--- title: Secureframe Reviews meta_title: 'Secureframe Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 806 reviews by the users' company size, role or industry to find out how Secureframe works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 806 scale: '5' date_modified: '2026-07-08' parent_category: name: Governance, Risk & Compliance url: https://www.g2.com/categories/governance-risk-compliance --- # Secureframe Reviews **Vendor:** Secureframe **Category:** [Security Compliance Software](https://www.g2.com/categories/security-compliance) **Average Rating:** 4.7/5.0 **Total Reviews:** 806 ## About Secureframe Secureframe empowers businesses to build trust with customers by simplifying information security and compliance through AI and automation. Thousands of organizations such as AngelList, Nasdaq, Coda, and Remote trust Secureframe to help them obtain and maintain compliance with global information security standards. ## Secureframe Pros & Cons **What users like:** - Users appreciate the **ease of use** of Secureframe, simplifying task management and setup for their teams. (650 reviews) - Users find that Secureframe offers **seamless compliance** with SOC 2, requiring minimal maintenance and excellent support. (552 reviews) - Users value how Secureframe’s **automation streamlines compliance** , making the process clear and manageable for everyone involved. (415 reviews) - Users value Secureframe's **strong security measures** , enhancing trust while managing sensitive client information effectively. (397 reviews) - Users value the **efficient integrations** of Secureframe, which streamline compliance and save significant time for teams. (386 reviews) - Time-saving (377 reviews) - Users appreciate the **responsive customer support** of Secureframe, enhancing their experience throughout the certification process. (368 reviews) - Users commend the **phenomenal support** provided by Secureframe, making SOC2 certification easy and efficient for startups. (341 reviews) - Evidence Collection (335 reviews) - Efficiency (319 reviews) **What users dislike:** - Users face **integration issues** with niche tools, requiring manual effort and time for proper setup. (184 reviews) - Users express a desire for more **customization options** regarding timing and followup schedules in Secureframe. (141 reviews) - Users find the **limited integrations** with platforms like Azure Dev Ops frustrating, hindering seamless automation and audits. (141 reviews) - Users express a need for **improvements in the audit function** to enhance integration and streamline their experience. (109 reviews) - Users note **missing features** like enhanced test management linked to policies, affecting overall usability and experience. (105 reviews) - Lack of Customization (102 reviews) - Learning Curve (96 reviews) - Difficult Setup (92 reviews) - Time-Consuming (89 reviews) - Limitations (84 reviews) ## Secureframe Reviews ### 1. Simplified Security Compliance for Retail Operations **Rating:** 5.0/5.0 stars **Reviewed by:** Clint O. | Operation Manager, Retail, Mid-Market (51-1000 emp.) **Reviewed Date:** September 29, 2025 **What do you like best about Secureframe?** Watershed has been using Secureframe for over six months now to automate our security compliance requirements for our retail software platform. Dashboard Management is simple and getting through the dashboards and control assessments is rather easy to do. Secureframe integration with our existing systems (including our internal workflows) was seamless, and implement was simple. The assistance we get from customer support whenever we require guidance is also fast and responsive and we use tentatively as it is a part of our routine compliance checks. From control tracking to automated evidence collection, the number of features that comes with it caters to almost all of our compliance needs and none of the additional tools are needed. **What do you dislike about Secureframe?** Overall Secureframe proves to be useful, but there is some room for improvement on their reporting features — specifically the ability to customize compliance reports for different audiences. Sometimes creating in-depth reports involves extracting data and fine-tuning it outside of the platform, which means extra steps. **What problems is Secureframe solving and how is that benefiting you?** Secureframe is helpful for Centralizing and Streamlining our security compliance kit which reduced use of spreadsheets and manual tracking. It allows you to monitor, test, and document all relevant controls, making SOC 2 audits and continuous security assessments much more manageable. Secureframe reduces the time required during audits while providing a clearer view of our compliance posture that enables us to govern internally, and instill client trust. Our renewal of the platform each year helps ensure continuity of the business and that our compliance processes remain aligned. If you like, I can write 2-3 different versions of this review (each paraphrased and with a new perspective) so you have multiple authentic reviews for G2 submission that do not raise duplicate or verification problems. ### 2. Simplified the journey of compliance from Azure to Marketplace. **Rating:** 5.0/5.0 stars **Reviewed by:** Rafael L. | Technical Support Specialist, Retail, Mid-Market (51-1000 emp.) **Reviewed Date:** September 28, 2025 **What do you like best about Secureframe?** The platform's ease of use is exceptional. As the Operations Manager for Bokksu, I do not want to get overwhelmed by technical details. I want an overview. Rephrase More Undo Secureframe dashboard offers a user-friendly glimpse into compliance status. We connected our Azure Portal environment easily, and evidence collection automated implementation began within no time. Whenever we have questions, their customer support team is always quick to respond. This is essential for a platform that we use every day to check our security posture. The features, especially pre-mapped controls for SOC 2, have saved us tremendous amount of time. **What do you dislike about Secureframe?** The basic platform is pretty solid, but the set up for our e-commerce marketplace design needed a few more custom adjustments than I originally envisioned. The other integrations were very useful as they work "out of box" for most cloud configurations, however, changing some of the control mappings to match our Bokksu operations took a bit more time. This is but a small point as it was a flexible process, it just needed a little work upfront. **What problems is Secureframe solving and how is that benefiting you?** We are centralizing our security and compliance efforts with Secureframe since Bokksu is a company that handles customers data. Rephrase More Undo It's figuring out how to automate evidence collection and policy management. By automating compliance monitoring straight from our Azure infra, it gives assurance to us and our partners regarding our security posture which is a significant asset for our marketplace. ### 3. Incredibly Powerful Tool **Rating:** 5.0/5.0 stars **Reviewed by:** Amanda M. | Mid-Market (51-1000 emp.) **Reviewed Date:** September 28, 2025 **What do you like best about Secureframe?** Our company became SOC2 certified in 2023. Initially I was part of a team that gathered evidence and documentation in preparation for the audits, but had very little involvement in the process otherwise. This year, we lost our internal lead for this initiative, and I had to quickly step up to prepare for this year's audit. Throughout this process, our rep, Brandon, has been extremely helpful (and patient!) getting me up to speed. He is responsive and knowledgeable, and seems to really care about helping us with our upcoming audit. I have no other similar software to compare to SecureFrame, but beyond the stellar customer service, the two things I like best are the ease with which other apps / systems integrate, and the step-by-step instructions on how to provide evidence for failing tests. I'm sure this has saved hours of researching what to do and how to do it! I couldn't be more pleased with how easy it is to use for someone who is just getting their feet wet. **What do you dislike about Secureframe?** I've found a couple tests that are failing because (it appears) SecureFrame is mis-reporting evidence from other integrations (primarily Microsoft/Azure). But, it's easy to submit evidence to pass the test. Beyond that, I haven't yet found any downside. **What problems is Secureframe solving and how is that benefiting you?** Secureframe was selected by former colleagues as the software to use to attain SOC 2 certification. We successfully achieved that in 2023 and maintained status during last year's audit. We are currently prepping for our annual audit next month, and we will rely on the Secureframe tests to help us stay compliant this year. Being SOC 2 certified is a plus for many of our clients and alleviates the need for a lot of legal paperwork that would otherwise be required. ### 4. Clear, User-Friendly Compliance - Would Highly Recommend **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** April 15, 2026 **What do you like best about Secureframe?** Supports successful compliance across a broad variety of standards. It breaks requirements down thoroughly to help you understand and guides you through each step. **What do you dislike about Secureframe?** Nothing to dislike at all. It’s very clear and user friendly. **What problems is Secureframe solving and how is that benefiting you?** It continuously monitors compliance and sends notifications when attention is needed, helping ensure we stay on track. ### 5. Solid compliance platform with excellent support - great for SOC 2 journey **Rating:** 4.5/5.0 stars **Reviewed by:** Paco O. | IT Support, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** July 11, 2025 **What do you like best about Secureframe?** Secureframe has been instrumental in our SOC 2 compliance journey. The platform's intuitive interface makes navigating complex compliance requirements much more manageable than trying to tackle everything manually. What really impressed me was how the dashboard breaks down each compliance control into clear, actionable tasks with real-time progress tracking. The implementation process was surprisingly straightforward, we were up and running within a few days rather than the weeks I had anticipated. The automated evidence collection through integrations with our existing tools (AWS, Google Workspace, etc.) has saved us countless hours of manual work. Instead of scrambling to gather documentation during audit time, everything is continuously monitored and organized in one central location. I use Secureframe daily to monitor our compliance status and track progress on remediation tasks. The frequency of use speaks to how central it's become to our security operations, it's not just an audit time tool but an ongoing compliance management system. The customer support team deserves special recognition, they're incredibly responsive and knowledgeable. Whenever I've had questions about specific controls or needed clarification on evidence requirements, I've received detailed responses within hours, not days. The onboarding process was smooth, and our assigned customer success manager really understood our specific needs and timeline. The policy management features are also excellent. Having all our security policies, employee training, and acknowledgments centralized in one platform has streamlined our HR processes significantly. New employee onboarding now includes automatic policy assignments and training modules, which has been a game changer for maintaining compliance as we scale. **What do you dislike about Secureframe?** The integration catalog, while comprehensive, doesn't cover every tool we use. We had to handle some evidence collection manually for a few legacy systems, which wasn't ideal but manageable. It would be helpful to see more integrations added, especially for older enterprise software that many companies still rely on. Some of the automated tests can be overly sensitive, flagging minor configuration changes that don't actually impact compliance. This creates some noise that requires manual review to determine if action is truly needed. While the automated monitoring is generally excellent, fine-tuning these sensitivity levels would reduce false positives and make the alerts more actionable. **What problems is Secureframe solving and how is that benefiting you?** We needed to achieve SOC 2 Type II certification to close deals with enterprise customers, and Secureframe has made this complex process manageable for our small security team. The platform solved our biggest challenges: organizing evidence collection, maintaining continuous compliance monitoring, and preparing for the actual audit. The automated monitoring gives us confidence that we're staying compliant between audits, and the audit ready evidence collection has significantly reduced the stress of working with our external auditors. We've been able to focus on actually improving our security posture rather than just scrambling to document it. The time savings have been substantial, what would have taken weeks of manual effort now happens automatically in the background, allowing our team to focus on strategic security initiatives rather than compliance busy work. ### 6. Useful and Practical **Rating:** 4.5/5.0 stars **Reviewed by:** Kevin H. | VP of Finance, Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Secureframe has made our preparation for our SOC 2 audit much easier and more efficent. Not only is the preparation easier, we were easily able to link up with audiotrs who can largly rely on Secureframe for their audit, optimizing the audit process. **What do you dislike about Secureframe?** The 'Asset Inventory' tab is a bit clunky. We are able to track our devices that are approved by the company but it doesn't tie back to the individuals, where we can see the people who do an don't have assets. Bottom line the asset inventory feature is clunky and manual. However, that is only a small piece of the audit, and it works well enough to not me a major issue. **What problems is Secureframe solving and how is that benefiting you?** It is allowing us to better prepare for our SOC 2 audit and to make the audit itself more efficent. ### 7. Excellent **Rating:** 5.0/5.0 stars **Reviewed by:** Bishop G. | Cybersecurity Director, Enterprise (> 1000 emp.) **Reviewed Date:** July 11, 2025 **What do you like best about Secureframe?** What I like best about Secureframe is its automation. It pulls evidence directly from tools like AWS, Okta, and Jira, cutting audit prep time drastically. Policy templates, vendor reviews, and real-time compliance tracking make it a solid one-stop shop for managing frameworks like SOC 2 and ISO 27001. **What do you dislike about Secureframe?** Rigid workflows — not flexible for custom processes. Weak custom framework support — great for SOC 2, but clunky beyond that. Evidence uploads — recurring tasks can feel repetitive and manual. Basic alerting — limited control over who gets what notifications. Vendor management — useful but underdeveloped. Solid platform, but definitely room to grow. **What problems is Secureframe solving and how is that benefiting you?** Secureframe solves the headache of manual compliance management. It streamlines the entire audit process by automating evidence collection, task tracking, and policy management. That reduces overhead, saves time, and keeps us audit-ready year-round. The biggest benefit? Less scrambling, more structure — and we can focus on improving security posture instead of babysitting spreadsheets. ### 8. Seamless Integrations and Fast Feedback, Minor Dashboard Glitch **Rating:** 5.0/5.0 stars **Reviewed by:** Omar N. | Senior Software Developer, Small-Business (50 or fewer emp.) **Reviewed Date:** October 30, 2025 **What do you like best about Secureframe?** I really like the integrations they have with all the tools we use at our company. The integrations automatically detect items that are out of compliance and give you instructions on how to resolve them. Once the item is addressed, Secureframe refreshes the item automatically so you also get quick feedback. **What do you dislike about Secureframe?** There isn't anything I can say that I dislike. The only observation is that for some reason the dashboard doesn't display in my account. This might be a bug in their system. **What problems is Secureframe solving and how is that benefiting you?** Secureframe is assisting our company in obtaining SOC2 Type II compliance. ### 9. Effortless SOC 2 Compliance with Secureframe **Rating:** 4.0/5.0 stars **Reviewed by:** Mo Z. **Reviewed Date:** October 29, 2025 **What do you like best about Secureframe?** I appreciate how easy it was to set up Secureframe. The team was very supportive and helped us smoothly migrate, making the transition straightforward. Secureframe is invaluable for us in achieving SOC 2 compliance, which is crucial for securing enterprise contracts. I find the dashboard particularly useful due to its ease of access, enhancing our user experience and making it convenient to manage our compliance requirements. Overall, Secureframe's performance has been good, and I'm already considering using it again. This positive experience makes me inclined to recommend it to others. **What do you dislike about Secureframe?** Initially, during migration, there was a little bit of back and forth required. I would have preferred if that process was automated. **What problems is Secureframe solving and how is that benefiting you?** Secureframe helps us achieve SOC 2 compliance, crucial for securing enterprise contracts. The platform's accessible dashboard streamlines compliance management. ### 10. Flexible Compliance Platform with Strong Multi-Account Support **Rating:** 4.0/5.0 stars **Reviewed by:** Eren S. | Senior DevOps Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Secureframe?** Secureframe makes it straightforward to manage compliance across different tools on multiple accounts and easily scope requirements for different frameworks such as PCI and SOC 2. I also appreciate the ability to trigger manual syncs after making changes, so updates are reflected quickly and progress can be tracked and reported in real time. **What do you dislike about Secureframe?** It can be challenging to integrate with some of our internal tools, but this is a common limitation with most third-party vendors. **What problems is Secureframe solving and how is that benefiting you?** Secureframe centralizes our compliance management across multiple accounts and frameworks, making it easier to prepare for audits like PCI and SOC 2. It streamlines evidence collection, provides clear visibility into progress, and allows manual syncs to ensure data is always current. This reduces the time and complexity involved in meeting compliance requirements and improves our audit readiness. ### 11. A great way to track compliance, just don't rely on the integrations too much **Rating:** 3.5/5.0 stars **Reviewed by:** Chad I. | IT Support, Small-Business (50 or fewer emp.) **Reviewed Date:** July 02, 2025 **What do you like best about Secureframe?** In terms of creating lists of users, devices, services, vendors and tracking their compliance, Secureframe is great. The interface is fairly easy to figure out once you learn your way around. It has good tools for finding what shortcomings you still have and keeping on top of ongoing compliance for various factors. Additionally, the onboarding process is simple and easy for users. The little training videos are nice a short but to the point so there isn't much incentive to skip since it only saves 45 seconds. :) Background checks were easy to implement and listing the policies... well, it's a list of policies. "I agree" buttons will be blindly pushed. The support has also been supurb, quickly responding and fixing issue that arise. **What do you dislike about Secureframe?** The integrations can be a little wonky. Aside from not having some things you'd assume would be there, like antivirus, the integrations that exist can behave unexpectedly. For example, due to HR software taking precidence over **What problems is Secureframe solving and how is that benefiting you?** We are starting our security framework from scratch and Secureframe has been an incredible help with that. In the future I can see it will be very useful for monitoring and maintaining compliance. ### 12. Exceptional Compliance Platform with Outstanding Support **Rating:** 5.0/5.0 stars **Reviewed by:** Mayank C. | SDM, Small-Business (50 or fewer emp.) **Reviewed Date:** May 01, 2024 **What do you like best about Secureframe?** Our experience with Secureframe has been nothing short of excellent. The platform is intuitive, well-designed, and makes managing SOC 2 and other compliance requirements far easier than we anticipated. The automated evidence collection, integrations with our existing tools, and clear task tracking have streamlined what used to be a time-consuming process. **What do you dislike about Secureframe?** If you’re looking for a compliance solution with both powerful technology and exceptional human support, I highly recommend Secureframe—and if you get the chance to work with Jon, even better. **What problems is Secureframe solving and how is that benefiting you?** Our experience with Secureframe has been nothing short of excellent. The platform is intuitive, well-designed, and makes managing SOC 2 and other compliance requirements far easier than we anticipated. The automated evidence collection, integrations with our existing tools, and clear task tracking have streamlined what used to be a time-consuming process. ### 13. SecureFrame Has Been an Important addition to Our PCI Compliance Journey **Rating:** 5.0/5.0 stars **Reviewed by:** Patrick B. | IT Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** June 30, 2025 **What do you like best about Secureframe?** We've been working through PCI compliance requirements for our organization, and SecureFrame has been an invaluable partner in that process. What really stands out is their intuitive, well-designed UI. It breaks down each compliance requirement into actionable tasks and clearly shows what’s needed to pass every test. This has made what can be a complicated and overwhelming process feel organized and manageable. Beyond the technology, their team has been excellent. They're friendly, knowledgeable, and always willing to help. Whenever I've had questions or needed clarification I've been able to reach out to my contact and get the answers I needed. Getting started with SecureFrame and having access to the frameworks I needed was a breeze and I was even able to add and remove what frameworks I needed mid-stream without any issue. I've used the SecureFrame nearly everyday tracking my progress and working compliance since we've started using it and couldn't imagine trying to get this all done any other way at this point. Another excellent feature I'd like to point out is the ability to easily integrate HR resources into their system so on-boarding new employee's and getting them up to speed is nearly seamless. SecureFrame has all the policies and training built into their system so new employees simply login to their account and are presented with an easy to use interface that provides them with training videos that are accompanied with questions and policy acceptance. Policy changes or annual training? all handled through the same interface and SecureFrame even has a feature for automatically emailing employees and having them accept new/modified policies as well as new training or mandatory annual training. There's honestly no easy way I could keep track of this on my own so the fact that I'm able to just let SecureFrame handle has been invaluable. We're currently preparing for our QSA audit and its been a long road but it would have been even longer had we not hired SecureFrame to help us through the process. Had we not used them, I would not feel as confident as I do about passing our upcoming audit so the peace of mind alone has been worth it all. I seriously recommend using them if you need to start your compliance journey. **What do you dislike about Secureframe?** There are actually very few things I dislike about SecureFrame. I think at this time the only thing I can mention is maybe the meeting lengths. Time with your consultant is limited a hard 30min limit with no option to book more time automatically. In most cases 30min has been plenty of time but there has been cases where a 45-60min meeting would have been much better, especially in the beginning when you're learning and trying to wrap your head around everything. It's not a huge deal because you can book more time with a few clicks of your mouse but that time might be days later. Generally though, this isn't a huge deal and certainly shouldn't discourage anyone from their service because as I've said, 30min is usually more than enough time. **What problems is Secureframe solving and how is that benefiting you?** Becoming PCI compliant is a HUGE complicated task and without their help I'm not sure where we would be without them. ### 14. Streamlined experience for a very difficult compliance process otherwise **Rating:** 5.0/5.0 stars **Reviewed by:** Louizos Alex L. | Chief Security Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** December 16, 2024 **What do you like best about Secureframe?** The way it helps me organize my SOC II requirements, tests and processes. Customer support is prompt and very helpful throughout the process **What do you dislike about Secureframe?** Rarely its tough to connect something to the API **What problems is Secureframe solving and how is that benefiting you?** Getting through the process of SOC II type 2 audit is very bureaucratic and frustrating. Secureframe organises the whole process and makes it easier for us and the auditor to get through it effectively. It helps us organise the tests and helps us monitor the compliance with each of the tests. It helps us organise the employees and contractors and get them compliant and security trained. I believe it would be almost next to impossible to organise all these tests and prove that we are compliant if we did the audit without the Secureframe platform ### 15. Excellent compliance tool **Rating:** 5.0/5.0 stars **Reviewed by:** Nicky D. | Information Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 08, 2025 **What do you like best about Secureframe?** Very intuitive and easy-to-use interface Automates evidence collection from tools like AWS, Okta, and Jira Saves significant time in audit preparation Excellent and responsive customer support Clear step-by-step guidance for SOC 2, ISO 27001, and other certifications **What do you dislike about Secureframe?** Some integrations are missing, requiring manual uploads Automated tests can be too sensitive, flagging minor changes as issues Limited flexibility in customizing workflows and automation results Certain processes can feel repetitive in more complex environments **What problems is Secureframe solving and how is that benefiting you?** Secureframe has been a huge help in guiding our team through the SOC 2 certification process. The platform breaks everything down into clear steps, automates a lot of the evidence collection, and keeps all the requirements organized in one place. This made it easy to stay on track, address gaps quickly, and feel confident going into the audit. ### 16. Secureframe Made Our First SOC 2 Audit Feel Effortless **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** February 13, 2026 **What do you like best about Secureframe?** Going through a SOC 2 audit for the first time, I can't imagine not using a platform like Secureframe. Throughout the entire process from initial discussions to evidence review with our auditing team, Secureframe's customer support was quick to provide assistance. Their platform makes it incredibly easy to organize compliance evidence with a variety of integrations to our existing platforms. Secureframe's control monitoring dramatically simplifies maintaining compliance goals. **What do you dislike about Secureframe?** I have no complaints about Secureframe at all for managing our SOC 2 compliance program. **What problems is Secureframe solving and how is that benefiting you?** Managing the evidence required for SOC 2 compliance and ensuring our controls are working. Vendor security assessments are a breeze. The risk registrar simplifies risk assessment and management. ### 17. Fast-tracked our SOC 2 Type 1 (early 2025) with clear guidance & automation **Rating:** 4.5/5.0 stars **Reviewed by:** Satish M. | Director of Engineering, Small-Business (50 or fewer emp.) **Reviewed Date:** August 13, 2025 **What do you like best about Secureframe?** Secureframe gave us a clear, step-by-step path to SOC 2 Type 1 and we hit compliance in early 2025 without thrash. The tasking, templates, and automated evidence collection kept everyone aligned, and the CSM/auditor workflow saved a ton of email back-and-forth. Next up, we plan to connect GitLab and AWS for continuous monitoring and tighter control checks **What do you dislike about Secureframe?** Some integrations can take extra setup or don’t go as deep as we’d like out-of-the-box. Reporting/customization is fine once you learn it, but could be more flexible. None of this blocked us, just room to improve. **What problems is Secureframe solving and how is that benefiting you?** We achieved SOC 2 Type 1 in early 2025 on a predictable timeline with far less manual work, and now have a repeatable program we can extend to Type 2 and additional frameworks. ### 18. Effortless Compliance with Secureframe **Rating:** 5.0/5.0 stars **Reviewed by:** Cameron H. | Small-Business (50 or fewer emp.) **Reviewed Date:** December 08, 2025 **What do you like best about Secureframe?** I love how easy it is to see what individual tasks are still to do with Secureframe. We actually used a competitor's product but switched back to Secureframe because it was significantly easier to see what challenges we needed to address to get our SOC two type one or SOC two type two. The initial setup was very easy for the team, especially the chief security officer. **What do you dislike about Secureframe?** I'd love to see more automation, especially when it comes to certain products like the integrations. **What problems is Secureframe solving and how is that benefiting you?** I use Secureframe to easily manage and track tasks for SOC 2 compliance, making it significantly easier to address necessary challenges. ### 19. VP of Software Development **Rating:** 5.0/5.0 stars **Reviewed by:** Osiris G. | VP of Software Development, Small-Business (50 or fewer emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Secureframe?** What I like best about Secureframe is its ability to simplify and automate the entire SOC 2 Type II compliance process. The platform provides a clear roadmap, real-time monitoring, and integrations with the tools we already use, which makes evidence collection seamless. I especially appreciate the continuous compliance features—being able to track our security posture in real time gives us confidence that we're always audit-ready. The support team is also incredibly responsive and knowledgeable, which made onboarding smooth and efficient. **What do you dislike about Secureframe?** Some integrations require manual configuration or don’t fully capture all relevant data, which can lead to extra work during evidence collection **What problems is Secureframe solving and how is that benefiting you?** Before using Secureframe, tracking controls, collecting evidence, and preparing for audits were manual, time-consuming, and error-prone. The platform automates much of that work ### 20. Essential Compliance Platform That Transformed Our Security Posture **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** September 04, 2025 **What do you like best about Secureframe?** SecureFrame has been instrumental in transforming our organization's security posture. The platform excels at identifying missing controls and gaps in our security framework that we weren't even aware existed. The risk assessment capabilities are thorough and provide clear, actionable insights that have helped us build a robust security program from the ground up. The automated control mapping and gap analysis features are particularly valuable for organizations looking to achieve compliance with frameworks like SOC 2. One of the most impactful features has been the employee onboarding management system. SecureFrame has simplified our security training and policy acknowledgment processes significantly. The platform makes it easy to track completion rates, ensure all new hires receive proper security training, and maintain compliance documentation. This has reduced our administrative burden while ensuring we meet all regulatory requirements for employee security awareness. The policy management functionality is outstanding. SecureFrame provides a centralized repository for all our security policies with version control, approval workflows, and automated distribution to relevant stakeholders. The platform's ability to generate policy templates, track policy acknowledgments, and maintain audit trails has been invaluable. The integration with compliance frameworks ensures our policies align with industry standards and regulatory requirements. **What do you dislike about Secureframe?** The only area where SecureFrame falls short is in web application performance. There are occasional slowdowns and latency issues, particularly when loading large datasets or generating comprehensive reports. While these performance issues don't significantly impact functionality, they can be frustrating during peak usage times. The platform would benefit from optimization to improve response times and overall user experience. **What problems is Secureframe solving and how is that benefiting you?** Before SecureFrame, we were struggling with fragmented security compliance management that was consuming significant time and resources. Our small development team was spending countless hours manually tracking security controls, managing policy versions, and trying to identify compliance gaps without a clear framework. We lacked visibility into our security posture and were constantly worried about missing critical requirements that could impact our business operations or customer trust. SecureFrame has transformed our approach by providing a centralized, automated platform that automatically identifies missing security controls and compliance gaps, streamlines policy management with version control and approval workflows, and automates employee onboarding with security training tracking. The platform gives us real-time visibility into our compliance status and continuous monitoring instead of reactive compliance management. The business impact has been significant: we've reduced compliance-related administrative time by 60%, improved our security posture through systematic gap identification, and gained confidence in our ability to meet customer security requirements while building a security-first culture that scales with our business growth. ### 21. Fast-Tracked Our Compliance journey- A Game Changer for Retail Techh **Rating:** 5.0/5.0 stars **Reviewed by:** David D. | Lead Technical Engineer, Retail, Enterprise (> 1000 emp.) **Reviewed Date:** August 07, 2025 **What do you like best about Secureframe?** As a retail business with multiple cloud integration, especially. with AWS and Azure, keeping track of our security and having clear visibility was always tough. Thanks to secureframe's automated monitoring of over 40 services, we saved countless hours that would have gone into manual tracking. **What do you dislike about Secureframe?** It feels mostly customized for compliance managers, so technical users might want a bit more control over what they see. That said, the support team was great--always quick to help and walk us through any issues. **What problems is Secureframe solving and how is that benefiting you?** We needed SOC 2 and ISO 27001 certifications to grow our presence in enterprise retail partnerships. Before using secureframe, we were stuck managing spreadsheets, doing manual audits, and dealing with scattered documentation--which slowed down our sales process and took up a lot of engineering time. ### 22. From Compliance Nightmare to Competitive Edge **Rating:** 5.0/5.0 stars **Reviewed by:** Pat F. | Small Business Owner | Passive Income Expert | Founder of Smart Passive Income, Marketing and Advertising, Small-Business (50 or fewer emp.) **Reviewed Date:** August 09, 2025 **What do you like best about Secureframe?** The peace of mind. Being a fintech startup, compliance is what would keep one of us up at night. The always-on monitoring Secureframe provides (particularly for cloud infrastructure) helps me know about risks before they turn into fires. Auditor Collaboration Tools $15,000 saved per year in consulting fees SOC 2 Type I Muscles Up in Eight Weeks Using Your Workflow Our customer success team is our extended family, so to speak. **What do you dislike about Secureframe?** Custom integrations are not so well documented in the API documentation. Our proprietary CRM requirement = developer help **What problems is Secureframe solving and how is that benefiting you?** We went from losing deals because of compliance to using our Secureframe dashboard as a sales closer. Last quarter, thanks to the automated evidence library, we survived a surprise bank audit without any panicked efforts. ### 23. I fully recommend Secureframe! **Rating:** 5.0/5.0 stars **Reviewed by:** Josh S. | Chief Product Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Secureframe has been an exceptional partner for YARDZ in achieving SOC 2 compliance. Their professionalism, speed, and reliability turned what could have been a months-long process into just weeks—without sacrificing quality. Their team guided us every step of the way, ensuring we stayed audit-ready and confident. Without Secureframe, we would have missed critical opportunities that depended on fast, verifiable compliance. They’ve truly helped us move faster, win trust, and grow. — Joshua Schuyler, Chief Product Officer, YARDZ **What do you dislike about Secureframe?** As a startup, ideally, they would have been more affordable, but in the end the deals we landed after becoming SOC2 compliant made the investment worth it. **What problems is Secureframe solving and how is that benefiting you?** They helped use get SOC 2 compliant and are working with use to make sure we stay compliant. ### 24. Must have tool for ISO 27001 2022 compliance and overall compliance **Rating:** 4.0/5.0 stars **Reviewed by:** Atul T. | Techinal Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** June 25, 2025 **What do you like best about Secureframe?** It has plugins for most of the products/applications that typically needs to be integrated in the platform for compliance in the small Businesses . The documentation is exhaustive and more intuitive. The support from Secureframe in person over mails and calls and support desk is excellent. People providing support knows the product well to get you started quickly and make you feel confident to secure ISO certification and maintain in future. We are still in the process of securing the ISO certification but our journey so far with Secureframe is satisfactory. **What do you dislike about Secureframe?** Actually, there isn't much to dislike about. other than enhancement in their secureframe agent (end point security) installation where the message is not shown at the end of installation that the agent is installed successfully or if there are errors. **What problems is Secureframe solving and how is that benefiting you?** Its helping us identify security lapses/mis configuration along with possible remedies to overcome them. ### 25. Continuous Innovation and Free Implementation Set This Tool Apart **Rating:** 5.0/5.0 stars **Reviewed by:** Taurean S. | IT Support & Security Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** November 06, 2025 **What do you like best about Secureframe?** Free and fast implementation, simple to use, integrations that just work, responsive support, and a complete SOC 2 feature set. We use it daily. **What do you dislike about Secureframe?** Pricing feels unclear and hard to plan around. Clearer tiers and packaging would help. Advanced learning is also lacking depth. **What problems is Secureframe solving and how is that benefiting you?** Secureframe centralizes our SOC 2 evidence and documents, continuously monitors controls, and automates testing across our stack. The result is faster audits, fewer manual tasks, clear ownership, and an audit ready posture year round. ### 26. Centralized Security Solution with AI Limitations **Rating:** 2.5/5.0 stars **Reviewed by:** Angie P. | VP, Strategy and Sales, Mid-Market (51-1000 emp.) **Reviewed Date:** December 23, 2025 **What do you like best about Secureframe?** I like that Secureframe provides a single source of truth, which is really helpful for maintaining consistency in security reviews. I also appreciate the SSO login feature, which simplifies accessing the system. The onboarding process has been easy for me, which makes it convenient to get started with using Secureframe. **What do you dislike about Secureframe?** The AI doesn't do as good of a job on first pass answers on security reviews as it could. Some of the answers are wrong or missing. **What problems is Secureframe solving and how is that benefiting you?** Secureframe provides a central system for security reviews, acting as a single source of truth. ### 27. Secureframe has successfully guided and supported us through our first SOC2 audit. **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** February 05, 2025 **What do you like best about Secureframe?** Secureframe allows the auditor direct access to Secureframe, saving a lot of work in transmitting information/evidence. For me, it was the first time working with such software or participating in a SOC2 audit, and I was pleasantly surprised at how easy it was for me to find my way around. If a problem or question arose, customer service was always quickly reachable and had a solution ready, usually on the same day. We were also very impressed by the multitude of features that Secureframe offers (integrations, policies, personnel, etc.), allowing us to save in other areas by using Secureframe. **What do you dislike about Secureframe?** Actually, there isn't much to criticize. The auditor pointed out some tests that we should activate, which Secureframe did not alert us to in advance. However, these were minor issues and did not cause us any real problems with the auditor, just a slight additional effort to answer the auditor's questions. **What problems is Secureframe solving and how is that benefiting you?** Secureframe helps us with passing audits such as SOC2. Furthermore, we have listed our vendors here with details, as well as internal policies that our employees can access and sign. Additionally, Secureframe offers some quality of life features that are useful to us in many areas. ### 28. From confusion to completion **Rating:** 5.0/5.0 stars **Reviewed by:** Gerald N. | Senior Vice President of Product Management/IT, Mid-Market (51-1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Secureframe has been an invaluable partner in taking us from uncertainty to successful audit completion. It excels at helping us track and manage the wide range of policies, rules, and regulations necessary to maintain compliance. Leveraging Secureframe to oversee our SOC 2 Type 2 audit is an easy choice. With their guidance, I can quickly pinpoint exactly what needs to be done and the most effective way to do it—ensuring we pass our audit with confidence. **What do you dislike about Secureframe?** There are times where it takes Secureframe a little while before it is in sync with other packages such as KnowBe4. **What problems is Secureframe solving and how is that benefiting you?** Secureframe enables me to track all of the moving parts of an audit to make sure we are ready for the audit. ### 29. Effortless Compliance Management and Audit Readiness **Rating:** 0.0/5.0 stars **Reviewed by:** Verified User in Accounting | Mid-Market (51-1000 emp.) **Reviewed Date:** December 10, 2025 **What do you like best about Secureframe?** Secureframe is a useful product that helps capture compliance and store them for an audit **What do you dislike about Secureframe?** sometimes it can be difficult to locate documents **What problems is Secureframe solving and how is that benefiting you?** secureframe is a huge upgrade from using Google Drive ### 30. Secureframe Simplifies Compliance and Policy Management **Rating:** 4.5/5.0 stars **Reviewed by:** Anish P. | Senior Information Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 18, 2025 **What do you like best about Secureframe?** Secureframe makes SOC 2 compliance much smoother. I really like that it helps with policy acceptance for new users, assigning security training videos to new joiners, and keeping policies updated. It also tracks vendor lists. The dashboard is clean, and the integrations with tools like AWS, Google Workspace, and Github help pull data automatically with the vulnerabilities.The Governance feature is very useful, as it shows which applications each user has access to and whether the right security options are enabled. On top of that, the asset inventory tied to the SOC 2 framework gives a clear view of systems and resources, making audits and compliance checks much easier. **What do you dislike about Secureframe?** A. Sometimes the policy acceptance reminders can be a bit too rigid, and it would be great if there were more customization options for scheduling or tailoring them to different teams like : 1. Customizing the message style to match your company’s internal communication style. 2. Flexibility in sending the email as per teams B. Having different format to export vulnerbilties apart from only CSV **What problems is Secureframe solving and how is that benefiting you?** It removes the manual effort of chasing people for policy acceptance, makes onboarding new employees easier with built-in training, and helps us stay on top of access controls and vendor compliance. This saves a lot of time during audits. ### 31. Outstanding Support and Effortless Integrations **Rating:** 5.0/5.0 stars **Reviewed by:** YAMINI S. | CEO, Small-Business (50 or fewer emp.) **Reviewed Date:** November 28, 2025 **What do you like best about Secureframe?** The customer support is excellent, and the interface is very easy to use. I also appreciate the automated templates and helpful guidance, as well as the seamless integrations with all the vendors we rely on. **What do you dislike about Secureframe?** I wish the external auditors were more effective, as I feel their performance could be improved. **What problems is Secureframe solving and how is that benefiting you?** It made achieving SOC 2 compliance quick and straightforward for us. ### 32. Solid Compliance Platform with Excellent Integrations and Support **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** August 15, 2025 **What do you like best about Secureframe?** Secureframe is incredibly easy to use, even for team members who are not deeply technical. The interface is intuitive, and navigating between different compliance requirements and integrations feels seamless. Implementation was straightforward, and the onboarding process made it simple to get up and running quickly. Their customer support is exceptional, with every interaction being with someone knowledgeable, friendly, and able to provide clear answers to both platform-specific and general compliance questions. The number of features is impressive for the price, especially when compared to alternatives like Drata, and the ease of integration with a wide variety of SaaS solutions has saved us countless hours of manual work. We use the platform frequently throughout the week to check progress toward SOC 2 and other compliance standards, and it has significantly improved our ability to track and maintain our security posture. **What do you dislike about Secureframe?** The platform is still growing, which means that while new features are added often, they occasionally come with bugs that need to be addressed. These are usually resolved quickly, but they can be mildly disruptive. The pace of changes is fast, and while that is generally positive, it sometimes introduces temporary instability. It is clear the product is evolving rapidly, and although that brings some short-term challenges, the improvements over time have been substantial. I would love to see Secureframe introduce automated analysis for manually uploaded evidence. While I understand this can be computationally demanding, it would be an incredibly valuable feature to help ensure that the evidence being gathered is accurate and complete. The current manual upload method causes the test to pass, regardless of what is uploaded. **What problems is Secureframe solving and how is that benefiting you?** Secureframe is helping us centralize and automate our security compliance efforts, particularly for SOC 2 and other industry standards. By integrating with our existing SaaS tools, it reduces the manual work of tracking controls and evidence, gives us real-time visibility into our compliance posture, and ensures we stay audit-ready year-round. This saves time, reduces errors, and allows our team to focus on higher-value security and IT initiatives. ### 33. Seamless - that's a one-word review for secureframe **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Marketing and Advertising | Small-Business (50 or fewer emp.) **Reviewed Date:** August 15, 2025 **What do you like best about Secureframe?** Effortless Integrations: The ability to connect with services like AWS, Azure, and GitHub provides a centralized view of our security posture. This eliminates manual checks and ensures we are always up-to-date. and tests for each integration along with details for how to pass a specific test related to a certification and shows our progress Comprehensive Compliance Monitoring: We can easily track our progress toward key certifications like SOC 2, GDPR, and ISO 27001. The platform consolidates all the necessary information, making it simple to see our compliance status at a glance. Streamlined Onboarding: The integration with our HR portal is invaluable. We can automate the process of onboarding new staff, ensuring they receive and acknowledge all required security and compliance information from day one. Centralized Information Hub: The platform serves as a single source of truth for all things compliance. We can access and review important documents, manage staff information, and monitor our overall compliance status in one place. **What do you dislike about Secureframe?** Some time status doesn't update for few connections - and it was hard to figure out what else needed to be done. For ex certain PRs would fail but we follow all instruction on the test - but doesn't update. but we can add comments and upload evidence. **What problems is Secureframe solving and how is that benefiting you?** We used secure frame for our SOC2, GDPR compliance. ### 34. Smooth SOC2 Compliance with Exceptional Support **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** August 14, 2025 **What do you like best about Secureframe?** Secureframe made preparing for our SOC2 audit straightforward and stress free. The platform provided an easy way to centralize all required information, making it simple to track progress and stay organized. The integrations were quick to set up and worked seamlessly with our existing tools. Our Customer Success Manager, Coletta Edison, was both knowledgeable and highly responsive, providing valuable guidance that helped us complete our audit efficiently. We met with her frequently and she was so helpful every time we connected with her. The overall experience left us feeling well prepared for future compliance cycles and I expect to use it moving forward. **What do you dislike about Secureframe?** I don't have much criticism of the product. We provided feedback along the way and I believe it is being addressed in a future update. Mainly the abililty to customize timing and followup schedules for our team's compliance acceptance and training. **What problems is Secureframe solving and how is that benefiting you?** The main problem Secureframe solves for us is organizing our information to complete our annual SOC2 compliance audit quickly and efficiently. It's nice to have it all in one place for the future too. ### 35. Secureframe - The Magical Automation Behind Continuous Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Tim U. | Cyber Security / Automation Expert, Computer & Network Security, Mid-Market (51-1000 emp.) **Reviewed Date:** August 14, 2025 **What do you like best about Secureframe?** For me, as a cybersecurity professional concentrated in automating at scale compliance processes, Secureframe quickly emerged as an obviously impactful product that made all the messy manual steps into this smooth sailing workflow. Using the platform supported by an API-first approach, we can bring various custom scripts and other internal tools (like SIEM and PAM solutions) into the compliance framework. It has been invaluable in automating the collection of evidence for controls that do not have standard integrations (e.g., our in-house IAM system). Accurate real time monitoring and anomaly detection are outstanding. A simple example: Secureframe flagged an accidental misconfiguration of our cloud storage permissions, which could have been access to sensitive audit logs — a vector that was not covered by any of our existing tools. Mapping controls across multiple frameworks (SOC 2, ISO 27001, NIST CSF) in one single dashboard removes the duplicates we were locked into with non-integrated spreadsheets or point solutions. **What do you dislike about Secureframe?** The automation options are impressive, but the scripting interface for creating something more advanced like a custom integration does not have the extent of an IDE. Bug in complex workflows benefit request that requires some back and forth from support. Also, the ability to customize scores within the risk assessment module tying into our internal risk appetite metrics could be a bit more granular. **What problems is Secureframe solving and how is that benefiting you?** What Secureframe Solves: Scalability and Audit Fatigue So where exactly does Secureframe come into play? We have automated 90% of evidence collection and control testing, saving more than 40% in compliance-related FTE hours annually. For reference, our prior SOC 2 Type II audit required 8 hours of prep time on our end as opposed to 3 weeks pre-Secureframe. It is also the bridge between security and DevOps. Using Terraform support, compliance checks will now be configured to be created in CI/CD pipeline wherein before every deploy of new infrastructure, the pipeline would ensure that the proper controls are met. The shift-left approach has reduced remediation costs by 60% and changed compliance from the end-of-the-line bottleneck to a collective action. ### 36. Simplified our life by having one centralised platform for compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Klemen S. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** October 07, 2025 **What do you like best about Secureframe?** As a small team we have saved countless hours by leveraging Secureframe templates and integrations. Their system manages yearly reminders for policies, employee mandatory training and realtime compliance checks via 3rd party integrations. **What do you dislike about Secureframe?** It can get overwhelming by the sheer number of tests, wish there was a way to somehow help us pick the ones that are really connected to our industry and help us decide on which ones we are safely skip. **What problems is Secureframe solving and how is that benefiting you?** Having one place where we can tracking compliance and act quickly on it. ### 37. Efficient SOC 2 Audits with Intuitive Integration **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** November 19, 2024 **What do you like best about Secureframe?** I appreciate the dedicated account team that made setting up Secureframe fairly straightforward, even though connecting everything took some time. I love the automated evidence gathering feature and the simple checklist area, which make our SOC 2 audits quick and efficient. The integration capabilities with our existing tools, like AWS, have been incredibly useful, streamlining our processes without requiring additional software. Overall, I've had a positive experience with Secureframe, and it's my default choice for SOC audits. **What do you dislike about Secureframe?** I find the price of Secureframe to be expensive for software. Although it's not terrible, it is still on the higher side. **What problems is Secureframe solving and how is that benefiting you?** I find Secureframe streamlines SOC 2 audit processes, simplifying evidence gathering so efficiently that one person can manage most tasks, reducing team involvement. ### 38. Simplified Compliance Process **Rating:** 4.0/5.0 stars **Reviewed by:** Giovanna L. | Risk Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 13, 2025 **What do you like best about Secureframe?** As our company's information security program matures, we've looked to obtain industry certifications to reflect the advancement of our program. Secureframe helped us streamline and make certification processes easier. Through centralized workflows and detailed frameworks that outline control requirements and mapping, it made the process intuitive and left us feeling prepared for audit processes. What I appreciate most is how the tool proactively flags gaps or failing controls and provides details on what is needed to remediate. Their trust center feature has also has allowed us to share compliance status and certificates with clients and prospects with ease. The setup process was simple and maintenance couldn't be more simple. Secureframe's vast knowledge base also made it easy to navigate any questions or look deeper into how to leverage the platform which is extremely helpful. **What do you dislike about Secureframe?** Secureframe has massively simplified our certification processes and the Trust Center makes compliance faster and more transparent. However, it would be great to be able to customize access for roles more granularly. **What problems is Secureframe solving and how is that benefiting you?** Secureframe has helped centralize documentation and automate tasks which gives our company a clear, real-time view of our certification progress. The frameworks and controls made sure we didn't miss a step in evidence collection and maintenance. ### 39. Secureframe Makes SOC 2 Type II Compliance Effortless **Rating:** 5.0/5.0 stars **Reviewed by:** Cindy H. | Risk Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** August 13, 2025 **What do you like best about Secureframe?** Secureframe provides a streamlined, well-structured process we can trust with our SOC 2 Type II compliance. We use it regularly throughout the year to track progress. Automated collection, continuous monitoring, and real-time insights keep us on top of every requirement. The wide range of integrations made setup quick, and the intuitive design means everyone on our team can jump in without extra training. Their support team stands out quick to respond, incredibly knowledgeable, and genuinely invested in our success. Most importantly, Secureframe gives us the peace of mind that our compliance is always current while giving us the flexibility to grow and adapt as our needs change. **What do you dislike about Secureframe?** So far, I’ve been very happy with Secureframe. I don’t have any major dislikes, and I’m looking forward to seeing even more features and updates in the future. **What problems is Secureframe solving and how is that benefiting you?** Secureframe eliminates the manual, time-consuming work of managing SOC 2 Type II compliance. By automating evidence collection, integrating with our existing tools, and providing continuous monitoring, it keeps us audit-ready year-round. This saves our team significant time, reduces the risk of errors, and gives us confidence that our compliance is always current. ### 40. Secureframe for Compliance Initiatives **Rating:** 5.0/5.0 stars **Reviewed by:** Nicholas W. | Security Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 13, 2025 **What do you like best about Secureframe?** Secureframe is extremely helpful in pursuing compliance initiatives for many different frameworks. The company helped us achieve 3 different compliance certificates in the same year, which is great for our business. They have been such a big help, and their team is very responsive. Secureframe is very easy to use, and very straightforward when it is audit time. It took a team of 2 to implement the tool altogether, and we use the tool daily for many different needs. **What do you dislike about Secureframe?** I don't have anything bad to say about Secureframe. Sometimes we have obscure applications we would like to add to our profile that are not available, but that has been overcome by Secureframe since the company adds new integrations almost daily it seems. **What problems is Secureframe solving and how is that benefiting you?** Secureframe has solved our problem of not having a centralized compliance service that does a lot of the heavy lifting for us. This is a major benefit to the business ### 41. Easy and Straight forward Integrations **Rating:** 5.0/5.0 stars **Reviewed by:** Elon R. | Cybersecurity Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** August 13, 2025 **What do you like best about Secureframe?** I loved the ease of Integration implementation. Secureframe offers easy to follow guides and directions on how to connect your integrations into Secureframe. The ability to mark certain evidence collected via Integrations as out of scope was super useful in our Audit. Integrating to our different products to one place helped us find forgotten resources that we were able to shut down and remove. Support was super quick to help and resolve my issue with our Microsoft 365 integration failing to show all users having MFA. I also enjoyed how easy it was to satisfy each of the controls. The guides and recommendations were great in terms of finding exactly what evidence we needed to help us pass the audit. **What do you dislike about Secureframe?** The ability to create custom and specific types of reports. I wish there was a way to mix and match certain criteria to report to the specific teams per controls. **What problems is Secureframe solving and how is that benefiting you?** Secureframe has streamlined our entire audit preparation process by centralizing evidence collection, automating integration checks, and providing clear, actionable guidance for each control. Instead of manually tracking security configurations across multiple systems, we can now see compliance status in one place and address any gaps quickly. The ability to mark out-of-scope evidence means we can focus audit efforts where they matter most, saving significant time and reducing the stress of last-minute document gathering. The integrations not only save time but have also helped us identify resources we had forgotten about. ### 42. Sobot kept our team sane during peak season **Rating:** 5.0/5.0 stars **Reviewed by:** Stephen O. | IT Services and IT Consulting, Consulting, Mid-Market (51-1000 emp.) **Reviewed Date:** August 07, 2025 **What do you like best about Secureframe?** Sobot made omnichannel customer support finally feel manageable. We use WhatsAPP, email, live chat, and voice and it all comes into one neat dashboard. The AI is smart enough to handle FAQs but know when to hand off to a human. It even detects frustration in tone and routes accordingly. **What do you dislike about Secureframe?** It's definitely features-rich, but that comes with learning curve. setting up advanced workflow and voicebot routing took a few days. **What problems is Secureframe solving and how is that benefiting you?** Before sobot, our agents were jumping between four or five tools to handle customer service and our response times suffered. Now everything is streamlined into one platform with automation that handles 60% of inquiries, smart voice routing for calls, and alerts for urgent customer moods. ### 43. A must-have for SOC 2 **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Financial Services | Small-Business (50 or fewer emp.) **Reviewed Date:** August 12, 2025 **What do you like best about Secureframe?** Secureframe automates a huge portion of compliance checks, saving a lot of manual effort. Its wide range of integrations makes connecting with our existing tools seamless. Once you get familiar with the platform, it becomes very straightforward and efficient to use. We use it for SOC 2 and it has become a key tool for us. **What do you dislike about Secureframe?** The initial setup and interface can feel a bit overwhelming, especially for first-time users. There’s a learning curve in navigating all the features and settings. However, once you understand the workflow, the complexity becomes much more manageable. Some integrations may be limited if you don't have an enterprise subscription with the 3rd party, but there isn't much Secureframe can do to solve it, as discussed directly with them. **What problems is Secureframe solving and how is that benefiting you?** Secureframe simplifies compliance by automating evidence gathering, security checks and continuous monitoring across our systems. This significantly cuts down the time and resources required for manual checks, while ensuring we remain audit-ready at all times. Its wide range of integrations centralizes compliance tasks, making the process faster and lightweight. ### 44. An Amazing Tool, Especially for People New to SOC Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Legal Services | Mid-Market (51-1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Customer service is fantastic, Nickson Jean-Baptiste is our firm's point of contact and he is incredibly knowledgeable. Both my firm and myself were new to the SOC compliance world and Nickson's knowledge was paramount to helping us get our first SOC 2 cert. His training and subject-matter expertise are unparalleled. The application itself is incredibly intuitive, guiding users with widgets, templates and "scores" to demonstrate the organization's progress towards its compliance certification. It does just enough hand-holding to keep you accountable while giving you enough wiggle room to explain compliance outside of the SF "box". **What do you dislike about Secureframe?** Nothing to note. Performance, accessibility and customization all rate between adequate and excellent in my opinion. We've had some issues with integrations breaking, but I'm not sure if that is on the SF side or the integrating applications' sides. **What problems is Secureframe solving and how is that benefiting you?** It is allowing a relatively small security team to complete what is considered a large project. ### 45. SOC2 Made Easy **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Insurance | Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Secureframe makes the SOC 2 compliance process structured and transparent. I like that it centralizes evidence collection, automates a lot of recurring security tasks, and integrates with our core systems (like cloud infrastructure, HR tools, and ticketing systems). For a business that handles sensitive resident data and compliance records, having real-time visibility into audit readiness reduces risk and saves me time that I can redirect to product strategy. Their dashboards and reminders help keep engineering, security, and compliance stakeholders aligned without a ton of manual follow-up. **What do you dislike about Secureframe?** While Secureframe is strong on automation, some integrations can feel rigid — if your workflows or tools deviate from the “happy path,” you may need workarounds. The UI can get cluttered when you’re tracking a large number of controls across multiple frameworks. Occasionally, response times for support on more technical questions can lag when you need a quick resolution to keep compliance tasks moving. **What problems is Secureframe solving and how is that benefiting you?** Secureframe is solving the pain of manual SOC 2 compliance tracking and audit preparation. Before, ensuring ongoing compliance meant chasing down evidence from multiple teams, checking configurations manually, and worrying about whether we were truly “audit ready.” Now, Secureframe continuously monitors our systems, flags gaps proactively, and standardizes the evidence collection process. This gives me confidence that we’re protecting resident data in accordance with industry best practices, which strengthens our trust with property management clients and helps avoid costly delays or fines in our compliance-driven business ### 46. Amazing **Rating:** 5.0/5.0 stars **Reviewed by:** Carlos T. | Consultant, Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** What I like best about Secureframe is how incredibly easy and fast it makes the entire compliance process. The AI-driven automation takes away so much manual work, and the continuous monitoring across multiple cloud services gives me peace of mind that nothing will slip through the cracks. It’s a huge time saver and really helps us stay audit-ready at all times. **What do you dislike about Secureframe?** Honestly, there’s very little to dislike about Secureframe. If anything, I’d say the platform is so comprehensive that it took a bit of time to explore all the features, but once we got familiar with it, that depth became one of its biggest strengths. **What problems is Secureframe solving and how is that benefiting you?** Secureframe is helping us simplify and accelerate the entire compliance process for standards like SOC 2 and ISO 27001. Instead of spending months gathering evidence and manually tracking controls, we can get compliant in weeks while the platform continuously monitors our systems. This not only saves us significant time and resources but also gives our customers confidence that we take security and compliance seriously. ### 47. Good GRC tool for Soc2 and other compliance frameworks **Rating:** 3.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** This was my first time managing an audit for a company and the Secureframe platform made the process very straightforward. The Secureframe team has been fantastic and answered questions within hours, which was especially critical when our audit window was about to end. The Trust Center was easy to configure and now allows prospects to retrieve our Soc2 and Soc3 reports in a self-serve fashion. The platform has pre-built integrations for all major systems we us, which significantly cut down on the time it took us to collect evidence. Now that we have gone through our first Soc2 audit, I log in 2-3 times a month to ensure every compliance test is passing. Of all providers we reached out and did demos with (Vanta, Drata, Sprinto), Secureframe seemed to provide the best value for the price and I would go with Secureframe again. **What do you dislike about Secureframe?** There were definitely some oddities to work around, especially when it comes to the integration with our HR system, which often lead Secureframe to wrongly mark employees as contractors, or misclassified employees that are no longer with the company. This took some time to get to a stable state, but now works rather well. The other area of concern was the Secureframe agent and the related policy set for MacBooks, which took many employees several tries to get right, even though we had written up our own step-by-step instructions with screenshots, so this process could be simplified. **What problems is Secureframe solving and how is that benefiting you?** Secureframe takes care of our evidence management and lets us know what we need to provide for audits and what things we need to change. We don't have a specific compliance person on staff, so without a platform like Secureframe it would have been very hard for us to get everything together we need to pass an audit. The fact that auditors know Secureframe and have access to our evidence made the audit process a lot more straightforward than I expected. ### 48. Game changer to setup and control a new compliance framework **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Civic & Social Organization | Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Having built HIPAA and SOC 2 programs from scratch at three companies, I can say the most helpful thing about Secureframe is how fast it gets you from zero to audit-ready and beyond. It launches policies, procedures, and training in days, automates ~50% of compliance tasks with our cloud partners, and gives you a real-time compliant system out of the box. Upsides: Cuts setup time from months to weeks. Shifts you from one-time audit prep to ongoing best-practice controls. Automates the heavy lifting—monitoring, alerts, and evidence collection. Keeps compliance continuous and visible across the whole company. SOC 2 automation benefits: Security – Instant misconfiguration alerts. Availability – Integrated uptime tracking. Processing Integrity – Automated pipeline checks. Confidentiality – Continuous access reviews. Privacy – Real-time policy and retention enforcement. Secureframe doesn’t just help you pass the audit—it makes staying compliant easier, faster, and smarter. **What do you dislike about Secureframe?** While Secureframe is powerful, some auditors still have their own rigid checklists for audit passing. That means you may need to manually map the Secureframe data room to an auditor’s specific format. On top of that, the audit community as a whole hasn’t fully embraced the real-time audit model—so you might still face traditional, point-in-time review requirements despite having continuous controls in place. **What problems is Secureframe solving and how is that benefiting you?** Secureframe automates the heavy lifting of compliance—policies, training, evidence collection, and continuous monitoring—so we can go from zero to audit-ready in weeks, not months. It shifts us from reactive audit prep to proactive, real-time controls, saving time, reducing errors, and strengthening our overall security posture. ### 49. SecureFrame helps organize the difficult compliance processes and makes them manageable **Rating:** 5.0/5.0 stars **Reviewed by:** Alex K. | Vice President - Software Engineering, Mid-Market (51-1000 emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** SOC2 compliance necessitates extensive documentation and evidence regarding internal processes, vendors, and other relevant aspects. SecureFrame neatly organizes everything into tests with evidence, assignments, tasks, and controls. They also have numerous integrations with cloud providers like AWS and Microsoft 365, and they could bring most of this data in automatically. The best part is that once you set it up and follow SecureFrame's guidance, it makes it very easy to stay on top of compliance. It's no longer a monumental effort once a year, but it's a little bit of work every month. **What do you dislike about Secureframe?** Nothing wrong with SecureFrame itself. Compliance in general is complex, messy and takes a lot of work. SecureFrame makes it manageable. If I had to nitpick, I would say that SecureFrame's UI could use some work: when I update a piece of evidence or a test, it takes time to re-test the evidence, but the UI doesn't make it super clear that the test status is being calculated. I need a progress bar or a "spinner". It's not a big deal though, once I understood how the UI works, I have no issues using it. **What problems is Secureframe solving and how is that benefiting you?** SOC2 compliance, Vendor management, and internal policy management (versioning and user acceptance). ### 50. Reliable Platform for SOC 2 & HIPAA Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** August 11, 2025 **What do you like best about Secureframe?** Secureframe has been an excellent tool for managing our SOC 2 and HIPAA compliance. The platform centralizes policies, automates evidence collection, and integrates smoothly with our clients existing systems, which significantly reduces manual effort. Its clear dashboards and task tracking make it easy to monitor progress and ensure we stay on schedule. The support team is extremely responsive and knowledgeable, providing guidance throughout the process. **What do you dislike about Secureframe?** There is nothing we dislike about the platform currently. Any suggested improvements are rapidly updated. **What problems is Secureframe solving and how is that benefiting you?** Secureframe has enabled our client to maintain SOC 2 and HIPAA readiness in a far more efficient and organized way. From an auditor’s perspective, the platform’s automated evidence collection, centralized policy management, and clear control tracking greatly streamline the review process. It reduces back-and-forth, ensures documentation is complete and up to date, and ultimately allows us to perform our audit more efficiently while giving the client ongoing visibility into their compliance posture. ## Secureframe Discussions - [How are you getting value from the AI features when first-pass answers and automation feel hit-or-miss?](https://www.g2.com/discussions/how-are-you-getting-value-from-the-ai-features-when-first-pass-answers-and-automation-feel-hit-or-miss) - 1 comment, 1 upvote - [Is anyone else struggling with limited reporting and document/search friction during executive reviews?](https://www.g2.com/discussions/is-anyone-else-struggling-with-limited-reporting-and-document-search-friction-during-executive-reviews) - 1 comment, 1 upvote - [What do you do to make the first-year setup and control mapping less overwhelming?](https://www.g2.com/discussions/what-do-you-do-to-make-the-first-year-setup-and-control-mapping-less-overwhelming) - 1 comment, 1 upvote - [How do you use Secureframe?](https://www.g2.com/discussions/how-do-you-use-secureframe) - 3 comments, 1 upvote - [What is soc2?](https://www.g2.com/discussions/what-is-soc2) - 4 comments, 1 upvote - [View Secureframe pricing details and edition comparison](https://www.g2.com/products/secureframe/reviews?page=4§ion=pricing&secure%5Bexpires_at%5D=2026-07-08+04%3A23%3A39+-0500&secure%5Bsession_id%5D=a93c486b-b9ca-4601-886d-160a42c6f942&secure%5Btoken%5D=79f5b20d8dcbd687394c160d4ce4b2c9447a2e8346c6f757f8296c6d8b60d653&format=llm_user) ## Secureframe Integrations - [1Password](https://www.g2.com/products/1password/reviews) - [ADP Workforce Now](https://www.g2.com/products/adp-workforce-now/reviews) - [Agentforce 360 Platform (formerly Salesforce Platform)](https://www.g2.com/products/agentforce-360-platform-formerly-salesforce-platform/reviews) - [Aha!](https://www.g2.com/products/aha/reviews) - [Airtable](https://www.g2.com/products/airtable/reviews) - [Amazon AWS Platform](https://www.g2.com/products/amazon-aws-platform/reviews) - [Amazon DynamoDB](https://www.g2.com/products/amazon-web-services-aws-amazon-dynamodb/reviews) - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews) - [Amazon ElastiCache](https://www.g2.com/products/amazon-elasticache/reviews) - [Amazon Relational Database Service (RDS)](https://www.g2.com/products/amazon-relational-database-service-rds/reviews) - [Amazon Simple Storage Service (S3)](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews) - [Amazon Virtual Private Cloud (Amazon VPC)](https://www.g2.com/products/amazon-virtual-private-cloud-amazon-vpc/reviews) - [Amazon Web Services AI](https://www.g2.com/products/amazon-web-services-ai/reviews) - [Asana](https://www.g2.com/products/asana/reviews) - [Atlassian Atlas](https://www.g2.com/products/atlassian-atlas/reviews) - [Auth0](https://www.g2.com/products/auth0/reviews) - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews) - [AWS Cloud Development Kit (AWS CDK)](https://www.g2.com/products/aws-cloud-development-kit-aws-cdk/reviews) - [AWS CloudFormation](https://www.g2.com/products/aws-aws-cloudformation/reviews) - [AWS Config](https://www.g2.com/products/aws-config/reviews) - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews) - [AWS Glue](https://www.g2.com/products/aws-glue/reviews) - [AWS Identity and Access Management (IAM)](https://www.g2.com/products/aws-identity-and-access-management-iam/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [AWS Security Hub](https://www.g2.com/products/aws-security-hub/reviews) - [Azure Active Directory Domain Services](https://www.g2.com/products/azure-active-directory-domain-services/reviews) - [Azure App Service](https://www.g2.com/products/azure-app-service/reviews) - [Azure Cloud Services](https://www.g2.com/products/azure-cloud-services/reviews) - [Azure DevOps Labs](https://www.g2.com/products/azure-devops-labs/reviews) - [Azure DevOps Server](https://www.g2.com/products/azure-devops-server/reviews) - [Azure Functions](https://www.g2.com/products/azure-functions/reviews) - [Azure OpenAI Service](https://www.g2.com/products/azure-openai-service/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Azure Portal](https://www.g2.com/products/azure-portal/reviews) - [Azure Virtual Machines](https://www.g2.com/products/azure-virtual-machines/reviews) - [BambooHR](https://www.g2.com/products/bamboohr/reviews) - [Bitbucket](https://www.g2.com/products/bitbucket/reviews) - [Bitwarden](https://www.g2.com/products/bitwarden/reviews) - [Checkr](https://www.g2.com/products/checkr/reviews) - [Cisco Duo](https://www.g2.com/products/cisco-duo/reviews) - [Cloudflare Application Security and Performance](https://www.g2.com/products/cloudflare-application-security-and-performance/reviews) - [Confluence](https://www.g2.com/products/confluence/reviews) - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - [Datadog](https://www.g2.com/products/datadog/reviews) - [Deel Payroll](https://www.g2.com/products/deel-payroll/reviews) - [DigitalOcean](https://www.g2.com/products/digitalocean/reviews) - [Figma](https://www.g2.com/products/figma/reviews) - [Fin](https://www.g2.com/products/fin/reviews) - [Fireflies.ai](https://www.g2.com/products/fireflies-ai/reviews) - [Freshservice](https://www.g2.com/products/freshservice/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitHub Copilot](https://www.g2.com/products/github-copilot/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Google Authenticator](https://www.g2.com/products/google-authenticator/reviews) - [Google Cloud BigQuery](https://www.g2.com/products/google-cloud-bigquery/reviews) - [Google Cloud CDN](https://www.g2.com/products/google-cloud-cdn/reviews) - [Google Cloud Console](https://www.g2.com/products/google-cloud-console/reviews) - [Google Cloud Functions](https://www.g2.com/products/google-cloud-functions/reviews) - [Google Cloud Run](https://www.g2.com/products/google-cloud-run/reviews) - [Google Cloud SQL](https://www.g2.com/products/google-cloud-sql/reviews) - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews) - [Google Workspace](https://www.g2.com/products/google-workspace/reviews) - [Gusto](https://www.g2.com/products/gusto/reviews) - [Harvest](https://www.g2.com/products/harvest/reviews) - [Hexnode UEM](https://www.g2.com/products/hexnode-uem/reviews) - [HubSpot Data Hub](https://www.g2.com/products/hubspot-data-hub/reviews) - [HubSpot Marketing Hub](https://www.g2.com/products/hubspot-marketing-hub/reviews) - [HubSpot Sales Hub](https://www.g2.com/products/hubspot-sales-hub/reviews) - [Humi by Employment Hero](https://www.g2.com/products/humi-by-employment-hero/reviews) - [Jamf](https://www.g2.com/products/jamf/reviews) - [Jamf Now](https://www.g2.com/products/jamf-now/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Jira Service Management](https://www.g2.com/products/jira-service-management/reviews) - [JumpCloud](https://www.g2.com/products/jumpcloud/reviews) - [Justworks](https://www.g2.com/products/justworks/reviews) - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews) - [Linear](https://www.g2.com/products/linear/reviews) - [LogMeIn Miradore](https://www.g2.com/products/logmein-miradore/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [Microsoft Intune Advanced Analytics](https://www.g2.com/products/microsoft-intune-advanced-analytics/reviews) - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews) - [Miradore Management Suite](https://www.g2.com/products/miradore-management-suite/reviews) - [NinjaOne](https://www.g2.com/products/ninjaone/reviews) - [NINJIO Security Awareness](https://www.g2.com/products/ninjio-security-awareness/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [Paychex](https://www.g2.com/products/paychex/reviews) - [Paycom](https://www.g2.com/products/paycom/reviews) - [QuickBooks Online](https://www.g2.com/products/quickbooks-online/reviews) - [Rippling](https://www.g2.com/products/rippling/reviews) - [Salesforce Heroku](https://www.g2.com/products/salesforce-heroku/reviews) - [Secureframe](https://www.g2.com/products/secureframe/reviews) - [Sentry](https://www.g2.com/products/sentry/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Trello](https://www.g2.com/products/trello/reviews) - [TriNet](https://www.g2.com/products/trinet/reviews) - [Vercel](https://www.g2.com/products/vercel/reviews) - [Vetty](https://www.g2.com/products/vetty/reviews) - [Workday Recruiting](https://www.g2.com/products/workday-recruiting/reviews) - [YouTrack](https://www.g2.com/products/youtrack/reviews) - [Zoom Workplace](https://www.g2.com/products/zoom-workplace/reviews) ## Secureframe Features **Security** - Compliance Monitoring - Anomoly Detection - Data Loss Prevention - Cloud Gap Analytics **Functionality** - Customized Vendor Pages - Centralized Vendor Catalog - Questionnaire Templates - User Access Control **Risk Assessment** - Scoring - AI **Generative AI** - AI Text Summarization - AI Text Generation **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Risk assessment** - Risk Scoring - 4th Party Assessments - Monitoring And Alerts - AI Monitoring **Risk Control** - Reviews - Policies - Workflows **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Security** - Data Security - Data loss Prevention - Security Auditing **Administration** - Policy Enforcement - Auditing - Workflow Management **Monitoring** - Vendor Performance - Notifications - Oversight **Documentation - Audit Management** - Templates & Forms - Checklists **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Identity** - SSO - Governance - User Analytics **Reporting** - Templates - Centralized Data - 360 View **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance **Agentic AI - Third Party & Supplier Risk Management** - Adaptive Learning - Decision Making ## Top Secureframe Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,448 reviews) - [Sprinto](https://www.g2.com/products/sprinto-inc/reviews) - 4.8/5.0 (1,651 reviews) - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,321 reviews)