Secfix Reviews & Product Details

It’s a combination of the platform itself and the people behind it. The unlimited support was a huge help when we initially set up our ISMS in accordance with ISO 27001, and the platform continues to improve almost every month. I still see a lot of potential, and it’s great to watch the platform evolve in the right direction. Review collected by and hosted on G2.com.

Since SecFix and its platform are still relatively young, it can occasionally feel a bit buggy. However, it has improved tremendously over the past two years.

Personally, I’d love to see even more focus put on the GDPR framework, although ISO 27001 is clearly their flagship :) Review collected by and hosted on G2.com.

Broad selection of manual evidence checks to support the audit. Pre-defined policies that save a lot of time compared with creating them from scratch. Automated checks for the cloud and similar areas as well. You can talk to one of their customer success manager in a defined period how you like (I choose 1x per week) to get help or ask questions. For me, the constant support and feedback loops were really helpful. Review collected by and hosted on G2.com.

There is nothing to complain about, I was overall really satisfied Review collected by and hosted on G2.com.

The integration of all documentation for ISO certification, the automatic synchronization with cloud systems, and the user-friendly overview create a clear, easily understandable structure. I find the continuous guidance through the entire audit process particularly helpful, as it centralizes all relevant information and makes it easy to track at any time. Additionally, I am impressed by the ease of implementation in practice: many steps are intuitive, require little training, and can be carried out in everyday work without much effort. Customer support responds quickly, competently, and solution-oriented, which further simplifies the entire process. We use the platform regularly, as it has become an integral part of our daily compliance work in the ongoing ISMS operation and in preparation for ISO 27001 certification. Review collected by and hosted on G2.com.

In some areas, clarity could still be further improved, for example, in displaying which employees have already agreed to a certain policy and who is still missing their agreement. Overall, however, clarity has already been noticeably enhanced in many areas through continuous improvement and development. Review collected by and hosted on G2.com.

Secfix provides a very structured and transparent approach to managing compliance and ISMS requirements. The platform guides you through the necessary steps in a logical way, which makes it easy to keep track of progress and responsibilities. The built-in templates and automations save noticeable time when documenting policies or risks. The customer support team is also responsive and open to feedback, which helps a lot when setting up the system or fine-tuning processes. Review collected by and hosted on G2.com.

There’s very little to complain about. The examples for manual evidences could be improved to better reflect real-world use cases.

But that's a minor point compared to the overall value the platform provides in day-to-day operations. Review collected by and hosted on G2.com.

What we like best about the Secfix Compliance Platform is that it provides a centralized way to manage all our compliance and security activities — from risk management and audits to employee trainings — without having to rely on multiple tools or spreadsheets. The integration with our risk register makes it easy to document and track residual risks, and the intuitive interface gives us a clear overview of our compliance objectives and progress. We especially appreciate the continuous development of the platform and the steadily growing number of connections and integrations with other systems, which make the platform more powerful and efficient over time. Another major plus is the friendly and highly competent support we receive from our Customer Success Manager, who assists us regularly and proactively with detailed questions and best practices. This ongoing partnership makes the overall experience with Secfix both effective and enjoyable. Review collected by and hosted on G2.com.

If there’s one area that could be improved, it would be the reporting and export functionality. While the platform already provides clear dashboards and structured data views, the ability to create more customized reports and flexible exports — for example, with selectable data fields or tailored templates — would make it even easier to adapt outputs to specific audit or management needs. This is a minor point, but enhanced reporting options would make an already strong platform even more powerful for day-to-day compliance management. Review collected by and hosted on G2.com.

We use Secfix to stay on track with SOC 2 and ISO 27001. It’s made the certification process way less painful and much much quicker — everything from risk management and vendor tracking to policy sharing is in one place. The Trust Center feature is a great bonus for showing customers our compliance status. Setup was quick and with seamless integration and support has been responsive whenever we had questions. Review collected by and hosted on G2.com.

Nothing at this point. We have been using the platform for 6 months now and it has been reactive to our requests ever since. Review collected by and hosted on G2.com.

This software is very easy to understand and provides excellent guidance on what can be a rather complex topic. The platform is regularly updated with positive improvements. The team at Secfix is always helpful and competent, offering support and assistance whenever I have questions. Review collected by and hosted on G2.com.

As they are still a startup, there is room for the tool to grow and improve. However, I appreciate how receptive they are to feedback and how quickly they implement changes. This responsiveness gives me a lot of confidence in their potential. Review collected by and hosted on G2.com.

Secfix turns ISO 27001 into a guided checklist with clear owners, deadlines, and evidence links. The interface is clean and intuitive, policy templates are practical, and integrations with Google Workspace and Slack make evidence collection effortless. Their support is excellent — responsive, helpful, and genuinely invested in solving issues. Review collected by and hosted on G2.com.

We ran into a problem integrating one of our team’s computers due to an unknown technical issue. Although Secfix’s support team was very engaged and worked directly with our colleague to investigate and fix it, the resolution process took quite a long time. Review collected by and hosted on G2.com.

Secfix turns ISO 27001 from a maze into a guided checklist with clear owners, deadlines, and evidence links. Policy templates are practical (not generic), vendor reviews are structured, and the audit workspace keeps Stage 1/Stage 2 deliverables in one place. Google Workspace and Slack integrations make reminders and evidence collection painless. The public roadmap and responsive support mean issues actually get fixed, and the platform steadily improves rather than sitting still. Review collected by and hosted on G2.com.

A few rough edges: occasional agent/device-visibility glitches (we had one asset not showing after install), reporting/exports could be more flexible (custom fields, saved report views), and RBAC granularity is limited for larger teams. Some UI elements require too many clicks (e.g., editing vendors and risk fields), and access-review workflows would benefit from deeper integrations and bulk actions. None are blockers, but smoothing these would make the product feel truly “enterprise-ready.” Review collected by and hosted on G2.com.

The application is well designed with clear dashboards and intuitive tooling that makes day‑to‑day compliance work straightforward. In‑app support has been excellent—responses were fast and actually resolved the issues we ran into. The knowledge base is comprehensive and easy to navigate, with high‑quality articles that helped us prepare all required documentation. The built‑in policy templates are fantastic and saved us a lot of time getting started. Review collected by and hosted on G2.com.

Integrations with external platforms could be stronger. For example, label synchronization from Linear is limited and requires manual workarounds. The SecFix Agent generally performs well, but it occasionally failed to recognize our (compliant) password manager. The Risk Assessment process follows an intuitive albeit pretty time-consuming questionnaire wizard with a lot of information input; afterwards, it was a bit panicking to see the direct responses were nowhere to be found in the app anymore as they were automatically being processed by AI and made into Risk Register tickets. I must add to this that they were promptly provided upon request, so this was no big issue after all. Review collected by and hosted on G2.com.