I wanted something that would keep my client work organized and secure, but not have to make it complicated. It’s a way to keep everything simple — jobs are obvious, and it tells me what I need to do without being irritating. The daily alerts are helpful without being overwhelming, and I like that it doesn’t need constant babysitting. It just hums along in the background, that’s perfect. Review collected by and hosted on G2.com.

It’s not the most versatile thing in the world. I do kind of wish that I could make Voice In behave differently, either the way some tasks are categorized or the way that notifications end up being sent. A little more control over how things look and feel would be nice, too, but it’s functional, but not a lot of personalization to be had. And there are some things that feel like it’s intended for larger teams, so I just ignore those parts. Review collected by and hosted on G2.com.

I really appreciate Secureframe’s ability to maintain compliance for critical frameworks like HIPAA and SOC II, and its flexibility to extend to other frameworks such as GDPR and ISO. The user interface is impressively intuitive and user-friendly, allowing even those unfamiliar with compliance to navigate complex controls and processes with ease. This was especially beneficial for us as startup founders managing multiple roles. Secureframe’s Trust Center is an outstanding feature, enabling us to present a professional trust center on our branded subdomain. This has been instrumental in building trust with clients and partners. The automated integration with our existing systems like Google Cloud and GitHub is another standout aspect, greatly simplifying the process of managing compliance controls and vastly reducing manual effort. Secureframe’s excellent customer support is always responsive and helpful whenever I encounter an issue. Additionally, their pricing is competitive, and their commitment to putting people first aligns with our company’s values, making them an exceptional fit for us. Secureframe also keeps us updated with compliance changes and facilitates our expansion into new compliance frameworks, supporting our scaling efforts comprehensively. Overall, it’s a vital tool for all our compliance needs, consistently delivering an exceptional experience as we grow. Review collected by and hosted on G2.com.

I think there's room for improvement in terms of implementing more AI-driven workflows and providing more detailed explanations of tasks. Review collected by and hosted on G2.com.

We used Secureframe for our SOC2 certification process, and the platform had the capabilities of getting automatic details through its many integrations, thus reducing the need for much of the manual tasks.

Support from the team was also great to ensure that we were given attendtion when needed and helped on doubts.

The platform was easy to use and did not have many requirements in terms of implementation, as it was a quick portal login. Review collected by and hosted on G2.com.

There are challanges in terms of available integrations especially when considering that there could be custom appalications and features within that would need more details for certain tests to pass.

While the platform is great for all the tracking and automation, at times there is a necessity of having that full-time support or hand-holding for certain things, which is missing.

Default policies and procedure documents are made available, and there are only minimal changes required for the organization to pass those, while the implementation could be wholly different or nonexistent; there is no feature or checks to ensure that things are followed as described. Review collected by and hosted on G2.com.

I use Secureframe to accept security and compliance documents and to complete required security training and background checks. I appreciate that it centralizes all compliance tasks in an easy-to-view dashboard. I find the training videos to be engaging and informative, which makes the process more enjoyable than other security trainings I've completed in the past. Review collected by and hosted on G2.com.

I have experienced some technical bugs when trying to complete the security training. It was not able to save my completed training and I had to go back and re-try a few times which was time consuming and frustrating because I was on a deadline. Review collected by and hosted on G2.com.

The user interface is very intuitive, and the support we’ve received has been truly exceptional. Overall, it’s been a smooth experience. Review collected by and hosted on G2.com.

Cost can be a factor, especially if you’re a startup. Also, I’ve had integrations disconnect at random at times, and I’m not sure whether that’s an issue with Secureframe or with the vendor. Review collected by and hosted on G2.com.

Secureframe makes continuous compliance in AWS straightforward. The native AWS integrations (CloudTrail, Config, Security Hub, GuardDuty, IAM, S3/RDS/KMS, etc.) light up quickly and the out-of-the-box tests map cleanly to SOC 2 and ISO 27001 controls. I especially like how evidence is auto-collected and tied to specific controls, so I’m not chasing screenshots or ad-hoc exports. The tasking and workflows keep our team focused, and the dashboards make it obvious where we’re passing, drifting, or need to remediate. Their policy templates and auditor-friendly evidence packages have made audit prep much calmer. Review collected by and hosted on G2.com.

Mostly nits. A few AWS tests can be a bit strict Initial IAM permission setup took a moment of back-and-forth to align with our least-privilege standards. None of these were blockers, and once dialed in, the signal-to-noise has been excellent. Review collected by and hosted on G2.com.

Our experience with Secureframe has been nothing short of amazing. Going into our SOC 2 journey, we weren’t entirely sure what to expect, but the platform made everything feel straightforward and manageable. The tools are user-friendly, the integrations saved us countless hours, and the real-time tracking kept everyone on the same page.

What truly made the difference, though, was our Customer Success Manager. He was incredibly responsive and he always available to answer our questions, walk us through best practices, or just check in to make sure things were running smoothly. He also made a point to keep us updated on new features and improvements as they rolled out, which helped us take full advantage of the platform as it evolved.

Thanks to Secureframe, we not only achieved compliance but built stronger internal processes in the process. It felt less like working with a vendor and more like working with a partner who genuinely cared about our success. Highly recommend! Review collected by and hosted on G2.com.

Secureframe has a lot of powerful features, but I found the initial onboarding experience a bit overwhelming. The platform presents a ton of information up front, which can make it difficult to know where to start, especially for teams going through their first compliance process. There's definitely a learning curve, and without prior experience in frameworks like SOC 2, it can feel like information overload.

That said, once you get familiar with the layout and workflows, the platform does become more intuitive. And while the tool itself could benefit from a more guided, step-by-step learning experience, the support team and Customer Success Managers are responsive and helpful when you reach out.

Overall, Secureframe has solid potential, but I’d love to see a more beginner-friendly approach for first-time users, especially those managing compliance on small or resource-limited teams. Review collected by and hosted on G2.com.

The SecureFrame system makes it very easy to get started with SOC2. The framework of tests and evidence they provide (in conjunction with great auditor partners) takes away the need to have pricey consultants.

Onboarding is simple, with many integrations if your infrastructure and other tools are largely cloud-based/SaaS. Your Customer Success contact will happily spend time with you to answer questions and make sure you are successful.

The largest benefit as a lean team, in my opinion, is the ability to set everything up properly, and then not need to spend much time year over year worried about the next audit. Not needing to use the software on a daily basis is huge, as the team can instead focus on more customer-facing matters. Review collected by and hosted on G2.com.

While it's great that SecureFrame has integrations, there's still a good chance that for some aspects you'll have to fallback to manual evidence collection. The tests can also be fairly rigid, and won't handle alternative solutions well. It's best to have a decent understanding of SOC2 so that you can work with your auditors to ensure you're not doing needless work that has no benefit other than turning a SecureFrame test green. Review collected by and hosted on G2.com.

SecureFrame has transformed our SOC 2 compliance process, making it streamlined and efficient. The standout feature is its powerful evidence collection, which is not only comprehensive but also incredibly reusable. This feature has been a game-changer, allowing us to easily address customer requests during initial product security evaluations by providing clear, organized evidence. Even though we only subscribed to the SOC 2 framework, the robust evidence collection made preparing for FedRAMP authorization for our flagship product significantly easier, as it covered so many compliance needs. The platform’s automation integrates seamlessly with our tech stack, and the intuitive dashboard keeps everything manageable. Paired with their responsive support, SecureFrame is a must-have for simplifying compliance and customer trust. Highly recommend! Review collected by and hosted on G2.com.

The list of repositories can be improved. When the name/link of a repo is too long, the name/link is cutoff making finding the right repo very difficult. Review collected by and hosted on G2.com.

I think the included templates in Secureframe explained a lot to us and gave us an efficient starting point. We're also able to reach out and contact our Secureframe representative to get questions about the process answered, which is really helpful. The templates help clarify areas that were not clear to us. Review collected by and hosted on G2.com.

It is not a dislike, but I think more flexibility in being able to add and remove parts of your infrastructure for testing would be helpful. Review collected by and hosted on G2.com.