Ciphrix Reviews & Product Details

The team, hands down. We came in with zero background in compliance and no clue how to get our audit started, and they walked us through every single step. The founders really know their stuff on the security and governance side, and they were always quick to answer whenever we had questions. The platform itself is genuinely easy to use, even for someone who's never touched an audit before. Everything's laid out in a way that's simple to follow, the trust center is great for showing customers where we stand, and on top of all that it's really well priced. Hard to fault, honestly. Review collected by and hosted on G2.com.

Not much comes to mind. There's a lot packed into the platform, so it took a little while to get familiar with all of their features but once I got the hang of it, it was smooth. Nothing that ever slowed us down or made us regret the move. Review collected by and hosted on G2.com.

We use Ciphrix for our compliance work, and the biggest standout is that the AI actually does the work. It automates evidence collection and policy management instead of just tracking tasks. As an Enterprise Services Manager, I was spending countless hours on manual chase ups, follow ups, and weekly risk assessments. Ciphrix removed that burden entirely. It feels built for modern teams rather than heavy enterprise GRC, and the time savings have been massive. Review collected by and hosted on G2.com.

The first time login experience was a bit painful, but once you are in, it works smoothly. There are also a couple of areas where the automation could go even deeper, but the team is moving fast and the core functionality already outpaces what I have seen elsewhere. Review collected by and hosted on G2.com.

What I like most about Ciphrix is how it helps me keep my work and progress organized in one place. The month-by-month documentation, along with the evidence-tracking feature, makes it much easier to maintain a clear record of what I’ve completed and what I’ve achieved. I also find the suggestions and the overall tracking tools helpful for spotting areas where I can improve and for making sure nothing important gets overlooked. Review collected by and hosted on G2.com.

One area that could be improved is the overall user experience, particularly the ease of navigation. At times, locating specific information or updating entries takes a bit longer than I expect, which can slow things down. It would also be helpful to have more flexibility when customizing the tracking and reporting features so they better align with individual workflows and day-to-day needs. Review collected by and hosted on G2.com.

The founders are highly knowledgeable and bring deep experience in enterprise security and governance. The Ciphrix platform offers strong, native integrations with the cloud providers we used, which made it straightforward to manage our asset base. The application performs well and simplifies managing our overall governance footprint, whether that’s through risks, corrective actions, audits, tests, evidence collection, or policy management. The support we received also made it easy to stay on track and ensure we were successful. Review collected by and hosted on G2.com.

Ciphrix needs an MCP to make the entire governance lifecycle simpler to manage. Review collected by and hosted on G2.com.

I appreciate the simplicity of Ciphrix's UI and teamwork features. The inbuilt training videos and overall simplicity make the process of preparing documentation much easier. It helped me create all the documents needed for ISO certification efficiently, saving me significant time compared to doing it manually. The support team is extraordinary, helping me complete my tasks on a tight timeline. Review collected by and hosted on G2.com.

I think Ciphrix is good as it is, but maybe the auto log-off time could be extended. While preparing the documentation, I find that I sometimes need more time to stay logged in. If that limit could be extended, it would be great. Review collected by and hosted on G2.com.

Ciphrix helped us achieve ISO 27001 certification with automated compliance scanning across our AWS, GCP, and GitHub environments. The platform consolidates cloud security checks into a single dashboard, which makes it easy to track compliance posture across multiple providers. The weekly compliance checkpoint meetings with the Ciphrix team were valuable — they provided hands-on guidance through the certification process, from Stage-2 audit prep through to closing non-conformities. The team is accessible and genuinely engaged with customer feedback. Review collected by and hosted on G2.com.

Feature requests have taken a very long time to materialise. We requested exception management, weekly compliance reports, and the ability to temporarily disable checks starting in August 2025, and these were still not delivered by March 2026. Automated scanning silently broke for nearly two months without anyone noticing — we had to discover it ourselves. There have been various bugs including React crashes, state saving issues, and disabled checks still running as if enabled. Early on, private keys were visible in the frontend integration UI, which was a significant security concern for a security product. Response times on support issues sometimes required multiple follow-up messages over weeks. Review collected by and hosted on G2.com.

I love how Ciphrix simplifies the ISO 27001 certification process with easier steps and processes. I really like the ease of accessing the application and how it breaks down complex structures, which makes things like risk management, vendor management, policies, evidences, and tests easy to segregate into different categories. Also, the findings from the auditor are made easier to understand with corrective action plans. The initial setup was very easy, and it's great that the application is user-friendly without any need for improvement. I'm also really happy we moved to Ciphrix, transitioning from manual processes. Review collected by and hosted on G2.com.

None Review collected by and hosted on G2.com.

1. The platform is robust. It is well designed & implemented

2. Excellent support from Ashish and Anish. Very responsive & collaborative. Pleasure to interact with them Review collected by and hosted on G2.com.

Nothing particularly. Even if there are minor areas of improvement (like the need for a dashboard to track training progress of our team members), they quickly come up with a fix and support us. Review collected by and hosted on G2.com.

Great communication and guidance from a very knowledgeable team. It integrated well with our platform and took the guess work out of the remediation. Great value Review collected by and hosted on G2.com.

I have nothing to complain about - no notes. Review collected by and hosted on G2.com.