Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Convenient solution for SOC 2 compliance
What do you like best about the product?
The support has been great. There are inevitably a lot of questions and our CSM has been extremely responsive in helping us problem solve and manage the process.
What do you dislike about the product?
There are some resources that would be helpful for them to develop so that we can better navigate the process ourselves in the future.
What problems is the product solving and how is that benefiting you?
Ensuring we maintain SOC2 compliance which is a necessity operating a fintech company that works with regulated financial institutions.
- Leave a Comment |
- Mark review as helpful
Intuitive tool that gets the job done
What do you like best about the product?
This is the reccomended tool for getting your first SOC 2 or ISO27001 cert, or both. If our company only had those two engagements in scope every year I would recommend this tool every time. It's only getting better feature wise and Jake Dekker, my CSM, was unreal at support. They get compliance and they priced very well in this busy GRC space.
What do you dislike about the product?
No api.. but not the end of the world. Some nuanced issues with pass / fail test logic but nothing crazy as far as dislikes. You can always override the pass / fail logic manually or by uploading your own evidence.
What problems is the product solving and how is that benefiting you?
Putting evidence into the right places for a SOC 2 Type 2 audit. If you get this tool to 100% readiness and know what your doing with the evidence to some extent, this will make a SOC 2 Type 2 audit go by with a breeze. Note, my experience was not with a big 4 firm doing the audit.
A Must-have for Companies Looking to be Compliant
What do you like best about the product?
Secureframe allows your organization to get a jump-start on compliance. Even if you are already SOC 2 or ISO compliant, moving to Secureframe will reduce the amount of time spent on reviewing controls, collecting evidence, and trying to figure out if your controls will satisfy the frameworks criteria.
Secureframe comes with predefined controls, already mapped to the frameworks' requirements, and these controls are written with security in mind, meaning they will satisfy both your SOC 2 requirements, as well as your security requirements from ISO or NIST. Additionally, the platform comes with well-written policies that you are free to use if it suits your organization. These policies are already writtent to satisfy the controls, and you just need to onboard your employees to sign them.
After completing the onboarding with Secureframe, you are already 50% through completing a SOC 2 audit, which through one of Secureframe's partner firms, will utilize the platform alongside you.
Secureframe comes with predefined controls, already mapped to the frameworks' requirements, and these controls are written with security in mind, meaning they will satisfy both your SOC 2 requirements, as well as your security requirements from ISO or NIST. Additionally, the platform comes with well-written policies that you are free to use if it suits your organization. These policies are already writtent to satisfy the controls, and you just need to onboard your employees to sign them.
After completing the onboarding with Secureframe, you are already 50% through completing a SOC 2 audit, which through one of Secureframe's partner firms, will utilize the platform alongside you.
What do you dislike about the product?
I believe the following items are on the roadmap, but they currently are not implemented in the platform:
- FreshDesk implementation
- Better edit capability within the Policy creator, such as adding tables and charts.
- FreshDesk implementation
- Better edit capability within the Policy creator, such as adding tables and charts.
What problems is the product solving and how is that benefiting you?
Secureframe speeds up and simplifies the compliance process, by taking spreadsheets out of the loop. The platform contains all your controls, tests, and evidence, all in one place. The platform also allows for auditing vendors easily and comes with the ability to help secure your cloud infrastructure if you choose to enable this feature.
Help Overriding Failing Tests
What do you like best about the product?
How easy the integrations are. How well things are auto-checked and makes it easier for me to review it. How easy it is to keep myself and my team accountable for SOC2 compliance.
What do you dislike about the product?
Sometimes the integrations aren't fully working and I have to consciously know to override them with manual evidence or form a support ticket. If SecureFrame knows an integration is not working, they should put a note or something to tell me so it's not such an effort.
What problems is the product solving and how is that benefiting you?
Helping us to get further and further into the process of getting SOC2 compliance. It is no easy feat to have a system that helps keep everyone accountable, and this software does that.
Compliance Accelerator for Startups
What do you like best about the product?
The platform was able to help us organize and manage versions of information and enable us to incrementally tackle policies and evidence incrementally. The support team members we worked with were very helpful with onboarding, sync meetings around progress and connecting us with other 3rd parties for auditing and pen testing services.
What do you dislike about the product?
Because Secureframe is standardized platform, the default policies may or may not match the business model or security posture. However, we were able to use most of them with edits and add custom policies to get across the finish line.
What problems is the product solving and how is that benefiting you?
We fully leaned into the platform to manage policies, controls and evidence and provide the details needed for the auditor. Save us a ton time putting form to all the things required for compliance.
Smooth onboarding
What do you like best about the product?
I appreciated the easy and clear onboarding process. They appear to have a well-oiled onboarding team that kept my Engineering team on track. I'd be curious to see how they keep in contact post-onboarding.
What do you dislike about the product?
It would be helpful to have more documentation up-front and available to consume independently without needing the supervision of the onboarding rep and relying on their availability.
What problems is the product solving and how is that benefiting you?
To become HIPAA compliant.
Very Intuitive
What do you like best about the product?
Secureframe is well designed and intuitive. It provides a framework that is easy to follow and the dashboard provided allows you to have a quick snapshot of what is outstanding.
What do you dislike about the product?
I can't really say anything that I dislike.
What problems is the product solving and how is that benefiting you?
It allows us to determine the gaps we have to obtain accreditation. It also provides us with recommended polices and processes for the areas whereby we have identified shortfalls.
Review Secureframe
What do you like best about the product?
The account rep is very helpful. When I have a question, Jack always found a solution for me.
What do you dislike about the product?
I don't really have anything dislike about Secureframe. Every app always has something missing or not to optimum. But they try to improve right away.
What problems is the product solving and how is that benefiting you?
Secuframe pull out all the data points and made everything very easy and transparent.
Fantastic experience
What do you like best about the product?
I engaged Secureframe for SOC2 compliance support. The experience was fantastic, from sales all the way to technical support. I received sharp and prompt support from the best-in-class security, compliance, and customer success experts. I am impressed. The Secureframe product streamlined every step for us, automating hundreds of manual tasks. Before engaging Secureframe, we did try to do everything ourselves, lost thousands of hours, and went nowhere. I wish we have worked with Secureframe earlier.
What do you dislike about the product?
I did not know that support for SOC 2 "Processing integrity" and "Privacy" are unavailable yet. I wish this is more transparent to me earlier.
What problems is the product solving and how is that benefiting you?
A lot of integrations are available. Secureframe assisted in managing vendor and employee data much easier.
Great white-glove experience with Secureframe
What do you like best about the product?
It is very easy to use and the amount of help I get is phenomonal! The Secureframe client is going to work out VERY well and I just have to say it again...the amount of help I get in Slack/email/Zooms from Jake Dekker is WAY above average!!!!
What do you dislike about the product?
There are some tests on the AWS side that are more difficult to complete. Sometimes they don't refresh correctly but folks at Secureframe ALWAYS help with that.
What problems is the product solving and how is that benefiting you?
It is allowing us to figure out how we get SOC2 Type 1 and 2 as well as HIPPA compliant. There are many policies it creates that would have to be created from scratch. There are many tests that help push us in the correct direction...and there is always help to get there!
showing 111 - 120