The platform is user-friendly and comes with close, responsive support. It’s been helpful in guiding our compliance reporting, and I appreciate the clear structure and the way it connects the framework, policies, and manual evidence. Review collected by and hosted on G2.com.

The interface is clean and easy to navigate overall, although a bit more guidance for first-time users would make the onboarding experience even smoother. Review collected by and hosted on G2.com.

Secfix turns ISO 27001 from a maze into a guided checklist with clear owners, deadlines, and evidence links. Policy templates are practical (not generic), vendor reviews are structured, and the audit workspace keeps Stage 1/Stage 2 deliverables in one place. Google Workspace and Slack integrations make reminders and evidence collection painless. The public roadmap and responsive support mean issues actually get fixed, and the platform steadily improves rather than sitting still. Review collected by and hosted on G2.com.

A few rough edges: occasional agent/device-visibility glitches (we had one asset not showing after install), reporting/exports could be more flexible (custom fields, saved report views), and RBAC granularity is limited for larger teams. Some UI elements require too many clicks (e.g., editing vendors and risk fields), and access-review workflows would benefit from deeper integrations and bulk actions. None are blockers, but smoothing these would make the product feel truly “enterprise-ready.” Review collected by and hosted on G2.com.

The application is well designed with clear dashboards and intuitive tooling that makes day‑to‑day compliance work straightforward. In‑app support has been excellent—responses were fast and actually resolved the issues we ran into. The knowledge base is comprehensive and easy to navigate, with high‑quality articles that helped us prepare all required documentation. The built‑in policy templates are fantastic and saved us a lot of time getting started. Review collected by and hosted on G2.com.

Integrations with external platforms could be stronger. For example, label synchronization from Linear is limited and requires manual workarounds. The SecFix Agent generally performs well, but it occasionally failed to recognize our (compliant) password manager. The Risk Assessment process follows an intuitive albeit pretty time-consuming questionnaire wizard with a lot of information input; afterwards, it was a bit panicking to see the direct responses were nowhere to be found in the app anymore as they were automatically being processed by AI and made into Risk Register tickets. I must add to this that they were promptly provided upon request, so this was no big issue after all. Review collected by and hosted on G2.com.

What I like most about the Secfix Compliance Platform is the holistic and practical approach. The system is not just a mere tool, but a true partner in implementation. I particularly appreciate:

• the clear structure and intuitive user interface, which makes even complex ISO-27001 processes easily understandable,

• the automation of recurring tasks (e.g., document versioning, risk and action tracking),

• and the direct connection to real audit practice, allowing optimal preparation for certifications.

Additionally, the excellent support – fast, competent, and always solution-oriented. You can tell that the team behind Secfix knows how modern information security must work today. Review collected by and hosted on G2.com.

Honestly, there are only a few points that I don't like about the Secfix Compliance Platform. If I had to name something, it would be more about details that can surely be improved over time with use:

• Some displays or filter functions could be designed to be a bit more flexible or clearer, especially with extensive lists of measures.

• With very individual setups, one sometimes wishes for a bit more configuration freedom, such as with custom templates or workflows.

But these are minor issues. Overall, Secfix is at a very high level – and you can tell that the team continuously takes feedback and implements it. Review collected by and hosted on G2.com.

I find the platform to be highly intuitive, making it very easy for me to navigate. Review collected by and hosted on G2.com.

I did not come across any elements that I would describe as especially negative. Review collected by and hosted on G2.com.

Secfix has made our ISMS compliance journey smooth, structured, and efficient. The platform provides excellent visibility into our compliance posture by clearly mapping controls, identifying gaps, and guiding us on how to close them. I especially like how intuitive and automated the workflows are — from policy management to evidence collection and continuous monitoring.

The dashboard gives a clear view of our ISMS KPIs and helps us stay audit‑ready at all times. The Trust Center feature is another standout — it showcases our certifications and security posture transparently, which builds stronger trust and confidence with our customers.

Overall, Secfix combines expert guidance with a powerful toolset, making compliance less complex and more proactive. Review collected by and hosted on G2.com.

Expecting to have more features and integrations in TrustCenter. Review collected by and hosted on G2.com.

The platform provides excellent templates for policy writing, making it an ideal starting point for establishing an ISMS over manual creation of relevant tracking databases and systems. The regular check-in calls are particularly valuable, as they help me stay on track and make it easier to understand complex topics. The platforms seamless integration with cloud service resources makes it incredibly convenient to monitor and manage all external assets in one place. Review collected by and hosted on G2.com.

I don't really have any significant criticisms of the Secfix platform. While it would be helpful to have integrated forms and tracking database templates for things like access control, their absence isn't a major issue. The platform provides sufficient guidance to set these up externally, so this is more of a suggestion than a drawback. Review collected by and hosted on G2.com.

The platform provides comprehensive visibility into all necessary compliance checks, controls, and evidence requirements. It offers clear guidance and practical examples for implementing each control and uploading the right evidence. Additionally, it features easy-to-set-up integrations with tools like AWS, Jira, and Google Workspace, which makes the overall process seamless.

Beyond the platform itself, the customer success managers and support team are exceptional. They are highly responsive, knowledgeable, and supportive throughout the compliance journey. Thanks to their guidance, achieving ISO certification became a smooth and confident process in a very short time. Review collected by and hosted on G2.com.

There are a few documents that still need to be managed outside the platform in separate spreadsheets. However, the Secfix team is actively working on improvements and continuously rolling out detailed updates to bring everything into the platform and streamline the process even further Review collected by and hosted on G2.com.

I’m a CTO at a YC startup operating in the US and Germany. Everyone recommended Secfix for ISO 27001, and that matched my experience — they’re absolute ISO experts. We’ve been using Secfix for 3+ years now. We were ready in about two months, working only a few hours each week. They gave me clear guidance on what to do and when for ISO 27001 and, later, SOC 2. After we passed the ISO audit, I upgraded to SOC 2 as an additional framework. They turned it around quickly and even kept improving SOC 2 with my feedback. They ping me proactively when something is off or needs urgent attention to stay compliant, so the workload never becomes intense. I don’t need a consultant; it genuinely feels like having a top-class CISO on the team. Secfix integrates across our stack, from GCP to Google Workspace, and checks evidence for us. When we started, the GCP integration was basic; they consistently fixed issues, and last year they added a history of checks for GCP configurations plus test data, which makes deep dives much easier. Customer success is fast, practical, and reliable. It feels like they really try to make the best of every interaction. Review collected by and hosted on G2.com.

The UI is not always flexible for every use case. That said, they keep improving it, and when I need something specific, support usually unblocks me quickly. Review collected by and hosted on G2.com.

It's our central platform for everything compliance - it's great how they keep us audit ready any time. Review collected by and hosted on G2.com.

The platform had some limitations in the past, but they resolved over time. It feels expensive considering our usage frequency, but worth comparing to doing certifications without it. Review collected by and hosted on G2.com.