What I like best about Secfix is that it gives us a very clear and structured overview of our ISMS implementation status I especially like the guided workflows for ISO 27001 readiness, the automated evidence collection, and the ability to track what is still missing or needs review. This has made our work much more transparent and has helped us prioritize open tasks instead of constantly trying to figure out where we stand. Another major benefit is the support for security questionnaires. Being able to answer parts of customer questionnaires based on the information already maintained in Secfix saves a lot of manual effort. Review collected by and hosted on G2.com.

There is not much I actively dislike, but some parts of the platform could be more flexible. Secfix works very well when you follow its predefined structure and policies, but if you already have an existing ISMS setup, it can sometimes be challenging to adapt the tool to your internal way of working. Review collected by and hosted on G2.com.

We've been working with Secfix's CISO-as-a-Service for half a year and it's been a really positive experience.

What stands out most is the confidence it gives us day to day. Anyone who's been through an ISMS knows it's not something one person can carry alone, and it's not something you can fully outsource either. What we needed was a knowledgeable partner we could lean on for guidance, sanity checks, and the harder client-facing work. That's exactly what we got. Responses come back quickly, and our CISO has stepped in directly with clients when it made sense.

We've tried other setups for this kind of role before, and the difference is big. Our ISO 27001 audit ended up going smoothly even though preparation time was tight, which says a lot about the service, it's practical and not over-complicated.

On top of that, the cost is genuinely reasonable. We'd looked at a few options before deciding, and Secfix came in competitively without cutting corners on what we actually need.

Would happily recommend it. Review collected by and hosted on G2.com.

Currently nothing, the application and the team help and deliver where promised. Review collected by and hosted on G2.com.

I like their support and guidance to understand the requirements of different standards. With our Customer Success Manager, we have regular meetings to ensure our compliance project is on track. In these meetings, we can bring up complex challenges and get guidance on how Secfix recommends solving them. We also get examples of how others have solved similar issues. Review collected by and hosted on G2.com.

When we have specific needs to make customizations to the platform, this can take time or not be accomplished since the platform needs to function for many different customers. Review collected by and hosted on G2.com.

What I like most about Secfix is how guidance-oriented it feels. The platform lays things out in a way that’s clear and easy to follow, even when you’re dealing with more complex compliance and security tasks. I also appreciate how well everything is organized, which makes it much more efficient to manage workflows and stay on top of requirements. Review collected by and hosted on G2.com.

One thing I would improve about Secfix is having more flexibility in certain areas of the interface, especially when it comes to customizing the layout and design of columns. More personalization options there would make the experience even better and more adaptable to different workflows. Review collected by and hosted on G2.com.

The portal comes with structured guidance. The Secfix team is very supportive and fast on both technical and content-related questions. They even implement feature requests on short notice, if possible. Overall very customer-centric! Review collected by and hosted on G2.com.

The AI support bot needs some improvement. Sometimes the provided advices are related to older portal releases. Luckily there are also competent human supporters available. Review collected by and hosted on G2.com.

Got us the ISO27001 certification! I appreciate that Secfix acts as both a consulting service with a dedicated person to help throughout the certification process and a SaaS platform that provides the necessary templates and lets me know what’s missing for each certification. It's a clear knowledge hub, offering built-in functionality like infosec training for my team. I also like having a clear framework-based approach which helps me see the requirements and progress. The platform integrates well with our identity management system and cloud provider to pull records. Plus, the setup was very easy for my team. Review collected by and hosted on G2.com.

There was little guidance or built-in review process for how to adapt templates to our specific situation, which with AI could be an easy win today. Would have enjoyed more feedback on what we implemented, to see if it matched the certification requirements or not. With a new certification, it's hard to see what's actually required and what's beneficial, but perhaps for a later stage. Review collected by and hosted on G2.com.

The best part of Secfix is the fast and knowledgeable support. The team is always responsive and provides practical solutions when needed. I also appreciate the regular check-ins, which help us stay organized and make steady progress with our security and compliance activities. Review collected by and hosted on G2.com.

haven’t encountered any major issues with Secfix so far. If I had to suggest an improvement, I would appreciate even more customization options for workflows and reporting to better fit specific organizational requirements. Overall, my experience has been very positive. Review collected by and hosted on G2.com.

We've been using Secfix as our ISMS platform for multiple ISO 27001 cycles now, and it has genuinely become a tool we rely on rather than just tolerate. A few things stand out:

The platform itself is intuitive and well-structured. Controls, policies, risks, and assets are all linked in a way that actually reflects how an ISMS should work — not just a checklist tool bolted onto a SharePoint. Onboarding new team members into compliance topics is much easier because the UI guides them through what needs to happen.

The automations and integrations save us a significant amount of time. For a SaaS company without a dedicated full-time compliance team, this is the difference between ISO 27001 being a burden and being manageable.

Speed to certification was a real highlight. The first cycle moved much faster than we expected going in, and each subsequent surveillance audit has been smoother thanks to the audit-ready state the platform keeps us in year-round.

Finally, the customer success deserve a specific mention. Our contact is responsive, knows our setup, and gives pragmatic answers rather than generic compliance theater. When auditor questions come up, we get real guidance, not just "check the documentation." Review collected by and hosted on G2.com.

Honestly, very little. If I had to name something: as the audit requirements evolve quickly, changes in the platform have to be proven by a number of customers, before they release (naturally). This results in us having to use workarounds, rather than native features for a few weeks. This hasn't been a blocker — and the responsive support more than compensates. Review collected by and hosted on G2.com.

It's helpful to have an effective method for tracking all the details and elements of an ISMS, such as risks, vendors, and accounts. The online system reduced the buerocracy of information security management very much.

They were invaluable help defining and refining our policies. Review collected by and hosted on G2.com.

Integration with smaller vendors remains insufficient. Review collected by and hosted on G2.com.

Working with Secfix made our ISO27001 audit a breeze. The combination of the platform and their excellent support team assisting us with every step allowed us to avoid many pitfalls and helped us to reach our audit goal with only a handful of minor feedbacks. Easily the smoothest part of the entire audit process was using Secfix for us. Review collected by and hosted on G2.com.

Although the main cloud providers are automated in the platform in order to keep IT inventory synchronized automatically, the EU alternative providers are currently not available for automated sync. It would be fantastic to see the automation extended to feature EU centered cloud providers too. Review collected by and hosted on G2.com.