Secureframe Automated Security, Privacy & Compliance Platform

What do you like best about the product?

I like Secureframe’s intuitive interface and well-designed app and webpage. It’s easy to use, understand, and follow, and it helps me see how many tasks are left, what to do, and what the expected outcome is so I can complete and verify them. I find the security reviews valuable for finding gaps, improving security, checking our AWS architecture, and supporting compliance. The team is responsive, helps with questions, and is quick to check, approve, and validate submitted tasks. The onboarding is nice and setup was fairly easy; the tasks are easy to use, and Secureframe tracks progress and shows how many people on my team still need to complete them. I find it helpful and useful, and I think it’s well positioned in the industry and has prestige.

What do you dislike about the product?

I think the notifications could sometimes be improved. I can get a notification for a task I’ve already done, though it’s not a big issue.

What problems is the product solving and how is that benefiting you?

I use Secureframe for security reviews and compliance. It helps me find security gaps we can adjust and improve, and verify our AWS architecture and team security.

What do you like best about the product?

Secureframe helped streamline getting our SOC 2 certification and scope it to our business branch, which felt individualized. I liked their flexibility and response times. They sat down with us in early meetings to understand what our business does and helped scope the audit, so we didn’t have to do extra things that weren’t mandatory for our scope. That helped me avoid guesswork and address questions ahead of time, instead of going back and forth with documentation and the auditor. I also liked the vast majority of their integrations, and setup was straightforward; we could start working right away.

What do you dislike about the product?

I found Secureframe’s UI not very intuitive at first. Some templates were generic, and I wish they had changed based on earlier conversations. After an agent helped us scope what to turn on and off, navigating the rest was a little cumbersome, though it’s not a huge issue - just a minor detail. I'd also like some integrations improved. Some turned on or off automatically because of daily changes, though I’m happy with the vast majority of the integrations.

What problems is the product solving and how is that benefiting you?

We used Secureframe to streamline getting SOC 2 certification and scope it to our business branch. The scope was very individual, which isn’t the usual thing you see out there.

What do you like best about the product?

Easy and straightforward to use. Each task, test, etc has more than enough information and descriptions, in order to complete without difficulty.

What do you dislike about the product?

Nothing at this point. System is very complete.

What problems is the product solving and how is that benefiting you?

We are using SecureFrame to ready ourselves for a SOC2 audit

What do you like best about the product?

I use Secureframe to automate SOC 2 compliance, and it streamlines getting our compliance in order. I like how simple it is to use. I really enjoy the UI and how easily I can navigate around the platform. The initial setup was super efficient.

What do you dislike about the product?

There was additional costs to hook up an MDM

What problems is the product solving and how is that benefiting you?

I use Secureframe to automate and streamline our SOC 2 compliance, giving me a more streamlined way to get our compliance in order.

What do you like best about the product?

Good experience so far. The pricing works well for a startup getting ready for its first SOC 2.

What do you dislike about the product?

Nothing so far. It has been a good experience overall.

What problems is the product solving and how is that benefiting you?

Getting ready for our SOC 2 audit. It keeps our policies and compliance work in one place.

What do you like best about the product?

I find Secureframe simple to use, and it helps us track evidence automatically. I like having a single pane of glass to see a lot of government governance and compliance information. The initial setup was very easy, and the value stood out to me.

What do you dislike about the product?

I need Secureframe to have better MCP and API connections so I can manage it from my AI agents. I also need them to offer all the same editing abilities as the UI.

What problems is the product solving and how is that benefiting you?

I use Secureframe to track evidence for our audits and government risk and compliance requirements.

What do you like best about the product?

I like Secureframe's ease of use and stability when auditors step in to view documents. I also appreciate the customer support and integrations with partner auditing companies, which make documentation sharing easier. Those integrations save us a lot of time and make it clear what needs to be remediated.

What do you dislike about the product?

I found the initial setup had a learning curve, though customer support helped me get a handle on it. I’d also like Secureframe to give me a better handle on, or at least suggest, how often some documents should be renewed.

What problems is the product solving and how is that benefiting you?

I use Secureframe to organize the documents, tests, and controls for SOC 2 preparation, which can otherwise be difficult to get a handle on, especially when I don’t do this often.

What do you like best about the product?

I like their native integrations with many vendors across the software techstack and the templates they provide for documentation!

What do you dislike about the product?

I have not utilized their AI tool for updating documentation enough; however, I would love if I could just upload some answers about my company and have all of the documentation templates be updated accordingly.

What problems is the product solving and how is that benefiting you?

Secureframe allows me to see the full checklist of what is required of my product to meet certain compliance standards, and gives me the step-by-step on how to actually implement those fixes.

What do you like best about the product?

I find Secureframe really easy to use. It simplifies the process of meeting the security compliance that our customers require by functioning as a platform middleman, so we don't have to manually figure out what's needed. I appreciate the progress tracking and the to-do lists it offers, which make it easy to keep track of what needs to be done. The initial setup was very easy as well; I signed up and was able to get it working right away.

What do you dislike about the product?

Some instructions could be improved, especially regarding AWS compliance. It would be better if there were clear steps or instructions on how to set up AWS to be compliant. More detailed todo lists or instructions on this aspect would be nice to have.

What problems is the product solving and how is that benefiting you?

Secureframe simplifies meeting security compliance by automating tasks, providing a platform to manage requirements and track progress easily. It saves me from figuring out compliance requirements manually and is easy to use, making complex security protocols manageable.

What do you like best about the product?

The platform is easy to set up, and the onboarding team was responsive at the start.

What do you dislike about the product?

The renewal and billing process. We had always renewed year by year with a signed Order Form each time. For the 2026-27 term, Secureframe sent no Order Form and we got none of the renewal reminders you would expect. Even so, they issued a ~$10k invoice and kept chasing it, though nothing was signed for that term and we weren't using the product. When we raised this, they kept pursuing payment instead of looking at how the account had actually been handled. Before you sign, check how auto-renewal works for you and get it in writing.

What problems is the product solving and how is that benefiting you?

We bought it to manage our security compliance work. We ended up not using it, so we got little value from it, and the billing dispute has cost us more time than the product saved.