Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
534 reviews
from
External reviews are not included in the AWS star rating for the product.
SOC 2 made easy
What do you like best about the product?
Thoropass has made our SOC 2 process virtually painless. It also provides a lot of really helpful integrations with our cloud service provider and other utilities that makes it easy for us to show our customers that we are compliant.
What do you dislike about the product?
I haven't found much use for the questionnaire tool; in general each one we get is specialized enough that answers to other questionnaires aren't responsive, so it typically makes me do even more work than just filling it out myself.
The platform itself occasionally has some buggy behavior, but the team has been great about responding to issues that I raise, so that's less of a problem.
The platform itself occasionally has some buggy behavior, but the team has been great about responding to issues that I raise, so that's less of a problem.
What problems is the product solving and how is that benefiting you?
Getting us onboarded to the SOC 2 process was the big draw, but it has made so much of the SOC 2 annual process seamless too.
Everyone is very helpful and Informative
What do you like best about the product?
The responsiveness to questions and walk through on what is needed and help along the way from auditors and assigned customer success team
What do you dislike about the product?
Nothing this is my first year doing audit and very happy
What problems is the product solving and how is that benefiting you?
Thor pass helped us with our Soc2 Audit
Effortless Onboarding, Exceptional Support
What do you like best about the product?
I love how user-friendly the platform is and how it simplifies our work for SOC audits. The checklist and security manual are vital in guiding us efficiently through the audit process. Having Harrison, our account manager, offer thorough assistance significantly eased our onboarding and use of Thoropass, making it a pleasant experience.
What do you dislike about the product?
I found it challenging at first to understand what we're supposed to do because there are a lot of tasks in the program. Initially, it was a bit overwhelming to understand what we needed to do and how to do it.
What problems is the product solving and how is that benefiting you?
I use Thoropass to organize security records and complete SOC audits efficiently, enhancing our credibility with customers. The checklist and security manual simplify preparations, and support from our account manager makes the process manageable, even for first-time audits.
Thoropass SOC2 Process
What do you like best about the product?
The UI is easy to use, and the customer service is exceptional
What do you dislike about the product?
I have no dislikes at all. The UI and processes are made easy to use.
What problems is the product solving and how is that benefiting you?
Completing a SOC2 Audit
Great experience
What do you like best about the product?
Thoropass is very fast with updates, responses, and giving feedback on pentest remediation info.
What do you dislike about the product?
Nothing! The entire process was a smooth experience.
What problems is the product solving and how is that benefiting you?
Thoropass detects and analyzes various security risks that our applications may face, allowing us to develop more secure services to protect our workflow and sensitive information.
A strong focus on compliance automation and audit management
What do you like best about the product?
Structured Compliance Frameworks – Thoropass provides pre-mapped controls for SOC 2, ISO 27001, and other frameworks, significantly reducing time spent on manual control mapping and cross-referencing.
Integrated Evidence Collection – The automated integrations with tools like AWS, Google Workspace, and HRIS systems streamline evidence gathering, helping maintain audit readiness year-round.
Guided Audit Experience – The platform not only organizes compliance work but also connects directly with experienced auditors, ensuring a seamless transition from preparation to certification.
Clear Task Management & Tracking – Its dashboard and workflow tools allow for easy assignment, monitoring, and closure of tasks, which keeps teams accountable and eliminates confusion.
Responsive Support Team – Thoropass provides prompt, informed support and advisory guidance, which is invaluable when navigating complex compliance requirements.
Integrated Evidence Collection – The automated integrations with tools like AWS, Google Workspace, and HRIS systems streamline evidence gathering, helping maintain audit readiness year-round.
Guided Audit Experience – The platform not only organizes compliance work but also connects directly with experienced auditors, ensuring a seamless transition from preparation to certification.
Clear Task Management & Tracking – Its dashboard and workflow tools allow for easy assignment, monitoring, and closure of tasks, which keeps teams accountable and eliminates confusion.
Responsive Support Team – Thoropass provides prompt, informed support and advisory guidance, which is invaluable when navigating complex compliance requirements.
What do you dislike about the product?
Limited Customization for Unique Controls – While the platform covers major frameworks well, adding company-specific controls or tailoring workflows sometimes requires workarounds or external documentation.
Occasional Integration Gaps – Some integrations (e.g., niche HRIS or ticketing systems) are not fully supported, which means certain evidence must still be uploaded manually.
Reporting Limitations – Standard reports are functional but could benefit from more flexibility and export options for board-level or regulator presentations.
Learning Curve for First-Time Users – Although intuitive once familiar, the platform’s terminology and structure can initially feel overwhelming to teams new to compliance automation.
Audit Coordination Bottlenecks – Scheduling and coordination with auditors through the platform is efficient most of the time, but peak periods can result in slower response times.
Occasional Integration Gaps – Some integrations (e.g., niche HRIS or ticketing systems) are not fully supported, which means certain evidence must still be uploaded manually.
Reporting Limitations – Standard reports are functional but could benefit from more flexibility and export options for board-level or regulator presentations.
Learning Curve for First-Time Users – Although intuitive once familiar, the platform’s terminology and structure can initially feel overwhelming to teams new to compliance automation.
Audit Coordination Bottlenecks – Scheduling and coordination with auditors through the platform is efficient most of the time, but peak periods can result in slower response times.
What problems is the product solving and how is that benefiting you?
Manual Compliance Burden – Thoropass automates evidence collection from systems like AWS, Google Workspace, and HR tools, removing the need for repetitive manual screenshots, exports, and spreadsheets.
Benefit: Saves significant time for the compliance team and ensures evidence is always up to date.
Audit Readiness Stress – Preparing for SOC 2 or ISO 27001 audits can be chaotic; Thoropass provides a structured framework, pre‑mapped controls, and direct auditor connections.
Benefit: Audits become predictable and less disruptive to day‑to‑day operations.
Task Ownership Confusion – In many organizations, compliance tasks fall through the cracks. Thoropass assigns, tracks, and monitors each task.
Benefit: Everyone knows their responsibilities, deadlines are met, and accountability is maintained.
Continuous Monitoring Gaps – Many companies only focus on compliance at audit time. Thoropass maintains integrations and automated checks year‑round.
Benefit: The organization remains compliant continuously rather than scrambling once a year.
Benefit: Saves significant time for the compliance team and ensures evidence is always up to date.
Audit Readiness Stress – Preparing for SOC 2 or ISO 27001 audits can be chaotic; Thoropass provides a structured framework, pre‑mapped controls, and direct auditor connections.
Benefit: Audits become predictable and less disruptive to day‑to‑day operations.
Task Ownership Confusion – In many organizations, compliance tasks fall through the cracks. Thoropass assigns, tracks, and monitors each task.
Benefit: Everyone knows their responsibilities, deadlines are met, and accountability is maintained.
Continuous Monitoring Gaps – Many companies only focus on compliance at audit time. Thoropass maintains integrations and automated checks year‑round.
Benefit: The organization remains compliant continuously rather than scrambling once a year.
Penetration testing using Thoropass
What do you like best about the product?
- The process was very easy.
- Very clear instructions about what was required
- Wonderful people who were very helpful in answering questions and proactive in helping out
- Pentest report was thorough and included what I should do to remediate the findings
- Retesting after fixing the findings was easy to request and get done.
- Very clear instructions about what was required
- Wonderful people who were very helpful in answering questions and proactive in helping out
- Pentest report was thorough and included what I should do to remediate the findings
- Retesting after fixing the findings was easy to request and get done.
What do you dislike about the product?
Nothing to add here. May be the cost could have been a little lower.
What problems is the product solving and how is that benefiting you?
Thoropass is helping me get certification including SOC2 Type 2 and HiTrust. This is critical for me since we are in Healthcare industry and these compliance controls are a must-have.
Great value, great team
What do you like best about the product?
I really enjoyed working with Thoropass specifcally on our penetration test, SOC 1 Type 1 and HITRUST audits. They are super responsive when there are problems and helped us get across the finish line ahead of schedule. The penetration testers were very competent and gave great detailed reports of their findings and remediations.
What do you dislike about the product?
Occasionally there are issue with certain evidence requests having very vague requirements, which required some recycle. I know there isn't always a 'one size fits all' answer to every problem, but it would be great to incorporate some of the results of our conversations into the requirements generated for each certification path.
What problems is the product solving and how is that benefiting you?
Thoropass offers a lot of compliance roadmap items for getting certifications such as HITRUST and SOC2. We also leveraged them for penetration testing. We use their new "trust center" feature, which greatly aids in our due diligence process and cuts down on a lot of the time spent filling out vendor questionnaires.
Great Product, Great Partnership
What do you like best about the product?
The benefit of using Thoropass is it's integration to systems for auditing capabilities, it makes it much easier to provide evidence and to ensure needed corrections are addressed immediately. Our account manager, Nat, is super to work with, addresses all of our questions, provides guidance and is quick to respond. We have also used Thoropass for Pen testing which was pretty seamless and offered the same level of professionalism as we have come to know with Thoropass.
What do you dislike about the product?
There are some areas of the program that need enhancement or modifications, such as the risk register, and it would be ideal if some of the objects included sorting and filtering or the ability to customize and add our own fields
What problems is the product solving and how is that benefiting you?
x
Thoropass - Great experiece
What do you like best about the product?
I like that Thoropass has everything you need for audits included in their platform. It was very easy to use and is user friendly.
What do you dislike about the product?
Nothing. It was a great experience. I have nothing negative to say about them.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance
showing 61 - 70