--- title: Thoropass Pentesting Reviews meta_title: 'Thoropass Pentesting Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 11 reviews by the users' company size, role or industry to find out how Thoropass Pentesting works for a business like yours. aggregate_rating: rating_value: 4.5 review_count: 11 scale: '5' date_modified: '2026-08-10' parent_category: name: Security and Privacy Services url: https://www.g2.com/categories/security-and-privacy-services --- # Thoropass Pentesting Reviews **Vendor:** Thoropass **Category:** [Penetration Testing Services](https://www.g2.com/categories/penetration-testing-services) **Average Rating:** 4.5/5.0 **Total Reviews:** 11 ## About Thoropass Pentesting Thoropass offers expert-led, audit-ready penetration testing with tailored scoping, thorough manual testing, and clear remediation guidance. Backed by CREST-accredited specialists, Thoropass delivers high-quality reports and unlimited retesting to help teams improve security and meet compliance requirements efficiently. Ideal for organizations needing reliable testing across web, mobile, API, network, cloud, and AI/LLM environments. ## Thoropass Pentesting Reviews ### 1. Thoropass Pentesting **Rating:** 4.0/5.0 stars **Reviewed by:** Pierre S. | Small-Business (50 or fewer emp.) **Reviewed Date:** June 15, 2026 **What do you like best about Thoropass Pentesting?** The tight integration between the pentest output and the compliance platform is the standout — findings land as audit-ready evidence mapped to controls instead of as a standalone PDF I have to reconcile by hand. CVSS 3.1 scoring and clear, prioritized remediation guidance make the reports easy to action and easy to hand to engineering. **What do you dislike about Thoropass Pentesting?** The depth of testing can feel narrower than a dedicated, boutique offensive-security vendor, so for higher-risk or unusual environments you may still want a specialist alongside it. There's also less flexibility if you already have a preferred in-house or external tester — it works best within their approved-partner model rather than around your existing one. **Recommendations to others considering Thoropass Pentesting:** It's a strong fit if you want compliance and pentesting under one roof and your priority is clean, audit-ready evidence with minimal vendor management — especially for SOC 2, ISO 27001, PCI, or HITRUST work. Use the scoping questionnaire carefully so the engagement matches your actual tech stack, and take full advantage of the 90-day retest window. If you operate a particularly complex or high-risk environment, plan to supplement with a specialist firm for deeper, adversarial testing. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting consolidates the testing and compliance evidence pipeline that we'd otherwise have to stitch together across separate vendors. The biggest problem it solves for us is the friction of scoping, procuring, and vetting a separate pentest firm for every cycle — the scoping questionnaire and bundled partner model take that overhead off our plate. ### 2. Quick Setup, Effective Results **Rating:** 4.0/5.0 stars **Reviewed by:** Oscar S. | Mid-Market (51-1000 emp.) **Reviewed Date:** April 21, 2026 **What do you like best about Thoropass Pentesting?** I appreciate Thoropass Pentesting for its ease of starting engagements and great communication right from the start with a dedicated Slack channel for pentesters. It's helpful that there's very little back and forth needed to get things rolling, and the testing begins on schedule and wraps up quickly, usually within three days. I value how Thoropass Pentesting seamlessly fits into our security and governance strategy by addressing the testing needs of multiple web and API endpoints quickly and efficiently. The final deliverables are excellent, and it was a relief to have the team handle requests smoothly, providing a separate Executive Summary along with the full detailed report. I also want to highlight the hands-off, white glove service, which was much appreciated, allowing me to initiate engagement and let the team manage the process, updating me only when necessary. **What do you dislike about Thoropass Pentesting?** For the final deliverable, I would've liked the Section 5 - Methodology from the full report included in the Executive Summary, as it would make a stronger audit artifact with the methodology included **What problems is Thoropass Pentesting solving and how is that benefiting you?** Thoropass Pentesting allows us to perform pentests quickly and easily across multiple environments. The setup is straightforward, communication is efficient, and testing is completed swiftly, which integrates well into our security and governance program. ### 3. Effective Tool for SOC 2 Compliance **Rating:** 4.0/5.0 stars **Reviewed by:** Nancy C. | Small-Business (50 or fewer emp.) **Reviewed Date:** April 23, 2026 **What do you like best about Thoropass Pentesting?** I find the entire UI of Thoropass Pentesting very helpful, ensuring that we had all of our controls in place to be compliant. I also appreciate the automated evidence collection feature. **What do you dislike about Thoropass Pentesting?** We encountered a few bugs in the UI. But they were remediated pretty quick. **What problems is Thoropass Pentesting solving and how is that benefiting you?** I find Thoropass Pentesting helps us become SOC 2 compliant with their helpful UI and automated evidence collection, ensuring our controls are in place. ### 4. Love the Slack Automated Messages **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Human Resources | Small-Business (50 or fewer emp.) **Reviewed Date:** June 12, 2026 **What do you like best about Thoropass Pentesting?** The slack automated messages that give visibility on the status of the process without needing to chase people. **What do you dislike about Thoropass Pentesting?** A bit pushy on the rescheduling fees. Rescheduling within 15-30 days prior to the kickoff date may incur a 15% fee, while rescheduling within 0-15 days may incur a 30% fee. **Recommendations to others considering Thoropass Pentesting:** Integrated in Thoropass. We have SOC2 in Thoropass, having the pentest integrated streamlines the process. **What problems is Thoropass Pentesting solving and how is that benefiting you?** Pentesting fo rSOC2 Type II - [View Thoropass Pentesting pricing details and edition comparison](https://www.g2.com/products/thoropass-pentesting/reviews?filters%5Bnps_score%5D%5B%5D=4§ion=pricing&secure%5Bexpires_at%5D=2026-08-12+15%3A52%3A40+-0500&secure%5Bsession_id%5D=cf8349d5-13b0-4993-89db-5a33631c12cb&secure%5Btoken%5D=734e89f965233d094635249ed1f645185274aba7d5b6e7eddd5fe2a6c44d35dc&format=llm_user) ## Thoropass Pentesting Features **Planning** - Needs Assessment - Resource Allocation - Stayed within Budget - Statement of Work - Best Practices **Agentic AI - Penetration Testing** - Autonomous Task Execution - Multi-step Planning - Adaptive Learning - Natural Language Interaction - Multi-Language **Delivery** - Technical Expertise - Met Deadlines - Meeting Management - Project Updates - Scope Management - Roll-out **Team Quality** - Change Management Skills - Executive Presence - Vertical Expertise - Technology Partnerships ## Top Thoropass Pentesting Alternatives - [Insight Assurance](https://www.g2.com/products/insight-assurance/reviews) - 4.9/5.0 (144 reviews) - [Johanson Group](https://www.g2.com/products/johanson-group/reviews) - 4.9/5.0 (105 reviews) - [Corsica Technologies](https://www.g2.com/products/corsica-technologies/reviews) - 4.5/5.0 (59 reviews)