Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
790 reviews
from
External reviews are not included in the AWS star rating for the product.
Solid SOC 2 Platform
What do you like best about the product?
Secureframe just works for SOC 2. We set it up back in 2021, and it barely takes any in-platform maintenance to ensure compliance.
The team is great to help address any problems that come up.
The team is great to help address any problems that come up.
What do you dislike about the product?
Minor quality of life improvements. E.g., test management associated with policies could use some improvements.
What problems is the product solving and how is that benefiting you?
SOC 2 Type 2 Compliance
Excellent & Straightforward
What do you like best about the product?
I like the simplicity, it's easy to understand and therefore doesn't get in the way of your everyday processes, it's also easier for other user's to interact with should they require policy acceptance or to add evidence.
What do you dislike about the product?
Not all integrations were initially available, but they did implement the capability to create custom integrations, this required a little more playing about with, but the CS manager was always available to walk me through it.
What problems is the product solving and how is that benefiting you?
Collating evidence in one place for the auditor to peruse. It's also allowing us to confidently and easily map between multiple frameworks which gives us more confidence that good work is being done and reported.
SecureFrame Rocks! Top Notch Service
What do you like best about the product?
We have been working with SecureFrame for the last 3 years I have been with BlueModus. The Representative assigned to us has been top notch (respecful, informative, knows the product incredibly well, a real 'owner' of the product). The reason I bring this up is because SecureFrame comes off genuine and shows they truly care about our success. It's one thing for a company to come off like they care, but to have employees that back that and SHOW it - is awesome! Go SecureFrame!
What do you dislike about the product?
SecureFrame seems to be making improvements to their portal UI experience so I would say that could be better however when we mention these issues to our rep, we were pointed to a place to send those features and some seem to be in development!
What problems is the product solving and how is that benefiting you?
Our Soc2 type 2 process every year can be a bit tricky, but with SecureFrame they even did a pre-audit for us!
Best Compliance Automation tool
What do you like best about the product?
- reduces audit overhead by a large margin.
- automated evidence collection across cloud infra (AWS,GCP,AZURE etc) is great.
- UI & Integrations are amazing
- automated evidence collection across cloud infra (AWS,GCP,AZURE etc) is great.
- UI & Integrations are amazing
What do you dislike about the product?
- pricing is high relative to usage
- some automation features feel underdeveloped
- some automation features feel underdeveloped
What problems is the product solving and how is that benefiting you?
- eliminates manual compliance busywork
- automates evidence collection across cloud
- engineers don’t waste cycles pulling screenshots or logs for auditors
- vendor tracking, and policy enforcement into a single system
- automates evidence collection across cloud
- engineers don’t waste cycles pulling screenshots or logs for auditors
- vendor tracking, and policy enforcement into a single system
The road to ISO 27001 certification
What do you like best about the product?
SecureFrame makes compliance simple with seamless integrations for our cloud services and a wide range of frameworks to meet growing customer demands. It’s easy to use, quick to implement, and integrates smoothly with existing tools. The feature set is robust, covering everything from automated evidence collection to policy management, and customer support is fast and knowledgeable. We use it regularly to maintain compliance and prepare for audits — it’s become an essential part of our workflow.
What do you dislike about the product?
I cannot really compare not having used competing products.
What problems is the product solving and how is that benefiting you?
SecureFrame keeps us audit-ready year-round by automating evidence collection and streamlining vendor assessments and risk management. The biggest benefit is having all the information we need — and collect — in one centralized location, making it easy to access, track, and share during audits or customer reviews. This central hub saves time, reduces manual effort, and ensures nothing falls through the cracks.
Great product to assist with SOC-2 compliance
What do you like best about the product?
Secureframe has a clean user interface and provides a good overview of outstanding tasks, tests, and alerts. They're ready to help you whenever you need them. Although much of it is automated, there's also a personal touch. They think along and always try to find a solution that works for our small team. There's a clear onboarding process for new employees. Integrations with Azure and Slack are a huge plus, as well as the Secureframe Agent.
What do you dislike about the product?
Most of it feels relatively generalised, and it was unclear for a couple of items how we, as a small team, we're expected to comply. Some of the automated alerts were flagged as medium or high risk, also partly because we are a small team. We've had some back and forths in general to specify the workflow for our team. Luckily, Secureframe was very willing to help out and find solutions.
What problems is the product solving and how is that benefiting you?
We are a very small team, but still need SOC-2 compliance. Secureframe created a clear overview of what needed to be done to get there, as well as providing multiple tools to help us along the way. Thanks to Secureframe we can ensure our compliance without being overwhelmed by all the requirements.
Wouldn't have obtained ISO27001 without it!
What do you like best about the product?
It automated so many things that just seemed to make the audit run more smoothly in the background, letting me focus on the bigger ticket queries. Customer support were so keen to help and stay close - definitely feels like they want to build a long term relationship
What do you dislike about the product?
Limitations on usage in the trust centre mean I can't get full value from it without paying extra.
What problems is the product solving and how is that benefiting you?
Helping us get ISO27001 certification
Helps to speed up the certification Process across multiple frameworks!
What do you like best about the product?
A great tool to speed up the certification process. We use it for SOC2 and ISO, which is another great benefit - it is certification agnostic and therefore it can be easily adopted to any kind of framework.
As with most certification its used on an anual basis to grant access to the auditor. Its great to get recommendations for external auditors by Secureframe, so they help to find the best suitable auditor, that is already familiar with the tool.
The integrations into our toolset is perfect. With this we have almost 80% of the tests full automated.
CSM and Support are helpful and fast.
Overall a great tool, which we recommend to everyone that needs to deal with more than one certification framework.
As with most certification its used on an anual basis to grant access to the auditor. Its great to get recommendations for external auditors by Secureframe, so they help to find the best suitable auditor, that is already familiar with the tool.
The integrations into our toolset is perfect. With this we have almost 80% of the tests full automated.
CSM and Support are helpful and fast.
Overall a great tool, which we recommend to everyone that needs to deal with more than one certification framework.
What do you dislike about the product?
For some integrations SecureFrame requires to set certain options in one prefered way. In AWS or Azure /M365 there are usually more ways to achive a certain goal. E.G. set firewall active on endpoints. If this is not the same way as Secureframe expects it to be set, the test fails which ends up in uncompliance. This is cumbersome and not always great, cause it creates manual work to set a certain usually automated test to "pass".
Wish SecureFrame would provide more than one way to check automated tests.
Wish SecureFrame would provide more than one way to check automated tests.
What problems is the product solving and how is that benefiting you?
We are the foremost using it for our audit management across multiple frameworks.
But it also helds our complete 3rd party risk management which is super helpful, as its needed across many different certifications.
But it also helds our complete 3rd party risk management which is super helpful, as its needed across many different certifications.
HIPAA Compliance Made Simple with Secureframe
What do you like best about the product?
If we create an S3 bucket without setting the security policies, Secureframe provides the steps needed to pass the test. Once we make the changes, the test passes, allowing us to validate the correctness of the updates. They also validate all security rules and create tickets in Secureframe according to HIPAA compliance requirements, helping us maintain a trustworthy and secure application.
What do you dislike about the product?
I haven’t faced any issues so far, so I have no concerns at the moment.
What problems is the product solving and how is that benefiting you?
Secureframe helps us streamline and maintain compliance with standards like HIPAA, GDPR, and SOC 2. It automates security checks, provides clear steps to fix any issues, and validates changes to ensure they meet compliance requirements. It also offers training for new team members, ensuring they understand compliance standards from day one. This saves us time, reduces manual effort, and helps us maintain a trustworthy and secure application.
Streamlined compliance and security monitoring for our AWS environment
What do you like best about the product?
Secureframe makes it very easy to identify and address configuration issues in our AWS accounts. I like how it automatically runs security checks, flags potential misconfigurations, and gives clear guidance for remediation. The integrations with Jira and GitHub are a big plus—issues flow directly into our existing workflows, so we can track and resolve them without switching tools. The dashboard is clean and gives a good compliance overview at a glance.
What do you dislike about the product?
Sometimes the alerts can feel a bit noisy, with lower-priority issues mixed in alongside critical ones. This means we occasionally spend extra time sorting through findings to prioritize what truly needs immediate attention. I’d also like to see deeper integration options for some third-party security tools.
What problems is the product solving and how is that benefiting you?
Secureframe helps us maintain continuous compliance and security in our AWS environment by automatically detecting configuration errors and potential risks. It consolidates security checks into one place and integrates with Jira and GitHub, so any issues are turned into actionable tickets in our existing workflows. This saves us time, reduces manual audits, and ensures we stay ahead of compliance requirements without slowing down development.
showing 361 - 370