Secureframe does a great job of streamlining the process and even educating the user by guiding them through complex regulatory and compliance requirements in an organized manner. Review collected by and hosted on G2.com.

Secureframe has a learning curve, which is manageable thanks in part to their support team. Some compliance frameworks are better suited for a Secureframe experience than others, their PCI is great and SOC2 is still very useful. Review collected by and hosted on G2.com.

Useful platform for keeping me organized and making sure that I'm on task when completing an audit Review collected by and hosted on G2.com.

The specific auditor that we used did not use the ticket tracking in Secureframe and so it make some duplicative work Review collected by and hosted on G2.com.

I have had an incredible experience with Secureframe, particularly because of the amazing support and help provided by John Guilford. Some in the industry mentioned a lack of support, but my experience has been the opposite. John has been patient, knowledgeable, and simply exceptional in guiding us through the SOC 2 process, which is quite involved and complicated. I'm very happy with what we have achieved thanks to Secureframe. The customer service has been phenomenal; whenever we get stuck, we receive not just help but also reference materials. The whole framework is neat, organized, and structured in a way that makes the process easier, with clear instructions on the evidence required. Review collected by and hosted on G2.com.

There are just so many SOC two items, and I'm not sure if there's a way to make it easier. Review collected by and hosted on G2.com.

What I like best about Secureframe is how it simplifies what is typically a complex and time-consuming compliance process by offering an intuitive, well-structured platform that doesn’t require deep prior expertise. The automation features - especially for evidence collection, continuous monitoring, and integrations with existing tools - significantly reduce manual work and minimize errors, while the centralized dashboard provides clear visibility into compliance status and progress. Additionally, the built-in guidance and responsive support make it much easier to move efficiently from initial setup to being fully audit-ready. Review collected by and hosted on G2.com.

The current version that doesn't have User Access Review module. Review collected by and hosted on G2.com.

I like Secureframe's ease of use, especially in finding the information I need to share with customers. It really streamlines my process by reducing the amount of manual work. Instead of filling out a prospective client's questionnaire, I can direct them to our public-facing Secureframe page so they can grab what they need. The onboarding as a user was pretty straightforward, taking just a couple of minutes, and now I use it fairly frequently. Review collected by and hosted on G2.com.

Not much, it's generally useful. Sometimes I get notifications that feel somewhat irrelevant to me, though. Review collected by and hosted on G2.com.

Secure frame makes it really easy to get the whole team into compliance. It also helps us make sure everyone understands what’s happening and why we’re doing it, so the process feels clear and aligned across the team. Review collected by and hosted on G2.com.

There’s a noticeable lag between steps, so everything takes longer than it needs to, and I end up paying less attention to what’s in front of me. It’s a small issue and not really a problem overall, but it is annoying. If the content were more engaging, I’d have a better chance of getting involved and staying focused. Review collected by and hosted on G2.com.

I use Secureframe for managing my SOC2 audit. I appreciate the clear framework and automatic validation it offers, along with the easy matching with auditors. I also like the simple software interface and the nice AI features. The initial setup was easy enough, which made getting started with it straightforward. Review collected by and hosted on G2.com.

I find the naming complex sometimes unclear Review collected by and hosted on G2.com.

-Straight foward UI interface to ensure you meet your SOC 2 (and other) compliance needs and requirements

-Great public documentation about SOC 2 and compliance and the process

-Responsive customer success support

-Pretty seamless SOC 2 audit process using their recommended auditor firms

-Lots of potentially add on features/AI if you need them Review collected by and hosted on G2.com.

-A number of growing pains early on last year as they evolve with bugs in integrations, the UI, and other features over the year of using it

-Slower response/fixes for some reported technical bugs/issues

-Limited number of integrations compared to Vanta

-Auditor still asked for some evidence that the platform never flagged as required before the audit

-Same price as competitors despite being less mature Review collected by and hosted on G2.com.

I love that Secureframe provides a single repository for managing our compliance, storing evidence, and facilitating audits. The guidelines and templates are very helpful. It's like having a consultant guide us through the processes required to achieve and maintain compliance. The system is very intuitive and it helps us see where the gaps are in our processes, ensuring that we will receive a clean SOC 2 report from our auditor. The initial setup was very easy! We set up the link to Entra and it pulled all of our accounts into the system automatically, then we went to work on the policy templates which really let us hit the ground running. Review collected by and hosted on G2.com.

I think the vendor security review functionality could be a little more intuitive; it's difficult to understand exactly how that process works. It's not really clear how exactly we're supposed to conduct the vendor security reviews, or what an auditor would expect to see in that area of the system. Review collected by and hosted on G2.com.

I like the clear explanation of vulnerabilities and the practical, easy-to-follow remediation steps with Secureframe. The clear explanations help our team quickly understand the real impact of each vulnerability, even for non-security specialists. The step-by-step remediation guidance saves time and reduces guesswork, especially in AWS, so we can fix issues faster and with more confidence. Review collected by and hosted on G2.com.

Asset management could be improved. It's rather difficult to track assets and automate agent deployment on regular workstations using scripts or automation tools like MS Intune. For automation, it would help to have clearer documentation and more flexible deployment options for the Secureframe agent - for now we have to use employee onboarding instructions and login and install agents manually - looks like it is not ready for automation. Review collected by and hosted on G2.com.