Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
1,171 reviews
from
External reviews are not included in the AWS star rating for the product.
Can't imagine scaling without it
What do you like best about the product?
The way it grows with you is real win. At first, we just needed SOC 2, but now we're managing ISO and vendor risk, too all in the same system. It's flexible but doesn't get bloated.
What do you dislike about the product?
You do have to invest time to set it up ight. Not a magic button, but the payoff is worth it
What problems is the product solving and how is that benefiting you?
Secureframe helped us stay audit-ready as we scaled. We use it across departments now from engineering to legal to manage compliance without slowing down growth.
One tool to manage all our framework
What do you like best about the product?
We're jugging SOC 2, HIPPA, and PCI, and Secureframe helps us avoid doing triple the work. It highlights overlapping controls and tells us when something applies to more than one frame.
What do you dislike about the product?
Sometimes we had to manually tweak how some controls were mapped but it beats managing everything separately.
What problems is the product solving and how is that benefiting you?
As a fintech handling sensitive data, we needed strong compliance. secureframe helped us unify our audits and made our internal reporting way more efficient.
From Compliance Anxiety to Confidence—Thanks to Secureframe
What do you like best about the product?
Its biggest strength is the clarity of this platform. I'm an IT generalist so I don't pretend to be a compliance expert but Secureframe lays it all out for you in bite-sized chunks. The policy library is a godsend for those starting from scratch, and the automated evidence extracts from tools such as Google Workspace and Microsoft 365 are flawless. Our onboarding felt very prepared and process-driven, but we could have been warned of this early in the buying process to stave off confusion. The customer success team that did our initial setup were proactive and customized for us so it didn't feel 'off-the-shelf'.
What do you dislike about the product?
Its one downsides: little weak on the mobile end. I wish I could approve tasks / check alerts wherever, not just at my desk. There is also limited depth in some of the integrations, e.g. our endpoint security tool requires us to manually upload evidence.
What problems is the product solving and how is that benefiting you?
We have enterprise contracts that require SOC 2 compliance, but we are small and have no one whose full-time job is security. But thanks to Secureframe, 80% of the work was automated. We now have the tools in place to show compliance year-round and have even sped up sales cycles by not just ensuring compliance during an audit.
Fast setup, real impact
What do you like best about the product?
We were up and running in less than a week. Policies, training, monitoring all rolled into one tool. Their team didn't just sell us software, they guided us through the actual process.
What do you dislike about the product?
Integration with some of our more niche tools weren't automatic, but we worked around it.
What problems is the product solving and how is that benefiting you?
We needed a way to prove we were secure without hiring a consultant. Secureframe made it easy to certify and even train our team on security best practices.
A Must-Have for IT Teams Managing Multi-Framework Compliance
What do you like best about the product?
Secureframe automates control evidence collection and task delegation to streamline compliance across SOC 2, HIPAA, GDPR etc. As an IT policy manager I love the automatic tracking of employee training and acknowledgements. The AWS and Okta integrations alone save us hours, the audit trail feature makes compliance during vendor assessments a piece of cake. And when we have questions about how to navigate confusing control mappings, their support has been phenomenal.
What do you dislike about the product?
Reporting could be a bit more flexible. The default templates are terrific, but if you ever want to export custom reports for leadership it gets harder. I would also like more integration into Slack for alerting, as, at present (and understandably), some notifications are still necessitating manually logging into the platform.
What problems is the product solving and how is that benefiting you?
Gone are the days we spent hours trying to follow system logs or user access reports And because Secureframe is continuously monitoring our systems, we are able to catch those gaps ahead of time which results in lower risk. It also allowed us to even out some security missteps between departments that was an absolute nightmare before.
Compliance that works in the background
What do you like best about the product?
It's always running. I get alerts if something is off, and i don't have to constantly log in and babysit it. Their continuous monitoring saves me from nasty audit surprises.
What do you dislike about the product?
The design could use some polish. It works fine just not the most modern UI.
What problems is the product solving and how is that benefiting you?
We were reactive before fixing issues last minute before audits. Now, secureframe keeps us in a good place all year round. It's like having a security alarm system for our cloud environment.
Turned Compliance from a Burden into a Strategic Advantage
What do you like best about the product?
Secureframe has both saved the CEO of Secureframe a fortune in making compliance easier and faster to go through, and turning it from an operating cost into a core product! With capabilities for seamless integration with our AWS environment and HR tools (like BambooHR), the platform automated approximately 80% of the evidence collection required for SOC 2 Type II, saving us hundreds of team hours. Pre-built policy templates and real-time gap analysis gave us the confidence to go after enterprise clients without taking away from engineers. The audit readiness dashboard was particularly impactful; it provided our board and investors the assurance they needed in our security posture that allowed us to do due diligence faster as we negotiated terms for more recent funding rounds.
What do you dislike about the product?
In some areas it is very strong especially the higher level reporting capabilities and functionality. Take, for example, the compliance metrics that had to be manually adjusted in order to be exported as digestible slides for stakeholders. Some members of the non-technical team (Legal/HR) had minor difficulties during onboarding but their support was always there to bridge any gaps.
What problems is the product solving and how is that benefiting you?
We tried using spreadsheets, relying on consultants and scrambling at the last minute when it was time for an audit. We were able to transition into SOC 2 compliance in 11 weeks ahead of schedule and our next target is ISO 27001, also using same platform. It has had a measurable impact on revenue: this quarter we closed three additional enterprise deals where compliance was necessary and our sales cycle has been reduced by 30%, because future customers trust our automated reports. To a scaling SaaS company, Secureframe isn't just a tool — it has become a cornerstone of our governance strategy.
Worth Every Penny for Time-Strapped Founders
What do you like best about the product?
The continuous monitoring is magic. We used to treat our annual audits as if we were being audited by the FBI (back when we were a 15-person SaaS company). That way, Secureframe is now able to alert the other team members in real-time whenever an employee allows their MFA to expire for a given quarter. The Slack alerts mean I can take action immediately. Auditor matching was great too — they put us in touch with a cost-effective firm that specialized in our industry.
What do you dislike about the product?
Certain alerts are often too broad (e.g., about innocuous DNS name changes), leading to false positives. Specifically, a knowledge base on how to tweak the notification thresholds.
What problems is the product solving and how is that benefiting you?
Compliance went from a reactive cost center to an adjunct marketing asset. Our rep leans on the live compliance dashboard while giving demos to show our position on security. Shortened sales cycles by 2-3 weeks because prospects trust our certifications.
Secureframe Transformed Our Compliance Workflow from Chaotic to Streamlined
What do you like best about the product?
Secureframe has saved the day for us in managing and maintaining SOC 2 and ISO 27001 compliance as an IT Support Specialist. Evidence collection automation (especially with integrations to Azure AD, Jira, GitHub) has reduced hours of following up manually. The dashboard is very easy to use and tends to make items that can seem difficult, a piece of cake with basic tasks delivered every day. And I like the ready-made policy templates a lot, it just makes it easier to get everything set up when we hire someone. Their customer support is very nice and responsive, e.g. if you need a new control mapping or got any problems in integration they will help you with its solution.
What do you dislike about the product?
There are a couple of our legacy systems (our on-premise asset management tool, for example) which don't integrate so we still need to manually upload evidence against those. If able, the alert system can become more granular with certain notifications that paddle a little too much and manually authorize even the smallest change will reduce unnecessary work.
What problems is the product solving and how is that benefiting you?
Compliance with Secureframe: No more last-minute scrambles before audits It is now an ongoing process, providing us with insight into our security postures at any given time. One-Valley-of-Truth : Easy to handle vendor security questionnaires since all the evidence is in one place The biggest benefit? Never again the auditors are coming. We can be audit-ready all the time.
Our sales team LOVES the Trust Center
What do you like best about the product?
The trust center features is such a game-changer. We just send that link to prospects and skip half the security question. It shows off our SOC 2 and ISO creds beautifully.
What do you dislike about the product?
We didn't realize some audit partner options cost extra. That should've been clearer up front.
What problems is the product solving and how is that benefiting you?
We needed a faster way to prove to client we were secure. Secureframe helped us get certified,. then publish a security page that actually looks impressive. Now sales can focus on selling not explaining compliance.
showing 761 - 770