine and has been a barrier to us keeping the access year over year. I think the price should be lowered so that more companies can keep the subscription, year over year.
What problems is the product solving and how is that benefiting you?
It solves our problem of showing that we are SOC 2 Type 2 compliant for our enterprise clients. It also gives us an easy to use portal to help us get through this arduous task.
Thoropass supported us all the way during SOC2 compliance process
What do you like best about the product?
We are using thoropass to get compliant with SOC2 Type 2 certification
* Patient, quick and reliable customer support.
* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit.
* Many controls are implemented automatically through Thoropass UI
* AWS integration and automatic population of evidence.
* Patient, quick and reliable customer support.
* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit.
* Many controls are implemented automatically through Thoropass UI
* AWS integration and automatic population of evidence.
What do you dislike about the product?
I think frontend UI/navigation can be improved, it's not easy to navigate through ERs, there is no indication of file upload, it can take a few minutes to upload 10 files and until upload is done, it is not clear if file is being uploaded or not
What problems is the product solving and how is that benefiting you?
We need to be compliant with SOC 2 Type 2, Thoropass helps us to keep track of all the controls that we have automatically or semi-automatically.
Thoropass Simpifies and Streamlines Compliance
What do you like best about the product?
Throughout our three years using Thoropass, we have always felt well supported by the team. Whether it was first learning the ropes as we obtained SOC2 Type I, migrating our primary cloud provider ahead of a SOC2 Type II audit, or facilitating a smooth penetration test, the team was always responsive and helpful. A special shout out to all of our auditors for their attention to detail when clarifying evidence request requirements. On the software side, the platform is organized and feature rich, allowing our team to quickly obtain the status of controls, which frameworks they align with, and delegate tasks. The ability to prematurely associate evidence with a control ahead of an audit is invaluable to staying organized. The built in risk register, vendor review, and access review components of the platform are well designed and powerful time savers.
What do you dislike about the product?
One feature that would help our team but is currently lacking would be the ability to define custom monitors.
What problems is the product solving and how is that benefiting you?
Thoropass streamlines our security audits and penetration tests, which are strict requirements for our customers.
Simple and effective product, great people to help you along the way
What do you like best about the product?
The hands on assistance (customer support) as you progress through the controls for you compliance framework. Pricing is competitive with similar products.
What do you dislike about the product?
No downsides found yet, the level of effort is due to the control, not Thoropass, they make it easy
What problems is the product solving and how is that benefiting you?
We need to be SOC 2 compliant, Thoropass is helping with controls and Audit
showing 31 - 40