Secureframe Reviews & Product Details

It brings everything into a single place, and I also like that it provides templates for many SOPs and tabletop exercises. It’s very handy.

Lastly, the chat assistant is very helpful and seems to know the software well, too. Review collected by and hosted on G2.com.

Honestly, there isn’t much to add. If I had to point to something that could be improved, it would be the employee onboarding part. Review collected by and hosted on G2.com.

Secureframe made our ISO 27001 compliance journey smoother. The platform centralized our policies, evidence collection, and compliance tracking, making it much easier to stay organized throughout the certification process. The automation features reduced manual effort, and the clear guidance helped us address requirements efficiently. Review collected by and hosted on G2.com.

It asks for evidence for every clause. I think this could be simplified and grouped with similar requests, in line with ISO requirements. Review collected by and hosted on G2.com.

The platform is easy to set up, and the onboarding team was responsive at the start. Review collected by and hosted on G2.com.

The renewal and billing process. We had always renewed year by year with a signed Order Form each time. For the 2026-27 term, Secureframe sent no Order Form and we got none of the renewal reminders you would expect. Even so, they issued a ~$10k invoice and kept chasing it, though nothing was signed for that term and we weren't using the product. When we raised this, they kept pursuing payment instead of looking at how the account had actually been handled. Before you sign, check how auto-renewal works for you and get it in writing. Review collected by and hosted on G2.com.

Secureframe made our SOC 2 readiness manageable for a small team. The platform is well organized: continuous monitoring tests map cleanly to controls, the remediation guidance on each failing test is concrete, and integrations (GCP, GitHub, Google Workspace) pull evidence automatically. The device agent handles endpoint checks (encryption, password policy, screen lock) without us buying an MDM. Communication with our CSM has been excellent, with fast, helpful responses whenever we hit questions, and issues get resolved quickly. Review collected by and hosted on G2.com.

Device agent check-ins can lag after a setting is fixed; a correctly configured device sometimes keeps showing as failing until you run a manual integration sync, which is not obvious. Occasionally two similar tests cover the same underlying control (e.g. incident tracking vs addressing incidents) and it takes a moment to work out where evidence belongs. Minor: some remediation flows assume US-based services (e.g. background check providers), so international contractor screening needs manual evidence. Review collected by and hosted on G2.com.

I really like Secureframe's systematic test framework that breaks down the entire 229 test SOC 2 landscape into clear, actionable items. The ownership and coordination features keep our teams aligned, which is great. The automated evidence collection through AWS integrations is also crucial for us. The initial setup was smooth; our account manager provided walkthroughs and has always been responsive. The interface is easy to navigate and it has one of the best chatbots out there, honestly. Review collected by and hosted on G2.com.

There isn't a lot that needs improvement in my experience with Secureframe. A small thing could be that some of the tests miss the details and 'how to pass this test' that most tests provide and are pretty helpful as well. Also, adding context on how exactly a test will play out during the audit will be helpful. Review collected by and hosted on G2.com.

Automated evidence collection plus continuous monitoring is the core value. Secureframe connects read-only to the stack you already run (AWS, GitHub, Azure DevOps, Google Workspace, identity providers, HR tools, ticketing) and pulls configuration and activity evidence on a schedule. Failing tests show up with remediation guidance instead of waiting for the auditor’s request list. For small teams this helps save time and headaches. Review collected by and hosted on G2.com.

Some of the tests do not have good instructions on how to complete/pass the test. Review collected by and hosted on G2.com.

Having 24/5 access to support and a super hands on CSM was very helpful making getting the certifications we needed easy Review collected by and hosted on G2.com.

If its your first time doing compliance, there is a learning curve with the app. But their support helps a lot with this. Review collected by and hosted on G2.com.

Best features about Secureframe are a list of API available. Our organization was able to link applications and verify security awareness, mitigate risk daily, and upload evidence for our SOC2 audits all in one place. Review collected by and hosted on G2.com.

The application still takes time to refresh on some instances and we have another application for policies and training that I wish had an API. Review collected by and hosted on G2.com.

As a person who is assisting in getting our framework certifications using SecureFrame I really enjoy how SecureFrame includes templates and examples for specific fields auditors would want to see. This came in handy when uploading evidence for our SOC 2 framework. SecureFrame is pretty easy to navigate and pretty self explanitory. Review collected by and hosted on G2.com.

At times it can get a little frustrating sorting through all of the requirements. Similarly, I had some issues looking to see what items I was assigned to. Review collected by and hosted on G2.com.

I think Secureframe is great. Managing my tasks for outstanding clients is handled well, and I like the integrations with my SaaS and cloud software tools, including cloud architecture and AWS. It sends me reminders when assets are out of the products, which is really handy. The platform integrates everything into one simple place, making it easy to manage tasks seamlessly and assign them to users in my organization. The automated way it provides real-time views of my client's status with dashboards and integrations is fantastic. The UI and usability are set up great for a fractional CSO like me. Review collected by and hosted on G2.com.

Possibly some more vendor integrations and provide other alerting via Slack. Review collected by and hosted on G2.com.