Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
937 reviews
from
External reviews are not included in the AWS star rating for the product.
The Ultimate Compliance Partner For fast moving Teams
What do you like best about the product?
Secureframe is incredibly easy to use. The onboarding process was smooth, and the dashboard is intuitive, We especially love the automated controls monitoring and policy templates that made implementation straightforward. The customer support is responsive and the integrations with cloud tools like AWS, Google Workspace and GitHub work flawlessly. It's powerful yet user-friendly solution.
What do you dislike about the product?
The Initial setup with some integrations took a bit longer than expected , especially syncing with older systems we still use. Some smaller features could use more customization options. while the platform is robust, the learning curve for understanding every feature can be steep if you're not already familiar with compliance framework.
What problems is the product solving and how is that benefiting you?
As a telecom company, compliance is critical and complex. Secureframe simplifies SOC 2 and ISO 27001 for us, reducing manual work and helping us stay audit ready year round. The automated evidence collection and integrations with our existing stack have made security compliance less of a burden, freeing up our team to focus on what really matters: delivering secure services.
Simplified Preparation for Our SOC 2 Type II Audit.
What do you like best about the product?
The ease of implementation was a significant win for us. It took us just an afternoon to link our core AWS infrastructure, namely IAM, EC2, and RDS, and we quickly started identifying gaps. There are a surprisingly large number of SOC 2 features. Pre-built policies and automatically collected evidence meant that a massive amount of manual work was converted into a manageable process.
Every day, we use it, and the interface is easy enough for our non-technical team members to see our status in compliance.
Every day, we use it, and the interface is easy enough for our non-technical team members to see our status in compliance.
What do you dislike about the product?
We choose this initial pricing because of our bootstrapped budget, but we were justified almost immediately in the ROI through saved engineering hours. It would be nice to have filtering capabilities within the evidence library to quickly locate past alerts for any issue.
What problems is the product solving and how is that benefiting you?
Before using Secureframe, our small engineering team would spend weeks before an audit frantically gathering evidence manually. It automated approximately 70% of control monitoring to provide continuous visibility and an ability to feel audit-ready at all times. It wasn't just a tool, but a partner that gave us the confidence to provide to our enterprise clients regarding our security.
Secureframe makes vendor security Reviews Smooth and Stress Free
What do you like best about the product?
We Love how intuitive secureframe is! from sending assessment to tracking response, it's seamless. The dashboard is clear and support is always ready to jump in when we need help.
What do you dislike about the product?
It would be really great if there were more integration options with our internal tools. But honestly, this hasn't stopped us from using it daily the valve we get far outweighs this minor gap.
What problems is the product solving and how is that benefiting you?
Secureframe helps us manage vendor security and privacy assessments with ease, saving time and boosting trust. It's streamlined a task that used to be slow, manual and error prone
Our one source of truth for cloud compliance
What do you like best about the product?
As a company firmly grounded in the Google ecosystem, the out-of-box integrations with Google Cloud Run, Cloud SQL, and Workspace did it for me. It was easy to set up and it keeps an eye on all of our infrastructure for any misconfigurations. It has turned into one of my most used tools; when I’m looking at alerts overnight, it’s the first tab I open. The best thing is the peace of mind it gives us: our GCP now is constantly audited for compliance.
What do you dislike about the product?
We get alerts in Google Cloud Storage buckets for little, non-essential config drift sometimes. It’s not as intuitive (or as quick to set up to avoid alert fatigue) to tune the sensitivity for those specific controls, and it takes a few clicks to fine-tune properly. It would be nice to have a less freeform setting for alert thresholds.
What problems is the product solving and how is that benefiting you?
With Secureframe, we are always audit-ready. Significantly reduced the number of hours the DevOps team dedicate to manual compliance checks and been able to refocus resources in other areas. Our auditor was wowed during our last audit cycle by the clean, automated evidence trail that allowed the audit to move at a much faster pace, little friction and we were granted our certification.
Fast track to cloud compliance
What do you like best about the product?
That ease of integration is what really made it shine for us, and we were able to set it up with our existing Google Cloud Run, Google Cloud SQL, and Google Cloud Storage configurations easily. It just sucked in the needed data without burps and the feature set for compliance across these services is robust. We've been using it daily just to stay on top of configurations, and the customer support has been fantastic in sales and for initial onboarding and walking us through a couple custom mappings that saved us a lot of trial and error.
What do you dislike about the product?
And the pricing may seem a bit high for teams in the midsize - like ours when we start scaling the integrations. There were a couple of minor issues with syncing data for Google Workspace during our busiest times but nothing that hampered our work.
What problems is the product solving and how is that benefiting you?
In our case, keeping ahead of cloud compliance was turning into a manual auditing nightmare by checing multiple Google Cloud services, causing us to miss misconfigurations, prepping for audit after audit. We automated around 70% of our evidence collection of security compliance thanks to Secureframe, freeing our team to move from the drudgery of logging to driving proactive threat hunting. We had to confirm to one of our vendors that we had a solid solution for ID&V and be able to provide reports so as a start up, it's really given us peace of mind around being able to report on our security posture – which has helped us in the vendor assessment part of our business expanding, saving weeks of audit cycle.
Organized our disordered vendor risk management system.
What do you like best about the product?
It’s amazing how seamlessly it integrates with our already existing HR and IT stacks. It was easy to connect to Okta and Rippling, which fully automated our user access review process. New hires in Rippling are now automatically assigned the necessary compliance training in KnowBe4, and their system access levels are provisioned correctly from day one. The vendor risk assessment module is user-friendly and has helped us make our procurement workflow standardized.
What do you dislike about the product?
We needed to spend a little time customizing the default templates for our use cases. I’d also like to see more advanced and visually customizable reporting features for third-party risk to make the data more presentation-ready for executive leadership.
What problems is the product solving and how is that benefiting you?
We chose Secureframe not only for its automated support, but also because of its integrations with our technology stack. We eliminated a heavily spreadsheet reliant, email thread stacking manual process prone to error. SaaS application access has become a single source of truth, so as a company we can onboard new vendors with the knowledge that we have conducted a consistent and thorough security review every time.
We Automated our SOC 2 End to End
What do you like best about the product?
Priority number one was a successful execution, and to make that happen as quickly and efficiently as possible. The decision to proceed was not a difficult one to make. "We were extremely quick to decide to get on social and streams. We have Secureframe plug into these AWS services, our core services, like IAM, EC2, and RDS in just a few days. Milling keeps tabs on the status of those measures, but it's the of the ongoing collection of evidence and responses that is the real benefit; it chews silently away in the background, and when I take my morning seat and gingerly peek at the dashboard I’ve got a live snapshot on our compliance posture in just about real-time. The customer support was excellent too, in particular when we were fine-tuning permissions for the AWS Config integration to have full coverage, without being overly permissive.
What do you dislike about the product?
The pricing was a factor for our size but in actuality, the time saved in engineering hours means the ROI was a no-brainer. Feature wise, it would be nice to have more advanced filter options in the evidence library. Finding a particular alert from a month past can sometimes mean a bit of a log-dig, after all.
What problems is the product solving and how is that benefiting you?
Prior to Secureframe, our SOC 2 audit prep was a manual disaster that tied up our entire engineering team for weeks. Now, it is automating some 80 percent of our evidence collection. This has given our engineers almost 20% of their time back to develop features instead of screen shot taking for auditors. It's also given us and our sales team the credibility of an approved security stance to go after and close large enterprise contracts.
Solid Compliance Platform with Great Usability for Auditors
What do you like best about the product?
As an auditor, one of the standout features of Secureframe is how easy it is to navigate and access documentation. The file organization and evidence download process are both intuitive and efficient, which makes our work much smoother—especially when reviewing large volumes of documentation across multiple clients.
The Policy module is another strength. It's straightforward, easy to understand, and makes it clear how policy management ties into the broader compliance program. This is especially helpful for clients who are working toward frameworks like SOC 2 and ISO 27001 for the first time.
The Policy module is another strength. It's straightforward, easy to understand, and makes it clear how policy management ties into the broader compliance program. This is especially helpful for clients who are working toward frameworks like SOC 2 and ISO 27001 for the first time.
What do you dislike about the product?
One improvement I'd like to see is a more robust system for leaving comments and flagging evidence. Right now, it's not always clear how or where to communicate specific feedback within the platform. A more formalized or visible commenting workflow would make collaboration between auditors and clients even more seamless.
What problems is the product solving and how is that benefiting you?
Overall, Secureframe has been a strong platform that simplifies the compliance process for both clients and auditors.
Essential For Payment Compliance
What do you like best about the product?
The template provided are easy to customize for our specific needs which saves us time in documentation
What do you dislike about the product?
Some functionalities are better suited for lager organizations, which can limit smaller teams
What problems is the product solving and how is that benefiting you?
It ensures that our payment processes are compliant, which builds trust with our customers and reduces the risk of fines
Streamlined Audit Management and Cloud compliance for Retail
What do you like best about the product?
The platform is intuitive and makes audit management smooth, integration with our cloud tool was seamless and the automated evidence collection is a huge win for our lean compliance team.
What do you dislike about the product?
Occasionally, The UI feels a bit clunky when navigating multiple frameworks, Also, real time alerts could be more dynamic but nothing that truly impacts our workflow negatively.
What problems is the product solving and how is that benefiting you?
Secureframe helps us stay audit ready year round, It simplifies cloud compliance and reduces manual work, which saves us time and keeps our retail operations secure and efficient.
showing 21 - 30