Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
551 reviews
from
External reviews are not included in the AWS star rating for the product.
I am a repeat customer for Thoropass
What do you like best about the product?
The portal where we enter our information and keep track of the progress of the SOC 2 process, train or team and enter our evidence. Very easy to use.
What do you dislike about the product?
The price is very high for startups like mine and has been a barrier to us keeping the access year over year. I think the price should be lowered so that more companies can keep the subscription, year over year.
What problems is the product solving and how is that benefiting you?
It solves our problem of showing that we are SOC 2 Type 2 compliant for our enterprise clients. It also gives us an easy to use portal to help us get through this arduous task.
Thoropass supported us all the way during SOC2 compliance process
What do you like best about the product?
We are using thoropass to get compliant with SOC2 Type 2 certification
* Patient, quick and reliable customer support.
* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit.
* Many controls are implemented automatically through Thoropass UI
* AWS integration and automatic population of evidence.
* Patient, quick and reliable customer support.
* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit.
* Many controls are implemented automatically through Thoropass UI
* AWS integration and automatic population of evidence.
What do you dislike about the product?
I think frontend UI/navigation can be improved, it's not easy to navigate through ERs, there is no indication of file upload, it can take a few minutes to upload 10 files and until upload is done, it is not clear if file is being uploaded or not
What problems is the product solving and how is that benefiting you?
We need to be compliant with SOC 2 Type 2, Thoropass helps us to keep track of all the controls that we have automatically or semi-automatically.
Thoropass Simpifies and Streamlines Compliance
What do you like best about the product?
Throughout our three years using Thoropass, we have always felt well supported by the team. Whether it was first learning the ropes as we obtained SOC2 Type I, migrating our primary cloud provider ahead of a SOC2 Type II audit, or facilitating a smooth penetration test, the team was always responsive and helpful. A special shout out to all of our auditors for their attention to detail when clarifying evidence request requirements. On the software side, the platform is organized and feature rich, allowing our team to quickly obtain the status of controls, which frameworks they align with, and delegate tasks. The ability to prematurely associate evidence with a control ahead of an audit is invaluable to staying organized. The built in risk register, vendor review, and access review components of the platform are well designed and powerful time savers.
What do you dislike about the product?
One feature that would help our team but is currently lacking would be the ability to define custom monitors.
What problems is the product solving and how is that benefiting you?
Thoropass streamlines our security audits and penetration tests, which are strict requirements for our customers.
Simple and effective product, great people to help you along the way
What do you like best about the product?
The hands on assistance (customer support) as you progress through the controls for you compliance framework. Pricing is competitive with similar products.
What do you dislike about the product?
No downsides found yet, the level of effort is due to the control, not Thoropass, they make it easy
What problems is the product solving and how is that benefiting you?
We need to be SOC 2 compliant, Thoropass is helping with controls and Audit
Thoropass Software Review: Compliance Simplified
What do you like best about the product?
What I like best about Thoropass is how it simplifies and operationalizes complex compliance processes like SOC 2, ISO 27001, and HIPAA. The platform integrates seamlessly with our cloud infrastructure (AWS), version control systems (like GitHub), and ticketing tools, enabling automated evidence collection and real-time visibility into our audit readiness.
What do you dislike about the product?
While Thoropass is a powerful platform, there are a few areas with room for improvement. The UI can sometimes feel a bit cluttered, especially when navigating large sets of controls or evidence items—this can slow down workflows for engineers who want to move quickly. Additionally, some of the integrations, while helpful, occasionally require manual tweaking or don't capture edge-case scenarios automatically.
What problems is the product solving and how is that benefiting you?
Thoropass is solving the problem of fragmented, manual, and time-consuming compliance processes. Before using Thoropass, tracking audit controls, collecting evidence, and preparing for frameworks like SOC 2 or ISO 27001 required a lot of coordination across teams and systems
Helpful team to guide you through the platform and process
What do you like best about the product?
It's great how Thoropass gives you a dedicated account manager plus connects you with other experts that know the compliance process inside and out. Plus, they connect you with the audit team at the start to help guide where your gaps may be.
What do you dislike about the product?
Still working through the auditing process so nothing specific yet.
What problems is the product solving and how is that benefiting you?
Thoropass has allowed our small team to tackle SOC2 compliance.
Great experience using Thoropass for SOC2 compliance and penetration testing
What do you like best about the product?
The Thoropass platform for SOC2 compliance is quite robust and really helped with planning and tracking progress on SOC2 compliance items. The auditors seemed knowledgeable and were a pleasure to deal with, and Thoropass provides a lot of assistance in understanding the audit process.
Thoropass penetration testing includes free retesting for 90 days which I haven't seen other pen testers offer and which I found quite valuable. Plus having the results available within the same platform (as the SOC2 compliance) was nice.
Thoropass penetration testing includes free retesting for 90 days which I haven't seen other pen testers offer and which I found quite valuable. Plus having the results available within the same platform (as the SOC2 compliance) was nice.
What do you dislike about the product?
Transitioning from our SOC2 type 1 audit to our first type 2 audit with 6 month observation period didn't entirely match up with annually-scheduled compliance items. Strictly speaking our fault entirely, but maybe Thoropass could have provided clearer guidance for these scenarios.
What problems is the product solving and how is that benefiting you?
Achieving SOC2 Type 2 security compliance, which is important to our customers and has also helped us improve our security & privacy posture which mitigates business risks.
Amazing company for Cybersecurity Certification
What do you like best about the product?
Herson specifically has been amazing and has helped us walkthrough alot of what was necessary for SOC2 certification
What do you dislike about the product?
I'm not sure I have anything I would say was negative about our experience.
What problems is the product solving and how is that benefiting you?
Helping us get Soc2 certified
Great SoC 2 type 1 experience
What do you like best about the product?
They helped us understand the entire process while working with each group.
What do you dislike about the product?
Some of the items were not very clear about what was required and in-scope.
What problems is the product solving and how is that benefiting you?
It was helping to get our soc2 type 1 and 2.
A High Level of Support and Education
What do you like best about the product?
The Thoropass platform exceeds the standard of user friendliness. The resources and checklist make your tasks throughout the year visible, accessible and obtainable. Our bi-weekly meeting with Jade gives the highest level of customer support to an already great platform. Thoropass has integrated into our work flow with ease and influence.
What do you dislike about the product?
I can't think of anything; every question I have ever had has been answered.
What problems is the product solving and how is that benefiting you?
Thoropass is there to help us maintain our SOC2 compliance by providing a platform to manage all of our policies, manuals and security evidence. As a result, our company stays aware and up to date of technology upgrades and security risk. This provides us with successful security compliance audits and certified results available to our customers.
showing 41 - 50