--- title: Thoropass Pentesting Reviews meta_title: 'Thoropass Pentesting Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 11 reviews by the users' company size, role or industry to find out how Thoropass Pentesting works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 11 scale: '5' date_modified: '2026-07-26' parent_category: name: Security and Privacy Services url: https://www.g2.com/categories/security-and-privacy-services --- # Thoropass Pentesting Reviews **Vendor:** Thoropass **Category:** [Penetration Testing Services](https://www.g2.com/categories/penetration-testing-services) **Average Rating:** 4.5/5.0 **Total Reviews:** 11 ## About Thoropass Pentesting Thoropass offers expert-led, audit-ready penetration testing with tailored scoping, thorough manual testing, and clear remediation guidance. Backed by CREST-accredited specialists, Thoropass delivers high-quality reports and unlimited retesting to help teams improve security and meet compliance requirements efficiently. Ideal for organizations needing reliable testing across web, mobile, API, network, cloud, and AI/LLM environments. ## Thoropass Pentesting Reviews ### 1. Clear Communication with Well-Written Reviews, Repro Steps, and Mitigations **Rating:** 4.5/5.0 stars **Reviewed by:** David B. | Lead Developer (Remote), Mid-Market (51-1000 emp.) **Reviewed Date:** July 02, 2026 **What do you like best about Thoropass Pentesting?** Thoropass scheduled setup calls so we could meet with the pentest team and talk through the process. While they were reviewing, they kept us informed with in-progress updates, and then provided a review document after the initial test. The findings were well written and included detailed reproduction steps along with the mitigations we needed. The turnaround time for the retest was also quick. **What do you dislike about Thoropass Pentesting?** The lead time can be a bit long, so it’s important to schedule well ahead of time. **Recommendations to others considering Thoropass Pentesting:** There’s a fair amount of setup required to create an effective test surface. In our case, we needed to provide multiple tenants, each with multiple users and roles. Because of that, it’s worth planning enough time up front to configure a well-rounded testing environment when scheduling a pentest. Also, there are strict timelines for addressing critical and high-risk findings, so make sure you have the capacity to resolve any issues that come up (fortunately, we didn’t have any of these). **What problems is Thoropass Pentesting solving and how is that benefiting you?** We are releasing a new AI-focused product in several worldwide regions, and needed to make sure that we were following best practices in securing our site and data. Thoropass Pentesting tested through the site, uncovered some issues we missed (thankfully nothing high risk), and re-tested once we had resolved. ### 2. Thoropass Pentesting **Rating:** 4.0/5.0 stars **Reviewed by:** Pierre S. | Small-Business (50 or fewer emp.) **Reviewed Date:** June 15, 2026 **What do you like best about Thoropass Pentesting?** The tight integration between the pentest output and the compliance platform is the standout — findings land as audit-ready evidence mapped to controls instead of as a standalone PDF I have to reconcile by hand. CVSS 3.1 scoring and clear, prioritized remediation guidance make the reports easy to action and easy to hand to engineering. **What do you dislike about Thoropass Pentesting?** The depth of testing can feel narrower than a dedicated, boutique offensive-security vendor, so for higher-risk or unusual environments you may still want a specialist alongside it. There's also less flexibility if you already have a preferred in-house or external tester — it works best within their approved-partner model rather than around your existing one. **Recommendations to others considering Thoropass Pentesting:** It's a strong fit if you want compliance and pentesting under one roof and your priority is clean, audit-ready evidence with minimal vendor management — especially for SOC 2, ISO 27001, PCI, or HITRUST work. Use the scoping questionnaire carefully so the engagement matches your actual tech stack, and take full advantage of the 90-day retest window. If you operate a particularly complex or high-risk environment, plan to supplement with a specialist firm for deeper, adversarial testing. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting consolidates the testing and compliance evidence pipeline that we'd otherwise have to stitch together across separate vendors. The biggest problem it solves for us is the friction of scoping, procuring, and vetting a separate pentest firm for every cycle — the scoping questionnaire and bundled partner model take that overhead off our plate. ### 3. Responsive, Human-Guided Support That Makes Complex Processes Manageable **Rating:** 5.0/5.0 stars **Reviewed by:** Elia S. | Information Technology Governance Manager (Security) (GRC), Mid-Market (51-1000 emp.) **Reviewed Date:** June 04, 2026 **What do you like best about Thoropass Pentesting?** In a world of AI the human interaction stands out. Having real people guiding the process - rather than a fully automated tool makes a meaningful difference. The team is responsive, easy to work with, and makes what could be a complex, technical process feel manageable. **What do you dislike about Thoropass Pentesting?** Nothing significant to report. The experience has been smooth and met our expectations. Like any service, there's always room to improve, but nothing major worth calling out. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting helps us meet our PCI DSS penetration testing requirements in a streamlined, audit-ready way. Previously, coordinating pentests meant managing external vendors, chasing deliverables, and manually organizing evidence for auditors — a time-consuming process that pulled our team away from other priorities. With Thoropass, the pentest findings map directly to our compliance workflow, so we're not translating results into audit evidence after the fact. It saves us significant time and reduces the overhead of managing the process ourselves, while giving us confidence that our PCI requirements are being met with documentation auditors can actually use. ### 4. Quick Setup, Effective Results **Rating:** 4.0/5.0 stars **Reviewed by:** Oscar S. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 21, 2026 **What do you like best about Thoropass Pentesting?** I appreciate Thoropass Pentesting for its ease of starting engagements and great communication right from the start with a dedicated Slack channel for pentesters. It's helpful that there's very little back and forth needed to get things rolling, and the testing begins on schedule and wraps up quickly, usually within three days. I value how Thoropass Pentesting seamlessly fits into our security and governance strategy by addressing the testing needs of multiple web and API endpoints quickly and efficiently. The final deliverables are excellent, and it was a relief to have the team handle requests smoothly, providing a separate Executive Summary along with the full detailed report. I also want to highlight the hands-off, white glove service, which was much appreciated, allowing me to initiate engagement and let the team manage the process, updating me only when necessary. **What do you dislike about Thoropass Pentesting?** For the final deliverable, I would've liked the Section 5 - Methodology from the full report included in the Executive Summary, as it would make a stronger audit artifact with the methodology included **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting allows us to perform pentests quickly and easily across multiple environments. The setup is straightforward, communication is efficient, and testing is completed swiftly, which integrates well into our security and governance program. ### 5. Easy, Thorough Pentesting with a Responsive Thoropass Team **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.) **Reviewed Date:** July 25, 2026 **What do you like best about Thoropass Pentesting?** It was very easy to schedule with and work alongside the Thoropass Pentesting team. They were approachable, responsive, and straightforward to communicate with throughout the process. They were also thorough in their testing, which gave me confidence in the results. **What do you dislike about Thoropass Pentesting?** Almost nothing to complain about. The only issue is that we have to reserve a testing slot far too far in advance, and it isn’t easy to change or reschedule once it’s booked. **Recommendations to others considering Thoropass Pentesting:** I highly recommend them. They do a thorough job, and it really boosts my confidence in the solution I provide to my customers. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting helps identify vulnerabilities in our SaaS platform before they can be exploited by malicious entities. This reduces risk for our business and supports continuity. It’s also a critical part of meeting our compliance requirements. ### 6. Excellent Partner for thorough Pentesting **Rating:** 5.0/5.0 stars **Reviewed by:** Matthew E. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 20, 2026 **What do you like best about Thoropass Pentesting?** We use Thoropass Pentesting for our annual penetration tests because they're really thorough, and we've been impressed with what they've been able to find. They communicate well with us by sending immediate reports if they find something significant and have been extremely prompt in conducting retests to help us ensure we resolve critical issues. We value their professionalism and the fact that they deliver actual impactful findings instead of just padding the report like other pentesters do. **What do you dislike about Thoropass Pentesting?** There's not much I'd complain about **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting helps us meet our annual SOC 2 requirements, but more than that, they've uncovered critical vulnerabilities and communicated effectively, in one case giving us a retest for a critical issue less than 30 minutes after we requested it. This ensures our software is secure, giving us confidence in providing a solid product to customers. ### 7. Clear Reports and Great retesting structure **Rating:** 5.0/5.0 stars **Reviewed by:** Gavin W. | Site Reliability Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 26, 2026 **What do you like best about Thoropass Pentesting?** Clear reports and fast communication via Slack. Retest requests are handled speedily. **What do you dislike about Thoropass Pentesting?** Start times of testing windows are clearly communicated, but its not always clear exactly when testing is actively ongoing or completed. **Recommendations to others considering Thoropass Pentesting:** Thoropass Pentesting is a great option, with good pricing structure allowing unlimited retests during a generous window following the initial test. **What problems is Thoropass Pentesting solving and how is that benefiting you?** They handle our annual penetration testing across our network and applications. They also respond promptly to any findings, work through the remediation with us, and then retest to confirm everything has been fully resolved. ### 8. Excellent Initial Call, Smooth Onboarding, and Strong Reporting **Rating:** 5.0/5.0 stars **Reviewed by:** German D. | IT Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** May 21, 2026 **What do you like best about Thoropass Pentesting?** Initial call, onboarding, reporting. Initial call is a must to identify areas where testing is needed. **What do you dislike about Thoropass Pentesting?** We do not dislike anything. Everything went smooth. **Recommendations to others considering Thoropass Pentesting:** Not only they provided pentesting but they also provided an interface that was very easy to navigate in order to achieve SOC2 type 1 certification. Now we are on our way to be SOC2 type 2 cert. **What problems is Thoropass Pentesting solving and how is that benefiting you?** SOC2 type 2. They made it very easy to onboard and provided a comprehensive report ### 9. Efficient and User-Friendly Compliance Tool **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** July 01, 2026 **What do you like best about Thoropass Pentesting?** I appreciate Thoropass Pentesting for being great to deal with during the renewal process. The communication, especially having a shared Slack channel, was probably the most valuable aspect as it allowed us to talk through everything. Additionally, the ease of use is a big plus for me. **What do you dislike about Thoropass Pentesting?** Nothing **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting helps us quickly conduct penetration testing, fixing vulnerabilities for compliance. The shared Slack channel improves communication, making it easy to discuss findings. I appreciate the ease of use and ability to demonstrate our software is free of vulnerabilities. ### 10. Effective Tool for SOC 2 Compliance **Rating:** 4.0/5.0 stars **Reviewed by:** Nancy C. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 23, 2026 **What do you like best about Thoropass Pentesting?** I find the entire UI of Thoropass Pentesting very helpful, ensuring that we had all of our controls in place to be compliant. I also appreciate the automated evidence collection feature. **What do you dislike about Thoropass Pentesting?** We encountered a few bugs in the UI. But they were remediated pretty quick. **What problems is Thoropass Pentesting solving and how is that benefiting you?** I find Thoropass Pentesting helps us become SOC 2 compliant with their helpful UI and automated evidence collection, ensuring our controls are in place. ### 11. Love the Slack Automated Messages **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Human Resources | Small-Business (50 or fewer emp.) **Reviewed Date:** June 12, 2026 **What do you like best about Thoropass Pentesting?** The slack automated messages that give visibility on the status of the process without needing to chase people. **What do you dislike about Thoropass Pentesting?** A bit pushy on the rescheduling fees. Rescheduling within 15-30 days prior to the kickoff date may incur a 15% fee, while rescheduling within 0-15 days may incur a 30% fee. **Recommendations to others considering Thoropass Pentesting:** Integrated in Thoropass. We have SOC2 in Thoropass, having the pentest integrated streamlines the process. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Pentesting fo rSOC2 Type II - [View Thoropass Pentesting pricing details and edition comparison](https://www.g2.com/products/thoropass-pentesting/reviews?section=pricing&secure%5Bexpires_at%5D=2026-08-03+06%3A31%3A19+-0500&secure%5Bsession_id%5D=f3464c70-f521-45c0-80e0-39433af90ddc&secure%5Btoken%5D=5df13477c6e5bdfc3ccd2ae30d42d8047f38b30253277e69bff7518248ace296&format=llm_user) ## Thoropass Pentesting Features **Planning** - Needs Assessment - Resource Allocation - Stayed within Budget - Statement of Work - Best Practices **Agentic AI - Penetration Testing** - Autonomous Task Execution - Multi-step Planning - Adaptive Learning - Natural Language Interaction **Delivery** - Technical Expertise - Met Deadlines - Meeting Management - Project Updates - Scope Management - Roll-out **Team Quality** - Change Management Skills - Executive Presence - Vertical Expertise - Technology Partnerships ## Top Thoropass Pentesting Alternatives - [Insight Assurance](https://www.g2.com/products/insight-assurance/reviews) - 4.8/5.0 (143 reviews) - [Johanson Group](https://www.g2.com/products/johanson-group/reviews) - 4.9/5.0 (105 reviews) - [Corsica Technologies](https://www.g2.com/products/corsica-technologies/reviews) - 4.5/5.0 (58 reviews)