Thoropass Reviews & Product Details

I like the way that Thoropass has an easy to use task based interface that you can easily see what you need to remedy in your cloud platforms to maintain your soc 2 compliance. It also has automated monitors that work with our azure environment to monitor the environment and if anything goes out of compliance it will immediately flag it and give you a task to remediate it. It was easy to implement and integrate with azure. So far the customer support has been great and I use it daily to make sure everything in azure is compliant. Review collected by and hosted on G2.com.

In a couple of interfaces there are sections that require you to click twice but doesn't indicate it. Once you know though its not much of an issue. Review collected by and hosted on G2.com.

I really appreciate Thoropass for its excellent account management and the outstanding human support we receive. Our account manager provides exceptional service, ensuring smooth interaction and assistance, which significantly enhances our overall experience with the platform. In addition to this, the pen test team is truly exceptional, offering expert insights and reliable performance in conducting penetration tests. These aspects of Thoropass greatly contribute to our ability to streamline and manage our compliance efforts effectively, making our work processes more coherent and unified. Review collected by and hosted on G2.com.

I find the actual platform for managing our compliance assets somewhat confusing, which complicates achieving my compliance objectives efficiently. Additionally, I encountered challenges during the initial setup, specifically issues integrating Thoropass with Gusto, which hindered a smooth onboarding process. Review collected by and hosted on G2.com.

As a Project Manager deeply embedded in the ISO 27001 compliance process, Thoropass has proven to be an invaluable and highly supportive partner. What I particularly appreciate is its comprehensive approach to guiding us through the complexities of information security management. The platform’s ability to centralize documentation, track progress, and provide clear insights into our compliance posture has significantly streamlined what could otherwise be an overwhelming undertaking. The automated reminders and integrated task management features ensure we stay on track, and the readily available support resources have been instrumental in clarifying specific requirements, ultimately making the entire journey towards ISO 27001 certification much more manageable and efficient. Review collected by and hosted on G2.com.

​While Thoropass generally excels in its support for compliance, there are areas where the user experience could be refined. I've occasionally found the tool to be a bit slow, which can disrupt workflow during critical phases. Furthermore, there are instances where defining what is precisely necessary for certain controls isn't as straightforward as it could be, requiring a bit more effort to interpret. Optimizing the user experience to be even more intuitive and simplifying the navigation for complex tasks would greatly enhance the overall efficiency and user satisfaction, especially when dealing with tight deadlines and intricate compliance requirements.

But these are just details and my own personal considerations. Overall the tool is great and a great support to whoever is working on complicance related processes. Review collected by and hosted on G2.com.

The Cloud Monitors designed for SOC 2 not only made the compliance process much smoother, but also brought improvements to other areas such as infrastructure security and cost management. The entire process of preparing for SOC 2 was streamlined, and I especially appreciated that everything was automated, with clear instructions provided for resolving any issues detected by each monitor. The support we received from Patrick on the Thoropass team was truly exceptional.

Because most controls are linked through monitors, and those monitors are connected via integrations, implementing the system in our company was incredibly straightforward. Once we set up the integrations, the platform automatically populated much of the necessary information, and many controls were completed without manual intervention.

I also find it very convenient to log in to the Thoropass platform daily to see if there are any new tasks required to maintain compliance or to check for any regressions. Their platform makes it easy to stay on top of compliance requirements, even after achieving the initial certification. Review collected by and hosted on G2.com.

The process of purchasing and managing payments through AWS Marketplace was somewhat cumbersome. I believe it might have been easier if we had used a different purchasing method. However, this issue was primarily due to AWS and not the fault of Thoropass. Thoropass itself is excellent! Review collected by and hosted on G2.com.

We love the team at Thoropass and their help in getting us SOC 2 certified! They answered all of our questions promptly and it was really helpful having access to their knowledge throughout this process. The portal allowed us to save down everything that was needed for the audit and easily & transparently see everything we'd already saved down. It kept our team organized and driving towards our main goal. Review collected by and hosted on G2.com.

I didn't love the fact that you have to upload documents effectively twice (once during the preparation phase and a second time during the audit phase). I wish the documents that I previously uploaded would have remained so that I didn't have to duplicate my work. Review collected by and hosted on G2.com.

Having both a caring and attentive account manager as well as reviewers made the whole annual SOC 2 compliance process easy to go through. What was originally met with anxiousness and angst turned into a good experience. Their site makes it easy to track the things that need to be updated, uploaded, and addressed for the review.

It is also a good place to store vendor documentation and reminders for a monthly vulnerability scan as well as quarterly risk assessment. While not on the top of mind for a compnay constantly developing new features and delighting customers, compliance like this is critical and Thoropass makes it easy to do so.

We have used Thoropass for 3 cycles now and it's gotten better over time. The speed to finish, clarity to evidence requests, and overall communication has increased. Their integrations with AWS, their own monitors, makes it all easier to use. Review collected by and hosted on G2.com.

Sometimes the turnaround time when the cycle kicks off feels gray. While the team schedules specific dates on when we will do a walkthrough, review, as well as when to expect reports (draft, final), it's unclear if progress is being made. There's nothing in the audit module that shows you "hey, we've looked / we're looking at this ER-XX". You're never sure if it's being actively worked on, so sometimes it feels surprising when you get a slew of messages. Review collected by and hosted on G2.com.

I find Thoropass incredibly helpful because it assisted us in passing the SOC 2 Type 1 audit, which shows its effectiveness in compliance management. I particularly appreciate the platform’s ease of use, which stems from its simple layout. Everything on Thoropass just makes sense; all sections are readily accessible on the left navigation bar. The names of these sections are intuitive, making navigation straightforward and efficient. This simplicity and logical organization enhance my overall experience, making my workflow smoother and more intuitive. Additionally, the support staff have been very helpful, contributing to a positive user experience by providing reliable assistance when needed. The initial setup of Thoropass was also very easy, which speaks to the platform’s user-friendly design, allowing us to get started quickly without any hassle. Overall, Thoropass provides an efficient, supportive platform for meeting compliance requirements, substantially aided by its thoughtful design and supportive customer service. Review collected by and hosted on G2.com.

I think the pricing of Thoropass is a concern. Lowering the price in general would greatly help. Review collected by and hosted on G2.com.

I really like the integrations Thoropass offers. It has a lot of integrations, which is great for systems like ours that use different cloud providers. Connecting Thoropass with AWS was super helpful, covering about 40% of our SOC two compliance and saving us ten to twenty hours. Review collected by and hosted on G2.com.

I think when you're doing multiple different compliance things, like ISO27000, HIPAA, and SOC 2, you may run into situations where the same control but with a slightly different approach has to be provided to different audit modules. And I think Thoropass could do a better job there at highlighting that as an opportunity for automating, so you don't have duplicate work. Review collected by and hosted on G2.com.

Thoropass proved invaluable in simplifying our SOC 2 compliance journey. It offers a comprehensive range of tools to ensure we have implemented all necessary controls. The platform facilitated a smooth transition with its intuitive interface. The responsive support team provided prompt assistance at every step, enhancing our confidence in our data protection efforts. Overall, Thoropass exceeded our expectations and is an ideal choice for businesses aiming for compliance excellence. We highly recommend it to any organization seeking an effective SOC 2 compliance solution. Review collected by and hosted on G2.com.

Does not support French. Hoping they will add multilanguage functionality in a near futur. Review collected by and hosted on G2.com.

Thoropass makes it easy to manage our compliance posture. The tool has improved significantly over the past few years, and the integrations have been particularly valuable in streamlining our audit processes and saving time. The audits are well-prepared and straightforward to complete, making the entire process much less cumbersome than traditional approaches. Review collected by and hosted on G2.com.

Thoropass has added many new features over the past two years. Due to our busy schedules and existing workflows, we haven't had time to adopt these new tools. We're already set in our current ways of working, which makes it hard to transition to the new features. Review collected by and hosted on G2.com.