---
title: Thoropass Reviews
meta_title: 'Thoropass Reviews 2026: Details, Pricing, & Features | G2'
meta_description: Filter 580 reviews by the users' company size, role or industry
  to find out how Thoropass works for a business like yours.
aggregate_rating:
  rating_value: 4.7
  review_count: 580
  scale: '5'
date_modified: '2026-08-09'
parent_category:
  name: Cloud Security
  url: https://www.g2.com/categories/cloud-security
---


# Thoropass Reviews
**Vendor:** Thoropass  
**Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance)  
**Average Rating:** 4.7/5.0  
**Total Reviews:** 580
## About Thoropass
Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators.



## Thoropass Pros & Cons
**What users like:**

- Users value the **ease of use** of Thoropass, enjoying its intuitive dashboard and helpful templates for efficient audits. (239 reviews)
- Users appreciate the **exceptional support** from Thoropass, which simplifies the audit process and enhances their experience. (221 reviews)
- Users value the **extensive integrations** of Thoropass, which streamline compliance efforts and enhance operational efficiency. (157 reviews)
- Users commend the **helpful support team** of Thoropass, which enhances the overall audit and compliance experience. (115 reviews)
- Users appreciate the **extensive integrations** of Thoropass, significantly streamlining compliance processes with various cloud providers. (93 reviews)
- Guidance (90 reviews)
- Users value the **excellent customer support** from Thoropass, enhancing their experience and ensuring project success. (89 reviews)
- Intuitive (83 reviews)
- Timely (78 reviews)
- Efficiency (77 reviews)

**What users dislike:**

- Users find **lack of clarity** in Thoropass, struggling with unorganized UX and missing essential information at point of sale. (39 reviews)
- Users experience **integration issues** with Thoropass, leading to exceptions and unhelpful connections that hinder usability. (34 reviews)
- Users find the **UX disjointed** , expressing a need for clearer guidance and better functionality in Thoropass. (33 reviews)
- Users note a need for **improved communication and feature development** to enhance scheduling and audit experiences. (31 reviews)
- Users find the **platform not intuitive** , leading to confusion and challenges in managing compliance efficiently. (29 reviews)
- Users experience **clunky document editing** with Thoropass, causing issues during document updates and reviews. (26 reviews)
- Users find the **learning curve** of Thoropass challenging, making adaptation to the platform time-consuming. (26 reviews)
- Limitations (23 reviews)
- Non-Intuitive Features (23 reviews)
- Lack of Guidance (22 reviews)

## Thoropass Reviews
  ### 1. Thoro-ly disappointed. Immature platform, missing basic functions, inflexible to use, slow to fix.

**Rating:** 0.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** February 20, 2026

**What do you like best about Thoropass?**

I like that you can (theoretically) have a functionaly GRC tool, auditors, and penetration testing in one package.

**What do you dislike about Thoropass?**

Thoropass is not even close to as good as its competitors Vanta, Sprinto, or Qalea. 
From the backend to the frontend, the platform is horribly designed and there is already so much technical debt, that it takes them half a year to fix small issues.

**What problems is Thoropass solving and how is that benefiting you?**

It is supposed to be helping us with compliance management and audits. It is doing that very poorly.

  ### 2. Thoropass is a great SOC2 Compliance Solution for our Fintech Business

**Rating:** 5.0/5.0 stars

**Reviewed by:** Kenny R. | Head of Operations, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 17, 2023

**What do you like best about Thoropass?**

We adopted Thoropass to centralize our SOC compliance program and it paid off immediately. The platform made scoping, control mapping, and evidence collection straightforward — no more scattered spreadsheets or last-minute scramble before audits. Tasks and reminders keep owners accountable, the evidence repository is easy for auditors to navigate, and the papertrail for testing is clear and exportable.

**What do you dislike about Thoropass?**

Thoropass' original pen test partner was difficult to work with, but they have since mitigated this issue and their new in house pen test solution is much better.

**What problems is Thoropass solving and how is that benefiting you?**

Preparing for SOC 2 Type I → Type II, ongoing control evidence collection, auditor collaboration They have made the SOC 2 compliance process so easy and straightforward. They are an excellent value for the price and they will make the process so much easier than you ever thought possible.

  ### 3. Quick Audit Turnaround, Needs UI Improvement

**Rating:** 3.5/5.0 stars

**Reviewed by:** Alex S.

**Reviewed Date:** February 05, 2026

**What do you like best about Thoropass?**

I like that Thoropass is very easy to set up and is transparent in Slack. It's impressive that the audit was completed in just a few days.

**What do you dislike about Thoropass?**

The browser UI is confusing, with lots of windows and confusing designations between tasks and audit items. The initial setup was unclear because of the UI confusion.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helps satisfy SOC II audit requirements and validate security measures. It's easy to set up, transparent in Slack, and completes audits in a few days.

  ### 4. Great Support.  Mediocre UI/UX

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 15, 2025

**What do you like best about Thoropass?**

There overall customer support and account management has been great.  The team has always been helpful with questions and they provide answers quickly.

**What do you dislike about Thoropass?**

The user experience of the Thoropass application could be designed better.  It's lacking some features.  It shows Tasks, but has no way to easily view past tasks completed and manage recurring tasks.  It's more of a hack that our AM showed us.  So trying to keep track of what tasks are due next month, next quarter, etc is difficult.  It could be easily resolved with a Calendar and simple recurring task management.
The initial sales process was rough.  We were very close to ending conversations with our sales rep.  Looking back at it, I think the sales rep just didn't have great industry experience and may have been green.  The sales rep's responses just came off as very shady and misleading.  We couldn't get a straight answer on cost.  Eventually, we had it escalated to some one in management who was able to articulate the cost of the platform.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass allows us to adopt the compliance we need, quickly, to service our customers.

  ### 5. Great way to reach SOC 2 Type II accreditation. Very helpful staff.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Simon C. | Senior Accounts Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** February 03, 2025

**What do you like best about Thoropass?**

Their industry knowledge and consistent help over time, helping to set reasonable goals, get answers to questions quickly, they follow up on pending items and help see how to apply SOC 2 requirements to our particular business. Integration monitors with AWS etc were useful. In general it was easy to use and implement. We used it weekly until obtaining report. Task Tracking and RFEs were helpful. Questions were answered promptly by support.

**What do you dislike about Thoropass?**

Occasionally clarification was needed when completing actual audit evidence submission,  where it was not always immediately obvious which of Roadmap tasks to prepare for the audit correlated. However auditors were always able to clarify.

**What problems is Thoropass solving and how is that benefiting you?**

Obtaining the SOC 2 Type 1 and 2 audits and ensuring business practes are compliant.

  ### 6. Effective SOC 2 Solution with Ongoing Integrations

**Rating:** 4.5/5.0 stars

**Reviewed by:** Joel S.

**Reviewed Date:** September 11, 2025

**What do you like best about Thoropass?**

I really appreciate the balance Thoropass offers between cost and features. The integration capabilities with major applications like AWS, Azure, and Salesforce save a lot of time in providing secure evidence. The setup was easy, simply connecting applications to pull data and evaluate metrics. I particularly like the ongoing improvements in integrations, which continue to make processes more efficient. Although not fully utilized, the trust center feature seems promising in enhancing security processes.

**What do you dislike about Thoropass?**

I noticed that while Thoropass offers helpful integrations with popular vendors, there could be more integrations available. Other vendors seem to offer more integrations, although they come at a higher cost. This limitation means sometimes having to provide screenshots for processes not yet integrated, which adds an extra step to our work process.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass streamlines our SOC 2 certification process by integrating with common vendors, saving time in providing evidence and enhancing security. It supports our digital security footprint and facilitates vendor communication with security assurance.

  ### 7. Thoropass Team is very professional

**Rating:** 5.0/5.0 stars

**Reviewed by:** Isaac P. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** June 25, 2025

**What do you like best about Thoropass?**

The Thoropass team is incredibly professional and organized. Nat Larson, our customer success manager, has been an outstanding guide throughout the entire process , always helping us focus on the next priority to stay on track with our SOC 2 controls and audit milestones 😎.

The platform itself is truly all-in-one , from policy templates to evidence collection and auditor collaboration, making it an ideal choice for companies pursuing both SOC 2 Type I and Type II compliance.

We also ran Penetration Testing through Thoropass and had a similarly great experience. Their team was efficient, communicative, and made the process smooth from start to finish.

**What do you dislike about Thoropass?**

Nothing about Thoropass itself, it’s more that SOC 2 can be a bit overwhelming, especially if it’s your first time going through it. As someone more focused on execution than documentation, it was initially intimidating. But with Thoropass’ support, everything became manageable and far less stressful.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass is helping us achieve and maintain SOC 2 compliance with confidence. Before using it, we didn’t have a clear structure for documentation, evidence collection, or audit readiness. Thoropass provided us with a clear roadmap, centralized platform, and expert guidance that made the entire process much smoother.

Thanks to their support, we’ve been able to stay organized, reduce time spent chasing documentation, and focus more on improving our security posture rather than just checking boxes.

  ### 8. Thoropass removes the complexity from SOC-2

**Rating:** 5.0/5.0 stars

**Reviewed by:** Adam M. | Vice President of Infrastructure Operations, Small-Business (50 or fewer emp.)

**Reviewed Date:** March 10, 2025

**What do you like best about Thoropass?**

Now that we've used Thoropass to help with the SOC-2 Type II process, we love the product even more. The ability to automatically pull in evidence from our connected applications was an immense time saver.

**What do you dislike about Thoropass?**

The automated logout time could be extended a little :-)

**What problems is Thoropass solving and how is that benefiting you?**

I've started down the road of SOC-2 certification at a few startups before finding Thoropass, and we never got close to finishing. The process is too overwhelming, especially for a small company with limited resources. Thoropass integrated with many of our systems, like our cloud provider, and generated most of the documentation and evidence for us. For the remaining items, Thoropass gave us clear instructions on what was needed. Thoropass made a process that previously felt impossible downright easy.

  ### 9. A High Level of Support and Education

**Rating:** 5.0/5.0 stars

**Reviewed by:** Monica S. | Implementation and Support Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 15, 2025

**What do you like best about Thoropass?**

The Thoropass platform exceeds the standard of user friendliness.  The resources and checklist make your tasks throughout the year visible, accessible and obtainable. Our bi-weekly meeting with Jade gives the highest level of customer support to an already great platform. Thoropass has integrated into our work flow with ease and influence.

**What do you dislike about Thoropass?**

I can't think of anything; every question I have ever had has been answered.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass is there to help us maintain our SOC2 compliance by providing a platform to manage all of our policies, manuals and security evidence.  As a result, our company stays aware and up to date of technology upgrades and security risk.  This provides us with successful security compliance audits and certified results available to our customers.

  ### 10. A Company That is Both Professional and Cares About Its Customers

**Rating:** 5.0/5.0 stars

**Reviewed by:** Vannessa L. | Chief Development Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 20, 2024

**What do you like best about Thoropass?**

Every single interaction we have had with a Thoropass representative has been friendly, engaging, and understandable.  As a non-technical person, they helped guide me to make informed decisions about what priorities needed to be focused on, how they could support those priorities, and they were exceptionally priced to do business with.  Highly recommend them!

**What do you dislike about Thoropass?**

There have been no downsides for our company.

**What problems is Thoropass solving and how is that benefiting you?**

Currently, they are supporting our company through SOC 2 certification, including Phase 1 and Phase 2 penetration testing.  Thoropass has worked alongside us to make sure we understand the process, various ways it can be attained, and recurring meetings to help us stay on track with the timeline we set up.

  ### 11. Slower start, great finish!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Paul W. | CTO/CISO, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 29, 2025

**What do you like best about Thoropass?**

The guidance and actions on the controls make implementing new controls manageable in bite-sized pieces. Compliance in the past has been a sea of paperwork, making it seem impossible to navigate or finish. Thoropass breaks down the controls so you can make progress in one area at a time.

**What do you dislike about Thoropass?**

At first the project management tools were not very good. We actually created a parallel task environment in our JIRA environment so we could divide and track the work. We provided the feedback to Thoropass and now there are some better project management tools for when you first get going.

**What problems is Thoropass solving and how is that benefiting you?**

We wanted to SOC II badly for years. We had more resources attempting to get it done but couldn't really get over the hurdle. We lost some of those resources and someone suggested Thoropass as a solution. Truthfully, we let it sit for a little bit before we got serious about getting it done. We have SOC II Type 2 now and couldn't be happier. This is making closing enterprise deals much easier in our market and we feel that we are able to maintain audit readiness and the controls we have implemented with much less resources than we were previously allocating to try and manage it.

  ### 12. Penetration testing using Thoropass

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** July 30, 2025

**What do you like best about Thoropass?**

- The process was very easy.
- Very clear instructions about what was required
- Wonderful people who were very helpful in answering questions and proactive in helping out
- Pentest report was thorough and included what I should do to remediate the findings
- Retesting after fixing the findings was easy to request and get done.

**What do you dislike about Thoropass?**

Nothing to add here. May be the cost could have been a little lower.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass is helping me get certification including SOC2 Type 2 and HiTrust. This is critical for me since we are in Healthcare industry and these compliance controls are a must-have.

  ### 13. A partner that actually makes compliance easier

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Financial Services | Mid-Market (51-1000 emp.)

**Reviewed Date:** October 13, 2025

**What do you like best about Thoropass?**

Thoropass takes a process that’s usually painful and makes it manageable. The platform is extremely easy to integrate and very straightforward to use, which saves a lot of time during audits and evidence collection. Their team is knowledgeable, responsive, and genuinely helpful. Customer support is consistently great, and it feels like working with a true partner rather than just another vendor.

**What do you dislike about Thoropass?**

The Trust Center, while a great new feature, would be even better if it allowed adding external certificates or badges not issued through Thoropass.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helps streamline compliance and audit readiness by centralising everything in one place. It eliminates the back-and-forth between teams and auditors, which saves a huge amount of time. The platform makes it easy to stay organised, track evidence, and maintain ongoing compliance.

  ### 14. Responsive Team, but the Audit Ran 5 Days Past the Deadline

**Rating:** 3.5/5.0 stars

**Reviewed by:** Verified User in Biotechnology | Small-Business (50 or fewer emp.)

**Reviewed Date:** March 18, 2026

**What do you like best about Thoropass?**

The account manager and auditors were responsive to our questions

**What do you dislike about Thoropass?**

They missed their estimated deadline by 5 days. We wished that they were upfront about how the turnaround for the report would be after everything was submitted.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helped us get SOC2 Type 1 compliance as fast as possible.

  ### 15. One Compliance System to rule them all - Thoropass

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jayanth K. | Angel Investor, Small-Business (50 or fewer emp.)

**Reviewed Date:** September 08, 2025

**What do you like best about Thoropass?**

Thoropass provided a unified platform for complaince completion, tracking and audit. The platform is simple to use and has good integrations with exisiting cloud vendors to help complete the task using a gamified approach to complete the certifications. I really liked their customer support and how Val helped us in closing the tasks on the dashboard.

**What do you dislike about Thoropass?**

Thoropass can improve on number of provided integrations and support, for example we also host some OSS instead of their managed cloud services and wanted to integrate that to Thoropass, which was missing but still was in product roadmap.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helped us complete Soc 2 Type 1 compliance requirements.

  ### 16. The Gold Standard for SOC 2 Compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Marketing and Advertising | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 22, 2024

**What do you like best about Thoropass?**

Thoropass is a complete game-changer. As a company facing the complexities of SOC 2 for the first time, we were looking for a solution that wouldn't consume all of our engineering resources. Thoropass was the answer. Their platform is incredibly intuitive, guiding you through every step of the process from policy creation to evidence collection. What truly sets them apart is the seamless transition into the audit and the tools for ongoing maintenance. It has made staying compliant a straightforward, manageable process instead of a yearly fire drill. Highly recommend!

**What do you dislike about Thoropass?**

Initial setup can be difficult without a walkthrough. Not all features were fully available when we first signed up.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass allows us to manage vendors with the vendor tool . We use the security to get an overview of the current security posture. We use the auditing tool to evaluate the status of our audit and list outstanding items from our audit. These tools allow us to focus on the actual work needed for security, auditing and vendor management without spending so much time managing things and reporting status.

  ### 17. Proactive Support with Overwhelming Experience

**Rating:** 4.0/5.0 stars

**Reviewed by:** Shivam G.

**Reviewed Date:** January 07, 2026

**What do you like best about Thoropass?**

I like Thoropass's customer support which is really good. They are very proactive and helpful across all types of queries.

**What do you dislike about Thoropass?**

I just didn't like the overall user experience of Thoropass. I think there's a lot of AI that could help with the mundane approval and policies they have implemented. The initial setup was okay but overwhelming in general.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helps us manage, monitor, and comply with compliance tasks. It assisted us with completing type one and preparing to start type two compliance.

  ### 18. User-Friendly Platform with Helpful Reminders

**Rating:** 5.0/5.0 stars

**Reviewed by:** Sachin  G. | Compliance Consultant, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 23, 2025

**What do you like best about Thoropass?**

Thoropass is user-friendly, and I appreciate the user reminders it generates.

**What do you dislike about Thoropass?**

Some applications do not integrate properly, which causes exceptions in the report that do not appear well.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass assisted us in achieving compliance with ISO 27001 and SOC 2, as well as completing self-assessments for HIPAA and GDPR.

  ### 19. Thoropass - a great team and a simple roadmap for Soc 2 completion

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** August 12, 2025

**What do you like best about Thoropass?**

I had 0 security experience and was able to get our company compliant within 3 months by following the simple roadmap within the system and meeting weekly with our fantastic dedicated CSMs. We just easily completed our Type II attestation and the audit is a breeze. I never have to leave the platform!

**What do you dislike about Thoropass?**

As a startup we aren't on many of the most popular software types that have integrations with Thoropass. This means we did have to do a little more screenshotting of systems rather than just easily sending info in. 

If you use AWS or any major software systems Thoropass probably has you covered, but it wasn't very helpful to us based on our current stage.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass is the reason we have our Soc 2 reports and can share them with users in a secure manner. It made it easy to get compliant while having 0 personal experience on our team. The recurring audits that are held within the system allow us to keep up to date and the data room / trust center let's us share these documents with sales prospects without worrying about any risks.

  ### 20. Compliance Made Simple with Thoropass

**Rating:** 5.0/5.0 stars

**Reviewed by:** Christian S. | SVP, Finance, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 27, 2025

**What do you like best about Thoropass?**

Thoropass' framework roadmap helped us complete a SOC 2 Type 1 audit with minimal follow up from the auditors.  With Thoropass' easy to use platform, hands-on customer success team, and robust set of integrations, we were well prepared heading into the audit and are very confident that we will have a similar experience with our SOC 2 Type 2 audit.  We're already looking at expanding our frameworks to include GDPR and look forward to continuing to grow with Thoropass as our trusted compliance partner.

**What do you dislike about Thoropass?**

While the SOC 2 Trust Services Criteria (TSC) for Security, Availability, and Confidentiality had evidence examples associated with each control, we found the Privacy TSC was lacking a similar level of support when preparing for the audit.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass simplifies and accelerates our SOC 2 compliance processes by combining expert guidance with a centralized platform for managing evidence, tasks, and auditor communications. Before Thoropass, we were juggling spreadsheets, email threads, and inconsistent documentation. Now, we have clear visibility into our compliance posture, audit readiness, and deadlines. This has saved us significant time, reduced risk of gaps or oversights, and made our audits far less stressful.

  ### 21. Exceptional Clarity and Accessibility Throughout the Process

**Rating:** 5.0/5.0 stars

**Reviewed by:** Laura E. | CEO, Small-Business (50 or fewer emp.)

**Reviewed Date:** January 13, 2026

**What do you like best about Thoropass?**

They are super clear on processes and procedures and are super accessible throughout the process via slack and regular meetings.

**What do you dislike about Thoropass?**

We had a strong experience, nothing to dislike

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass streamlined our compliance processes, pentests, and audits.

  ### 22. Thoropass is a must to get SOC-1 and/or SOC-2

**Rating:** 5.0/5.0 stars

**Reviewed by:** Nicolas D. | React Lead Developer, Computer Software, Mid-Market (51-1000 emp.)

**Reviewed Date:** August 11, 2025

**What do you like best about Thoropass?**

Thoropass is absolutely incredible; their platform is powerful, intuitive, and efficient. Patrick’s guidance and support were exceptional from start to finish. We genuinely couldn’t have achieved SOC 1 without their expertise, dedication, and seamless process.

**What do you dislike about Thoropass?**

Nothing negative springs to mind. Even when there was an issue connecting their platform to our Amazon Web Services account, they resolved it in the blink of an eye.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass streamlined and centralized our entire SOC 1 compliance process, eliminating guesswork and reducing the time spent coordinating evidence and documentation. Their platform and expert guidance gave us clarity, confidence, and efficiency—turning what could have been a stressful, error-prone process into a smooth and well-structured journey.

  ### 23. reCost CTO

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ofer L. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 11, 2025

**What do you like best about Thoropass?**

I appreciate their professionalism, kindness, and the clear way they explain what needs to be done.

**What do you dislike about Thoropass?**

I can't really say that there's anything I dislike about them.

**What problems is Thoropass solving and how is that benefiting you?**

They help me create a more secure product by guiding me through best practices and confirming that I am on the right track.

  ### 24. I am a repeat customer for Thoropass

**Rating:** 4.5/5.0 stars

**Reviewed by:** Barbara J. | Founder and CEO, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 20, 2025

**What do you like best about Thoropass?**

The portal where we enter our information and keep track of the progress of the SOC 2 process, train or team and enter our evidence.  Very easy to use.

**What do you dislike about Thoropass?**

The price is very high for startups like mine and has been a barrier to us keeping the access year over year.  I think the price should be lowered so that more companies can keep the subscription, year over year.

**What problems is Thoropass solving and how is that benefiting you?**

It solves our problem of showing that we are SOC 2 Type 2 compliant for our enterprise clients.  It also gives us an easy to use portal to help us get through this arduous task.

  ### 25. Good platform, advisors, and services

**Rating:** 4.5/5.0 stars

**Reviewed by:** Cyrille (Asim) B. | Chief Technology Officer, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 13, 2022

**What do you like best about Thoropass?**

I’ve worked with Thoropass on both our SOC 2 Type 1 and Type 2 audits, and the platform has definitely improved over the past year. The audit module feels more solid now, and overall usability has improved. The interface is smoother and easier to navigate.

One feature I really appreciated this year is the new AI-based review in the audit module. When you upload attachments or write text in response to evidence requests, it analyzes what you've submitted and gives you a heads-up if something looks insufficient. It’s not perfect, but it’s a smart addition that helps catch things early.

Their penetration testing service was also even better this year. The team provided detailed findings and clear, actionable steps, which made it easy to address the issues. Support has consistently been great. Everyone I’ve worked with has been responsive and easy to talk to. Our CSM has also been helpful, not too pushy, and answers questions promptly.

Integrations mostly work well. There were a couple of hiccups with BambooHR, but reconnecting fixed them quickly. Being able to manage everything in one place has definitely made the audit process easier.

**What do you dislike about Thoropass?**

Automation is still a bit inconsistent. There are still cases where I need to fetch evidence manually, more than I’d like. One thing that’s frustrating is how the platform auto-uploads old policies as soon as the audit period starts. I’d much rather have a review step or wizard where I can re-upload updated versions before anything gets submitted.

Aside from that, the in-app guidance has improved. I haven’t had to check the documentation at all recently, which is a nice improvement.

**What problems is Thoropass solving and how is that benefiting you?**

SOC 2 Type 2 compliance

  ### 26. Seamless SOC Audit Support with Intuitive Use

**Rating:** 5.0/5.0 stars

**Reviewed by:** Tina W.

**Reviewed Date:** August 20, 2025

**What do you like best about Thoropass?**

I appreciate the seamless setup process with Thoropass, which was greatly aided by having a dedicated account manager like Herson, who made the transition smooth and straightforward. The platform's automation features are incredibly helpful, especially with automatic integrations for tools we use, simplifying artifact gathering. Additionally, I value the intuitive nature of the platform and the reasonable, discounted pricing we received, which aligns well with our business needs.

**What do you dislike about Thoropass?**

I find it inconvenient that within Thoropass, the audit module cannot directly utilize vendor security reviews without the need for manual export and re-upload. This adds unnecessary steps and feels like there could be a more seamless user experience.

**What problems is Thoropass solving and how is that benefiting you?**

I use Thoropass to enhance customer trust by demonstrating a mature cybersecurity approach with SOC 2 compliance, supported by helpful automations and a dedicated account manager simplifying our setup with seamless artifact gathering.

  ### 27. Just a great overall experience

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jonathan A. | Coordonateur des opérations, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 19, 2024

**What do you like best about Thoropass?**

In every step of the way, Thoropass is there to help. Without any previous SOC2 experience, I was able to certify our company. Without the professionnal help from Thoropass, I would have never been able to do it in the short period it took me with them.

**What do you dislike about Thoropass?**

I'm still trying to find out any negative reviews to give

**What problems is Thoropass solving and how is that benefiting you?**

They helped us getting SOC2 certified, every step of the way

  ### 28. Thoropass was a great partner for SOC2

**Rating:** 4.5/5.0 stars

**Reviewed by:** Bobbi B. | Product Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 13, 2025

**What do you like best about Thoropass?**

Thoropass partnered with our team to handle SOC2 compliance.  They offered document templates, integrations to automatically collect information from services such as AWS,  and guided the team as needed.  All of this help, improved our chances of not missing any details and helped us obtain compliance faster.  Additionally, our Thoropass advisor met with us weekly and if we had questions which they didn't know an answer for, they reached out to others to help find guidance.

**What do you dislike about Thoropass?**

Thoropass user interface takes a bit of learning to use.  It has many features which take time to find and figure out how to utilize.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass helps the team manage policies, committees, risk reviews, vendor reviews and much more.  There are many features built into the user interface and when utilized they help make the audit process easier.  They also record when items are updated and track who has reviewed, updated, and approved the changes.  The auto integration to services such as AWS is a blessing in that policies can be configured and the system will notify us if the service moves out of compliance.  Finally Thoropass arranges for the audit team's time and provides them access to the appropriate documentation and evidence as required to complete the audit.

  ### 29. Efficient and Reliable Compliance Management Solution

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Philanthropy | Mid-Market (51-1000 emp.)

**Reviewed Date:** May 16, 2024

**What do you like best about Thoropass?**

Thoropass simplifies the entire compliance process from preparation to audit completion. Its numerous integrations enable efficient collection of audit evidence, while the personnel offboarding feature streamlines the offboarding process. The background check integration ensures the verification of ongoing checks for potential hires. Additionally, the customer support team provides exceptional assistance with weekly check-ins. The initial implementation was straightforward with the provided documentation and support.

**What do you dislike about Thoropass?**

I do not have any dislikes about the Thoropass platform so far.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass has streamlined our audit and compliance process, from preparation to audit completion and ongoing maintenance between audits.

  ### 30. Gets you and keeps you organized

**Rating:** 5.0/5.0 stars

**Reviewed by:** jennifer h. | Owner, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 14, 2025

**What do you like best about Thoropass?**

Steps to get HIPPA compliant are complete, easy to follow and you have lots of support throughout the process.

**What do you dislike about Thoropass?**

There is nothing I dislike about Thoropass

**What problems is Thoropass solving and how is that benefiting you?**

I run a medical practice so getting HIPPA compliant and staying that way is important to me.  Previous companies we used would come once a year and give us a talk on how to be HIPPA compliant then leave.  There was really no specifics or follow up that what they suggested we do, was really happening.  Thoropass has a well organized system to make sure you are truly HIPPA compliant and keep you that way

  ### 31. Great value, great team

**Rating:** 4.5/5.0 stars

**Reviewed by:** Verified User in Hospital & Health Care | Small-Business (50 or fewer emp.)

**Reviewed Date:** July 17, 2025

**What do you like best about Thoropass?**

I really enjoyed working with Thoropass specifcally on our penetration test, SOC 1 Type 1 and HITRUST audits. They are super responsive when there are problems and helped us get across the finish line ahead of schedule. The penetration testers were very competent and gave great detailed reports of their findings and remediations.

**What do you dislike about Thoropass?**

Occasionally there are issue with certain evidence requests having very vague requirements, which required some recycle. I know there isn't always a 'one size fits all' answer to every problem, but it would be great to incorporate some of the results of our conversations into the requirements generated for each certification path.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass offers a lot of compliance roadmap items for getting certifications such as HITRUST and SOC2. We also leveraged them for penetration testing. We use their new "trust center" feature, which greatly aids in our due diligence process and cuts down on a lot of the time spent filling out vendor questionnaires.

  ### 32. Excellent Service!

**Rating:** 5.0/5.0 stars

**Reviewed by:** Ron S. | Operations Manager, Small-Business (50 or fewer emp.)

**Reviewed Date:** December 12, 2024

**What do you like best about Thoropass?**

Thoropass Staff were able to work with us to guide our growing company through the SOC 2 Type 2 Process to help us achieve a completed report.  Their staff were friendly, responsive, professional, and very competent. Thank you very much, Thoropass!

**What do you dislike about Thoropass?**

When working in SOC2 Type1, there were some times when there were some slow - loading pages, but those problems have been completely fixed and no longer happen on their platform.  A++ rating!

**What problems is Thoropass solving and how is that benefiting you?**

We needed to complete a SOC 2 Type 2 Authorization within a tight deadline, and their system and team guided us through the process.

  ### 33. Effortless SOC 2 Compliance with Seamless Integrations

**Rating:** 4.5/5.0 stars

**Reviewed by:** Taylor J. | Small-Business (50 or fewer emp.)

**Reviewed Date:** August 13, 2025

**What do you like best about Thoropass?**

I appreciate Thoropass for its ease of use and simplicity, enabling smooth integration into our work process. The seamless operations with our existing platforms, like accounting and payroll systems, are highly beneficial. I find the support team incredibly helpful and the automation features, such as checklists, streamline our compliance efforts, reducing unnecessary tasks and saving man-hours. The roadmap tool is invaluable for guiding us through necessary components and protocols, ensuring documentation and evidence are automatically handled, allowing us to concentrate on core responsibilities.

**What do you dislike about Thoropass?**

Some bugs early on with some integrations but they have been fine tuning and system has been great.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass streamlines SOC 2 compliance, reducing manual work and man-hours through integrations. Its roadmap tool helps us focus on required protocols, automating evidence documentation, and allowing compliance tasks to run efficiently in the background.

  ### 34. Makes a painful process a whole lot more manageable

**Rating:** 5.0/5.0 stars

**Reviewed by:** John S. | CTO, Small-Business (50 or fewer emp.)

**Reviewed Date:** November 30, 2022

**What do you like best about Thoropass?**

The platform itself and the team around it are both phenomenal. Everything is laid out, and every question is answered almost immediately. We have regular calls to ensure no outstanding items are sticking points, and Danny has been superb at resolving any issues.
The ability to ask questions and communicate via the platform as you go through the various points has helped massively. The majority of our integrations were supported, so any information needed that already existed was imported from the off!

We recently had our pen testing done via Thoropass and the communication and level of details was excellent. We had our pen test done by a recommended partner last year and its good to see that the in-house team are on the same level when delivering the test and helping work through any issues.

**What do you dislike about Thoropass?**

Could have a few more implementations to tie into

**What problems is Thoropass solving and how is that benefiting you?**

Our SOC2 certification is needed to work with a lot of SaaS companies. Security is paramount for us, and with the help of Thoropass, we can now prove that. Time is the most valuable resource for every business, so saving it is always hugely beneficial. Thoropass has shaved days and even weeks off the process.

  ### 35. Efficient Compliance

**Rating:** 4.5/5.0 stars

**Reviewed by:** Ahsen S. | VP, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 14, 2025

**What do you like best about Thoropass?**

Thoropass stands out for its user-friendly interface and clear navigation, which make uploading documents, managing tasks, and collaborating with auditors straightforward. The platform’s integration capabilities with services like AWS, Jira, and Google Workspace automate the collection of compliance evidence, saving significant time and reducing manual effort. The dashboard provides a transparent view of progress and pending tasks, while regular notifications ensure nothing falls through the cracks. The support team is highly responsive and knowledgeable, always available to answer questions and guide us through complex compliance requirements

**What do you dislike about Thoropass?**

While Thoropass covers the essentials very well, there are areas for improvement. Some users have noted that customization options are limited, occasionally requiring manual work outside the platform for unique processes or niche integrations.

**What problems is Thoropass solving and how is that benefiting you?**

The most helpful aspect of Thoropass is its ability to centralize and organize all compliance activities in one place.

  ### 36. A One-Stop Solution for HIPAA Compliance with Stellar Support

**Rating:** 4.5/5.0 stars

**Reviewed by:** Shifat R. | Director of Operations, Small-Business (50 or fewer emp.)

**Reviewed Date:** May 14, 2024

**What do you like best about Thoropass?**

I appreciate Thoropass for its quick onboarding process and friendly pricing, which made the transition from our previous system smooth and cost-effective. I find the customer service exceptional, with ultra-fast responses to emails. The compliance-focused training features are invaluable, ensuring all our team members are properly trained and certified. Lastly, Thoropass is constantly ahead of the curve in compliance, acting as a comprehensive solution that meets all my company's needs.

**What do you dislike about Thoropass?**

I think there could be better tutorials for each step in the setup process. Additionally, the pricing seems to be a barrier for smaller companies trying to get on board with Thoropass.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass ensures our HIPAA compliance, enhancing security and client confidence. It simplifies training for compliance, facilitating quick certifications. Its exceptional customer service and continuous updates keep us compliant effortlessly.

  ### 37. SOC 2 made easy

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Government Administration | Small-Business (50 or fewer emp.)

**Reviewed Date:** August 06, 2025

**What do you like best about Thoropass?**

Thoropass has made our SOC 2 process virtually painless. It also provides a lot of really helpful integrations with our cloud service provider and other utilities that makes it easy for us to show our customers that we are compliant.

**What do you dislike about Thoropass?**

I haven't found much use for the questionnaire tool; in general each one we get is specialized enough that answers to other questionnaires aren't responsive, so it typically makes me do even more work than just filling it out myself. 

The platform itself occasionally has some buggy behavior, but the team has been great about responding to issues that I raise, so that's less of a problem.

**What problems is Thoropass solving and how is that benefiting you?**

Getting us onboarded to the SOC 2 process was the big draw, but it has made so much of the SOC 2 annual process seamless too.

  ### 38. Thoropass supported us all the way during SOC2 compliance process

**Rating:** 5.0/5.0 stars

**Reviewed by:** Daniil R. | Head of Tech, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 20, 2025

**What do you like best about Thoropass?**

We are using thoropass to get compliant with SOC2 Type 2 certification

* Patient, quick and  reliable customer support.
* Flexibility, we needed to go through compliance ASAP and got allocated earliest possible date of audit. 
* Many controls are implemented automatically through Thoropass UI
* AWS integration and automatic population of evidence.

**What do you dislike about Thoropass?**

I think frontend UI/navigation can be improved, it's not easy to navigate through ERs, there is no indication of file upload, it can take a few minutes to upload 10 files and until upload is done, it is not clear if file is being uploaded or not

**What problems is Thoropass solving and how is that benefiting you?**

We need to be compliant with SOC 2 Type 2, Thoropass helps us to keep track of all the controls that we have automatically or semi-automatically.

  ### 39. Thoropass streamlines HIPAA compliance

**Rating:** 5.0/5.0 stars

**Reviewed by:** Casey F. | IT Consultant, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 20, 2025

**What do you like best about Thoropass?**

Thoropass turned our HIPAA program from spreadsheets and guesswork into a clear, repeatable process. The control mapping to the HIPAA Security Rule, policy templates, and evidence automations (cloud/IDP/code repo integrations) saved our team a ton of time and kept us audit-ready year-round. Their support and in-platform auditors were responsive and pragmatic.

**What do you dislike about Thoropass?**

There is not a lot to dislike about using Thoropass.

**What problems is Thoropass solving and how is that benefiting you?**

It solves fragmented compliance—policy writing, evidence collection, risk/vendor tracking—by centralizing and automating it. We spend fewer hours chasing screenshots and more time developing our service.

  ### 40. Effortless Onboarding, Exceptional Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Natalya S. | Founder and CEO

**Reviewed Date:** August 05, 2025

**What do you like best about Thoropass?**

I love how user-friendly the platform is and how it simplifies our work for SOC audits. The checklist and security manual are vital in guiding us efficiently through the audit process. Having Harrison, our account manager, offer thorough assistance significantly eased our onboarding and use of Thoropass, making it a pleasant experience.

**What do you dislike about Thoropass?**

I found it challenging at first to understand what we're supposed to do because there are a lot of tasks in the program. Initially, it was a bit overwhelming to understand what we needed to do and how to do it.

**What problems is Thoropass solving and how is that benefiting you?**

I use Thoropass to organize security records and complete SOC audits efficiently, enhancing our credibility with customers. The checklist and security manual simplify preparations, and support from our account manager makes the process manageable, even for first-time audits.

  ### 41. Great partner.  Great Experience.  Excellent Platform.

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** September 03, 2025

**What do you like best about Thoropass?**

Really everything.  It's been a great experience beginning with the sales cycle.  The team spent time to understand our drivers and timelines for achieving SOC 2 Type 2 and developed a plan to get us there.  Having everything (compliance platform, pen test and auditors)  from the same company was a big plus, and it has made the process much smoother.  The project team was engaged and diligent and moving us through the process.  We highly recommend working with Thoropass.

**What do you dislike about Thoropass?**

Again, not much.  The transition of data from the platform to the auditors was a bit clunky, but not overly burdensome.

**What problems is Thoropass solving and how is that benefiting you?**

We needed a streamlined process to achieve SOC 2 Type 2 compliance for our healthtech application.

  ### 42. Keeps Us SOC 2-Ready with Outstanding Support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 17, 2026

**What do you like best about Thoropass?**

Keeps us prepared for SOC 2.  Great customer support manager and auditors.

**What do you dislike about Thoropass?**

Learning the platform was a little difficult for a new learner to the SOC 2 topic.  However, this could be to just that.  New environment for me.

**What problems is Thoropass solving and how is that benefiting you?**

Reminds to keep us compliant are very helpful.

  ### 43. Great experience, made it as easy as filing taxes online

**Rating:** 5.0/5.0 stars

**Reviewed by:** James N. | SVP, Technology, Small-Business (50 or fewer emp.)

**Reviewed Date:** June 04, 2025

**What do you like best about Thoropass?**

Managing evidence requests are much easier in the tool than in legacy ways of working with auditors during this process.  They ability to chat/comment, have that saved on the evidence request and all the data in one place took away a lot of the churn/back and forth that adds stress and takes time when actually doing the audit.

The integrations are also very useful to automate a bunch of the monitors/controls/evidence data collection.

**What do you dislike about Thoropass?**

I wish there was a on-demand process to trigger integrations to re-run.

Also, an integration with the "new" AWS Vulnerability Management tools (not just classic) and the Microsoft Defender for Endpoint and Vulnerability Management would have made the most time intensive part of the process easier.

**What problems is Thoropass solving and how is that benefiting you?**

SOC2 Compliance

  ### 44. Contantly improving tool with first class support

**Rating:** 5.0/5.0 stars

**Reviewed by:** Simeon F. | Head of Engineering, Small-Business (50 or fewer emp.)

**Reviewed Date:** June 18, 2025

**What do you like best about Thoropass?**

This is a big app that wraps around a large process. You need policies, training, monitoring of your infrastructure - and then you need to pass an audit that will include hundreds or thousands of pieces of evidence... And Thoropass can help with all of that!

I love the integrations (Thoropass can tell when my AWS infrastructure falls out of compliance), task reminders and when I'm using a new vendor who needs review) and the automations (I need reminders to stay on top of my compliance tasks).

Three quarters of the year I live in my Dashboard which keeps me up to date on what I need to be doing. And during audit season I live in the audit module which guides me through the audit evidence process.

I should also mention that the support I've gotten from Thoropass customer service reps has been outstanding and very responsive to questions about the product, reporting bugs, or helping me find best practices to improve. My background is not in compliance so the hand-holding with a personal touch has really made a positive difference in my comfort level doing the ongoing work needed to maintain our certification level.

**What do you dislike about Thoropass?**

Lots of improvements and new features during my three years experience but the training module  (assigning/tracking required course completions) still isn't great.

**What problems is Thoropass solving and how is that benefiting you?**

As an enterprise SAAS vendor, SOC2 compliance is table stakes to even have a conversation. Thoropass helps us adopt the processes and policies needed to pass the SOC2 audit. It helps me stay organized and pay regular attention to all those "important but not urgent" things that otherwise might sometimes fall through the cracks.

  ### 45. Instrumental in Helping Us Achieve SOC 2 Certification

**Rating:** 5.0/5.0 stars

**Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.)

**Reviewed Date:** January 21, 2026

**What do you like best about Thoropass?**

Thoropass was instrumental in helping us gain our SOC2 certification.

**What do you dislike about Thoropass?**

The annual renewal process is a bit of a burden to go through.

**What problems is Thoropass solving and how is that benefiting you?**

We needed a SOC2 certification for our VR and LMS learning platforms, all run on the Azure cloud infrastructure.

  ### 46. Thoropass is easy to work with

**Rating:** 5.0/5.0 stars

**Reviewed by:** Jake J. | CIO, Small-Business (50 or fewer emp.)

**Reviewed Date:** October 03, 2025

**What do you like best about Thoropass?**

The integrations with our cloud provider and HR systems make it easy to automatically import evidence. Overall, the system is user-friendly and straightforward to navigate.  The Thoropass team is great to work with and our monthly meetings keep us on track.

**What do you dislike about Thoropass?**

Setting up custom reviews can be confusing and not as flexible.

**What problems is Thoropass solving and how is that benefiting you?**

Audit compliance

  ### 47. One Stop Shop for Compliance Reporting and Auditing

**Rating:** 5.0/5.0 stars

**Reviewed by:** Britt G. | Information Security Manager, Mid-Market (51-1000 emp.)

**Reviewed Date:** November 11, 2025

**What do you like best about Thoropass?**

One Stop Shop for Compliance reporting and Auditing

**What do you dislike about Thoropass?**

Need more integrations with other platforms and tools.

**What problems is Thoropass solving and how is that benefiting you?**

Cylinder Security and Compliance is limited in staffing and Thoropass proves the much needed support and available options.

  ### 48. Thoropass makes it easy to keep track of all the things needed to be in compliance

**Rating:** 4.0/5.0 stars

**Reviewed by:** Josh H. | Director, Software Engineering, Mid-Market (51-1000 emp.)

**Reviewed Date:** May 14, 2025

**What do you like best about Thoropass?**

A great tool that helps manage compliance efforts. I have helped manage compliance activities at multiple companies through the years and we finally decided to use Thoropass as a tool to help with this process.  Having everything centralized and managed for you via tool has been VERY helpful. In addition the support is good in that our contacts understand the nuances of audits and compliance frameworks.

**What do you dislike about Thoropass?**

Small gripe but for some admin accounts you get all the warnings about needing to do training etc. It would be nice to have an account that manages the system that is not a employee account.

**What problems is Thoropass solving and how is that benefiting you?**

Keeping process and artifacts in one central location helps keep things organized and allows us to monitor our compliance with ease

  ### 49. Effortlessly Identifies Vulnerabilities

**Rating:** 5.0/5.0 stars

**Reviewed by:** Thomas L.

**Reviewed Date:** December 05, 2025

**What do you like best about Thoropass?**

I use Thoropass for penetration test and find it very useful. I appreciate receiving the report emails that show vulnerabilities categorized as Low, High, Medium, etc., which helps me find vulnerabilities easily. The initial setup was also very easy.

**What do you dislike about Thoropass?**

Nothing

**What problems is Thoropass solving and how is that benefiting you?**

I use Thoropass to find vulnerabilities easily, receiving report emails that are very helpful for our software.

  ### 50. Overall great experience and easy to get started

**Rating:** 4.0/5.0 stars

**Reviewed by:** Dathan W. | Software Engineer, Small-Business (50 or fewer emp.)

**Reviewed Date:** August 07, 2025

**What do you like best about Thoropass?**

Implementation process was easy and the team was great. They were always available to answer my questions and walk through the process step by step.

**What do you dislike about Thoropass?**

Navigating the platform can be challenging at times. Some actions like performing access reviews require a lot of clicks that seem unnecessary. The workflows could be cleaned up a bit.

**What problems is Thoropass solving and how is that benefiting you?**

Thoropass manages our SOC2 compliance. It tracks and alerts us of the things that we need to do to get and stay compliant.


## Thoropass Discussions
  - [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment

- [View Thoropass pricing details and edition comparison](https://www.g2.com/products/thoropass/reviews?page=2&qs=pros-and-cons&section=pricing&secure%5Bexpires_at%5D=2026-08-12+11%3A13%3A00+-0500&secure%5Bsession_id%5D=a6cc68db-ed2e-47d8-9a84-d05267fca128&secure%5Btoken%5D=f0c087d4c13a9c5fe69148fc22d6e38fa32ddfb95e0b108c5e99188841c7bd49&format=llm_user)
## Thoropass Integrations
  - [Amazon Aurora](https://www.g2.com/products/amazon-aurora/reviews)
  - [Amazon CloudFront](https://www.g2.com/products/amazon-cloudfront/reviews)
  - [Amazon DynamoDB](https://www.g2.com/products/amazon-web-services-aws-amazon-dynamodb/reviews)
  - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews)
  - [Amazon Elastic Container Service (Amazon ECS)](https://www.g2.com/products/amazon-elastic-container-service-amazon-ecs/reviews)
  - [Amazon Elastic Kubernetes Service (Amazon EKS)](https://www.g2.com/products/amazon-elastic-kubernetes-service-amazon-eks/reviews)
  - [Amazon QuickSight](https://www.g2.com/products/amazon-quicksight/reviews)
  - [Amazon Redshift](https://www.g2.com/products/amazon-redshift/reviews)
  - [Amazon Relational Database Service (RDS)](https://www.g2.com/products/amazon-relational-database-service-rds/reviews)
  - [Amazon Simple Email Service (Amazon SES)](https://www.g2.com/products/amazon-simple-email-service-amazon-ses/reviews)
  - [Amazon Simple Storage Service (S3)](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews)
  - [Amazon Virtual Private Cloud (Amazon VPC)](https://www.g2.com/products/amazon-virtual-private-cloud-amazon-vpc/reviews)
  - [AWS Amplify](https://www.g2.com/products/aws-amplify/reviews)
  - [AWS Auto Scaling](https://www.g2.com/products/aws-auto-scaling/reviews)
  - [AWS Batch](https://www.g2.com/products/aws-batch/reviews)
  - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews)
  - [AWS Cloud Development Kit (AWS CDK)](https://www.g2.com/products/aws-cloud-development-kit-aws-cdk/reviews)
  - [AWS CloudFormation](https://www.g2.com/products/aws-aws-cloudformation/reviews)
  - [AWS Elastic Beanstalk](https://www.g2.com/products/aws-elastic-beanstalk/reviews)
  - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews)
  - [AWS Glue](https://www.g2.com/products/aws-glue/reviews)
  - [AWS Identity and Access Management (IAM)](https://www.g2.com/products/aws-identity-and-access-management-iam/reviews)
  - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews)
  - [Azure DevOps Server](https://www.g2.com/products/azure-devops-server/reviews)
  - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews)
  - [Azure Portal](https://www.g2.com/products/azure-portal/reviews)
  - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews)
  - [BambooHR](https://www.g2.com/products/bamboohr/reviews)
  - [Checkr](https://www.g2.com/products/checkr/reviews)
  - [Confluence](https://www.g2.com/products/confluence/reviews)
  - [DuploCloud](https://www.g2.com/products/duplocloud/reviews)
  - [GitHub](https://www.g2.com/products/github/reviews)
  - [GitHub Inc.](https://www.g2.com/products/github-inc/reviews)
  - [GitLab](https://www.g2.com/products/gitlab/reviews)
  - [Google Cloud Console](https://www.g2.com/products/google-cloud-console/reviews)
  - [Google Cloud Identity &amp; Access Management (IAM)](https://www.g2.com/products/google-cloud-identity-access-management-iam/reviews)
  - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews)
  - [Google Workspace](https://www.g2.com/products/google-workspace/reviews)
  - [Gusto](https://www.g2.com/products/gusto/reviews)
  - [Jira](https://www.g2.com/products/jira/reviews)
  - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews)
  - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews)
  - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews)
  - [Okta](https://www.g2.com/products/okta/reviews)
  - [Rippling](https://www.g2.com/products/rippling/reviews)
  - [Slack](https://www.g2.com/products/slack/reviews)
  - [Supabase](https://www.g2.com/products/supabase-supabase/reviews)
  - [TriNet](https://www.g2.com/products/trinet/reviews)
  - [Vercel](https://www.g2.com/products/vercel/reviews)

## Thoropass Features
**Additional Functionality**
- Incident Management
- Real-Time Monitoring
- Evidence Management
- Risk Alerts
- Reporting & Statistics
- Third-Party Integrations
- Workflow Management
- Risk Analysis
- Sarbanes-Oxley Compliance
- Single Sign On
- Compliance Management
- Policy Management
- Real-Time Reporting
- Audit Trail
- Assessment Management
- HIPAA Compliant
- Operational Risk Management
- Document Storage
- Enterprise Risk Management
- Data Visualization
- Configurable Workflow
- Vendor Management
- IT Risk Management
- User Management
- Issue Management
- Internal Controls Management
- AI Copilot
- Environmental Compliance
- Customizable Reports
- Data Import/Export
- Risk Management
- API
- Document Management
- Risk Assessment
- Activity Dashboard
- Task Management
- Audit Management
- Generative AI
- Governance
- Corrective and Preventive Actions (CAPA)
- Alerts/Notifications
- FDA Compliance
- Secure Data Storage
- Approval Process Control
- Version Control

**Security**
- Compliance Monitoring
- Data Loss Prevention
- Cloud Gap Analytics

**Functionality**
- Customized Vendor Pages
- Centralized Vendor Catalog
- Questionnaire Templates
- User Access Control

**Generative AI**
- AI Text Generation

**Generative AI**
- AI Text Summarization
- AI Text Generation
- Generative AI

**Cloud Visibility**
- Data Discovery
- Cloud Registry
- Cloud Gap Analytics

**Compliance**
- Governance
- Data Governance
- Sensitive Data Compliance

**Risk assessment**
- Risk Scoring
- 4th Party Assessments
- AI Monitoring

**Workflows - Audit Management**
- Audit Trail
- Recommendations
- Collaboration Tools
- Integrations
- Audit Planning

**Generative AI - Security Compliance**
- Predictive Risk
- Automated Documentation

**Monitoring - IT Risk Management**
- AI Monitoring

**Additional Functionality**
- HIPAA Compliant
- Workflow Management
- Secure Data Storage
- Third-Party Integrations
- Access Controls/Permissions
- Consent Management
- Data Mapping
- Audit Management
- API
- Role-Based Permissions
- Policy Management
- Single Sign On
- Risk Management
- Search/Filter
- Template Management
- Multi-Language
- Data Visualization
- User Management
- Monitoring
- PIA/DPIA
- Alerts/Notifications
- Sensitive Data Identification
- Self Service Portal
- Archiving & Retention
- Data Import/Export
- Risk Assessment
- Activity Dashboard
- Document Management
- PCI Compliance
- Incident Management
- Data Governance
- Compliance Management
- Customizable Templates
- AI Copilot
- Reporting & Statistics
- Generative AI
- Data Storage Management
- File Management
- Customizable Reports
- Performance Metrics
- Risk Analysis
- Intrusion Detection System
- Log Analysis
- Security Auditing
- Log Management
- Reporting/Analytics
- Risk Alerts
- PCI Assessment
- Vulnerability Scanning
- Event Logs
- File Integrity Monitoring
- Exceptions Management
- Data Synchronization
- Compliance Tracking
- Activity Monitoring
- Audit Trail
- Secure Login

**Security**
- Data Security
- Data loss Prevention
- Security Auditing
- Real-Time Data
- Cloud Application Security
- SSL Security

**Administration**
- Policy Enforcement
- Auditing
- Workflow Management

**Documentation - Audit Management**
- Customizable Forms
- Checklists

**Generative AI - Vendor Security and Privacy Assessment**
- Text Summarization
- Text Generation

**Agentic AI - IT Risk Management**
- Autonomous Task Execution
- Multi-step Planning

**Identity**
- SSO
- Governance
- User Analytics
- Real-Time Analytics
- Visual Analytics
- Reporting/Analytics

**Reporting & Analytics - Audit Management**
- Activity Dashboard
- Audit Performance
- Industry Compliance
- ISO Compliance
- Environmental Compliance
- AML Compliance
- Sarbanes-Oxley Compliance
- KYC Compliance
- FDA Compliance
- OSHA Compliance
- Real-Time Data
- Real-Time Analytics

**Additional Functionality**
- Alerts/Notifications
- AI Copilot
- Access Controls/Permissions
- Endpoint Management
- Intrusion Detection System
- Compliance Management
- HIPAA Compliant
- Search/Filter
- API
- Two-Factor Authentication
- Data Visualization
- Risk Assessment
- Real-Time Monitoring
- Event Logs
- Activity Dashboard
- Audit Management
- Cloud Security Policy Management
- Vulnerability Protection
- Anti Virus
- Incident Management
- Threat Intelligence
- Real-Time Reporting
- Reporting & Statistics
- User Management
- Encryption
- Vulnerability Scanning
- Generative AI
- Status Tracking
- Third-Party Integrations
- Real-Time Notifications
- Patch Management
- Monitoring
- Cloud Encryption

**Additional Functionality**
- Mobile Access
- Corrective and Preventive Actions (CAPA)
- Issue Management
- Document Management
- Role-Based Permissions
- Activity Tracking
- Document Storage
- Reporting & Statistics
- Task Management
- Workflow Management
- Status Tracking
- Monitoring
- Data Visualization
- Approval Process Control
- Forms Management
- Change Management
- Risk Alerts
- Asset Tracking
- AI Copilot
- API
- Risk Analysis
- Policy Management
- Incident Management
- Real-Time Reporting
- Real-Time Notifications
- Alerts/Notifications
- Security Auditing
- Compliance Management
- Risk Assessment
- Real-Time Monitoring
- Version Control
- Archiving & Retention
- Alerts/Escalation
- Customizable Reports
- Compliance Tracking
- Access Controls/Permissions
- Certification Tracking
- Surveys & Feedback
- Digital Signature
- HIPAA Compliant
- Reminders

## Top Thoropass Alternatives
  - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,674 reviews)
  - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,327 reviews)
  - [Secureframe](https://www.g2.com/products/secureframe/reviews) - 4.7/5.0 (810 reviews)

