Scytale Reviews & Product Details

What I appreciated most about working with Scytale was Charissa’s kindness. I really enjoyed working with her. She was always very friendly and supportive, and helped me throughout the entire process. Review collected by and hosted on G2.com.

My main concerns were not with Scytale itself, but with the auditors they work with. The evidence review process took considerably longer than initially agreed. The assigned auditor went on PTO during the audit, and no backup was provided to cover their absence. As a result, the audit was delayed by more than a month compared to the original expected completion date.

Additionally, the auditor’s spoken English was quite difficult to understand, which made communication more challenging throughout the process.

During the sales process, we were told that the auditor Scytale selected was more expensive than other available options because of the higher quality of their work. Based on our experience, I don’t feel that the service we received reflected that higher level of quality. Review collected by and hosted on G2.com.

Quick personal responses from sales, support and of course the assigned consultant. Caitlin has been very helpful with the overall progress of the project with planning, answering questions and support. The interface itself holds a lot of useful information about what to do and also how to do it. Apis are very useful and continuously improving. Api integrations are very quick and I have never had any performance issues. No one believed we could accomplish so much we did the last months - my deadline is far away and yet we're 100% ready for audit. Evidence collection analyzed by AI has been a lot of help specifically with identifying what information the evidence lacks. The main reason we chose Scytale was quick response from sales and support, platform information and progress as well as the competitive price point. Review collected by and hosted on G2.com.

I really enjoyed this project and can't find much I dislike, maybe the api definitions could be improved, but they are still better than the competition. Review collected by and hosted on G2.com.

We're currently working towards our ISO 27001 certification with Scytale guiding us through the process. What I like best are the task list and the policy templates.

The task list gives us clear direction. Instead of trying to work out what the standard requires and in which order, we can see exactly which steps come next and track our progress towards audit readiness. That keeps the project manageable alongside our day-to-day work.

The policy templates are a huge time saver. We don't have to reinvent the wheel and write every policy from scratch. We start from a solid, well-structured base and tailor it to our own organisation. That lets us spend our time on actually implementing the controls rather than on drafting documents. Review collected by and hosted on G2.com.

What I miss is a high-level overview that helps us prioritise the action items. The task list tells us what needs to be done, but it's not always clear which items matter most or which ones should come first. The Scytale team does help us with this, but sometimes the advice is simply to work through the list from A to Z. That can feel arbitrary, especially for a small team that wants to spend its limited time on the items with the biggest impact on security and audit readiness first.

A roadmap or dashboard view that groups tasks by priority, risk or dependency would make it much easier to plan our work and explain progress to management. Review collected by and hosted on G2.com.

Scytale has made our SOC 2 process much more structured and manageable. Having the controls, evidence, tasks, and progress all in one place makes it much easier to understand what needs attention and keep everything moving.

Romy Spencer has been a great partner throughout the process. She is responsive, helpful, and always available when we have questions or need clarification. Having someone who understands both the compliance requirements and the practical side of implementing them has been extremely valuable. Review collected by and hosted on G2.com.

There are occasionally areas in the platform or requirements that need some clarification, but whenever we’ve had questions, Romy and the Scytale team have been quick to help us work through them. Review collected by and hosted on G2.com.

Scytale has provided a great overall experience. The platform is very easy to use for the most part, and it’s evolving quickly, with new features being released regularly. During our ISO 27001 certification process, our GRC consultant, Liya, was extremely helpful and knowledgeable on the subject matter. She was always prompt to respond and did a great job keeping us accountable throughout the process. We ultimately went from a blank canvas to being fully ISO 27001 compliant end-to-end in about two months. Review collected by and hosted on G2.com.

Because it’s a rapidly evolving product, it can be a bit buggy from time to time. That said, most things have workable solutions, and any issues I ran into were addressed promptly by the team. Review collected by and hosted on G2.com.

The integrations are the standout. It pulls evidence straight from GCP and GitHub, so most controls stay current without anyone having to upload screenshots.

What’s left is the small handful that genuinely needs a human touch, and those are clearly marked with an owner and a due date. Auditor questions also come back as concrete action items instead of a vague request, which is what keeps the program moving.

Kamran Naicker works through those items with us directly and flags a weak answer before it ever reaches the auditor. Review collected by and hosted on G2.com.

Because we ship on-premise, things like production uptime reporting don’t map cleanly to our setup and usually require some back-and-forth to scope correctly. Review collected by and hosted on G2.com.

What I like best about Scytale is how it combines a well-organized compliance platform with excellent hands-on support. The platform gives us a clear view of our SOC 2 controls, evidence requests, ownership, and outstanding tasks, making it much easier to coordinate work across engineering, security, and operations.

The automated evidence collection and integrations reduce repetitive manual work, while the dashboards help us quickly identify gaps and understand what requires attention. This has made our SOC 2 Type II process more structured and predictable.

Robyn Ferreira and Caitlin Brown have also been a major part of our positive experience. They are highly responsive, knowledgeable, and proactive. They explain requirements clearly, keep the engagement moving, and help us resolve questions without creating unnecessary overhead for our team. Review collected by and hosted on G2.com.

We have not encountered any significant issues or areas of concern. Our overall experience with both the Scytale platform and its support team has been very positive. Review collected by and hosted on G2.com.

Dian Strydom has been a great support throughout, always willing to assist, provide guidance, and go the extra mile when needed. His kindness, patience, and willingness to help have made a real difference, and I truly appreciate all the support he has given. Review collected by and hosted on G2.com.

It is mostly technical. One example is policies changing versions without any edits being made, which is not very convenient. Review collected by and hosted on G2.com.

Great support and a guiding hand throughout the process at a good price. The platform’s UI walks you through each step and clearly explains the process, including the remediation steps required, in detail. The support team is also happy to clarify anything we were unsure about. Integrations were available for the major source control and ticketing systems. Review collected by and hosted on G2.com.

There are a few navigation quirks when I click into the remediation steps and then try to go back to the list, but it’s nothing major. Review collected by and hosted on G2.com.

N/A Review collected by and hosted on G2.com.

We achieved SOC 2 certification in record time thanks to Scytale. It is an incredibly comprehensive compliance platform: it allows easy tracking of all controls, agile policy completion, and automates a large part of the evidence, saving us a lot of time and effort. But undoubtedly, the most valuable aspect is the support from the Scytale team. Always available, resourceful, and with a deep understanding of the regulations, they guided us through every step of the process. Their support made the difference between a stressful audit and a smooth, transparent process. Review collected by and hosted on G2.com.