Secureframe Automated Security, Privacy & Compliance Platform

What do you like best about the product?

I find Secureframe simple to use, and it helps us track evidence automatically. I like having a single pane of glass to see a lot of government governance and compliance information. The initial setup was very easy, and the value stood out to me.

What do you dislike about the product?

I need Secureframe to have better MCP and API connections so I can manage it from my AI agents. I also need them to offer all the same editing abilities as the UI.

What problems is the product solving and how is that benefiting you?

I use Secureframe to track evidence for our audits and government risk and compliance requirements.

What do you like best about the product?

I like Secureframe's ease of use and stability when auditors step in to view documents. I also appreciate the customer support and integrations with partner auditing companies, which make documentation sharing easier. Those integrations save us a lot of time and make it clear what needs to be remediated.

What do you dislike about the product?

I found the initial setup had a learning curve, though customer support helped me get a handle on it. I’d also like Secureframe to give me a better handle on, or at least suggest, how often some documents should be renewed.

What problems is the product solving and how is that benefiting you?

I use Secureframe to organize the documents, tests, and controls for SOC 2 preparation, which can otherwise be difficult to get a handle on, especially when I don’t do this often.

What do you like best about the product?

I like their native integrations with many vendors across the software techstack and the templates they provide for documentation!

What do you dislike about the product?

I have not utilized their AI tool for updating documentation enough; however, I would love if I could just upload some answers about my company and have all of the documentation templates be updated accordingly.

What problems is the product solving and how is that benefiting you?

Secureframe allows me to see the full checklist of what is required of my product to meet certain compliance standards, and gives me the step-by-step on how to actually implement those fixes.

What do you like best about the product?

I find Secureframe really easy to use. It simplifies the process of meeting the security compliance that our customers require by functioning as a platform middleman, so we don't have to manually figure out what's needed. I appreciate the progress tracking and the to-do lists it offers, which make it easy to keep track of what needs to be done. The initial setup was very easy as well; I signed up and was able to get it working right away.

What do you dislike about the product?

Some instructions could be improved, especially regarding AWS compliance. It would be better if there were clear steps or instructions on how to set up AWS to be compliant. More detailed todo lists or instructions on this aspect would be nice to have.

What problems is the product solving and how is that benefiting you?

Secureframe simplifies meeting security compliance by automating tasks, providing a platform to manage requirements and track progress easily. It saves me from figuring out compliance requirements manually and is easy to use, making complex security protocols manageable.

What do you like best about the product?

The platform is easy to set up, and the onboarding team was responsive at the start.

What do you dislike about the product?

The renewal and billing process. We had always renewed year by year with a signed Order Form each time. For the 2026-27 term, Secureframe sent no Order Form and we got none of the renewal reminders you would expect. Even so, they issued a ~$10k invoice and kept chasing it, though nothing was signed for that term and we weren't using the product. When we raised this, they kept pursuing payment instead of looking at how the account had actually been handled. Before you sign, check how auto-renewal works for you and get it in writing.

What problems is the product solving and how is that benefiting you?

We bought it to manage our security compliance work. We ended up not using it, so we got little value from it, and the billing dispute has cost us more time than the product saved.

What do you like best about the product?

Having 24/5 access to support and a super hands on CSM was very helpful making getting the certifications we needed easy

What do you dislike about the product?

If its your first time doing compliance, there is a learning curve with the app. But their support helps a lot with this.

What problems is the product solving and how is that benefiting you?

Making getting certs super easy, automating tasks, and creating policies.

What do you like best about the product?

The incredible time savings and efficiency come from their logical structure and turnkey presentation, which make it easier to complete SOC 2 Type II requirements and manage them on an ongoing basis.

What do you dislike about the product?

So far, nothing comes to mind based on our experience to date.

What problems is the product solving and how is that benefiting you?

We used this to implement SOC2 systems, operations, and compliance controls. Its logical structure and broad coverage of information have significantly reduced the time required to complete the work, while also improving overall execution and collaboration across our teams.

What do you like best about the product?

Automated evidence collection plus continuous monitoring is the core value. Secureframe connects read-only to the stack you already run (AWS, GitHub, Azure DevOps, Google Workspace, identity providers, HR tools, ticketing) and pulls configuration and activity evidence on a schedule. Failing tests show up with remediation guidance instead of waiting for the auditor’s request list. For small teams this helps save time and headaches.

What do you dislike about the product?

Some of the tests do not have good instructions on how to complete/pass the test.

What problems is the product solving and how is that benefiting you?

The problem our company was having was to complete a SOC 2 Type 2 audit. Secureframe helped simplify to process to complete this audit.

What do you like best about the product?

Secureframe made our SOC 2 readiness manageable for a small team. The platform is well organized: continuous monitoring tests map cleanly to controls, the remediation guidance on each failing test is concrete, and integrations (GCP, GitHub, Google Workspace) pull evidence automatically. The device agent handles endpoint checks (encryption, password policy, screen lock) without us buying an MDM. Communication with our CSM has been excellent, with fast, helpful responses whenever we hit questions, and issues get resolved quickly.

What do you dislike about the product?

Device agent check-ins can lag after a setting is fixed; a correctly configured device sometimes keeps showing as failing until you run a manual integration sync, which is not obvious. Occasionally two similar tests cover the same underlying control (e.g. incident tracking vs addressing incidents) and it takes a moment to work out where evidence belongs. Minor: some remediation flows assume US-based services (e.g. background check providers), so international contractor screening needs manual evidence.

What problems is the product solving and how is that benefiting you?

We needed SOC 2 (Security, Availability, Confidentiality) to meet enterprise customer requirements, with a two-person leadership team and a distributed contractor workforce. Secureframe turned that from a consulting-heavy project into a manageable checklist: it tells us exactly which controls are failing and why, collects evidence automatically from our cloud and dev stack, manages policies and personnel onboarding (training, acknowledgements, device compliance), and got us from initial setup to audit-ready with an observation window scheduled. It saves us real engineering time every week and gave us a credible security story for enterprise deals.

What do you like best about the product?

Secureframe transformed our SOC 2 compliance from a monthly audit headache into a streamlined, automated workflow by replacing manual screenshot gathering with continuous API integrations across AWS, GitHub, and Okta. Key features like Comply AI auto-fill vendor security questionnaires in minutes rather than days, while the self-service Trust Center lets prospective enterprise buyers review our security posture directly to accelerate sales cycles. Supported by dedicated compliance experts during setup, the platform saves our engineering team dozens of hours each month and easily delivers a strong return on investment.

What do you dislike about the product?

Secureframe automates most of our SOC 2 evidence collection, though occasional sync glitches across cloud integrations still require a bit of manual troubleshooting. It is definitely on the pricier side for smaller teams, but the saved engineering hours and reliable onboarding support make it a solid investment overall.

What problems is the product solving and how is that benefiting you?

Secureframe solves the painful, time-consuming process of manual audit preparation and compliance management by automating continuous evidence collection across cloud infrastructure, code repositories, and HR tools. By replacing manual screenshots with direct API syncs, using AI to streamline tedious vendor security questionnaires, and offering a self-service Trust Center for prospects, it eliminates dozens of hours of monthly engineering overhead, prevents audit surprises through continuous monitoring, and significantly accelerates enterprise sales cycles.