What I value most about Secureframe is how much it facilitates the automation of evidence collection. The integrations with our tech stack (e.g., AWS, Google Workspace, GitHub, and Slack) were set up in minutes, allowing us to start working almost immediately. The continuous monitoring platform gives us real-time visibility and alerts us if any control fails, so we can react quickly. Additionally, the policy templates are very well written and easy to adapt, and the compliance expert team is always available to guide you through the technical details before the audit. Not to mention, the UI experience is very comfortable and intuitive. Review collected by and hosted on G2.com.

The initial setup (onboarding) can be a bit overwhelming, especially due to the vast number of policies, controls, and tasks that need to be reviewed from the start. Additionally, sometimes the automated notifications or email/Slack reminders can be excessive, so we had to spend time adjusting the alert frequency to make them more manageable. It would also be great to have a bit more flexibility to customize certain very specific policies without having to start from scratch. Review collected by and hosted on G2.com.

Secureframe gives us one place to manage the whole SOC 2 process instead of juggling spreadsheets and shared drives. We don't have a dedicated compliance person on the team, so having templates for policies and evidence made a huge difference — I was able to build out things like our Visitor Escort Policy and physical access controls without starting from scratch. The automated evidence collection also saves a lot of manual chasing. Review collected by and hosted on G2.com.

Some of the control mappings took a bit of trial and error to fit our specific setup, especially for physical access requirements — we had to adapt the templates more than I expected. Nothing major, just takes some upfront time to tailor things to a smaller team. Review collected by and hosted on G2.com.

I really like that Secureframe is fully featured and comes with AI built-in, which provides all the information I need and helps explain what's required for SOC 2 audits. The success managers are a standout feature for me; they meet with me regularly, help me through the audit process, answer my questions, and connect me with audit companies. Plus, their support made auditing much easier and even helped me secure a discounted audit price. The initial setup of Secureframe is extremely easy, and the website guides you through the process seamlessly while integrating with third-party software to download evidence automatically. It's a great platform overall. Review collected by and hosted on G2.com.

There's some navigation that could be improved. I feel like there's a divide between where you're documenting things and the document center. Review collected by and hosted on G2.com.

What I like best about Secureframe is how it gives me and my clients team one clear place to manage compliance. As a vCISO, the continuous monitoring, automated evidence collection, and straightforward view of open gaps make it much easier to stay organized and keep progress moving. It cuts down on a lot of manual work and helps turn compliance into an ongoing process instead of a last-minute scramble before an audit. Review collected by and hosted on G2.com.

The platform can feel a little overwhelming at first, especially when setting up integrations and working through the initial requirements. Like any compliance tool, it still takes some time to make sure the controls fit the business, but once everything is configured, the ongoing process is much easier to manage. Review collected by and hosted on G2.com.

I like Secureframe’s intuitive interface and well-designed app and webpage. It’s easy to use, understand, and follow, and it helps me see how many tasks are left, what to do, and what the expected outcome is so I can complete and verify them. I find the security reviews valuable for finding gaps, improving security, checking our AWS architecture, and supporting compliance. The team is responsive, helps with questions, and is quick to check, approve, and validate submitted tasks. The onboarding is nice and setup was fairly easy; the tasks are easy to use, and Secureframe tracks progress and shows how many people on my team still need to complete them. I find it helpful and useful, and I think it’s well positioned in the industry and has prestige. Review collected by and hosted on G2.com.

I think the notifications could sometimes be improved. I can get a notification for a task I’ve already done, though it’s not a big issue. Review collected by and hosted on G2.com.

I find Secureframe really easy to use. It simplifies the process of meeting the security compliance that our customers require by functioning as a platform middleman, so we don't have to manually figure out what's needed. I appreciate the progress tracking and the to-do lists it offers, which make it easy to keep track of what needs to be done. The initial setup was very easy as well; I signed up and was able to get it working right away. Review collected by and hosted on G2.com.

Some instructions could be improved, especially regarding AWS compliance. It would be better if there were clear steps or instructions on how to set up AWS to be compliant. More detailed todo lists or instructions on this aspect would be nice to have. Review collected by and hosted on G2.com.

Secureframe transformed our SOC 2 compliance from a monthly audit headache into a streamlined, automated workflow by replacing manual screenshot gathering with continuous API integrations across AWS, GitHub, and Okta. Key features like Comply AI auto-fill vendor security questionnaires in minutes rather than days, while the self-service Trust Center lets prospective enterprise buyers review our security posture directly to accelerate sales cycles. Supported by dedicated compliance experts during setup, the platform saves our engineering team dozens of hours each month and easily delivers a strong return on investment. Review collected by and hosted on G2.com.

Secureframe automates most of our SOC 2 evidence collection, though occasional sync glitches across cloud integrations still require a bit of manual troubleshooting. It is definitely on the pricier side for smaller teams, but the saved engineering hours and reliable onboarding support make it a solid investment overall. Review collected by and hosted on G2.com.

For me, the biggest benefit is the automation. Secureframe removes a lot of the manual effort from compliance by automatically collecting evidence and keeping everything organized in one place. It also provides a clear view of what’s already complete and what still needs attention, which makes audit preparation feel much less stressful. Review collected by and hosted on G2.com.

The biggest downside is that there can be a bit of a learning curve when you're first setting everything up. There are a lot of integrations and compliance controls, so it takes some time to understand how everything fits together. Once it's configured, though, it's much easier to manage. Review collected by and hosted on G2.com.

What I like most about Secureframe is how easy it is to use. Once you spend some time learning the platform and exploring the different features, everything becomes very straightforward. The application is well organized, which makes it easy to find what you need and keep track of everything. I also really appreciate the focus on security, especially when it comes to protecting client information and our company documents. Overall, it makes managing compliance much more organized and less complicated. Review collected by and hosted on G2.com.

One thing I found challenging about Secureframe was the auditor setup process. It was initially confusing to understand how to add our assigned auditors to the platform, and we had to try a few different approaches before figuring out the correct process. Thankfully, the Secureframe team was very helpful and worked with us to resolve the issue. Once everything was set up, the process became much clearer. Review collected by and hosted on G2.com.

"What I like best about Secureframe is its intuitive dashboard and extensive suite of native integrations (AWS, GitHub, Google Workspace, etc.). It automatically flags security gaps in real-time, giving us complete visibility into our compliance posture without burdening engineering." Review collected by and hosted on G2.com.

The platform could improve by offering more flexible reports for varied stakeholder needs. Review collected by and hosted on G2.com.