Securerame makes audit preparation really easy. It’s straightforward to use, and the support team is great—responsive and timely whenever I need help. Review collected by and hosted on G2.com.

Our personnel would like to be able to see the status of their Secureframe Agent installation, as well as the compliance status of their workstations. Other than that, we don’t have anything we dislike. Review collected by and hosted on G2.com.

It’s a very friendly platform and easy to use. It also integrates smoothly with other platforms, and the dashboard is especially helpful for tracking the project’s status. Pricing feels about average. On top of that, the support team is really good and helps keep the whole process smooth so the project can be completed without unnecessary friction. Review collected by and hosted on G2.com.

I don't have any complain, they are very structure Review collected by and hosted on G2.com.

What I like most about Secureframe is that it makes compliance feel way less painful than it usually is.

It does a lot of the boring stuff for you automatically pulling evidence, checking controls, and keeping things up to date so you’re not chasing screenshots or spreadsheets. It also lays everything out really clearly, so instead of wondering “what am I supposed to do next?”, you just follow the steps.

The audit side is a big win too. You can see exactly where you stand at any moment, and working with auditors is way more straightforward. It doesn’t feel like a mad rush at the last minute.

Basically, Secureframe turns compliance from a stressful, once-a-year headache into something that just runs in the background. Review collected by and hosted on G2.com.

Sometimes Secureframe feels kind of rigid like - it wants you to do things its way, even if your setup doesn’t quite match. The automation helps a lot, but you still end up doing manual work and explaining things more often than you’d expect.

The price can also be hard to justify, especially for smaller teams. And at the beginning, it can feel overwhelming because there’s so much going on and you’re still figuring out what actually matters.

Support is usually fine, but when you have a more specific or nuanced question, the answers can feel a bit generic.

It’s a solid tool, just not a magic button you still have to think, make decisions, and sometimes work around it. Review collected by and hosted on G2.com.

I really enjoy the setup and how easy it is to Navigate the system! Performance has been smooth sailing so far! Review collected by and hosted on G2.com.

Integration gaps may be a possible down the road Review collected by and hosted on G2.com.

I like that Secureframe is well structured and focused, helping me go down a list of tasks to complete in order to become compliant. I really appreciate the Azure integration they have in place, as it can automatically alert us when deployed infrastructure might violate one of our policies. The initial setup was very easy; I got on a call with their team and moved things forward quickly. We could even text the CEO, who was responsive. Review collected by and hosted on G2.com.

There is an AI mode which claims to provide Azure CLI code to satisfy certain requirements, but it is lacking in completeness and I haven't found it to be consistent or useful. Review collected by and hosted on G2.com.

What I like most about Secureframe is how it turns compliance into a clear, manageable process. The platform brings together automation, structured workflows, and audit-ready templates, which removes a lot of the manual work and uncertainty that usually come with compliance.

It’s easy to use for both technical and non-technical users, helps keep everyone accountable, and significantly reduces audit stress.

As a best practice, I’d recommend connecting integrations early and keeping the platform continuously up to date to get the most benefit from it. Review collected by and hosted on G2.com.

Secureframe can feel limiting in more complex or non-standard environments. Some workflows aren’t flexible enough and end up requiring manual handling outside the platform.

There’s also a noticeable learning curve at the start. It takes time to fully understand how controls, evidence, and tests connect, and how that relationship affects day-to-day work.

Best practice: plan onboarding carefully and document any custom processes early, so you can reduce friction later. Review collected by and hosted on G2.com.

The integrations with our internal systems are fantastic – Secureframe connects to our tools seamlessly, which automates so much of the compliance work that would otherwise be manual and time-consuming.

The platform itself is easy to use and intuitive, even for team members who aren't deep in the compliance world. But what really made the difference for us was the support from Secureframe's team during implementation. They were extremely helpful, responsive, and made sure we got set up properly.

Bottom line: Secureframe saved us an immense amount of time on our PCI and SOC audits. What could have been months of manual evidence collection and coordination became a much smoother, automated process. Highly recommended. Review collected by and hosted on G2.com.

The web app could be a bit more polished in places, though it's definitely usable and gets the job done. It's a minor thing that doesn't impact the core functionality.

I'd also love to see richer training resources – more in-depth guides or examples would help teams get even more value out of the platform. That said, the support team fills this gap well when you need help.

Overall, these are relatively minor points compared to the time savings and value we've gotten from the platform. Review collected by and hosted on G2.com.

SF makes achieving SOC2 compliance quite straightforward. Nearly everything—about 95%—is managed within their platform, which is convenient because it gives you a consistent and reliable overview of your compliance status at any time. This setup also simplifies things for auditors, provided they accept SF as a compliance platform; the more documentation and evidence you have stored there, the less you need to gather and present manually.

We've been using SF for approximately a year and a half and have successfully passed two SOC2 Type II audits during that time. Looking back, I can confidently say that managing compliance would have been much more challenging without a dedicated platform, so in that respect, SF definitely adds value.

I also appreciate the customizable trust center feature. Another positive aspect is that SF doesn't aggressively push you to purchase a lot of additional modules, unlike many other SaaS providers. While there are extra features available, their approach to upselling is quite relaxed. Review collected by and hosted on G2.com.

It has its issues but you kind of learn to work around them eventually. Integrations to various services sometimes break in mysterious ways but they do get fixed. Usually not SF's fault but that is how we (customers) see it of course.

Timed tasks sometimes still expire even if you upload evidence before the expiry date.

Mostly small things. Review collected by and hosted on G2.com.

I like the ease of use of Secureframe. It's been really helpful to have the responsiveness of the customer success manager (Andrew Chou), who's assisted me a lot. Review collected by and hosted on G2.com.

There were some integration issues, but that was resolved through IT. I was confused about, like, internal and external vulnerability scanning and what's necessary, what's not necessary, like the pen test. Apparently, it's not necessary for SOC 2 Type 1. But it is strongly recommended for Type 2. I didn't really know that. I was confused, and I went ahead and looked for penetration testing, even though I didn't really need it. Onboarding could be improved. Initial setup was pretty daunting when I just didn't know what to do. I actually went ahead and did some stuff that was wrong until I spoke with the customer success managers. Review collected by and hosted on G2.com.

The automation of evidence collection is a game-changer for a lean IT team. Integrating directly with our tech stack—AWS and GitHub—means we aren't chasing down screenshots or manual logs every time an audit window opens. The platform’s ability to map a single control across multiple frameworks (like SOC 2 and PCI DSS) saves us an incredible amount of redundant work. It truly turns compliance from a "fire drill" into a background process. Review collected by and hosted on G2.com.

The initial mapping of custom internal processes to their standard controls can take some focused effort. While the library of pre-built policies is extensive, tailoring them to fit the specific operational nuances of a logistics-heavy business required a bit more back-and-forth with our CSM than I originally anticipated. However, once that foundation was set, it has been smooth sailing. Review collected by and hosted on G2.com.