Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
1,157 reviews
from
External reviews are not included in the AWS star rating for the product.
Cloud compliance done right
What do you like best about the product?
It integrates easily with Linode environments, automatically checking for compliance issues without extra manual work.
What do you dislike about the product?
Not really a dislike-an expanded library of tutorials would help junior engineers ramp up faster.
What problems is the product solving and how is that benefiting you?
We now detect compliance gaps instantly instead of waiting until quarterly reviews, making us much more proactive.
Compliance Without Distraction From Core Work
What do you like best about the product?
Dropbox's integration with Secureframe keeps file storage and compliance monitoring connected seamlessly.
What do you dislike about the product?
A minor wish would be more customization for automated reports to align with our internal branding.
What problems is the product solving and how is that benefiting you?
Our compliance team no longer has to manually verify storage policies-they're enforced and monitored automatically.
Compliance that moves at the speed of business
What do you like best about the product?
It keeps pace with our rapidly changing cloud infrastructure, ensuring compliance is never left behind.
What do you dislike about the product?
I wouldn't call it a dislike-more integration with analytics tools would just make the platform even stronger.
What problems is the product solving and how is that benefiting you?
Secureframe allows us to launch new products confidently, knowing compliance is baked into the process.
Uncomplicated SOC 2
What do you like best about the product?
Secureframe makes compliance simple. The platform is user-friendly, well-organized, and easy to navigate. Their customer service is truly outstanding—responsive, knowledgeable, and always ready to help. Highly recommend for anyone working toward SOC 2 or similar certifications.
What do you dislike about the product?
Pricing is on the higher side, but the time and effort it saves makes it a worthwhile.
What problems is the product solving and how is that benefiting you?
Soc 2 Report needed to engage with customers
Continuous Compliance, Zero Guesswork
What do you like best about the product?
This software includes automated evidence collection (cloud/HR/ticketing tools) and real-time drift alerts. Strong policy templates that can be tailored to your organization and centralized vendor risk management. Auditors love our exports — audit prep was reduced by 50%.
What do you dislike about the product?
In-app policy editor is rudimentary; more formatting features could go a long way. The Secureframe Agent sometimes reports BitLocker status incorrectly (false positives).
What problems is the product solving and how is that benefiting you?
With a small team you can now manage SOC 2. Controls, tests, and evidence are all in one place on Secureframe so we stay audit-ready.
GRC Clarity for Mid-Market Growth
What do you like best about the product?
Secureframe makes compliance less of a blackbox to give engineers clear, evidence-based prompts (e.g. "Source DOCX for AWS screenshots to document availability controls," etc.). The guided workflows were awesome for first time, and the vendor risk module really made third-party assessments a breeze. Implementation was easy and the customer support seems super active & friendly manners.
What do you dislike about the product?
The control verbiage is not totally aligned with the expectation of what those “Points of Focus” should be, according to the auditors. Other aspects lean more towards checklist than audit.
What problems is the product solving and how is that benefiting you?
Secureframe is a big win as we move from SMB to mid-market, allowing us to adopt security best practices more quickly and get ready for evidence. That said, it's at least a good base for some of the things we flesh out with auditor comments.
Solid Compliance Platform with Excellent Integrations and Support
What do you like best about the product?
Secureframe is incredibly easy to use, even for team members who are not deeply technical. The interface is intuitive, and navigating between different compliance requirements and integrations feels seamless. Implementation was straightforward, and the onboarding process made it simple to get up and running quickly. Their customer support is exceptional, with every interaction being with someone knowledgeable, friendly, and able to provide clear answers to both platform-specific and general compliance questions. The number of features is impressive for the price, especially when compared to alternatives like Drata, and the ease of integration with a wide variety of SaaS solutions has saved us countless hours of manual work. We use the platform frequently throughout the week to check progress toward SOC 2 and other compliance standards, and it has significantly improved our ability to track and maintain our security posture.
What do you dislike about the product?
The platform is still growing, which means that while new features are added often, they occasionally come with bugs that need to be addressed. These are usually resolved quickly, but they can be mildly disruptive. The pace of changes is fast, and while that is generally positive, it sometimes introduces temporary instability. It is clear the product is evolving rapidly, and although that brings some short-term challenges, the improvements over time have been substantial.
I would love to see Secureframe introduce automated analysis for manually uploaded evidence. While I understand this can be computationally demanding, it would be an incredibly valuable feature to help ensure that the evidence being gathered is accurate and complete. The current manual upload method causes the test to pass, regardless of what is uploaded.
I would love to see Secureframe introduce automated analysis for manually uploaded evidence. While I understand this can be computationally demanding, it would be an incredibly valuable feature to help ensure that the evidence being gathered is accurate and complete. The current manual upload method causes the test to pass, regardless of what is uploaded.
What problems is the product solving and how is that benefiting you?
Secureframe is helping us centralize and automate our security compliance efforts, particularly for SOC 2 and other industry standards. By integrating with our existing SaaS tools, it reduces the manual work of tracking controls and evidence, gives us real-time visibility into our compliance posture, and ensures we stay audit-ready year-round. This saves time, reduces errors, and allows our team to focus on higher-value security and IT initiatives.
Simplified Multi-Framework Compliance
What do you like best about the product?
Our SOC 2 and HIPAA control mapping was launched not in weeks, but days. AWS logs auto-collected for us, taking the drudgery out of grep/kubectl; and I'm sure as heck not going to ask anyone to save me chat logs anymore when we suddenly needed an audit trail courtesy of our vendors. Questions about the overlap of GDPR and HIPAA were also answered by customer support in a day or so, even if they were nuanced. Yesterday we replaced our (clunky) SAML workflows to use it daily for access reviews and training compliance.
What do you dislike about the product?
Limited in Report Export: Reporting is less flexible and allows for only a single custom export. And though most integrations are smooth, a couple tools that you need to run on-prem (anyone still have a physical asset tracker tool?) requires manual uploads.
What problems is the product solving and how is that benefiting you?
We are now multiple weeks ahead of audit prep — Secureframe transparency throughout the dev process kept us accountable as a team. Cut security questionnaire response time by 60% and flagged misconfigurations early.
From Overwhelmed to Audit-Ready in Weeks
What do you like best about the product?
From an IT Manager perspective that has to manage SOC 2 & ISO 27001, the automated workflows from Secureframe saves us hundreds of hours. 90% of the evidence collection was done leveraging the Azure AD/GitHub integrations while the Policy Library acted as a head start.Support team guided us through tedious custom architecture setups. There is just no alternative to the dashboard that performs the real-time gap analysis.
What do you dislike about the product?
The onboarding process was seamless, albeit intensive — a few teams needed their hands held. Some on-prem systems (like our on-prem asset tracker) have no such native integration so they require CSV upload.
What problems is the product solving and how is that benefiting you?
SOC 2 was required by enterprise contracts, but we had no full-time security employees. Secureframe took care of 70% of the work for us, we accelerated sales cycles and we gained round-the-clock visibility of compliance.
Eliminated Compliance Chaos
What do you like best about the product?
For me, by working with Secureframe and using the automated evidence collection (in particular for Jira & Google Workspace) what was previously a SOC 2 compliance nightmare became pretty much a hands-off experience. We were very excited about the pre-built policy templates which would save us weeks of work, and also a dashboard that other products offer for tracking gaps in real time. We had one small problem with setting up GitHub, which we solved in a few hours (thanks support!) The platform is user-friendly — somuch to the extent that even non-technical executors can view compliance status without any intervention from IT.
What do you dislike about the product?
Mobile experience is sluggish Want a more simple way to go in admin mode on my smartphone. The downside is that contextual alerts are vague, they do not tell you much; you need to click through several timeframes. They still require you to manually upload your evidence in some tools (e.g. our currentHR system) but the team are working on more wider integrations.
What problems is the product solving and how is that benefiting you?
Instead of always audit scrambling we did it in a manner suitable to be "audit-ready" at all time so cut our electron-to-electron time back down. Our sales cycle also improved as we are instantly proving our compliance and making sure the security posture is perceived well — all 24/7.
showing 381 - 390