--- title: Thoropass Reviews meta_title: 'Thoropass Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 580 reviews by the users' company size, role or industry to find out how Thoropass works for a business like yours. aggregate_rating: rating_value: 4.7 review_count: 580 scale: '5' date_modified: '2026-07-17' parent_category: name: Cloud Security url: https://www.g2.com/categories/cloud-security --- # Thoropass Reviews **Vendor:** Thoropass **Category:** [Cloud Compliance Software](https://www.g2.com/categories/cloud-compliance) **Average Rating:** 4.7/5.0 **Total Reviews:** 580 ## About Thoropass Thoropass is a modern compliance audit firm that helps organizations of all sizes build and prove trust with high-quality audits, expert guidance, and integrated security services. Combining deep auditor expertise with intuitive technology, Thoropass delivers a streamlined path to achieving and maintaining compliance with frameworks including SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, PCI DSS, and others. As a licensed CPA firm and CREST-accredited provider, Thoropass brings a level of credibility and rigor that scales from fast-growing startups to complex, regulated enterprises. Our auditors, security engineers, and compliance experts partner closely with customers to simplify evidence collection, reduce audit friction, and ensure results that stand up to regulator, partner, and customer scrutiny. Beyond audits, Thoropass supports the full trust-building lifecycle with penetration testing, risk assessment, access reviews, AI governance assessments, and questionnaire automation—helping teams unify compliance operations without relying on multiple vendors. Organizations choose Thoropass for our responsive expert support, consistent audit outcomes, and a service experience built for modern security and compliance teams. Thoropass is trusted by thousands of companies to prove compliance, strengthen security posture, and confidently meet the expectations of customers, auditors, and regulators. ## Thoropass Pros & Cons **What users like:** - Users value the **ease of use** of Thoropass, enjoying its intuitive dashboard and helpful templates for efficient audits. (239 reviews) - Users appreciate the **exceptional support** from Thoropass, which simplifies the audit process and enhances their experience. (221 reviews) - Users value the **extensive integrations** of Thoropass, which streamline compliance efforts and enhance operational efficiency. (157 reviews) - Users commend the **helpful support team** of Thoropass, which enhances the overall audit and compliance experience. (115 reviews) - Users appreciate the **extensive integrations** of Thoropass, significantly streamlining compliance processes with various cloud providers. (93 reviews) - Guidance (90 reviews) - Users value the **excellent customer support** from Thoropass, enhancing their experience and ensuring project success. (89 reviews) - Intuitive (83 reviews) - Timely (78 reviews) - Efficiency (77 reviews) **What users dislike:** - Users find **lack of clarity** in Thoropass, struggling with unorganized UX and missing essential information at point of sale. (39 reviews) - Users experience **integration issues** with Thoropass, leading to exceptions and unhelpful connections that hinder usability. (34 reviews) - Users find the **UX disjointed** , expressing a need for clearer guidance and better functionality in Thoropass. (33 reviews) - Users note a need for **improved communication and feature development** to enhance scheduling and audit experiences. (31 reviews) - Users find the **platform not intuitive** , leading to confusion and challenges in managing compliance efficiently. (29 reviews) - Users experience **clunky document editing** with Thoropass, causing issues during document updates and reviews. (26 reviews) - Users find the **learning curve** of Thoropass challenging, making adaptation to the platform time-consuming. (26 reviews) - Limitations (23 reviews) - Non-Intuitive Features (23 reviews) - Lack of Guidance (22 reviews) ## Thoropass Reviews ### 1. The team and the product have been exceptional. **Rating:** 5.0/5.0 stars **Reviewed by:** Alicia S. | Chief Technical Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** June 05, 2024 **What do you like best about Thoropass?** The team at Thoropass has been responsive, intelligent, and just generally easy to do business with. Whenever we have a question, they are happy to help and get back to us the same day. The product itself is intuitive and they are always adding additional features. **What do you dislike about Thoropass?** Nothing as of yet! So far everything has exceeded expectations. **What problems is Thoropass solving and how is that benefiting you?** Thoropass is getting us prepared for our SOC2 Type2 audit as well as our ISO27001 certifications. As an unexpected benefit, they have security awareness training available for us to leverage as well as a library of templated documents to get us started. ### 2. Seamless **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Medical Practice | Mid-Market (51-1000 emp.) **Reviewed Date:** May 13, 2025 **What do you like best about Thoropass?** Their team was always helpful in guiding us through the process and eager to answer any questions that arose. **What do you dislike about Thoropass?** A few of the audit request items could have been easier to comprehend. **What problems is Thoropass solving and how is that benefiting you?** HIPPA Compliance and SOC 2 Compliance ### 3. Amazing tool for corporate compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Jeff B. | AVP Information Technology , Mid-Market (51-1000 emp.) **Reviewed Date:** March 06, 2025 **What do you like best about Thoropass?** Everything is built out as a great SaaS management framework and the Thoropass team is there every step of the way. **What do you dislike about Thoropass?** It is so thorough that sometimes if feels like too much, but that's still a good thing. **What problems is Thoropass solving and how is that benefiting you?** Thoropass helped us make the leap from SOC2 Type 1 to Type 2. Also Thropass does integrated Pen tests. We never would have been able to complete these procedures and certifications without Thoropass. ### 4. Amazing Sales process makes it easy **Rating:** 5.0/5.0 stars **Reviewed by:** Ben H. | Account Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** May 29, 2025 **What do you like best about Thoropass?** It was such an easy process working with sales to gather information for leadership buy in **What do you dislike about Thoropass?** Nothing it was a great experience overall! **What problems is Thoropass solving and how is that benefiting you?** Helping us with Soc 2 ### 5. We Were Lost & Now We Are Found! **Rating:** 5.0/5.0 stars **Reviewed by:** CJ A. | Head of Product, Small-Business (50 or fewer emp.) **Reviewed Date:** July 05, 2024 **What do you like best about Thoropass?** We previously had an all-in-one SOC preparedness and audit solution and they went belly up. Thoropass is the perfect replacement and has virtually ALL the features we are looking for as well as a built-in audit arm. The implementation was beyond easy and would work well for orgs that have lil to no audit experience. The integrations are also super step-by-step and simple to set up. **What do you dislike about Thoropass?** Honestly so far there have been some minor inconvineiences. However we reported them to our account representative or support and the development team has implemented almost immediate solutions. **What problems is Thoropass solving and how is that benefiting you?** We are a small department when it comes to compliance. As such we need a product that does as much as possible, automates to the max and integrates seemlessly with all of our platforms. Thoropass has met all of those expectations. It is allowing a small team of 3 to prepare, conduct, complete a full SOC 2 audit in a super short period. ### 6. Top Notch for SOC 2 auditing **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Mid-Market (51-1000 emp.) **Reviewed Date:** October 02, 2025 **What do you like best about Thoropass?** Thoropass nails it when it comes to simplifying compliance. Its user-friendly dashboard and task-oriented roadmap make SOC 2 audits feel far less overwhelming. The automated monitoring tools and tight integrations with cloud platforms significantly reduce manual effort, and the support team is responsive, knowledgeable, and genuinely invested in helping you succeed. If you're looking to make compliance something you manage with confidence — not dread — Thoropass is a standout choice. **What do you dislike about Thoropass?** It's a great program, I just wish that we had discovered it sooner. **What problems is Thoropass solving and how is that benefiting you?** Thoropass helps us automate all our compliance and security functions. ### 7. An efficiet way to navigate the SOC2 process. **Rating:** 4.0/5.0 stars **Reviewed by:** De'Jona M. | Director of Operations, Small-Business (50 or fewer emp.) **Reviewed Date:** January 21, 2025 **What do you like best about Thoropass?** I liked having a guide for the process that answered qiestions and communicated with the auditor on my behalf. **What do you dislike about Thoropass?** There were some inconsistent answers from the rep. So, that caused some confusion and delays in the process. **What problems is Thoropass solving and how is that benefiting you?** They were assisitng us with gett our SOC 2 type 1 and type 2. ### 8. Great services for an underserved market **Rating:** 5.0/5.0 stars **Reviewed by:** Jim M. | Chief Security, Privacy, and Compliance Officer, Mid-Market (51-1000 emp.) **Reviewed Date:** September 17, 2024 **What do you like best about Thoropass?** Thoropass delivers a seamless service solution geared for the small to medium company looking to achieve, maintain, and prove compliance and certifrication and avoidance of all of the numerous challenges and pitfalls that organizations experience in the process. Thoropas is easy to use, easy to work with, offers hundreds of ready made examples and templates that can be used, with all control proofs kept organized and available online. The compliance dash board tool is fantastic for quichlyu tracking efforts and quickly identifying issues. The staff are absolutely amazing, well trained in their field, courteous and exceptionally helpful. The staff from customer account executives, Customer success managers, auditors, pen testers, all are dedicated to your success from start to finish. All of this is offered at a subscription cost that is affordable for the small and midzided market. As a 26 year veteran in securing small to midsized companies and Healthcare providers, I highly recommmend Thoropass. **What do you dislike about Thoropass?** Thoropass is not a free tool. That's about it. **What problems is Thoropass solving and how is that benefiting you?** Small and midsized business and organizations must overcome enormous challenges in achieving any level of compliance and certifications. And yet in today's cyber-threat and regulatory requirments landscape, achieving real cyber resiliance, compliance, and being able to prove it is something that corporate leaders can no longer ignore. Thoropass offers the service and tools any organization to achieve the results and objectives that a required with less time and effort consumed in the process to that the business may focus on it's mission rather than constantly dealing with the hassles and headache. ### 9. Communicative and knowledgeable **Rating:** 5.0/5.0 stars **Reviewed by:** Devin B. | Cybersecurity Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** December 06, 2024 **What do you like best about Thoropass?** What I like most about Thoropass is the ease and timeliness of communication. The team that has been assigned to our organization is always responsive and helpful. **What do you dislike about Thoropass?** We haven't noticed any downsides. There are features that could be more fleshed out but that is a matter of time. **What problems is Thoropass solving and how is that benefiting you?** We are conducting SOC and HITRUST audits. The Thoropass platform has made it easy to keep track of all our documents and evidence. ### 10. Secure **Rating:** 5.0/5.0 stars **Reviewed by:** Xavier C. | Accounting Associate, Small-Business (50 or fewer emp.) **Reviewed Date:** February 05, 2025 **What do you like best about Thoropass?** It provides security awareness which keeps our company safe **What do you dislike about Thoropass?** Some features are hard to navigate/use as well as instructions that are not clear **What problems is Thoropass solving and how is that benefiting you?** Security compliance as well as operations relevance in the company ### 11. Type 1 report done in 1 month! **Rating:** 5.0/5.0 stars **Reviewed by:** Dora M. | CFO, Small-Business (50 or fewer emp.) **Reviewed Date:** October 21, 2024 **What do you like best about Thoropass?** We have been working on our SOC 2 for awhile on our own. We were finding it hard to keep track of the controls develops and also looking for industry best practices. Thoropass sales team was quick at giving us platform and audit quote and transition to client service team after was seamless. We were able to implement a lot of work done previously directly with Thoropass's SOC 2 roadmap feature and obtained our Type 1 report in record breaking time! We are very happy with the platform and the audit integration. **What do you dislike about Thoropass?** Nothing at this stage! It's been a very good experience for us thus far. **What problems is Thoropass solving and how is that benefiting you?** Management our controls/reviews and integrated audit in one platform. We were able to self-pace and monitor completion. ### 12. Compliance simplified **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** December 10, 2024 **What do you like best about Thoropass?** Thoropass provides an easy-to-use portal, well-architected policies and procedures, and an excellent success plan that makes adoption and maintenance easy. The success team is quick to address questions and provide documentation to help with education and navigating compliance. Thoropass has become our main portal for all compliance documentation and training, they even helps with our on boarding and off-boarding checklists. **What do you dislike about Thoropass?** Downsides are occasional integration breaks between systems that require reauthentication. **What problems is Thoropass solving and how is that benefiting you?** Thoropass provides consistency in our process managment and eases our system audits. As a compliance partner, they are instrumental in validating our commitment to customers in data security. ### 13. Thoropass Process & Independence **Rating:** 5.0/5.0 stars **Reviewed by:** Patrick S. | Board Member, Small-Business (50 or fewer emp.) **Reviewed Date:** January 11, 2024 **What do you like best about Thoropass?** The Belong For Me likes having all our compliance needs in one platform. The ability to create, edit, collaborate, approve, monitor, and manage most of our governance controls from one platform is a game changer. I painfully spent more than a decade working with Excel files, SharePoint, Google Docs, etc, trying to manage this process with various teams. Also, the account management team does a great job of helping our team stay on track with our timelines, answering product questions and getting answers to governance questions that we may have. Allie Farrell has done a fantastic job supporting our team. Finally, having the same organization have an independent audit team and process is also very beneficial to coordinating the entire governance process. Their audit process is as rigorous as that of the elite audit firms I have used with other companies in the past. **What do you dislike about Thoropass?** With a rapidly advancing software platform, trying to keep our team members up to speed with the software changes can be challenging at times. The Thoropass account management team and product webinars have made this process more manageable. Also, the new multi-framework functionality is making the usability of the platform much easier. **What problems is Thoropass solving and how is that benefiting you?** As a SaaS company providing employee engagement-type solutions to Fortune 2000 companies, we know that governance and security controls are paramount to our company's success and trust. Over the past two years, we have utilized the Thoropass solution to create our entire compliance management program from scratch, including becoming SOC 2 Type 2 accredited. We are now moving forward with the GDPR and ISO 27001/2 utilizing the new Thoropass multiframework features. The ability to easily switch back and forth between frameworks makes the process much easier and faster. Without a solution (software, support, and audit) like Thoropass, we could not have achieved our SOC 2 Type 2 goals in the timeframe mandated by our customers. In addition, we could not achieve GDPR or ISO 27001/2 compliance in the same calendar year if we did not have Thoropass as a solution provider. ### 14. Great product. Makes a painful process (SOC2), easy! **Rating:** 5.0/5.0 stars **Reviewed by:** Steven C. | Founder, CEO, Information Technology and Services, Small-Business (50 or fewer emp.) **Reviewed Date:** December 08, 2022 **What do you like best about Thoropass?** Intuitive and easy-to-follow product with ready-built templates. Also, exceptional customer support. All at a very reasonable price. **What do you dislike about Thoropass?** I haven't found anything to dislike so far. **What problems is Thoropass solving and how is that benefiting you?** Makes the SOC2 and GDPR processes easy. ### 15. Keeps getting better - best path to your SOC 2 type 1 and 2 **Rating:** 5.0/5.0 stars **Reviewed by:** Aaron F. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** June 08, 2022 **What do you like best about Thoropass?** Platform playbooks guide you through the process efficiently and provide lots of guidance. Templates for policies cover all the required bases and can be customized as needed. But the real wins are with the team you get supporting your work - my success manager and compliance architect provided amazing support, input, project management, and guidance throughout the process. Add in the bundling of the review/report fees bundled into your costs, and it gave us a fast, efficient path to completing our SOC 2 type 1 and type 2. June 2024 Update - completing our second SOC 2 type 2 observation period - the platform has continued to evolve and now integrates the audit, pen-test, risk register, vendor management, and other features together with automatic evidence gathering, along with fantastic integration with the tools we use like github, aws, slack, etc. As usual, the team involved has provided conceierge like service and support, super responsive and knowledgeable. **What do you dislike about Thoropass?** Most recent (2024) updates to the platform have ironed out integration and interface concerns from the earliest days. No real complaints! **What problems is Thoropass solving and how is that benefiting you?** We starting our SOC 2 with Thoropass almost 3 years ago now, first with our type 1 and then type 2. Managing our compliance evidence gathering, policy setup and review, pen-tests, vendor risk management, and security audit requests. ### 16. Laika is a surefire bet for your SOC2 compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Gina S. | Software Engineer, Small-Business (50 or fewer emp.) **Reviewed Date:** December 06, 2022 **What do you like best about Thoropass?** The platform includes everything you need to meet compliance. Together with Thoropass team's guidance it makes it possible to navigate the requirements needed both to meet compliance and to continue renovating it. Initially you start at your own pace, but their suggestions and inputs will push you to ensure you get there faster. Once our team completed our SOC Type 1 and Type 2 compliance, audits on our second year were pretty straightforward. We've since completed HIPAA and are going on to second re-evaluation soon. **What do you dislike about Thoropass?** There weren't many dislikes about Thoropass's platform; everything is organized and easily accessible. At first, due to all the items and policies that need to be filled out, you get an overwhelming feeling, but once you get organized, you'll get the run of things in no time. Thoropass remains in contact to handle any doubts or impacts when they do updates to their system. **What problems is Thoropass solving and how is that benefiting you?** To achieve SOC Type 1, SOC Type 2 and HIPAA compliance since 2022. With Thoropass's guidance and platform, we've improved the way we handle and store information to ensure we maintain the trust our clients have by using our system. ### 17. I was a customer for a few other solutions in this space, Thoropass is BY FAR the best! **Rating:** 5.0/5.0 stars **Reviewed by:** Mor C. | CTO, Small-Business (50 or fewer emp.) **Reviewed Date:** June 03, 2024 **What do you like best about Thoropass?** It hard to summarize everything I like about Thoropass, but it comes down to 3 main things: Unified Capabilities, integrated services, quality of service and theThoropass team. Unified Capabilities: Different compliance and security certifications and protocols have a lot of overlap and many organizations need more than one. With Thoropass, as opposed to our previous solution (from a leading company in this space), the controls are connected and there is way less overlap needed. Integrated Services: Most importantly the integrated audit, but also the pen test and other requirements related to compliance and security. Audits are not all about technical automated controls on your tech stack, it's about business operations and maturity in every aspect of the business. With Thoropass, having the auditor collaborate with you inside the platform simplifies things ten folds and saves hours and hours of work aligning the platform to the needs of the auditor. The Thoropass team: I have worked with so many vendors throughout my career, and Thoropass is one of the best vendors I had the pleasure to work with. They care about their customers, understand them and their needs and go above and beyond. Maybe most importantly, they are all a pleasure to work with, and they make the process of compliance and security much more pleasant. On top of these three main strengths, it's also really easy to use, implementing Thoropass was fast and required no hand holding. **What do you dislike about Thoropass?** Given that I used other solutions in the space in the past I have a good view of the strength of others. The only minor disdvantage of Thoropass is that the automate controls are a bit less intuitive in how they connect to the evidence requests. **What problems is Thoropass solving and how is that benefiting you?** We use Thoropass for SOC2 (types I and II), GDPR and HIPPA ### 18. A great way to simplify your SOC2 certification process **Rating:** 5.0/5.0 stars **Reviewed by:** Ken D. | Infrastructure Manager, Financial Services, Mid-Market (51-1000 emp.) **Reviewed Date:** May 31, 2024 **What do you like best about Thoropass?** As someone who has moved from just being a part of a SOC2 audit to someone responsible for it I really appreciate how easy Thoropass makes the process. Our Customer Success Manager walked us through every step of the process and was always just an email or phone call away if we had any questions. The built-in policy templates, questionnaires and integrations with cloud providers helped get us up and running quickly. The auditors have also been very responsive with the evidence requests, so we're not left wondering if things are progressing. The UI gives a great overview of where you are in the process. You can easily track how much is done, how many steps are remaining and who is responsible for those tasks. It even has reminders to notify us of deadlines when certain requirements need to be done for Type 2. It's integrations with cloud providers also saves us time on some evidence collection as some items can be gathered automatically in a format that's audit approved. **What do you dislike about Thoropass?** There's not much to dislike, however, there have been instances of the integrated cloud connectors flagging issues on services we're not using. It's not a big deal to turn them off or label them as exclusions but it would be better if we didn't need to do that. There's also been instances where I've had to reconfigure the connectors if they stopped working, but that also only takes a couple minutes. **What problems is Thoropass solving and how is that benefiting you?** Many of our customers are in the finanical industry and require SOC2 or equivilent certifications to do business with them. Thoropass is greatly simplifying the process of getting and keeping our SOC2 certifcations. ### 19. Complex solution with a high quality **Rating:** 5.0/5.0 stars **Reviewed by:** Arthur T. | Product Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** December 03, 2024 **What do you like best about Thoropass?** I love that they definitely know what they are doing. Their web UI for audit preparation has answers for almost every question that we wanted to ask. And it surely helped us move as fast as possible through the whole list of tasks. I also want to mention their PenTest partners. They did an amazing job testing our product. I think Thoropass will be the best partner for any company without extensive knowledge of compliance requirements and audit procedures. Definitely recommend. **What do you dislike about Thoropass?** To be honest, their service is quite expensive **What problems is Thoropass solving and how is that benefiting you?** Prepare for (and conduct!) HIPAA/SOC-2 audits ### 20. A great product and a great team **Rating:** 5.0/5.0 stars **Reviewed by:** Emery A. | CEO, Small-Business (50 or fewer emp.) **Reviewed Date:** May 30, 2024 **What do you like best about Thoropass?** The platform itself is intuitive and user-friendly, making the complex process of maintaining SOC 2 and ISO 27001 compliance much more manageable. The comprehensive dashboards provide clear insights and real-time updates, ensuring that we stay on top of our compliance requirements without any hassle. The automation features are a game-changer, significantly reducing the manual effort involved and allowing our team to focus on more strategic tasks. **What do you dislike about Thoropass?** Don't have anything bad to say. It's a great product/team executing compliance practices curated to the needs of our company. **What problems is Thoropass solving and how is that benefiting you?** With Thoropass, we feel assured that our compliance with SOC 2 standards is consistently maintained. This confidence is vital for gaining and retaining the trust of our customers and stakeholders. The knowledgeable and supportive Thoropass team is always available to assist us. Their expertise and commitment to our success ensure that we are well-prepared to handle any compliance challenges that may arise. ### 21. Best Customer Service and Onboarding **Rating:** 4.5/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** January 06, 2025 **What do you like best about Thoropass?** The onboarding and implementation team are great. One thing that sets Thoropass apart from its competitors are all hand-holding meetings and support meetings we had at the beginnging. The platform was great to work with to check the status of your controls and audit status. **What do you dislike about Thoropass?** The sales person could have been more transparent on the timeline of getting SOC 2 Type 2 certification. **What problems is Thoropass solving and how is that benefiting you?** It is solving our compliance and security compliance requirements for gaining enterprise customers. ### 22. Senior Director of Software Product Development **Rating:** 5.0/5.0 stars **Reviewed by:** John P. | Senior Director of Software Engineering, Information Technology and Services, Mid-Market (51-1000 emp.) **Reviewed Date:** May 23, 2024 **What do you like best about Thoropass?** What I like most about Thoropass is that its products and services complement each other very well. Compliance can seem intricate and overwhelmingly complex for anyone new to the field, making it nearly impossible to navigate alone. Thoropass offers comprehensive playbooks that guide you through all the requirements, ensuring no detail is overlooked. Moreover, their experts provide invaluable suggestions for practical implementations tailored to your organisation's unique needs. This combination of detailed guidance and expert advice makes Thoropass an indispensable ally in achieving and maintaining compliance. **What do you dislike about Thoropass?** Not a big fan of the online editor for docs; I would be happier with just a viewer and a simple upload replacement style workflow. I also worry about having two places for information in my org now (policies in Thoropass and our HR system, training in our internal LMS and Thoropass) **What problems is Thoropass solving and how is that benefiting you?** Thoropass brings a system, practices and experts to the Coats Digital SaaS compliance requirements. ### 23. Thoropass is a useful tool for handling your external compliance needs! **Rating:** 4.0/5.0 stars **Reviewed by:** Oge D. | Senior TPRM Analyst, Mid-Market (51-1000 emp.) **Reviewed Date:** May 22, 2024 **What do you like best about Thoropass?** I was not involved in the selection process or the decision to use Thoropass for our compliance needs, but I will say that I think it was a great selection! Thoropass helped us to complete our SOC 2 evidence submission and audit process. The platform also allowed us to have a centrally-located repository to maintain our compliance documentation/evidence and delegate tasks to the appropriate team members - where we could upload our evidence simultaneously. **What do you dislike about Thoropass?** The only thing I did not like was that there did not appear to be any form of visibility regarding the status of the audit - so I was never sure of where we were and if we were almost done. **What problems is Thoropass solving and how is that benefiting you?** We used Thoropass to assist us with a SOC 2 audit and I think it was a very useful tool. Going through any audit can be a bit overwhelming and initimidating at times, but we had the platform and guidance from Thoropass to help us along the way. The platform is pretty straightforward and simple enough to use, and I really enjoyed the ability to collaborate or work individually on tasks for the audit. In addition, the support and guidance that we received from the team members was top tier! ### 24. Easy to use streamlined tool that is great for modern companies using AI **Rating:** 4.5/5.0 stars **Reviewed by:** Abel M. | Cloud Architect Lead, Small-Business (50 or fewer emp.) **Reviewed Date:** May 21, 2024 **What do you like best about Thoropass?** What we liked most about Thoropass was its user-friendly design and the significant time savings it provided through automation and centralized documentation. The comprehensive frameworks for both SOC 2 and HIPAA were thorough and well-structured. However, there was initially a bit of a learning curve to fully utilize all features, and some customization options were limited, requiring us to adapt certain processes to fit the platform. **What do you dislike about Thoropass?** The comprehensive frameworks for both SOC 2 and HIPAA were thorough and well-structured. However, there were a few drawbacks. Initially, there was a learning curve to fully utilize all the features. It took some time for our team to get accustomed to the platform and leverage its full potential. Additionally, some customization options were limited, which required us to adapt certain processes to fit the platform rather than tailoring the platform to our specific needs. This sometimes meant additional manual work to bridge the gaps where Thoropass's functionalities fell short of our requirements. **What problems is Thoropass solving and how is that benefiting you?** At OpComm, ensuring the highest standards of data security and compliance is a top priority. When we needed to achieve SOC 2 and HIPAA compliance, Thoropass proved to be an excellent choice. For SOC 2 compliance, Thoropass made the process smooth and manageable. The automated controls and continuous monitoring saved us a lot of time and effort, while centralized documentation simplified both internal reviews and audits. The risk assessment tools provided clear insights and actionable steps to mitigate threats, and the clear checklists and guidance ensured we were always ready for an audit. HIPAA compliance was equally straightforward with Thoropass. The tailored HIPAA framework covered all necessary safeguards, and the easy creation and updating of policies kept us aligned with regulations. Helpful resources and training modules improved our team’s understanding of HIPAA requirements, and efficient incident tracking and management ensured timely reporting and resolution. ### 25. Great Help for SOC2 Audits **Rating:** 4.5/5.0 stars **Reviewed by:** Manpreet S. | Software Engineering Manager, Mid-Market (51-1000 emp.) **Reviewed Date:** December 06, 2024 **What do you like best about Thoropass?** Great Partners to help with SOC2 Audit. They guide us & help us to prepare required processes. Guided us to prepare the documentation & collect proofs of same. **What do you dislike about Thoropass?** Nothing as such required to improve further **What problems is Thoropass solving and how is that benefiting you?** We want to imporve Security & processes for our different products. It helped to achieve the same. ### 26. Thoropass the #1 tool for compliance management. **Rating:** 4.0/5.0 stars **Reviewed by:** Shawn P. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 20, 2024 **What do you like best about Thoropass?** Thoropasse's built in controls, and roadmaps make obtaining and maintaining compliance quite simple. By breaking things down and by providing prebuilt templates as a starting point it's easy to shift or integrate your current policies into Thoropass. The support team is amazing, they are able to quickly provide feedback, and guidance on any number of issues, or questions. **What do you dislike about Thoropass?** The UI was quite buggy, this may have been a problem as an early adopter, but the Thoropass team have been able to quickly fix the issues, and the UI issues have been pretty stable for a while now. The tool has a lot of nice features, but I do feel some of them are rudimentary at best. Even thought they often add increased functionality it often comes at a later date. I do wish that features were more fully developed when initially launched. **What problems is Thoropass solving and how is that benefiting you?** As a small business/startup providing services to a heavily regulated industry, dedicating resources to developing and maintaining compliance is quite time consuming. Thoropass allows us to save time by providing a central solution that is easy to use, while reducing the time needed to obtain and maintain compliance. ### 27. Thoropass crosses all the T's and dots all of the I's **Rating:** 5.0/5.0 stars **Reviewed by:** Bill C. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 17, 2024 **What do you like best about Thoropass?** We were not very knowledgeable about cybersecurity, and as a startup, we could not afford to hire an expensive employee just to guide us through the SOC-2 Type 1 journey. Thoropass is incredibly comprehensive. It clearly outlines what needs to be done, provides live feedback along with comments in the app, and reduces the time needed to become compliant. We have improved our operation because of Thoropass. We intend to continue using their services, as their app stores all the information needed for audits, reminds us of due dates and timeframes to be met, and keeps track of everything in their vault. They are a valuable partner to our business. The customer support team was very knowledgeable -- and what they didn't know - they knew who to go to in the organization to make sure we were compliant. **What do you dislike about Thoropass?** I can't think of any downsides. No one particularly likes the SOC-2 process development as it takes away from doing our startup work. So it is a necessary evil -- and Thoropass increased our velocity vs. slowing us down. **What problems is Thoropass solving and how is that benefiting you?** We are required to be SOC-2 compliant for our SaaS product. We could not have achieved this in the timeframe or without expensive personnel or consultants. There is no doubt that SOC-2 certification requires a significant investment of time, money, infrastructure and internal management process development. Thoropass made a tough job easy by breaking it into parts and addressing each issue with us. ### 28. Great compliance platform with all major frameworks included. **Rating:** 5.0/5.0 stars **Reviewed by:** Fernando Y. | Mid-Market (51-1000 emp.) **Reviewed Date:** May 17, 2024 **What do you like best about Thoropass?** All company policies and procedures are centralized in a unique single, great customer support, very easy to integrate with other vendors such as AWS and Google Workspace. A lot of tools that support our company to help our customers and also the employees, such as the data room and the training controls. There is also a set of compliance frameworks available, which can lead our company to an incremental improvement of our compliance portfolio. For example, right now we only have HIPAA, but soon we'll start implementing SOC Type 2 using as a base what we already have in place. **What do you dislike about Thoropass?** Once Thoropass is fast growing company, a lot of major changes in the platform are performed and some time leads us to be lost over the new interface and location of most used items. Even if all changes are presented in a step-by-step guide, sometimes can be a little "boring" experience. **What problems is Thoropass solving and how is that benefiting you?** Thoropass has helped us improve our policies and procedures for HIPAA compliance over the past 2 years. They are also providing guidance on archiving other compliance certifications for the near future, such as SoC Type2. ### 29. User Friendly and Excellent Communication **Rating:** 4.5/5.0 stars **Reviewed by:** Alyssa V. | Mid-Market (51-1000 emp.) **Reviewed Date:** May 15, 2024 **What do you like best about Thoropass?** Thoropass has helped our small business to understand how to become SOC2 compliant with ease. We are currently working through the process and have had consistent communication with Alex Scudellari. He has been able to answer all of our questions and has been helpful in understanding each of the processes we have to go through. **What do you dislike about Thoropass?** The only thing I have disliked about Thoropass is the amount of work needed to become compliant. It is a long process that will take time. This is something that happens with most companies, but Thoropass has seemed to be helpful in moving us along as quickly as possible. **What problems is Thoropass solving and how is that benefiting you?** Thoropass is helping our company become SOC2 complaint. We are a small company that deals with Medicaid billing. We want to ensure our clients that we are up to date and using the best security possiible when it comes to compliance. Once we are done, we can condifidently tell our clients/users that our system is as safe as possible. ### 30. A streamlined experience in one platform **Rating:** 4.5/5.0 stars **Reviewed by:** Steve G. | Head of Engineering, Small-Business (50 or fewer emp.) **Reviewed Date:** June 20, 2024 **What do you like best about Thoropass?** I love how the platform brings everything about ISO27001 compliance together in a single place and makes it significantly less daunting to go through. Having access to a dedicated account manager is also incredibly useful, as they act as the single point of reference throughout the process and also getting answers from the knowledgeable team on more technical questions. Shoutout to Alex - thanks for all your help so far! **What do you dislike about Thoropass?** The platform is US centric, which probably reflects the user base. There were some parts of the process that we needed to re-work or re-apply to UK legislation. **What problems is Thoropass solving and how is that benefiting you?** Thoropass is central to us working towards ISO27001, and helping us organise policies and practices in the interim. It's also very helpful when the undertake security audits as part of our customer's procurement processes. ### 31. A Breath of Fresh Air in Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Lukas L. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 14, 2024 **What do you like best about Thoropass?** I honestly love working with Thoropass. Dealing with certifications has always been a major headache in my book - endless policy writing and control setups that drag on for months. Thoropass has significantly streamlined the compliance process for us. Their approach integrates with our operations, providing templates and questionnaires that are straightforward and easy to use. One of the standout features to me is the automated integration with our cloud accounts and SaaS services, which has eliminated much of the manual work required in the past. Their "Employee Training" module contains security awareness training as well as secure coding training. Both are essentially online PDFs of around 20 and 80 or so pages, respectively. Both have been really high quality. Lots of good, in-depth info without being too high-level but also not too verbose. I'd also like to point out that everyone at Thoropass I had contact with was a pleasure to work with. Very knowledgeable and super responsive. I used to do certifications in a large org of 110k people, and now I'm in a startup of 6. Our customers were asking for SOC2 and ISO27001 because we're handling some sensitive data. I didn't think that certification at our size could be so streamlined. If you're in a startup and need to obtain a certification, or if you're in the EU and need to comply with NIS2 beginning in October 2024, I can highly recommend doing it with Thoropass. **What do you dislike about Thoropass?** There aren't many things I don't like about the app, but if I have to choose one it'd be the "Word" editor you're using to edit policy documents. Sometimes it doesn't load or it makes my browser hang. It's like a bad version of Google Docs and behaves like a sluggish Java applet in the early 2000s. That said you don't spend too much time in it and at the end of the day it gets the job done. **What problems is Thoropass solving and how is that benefiting you?** Thoropass streamlines the entire SOC2/ISO27001 certification process for us. ### 32. Excellent audit experience and support! **Rating:** 5.0/5.0 stars **Reviewed by:** Andrew L. | Chief Technology Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 14, 2024 **What do you like best about Thoropass?** Thoropass has been great to work with from their initial outreach through our most recent SOC 2 Type I and II audits. The journey to compliance can be feel imtimidating, but the Thoropass platform did a great job of managing steps and milestones. Even more helpful have been the individuals that helped us through the audits. The technical team was helpful and transparent, and our Customer Success Manager, Darren Zarandi, has done a terrific job supporting our team and guiding us along the way. The built-in integrations have also been a great help to streamline some of the work and evidence gathering. **What do you dislike about Thoropass?** There have been a few small buggy issues in the platform's UI. Entering notes for evidence was touchy as well as updating documents. As we get through more audits, having an easy reference to our past evidence notes, etc. would be greatly beneficial and this has not been possible. The upside is that our Customer Success Manager has been great at communicating these issues and they have either been addressed or are considered for future product updates. **What problems is Thoropass solving and how is that benefiting you?** Thoropass has helped us guide us through SOC Type 2 compliance, policy management, and security training. Without the Thoropass platform, these items would be difficult to achieve on our own. ### 33. Compliance made easy **Rating:** 5.0/5.0 stars **Reviewed by:** Noel H. | Cybersecurity Architect, Small-Business (50 or fewer emp.) **Reviewed Date:** May 14, 2024 **What do you like best about Thoropass?** I come from a DoD background and am used to a compliance management tool (eMASS) like what Thoropass has set-up. However, unlike eMASS, the Thoropass app has a much easier to navigate interface and contains links to templates and examples to show you what the auditors will be looking for in their review. If you get stuck on a particular control, the app makes it easy to leave a comment on the control itself, tag your Thoropass rep, and get a response back quickly. I love that I am teamed-up with a rep from the company that helps make sure we're not getting stuck on any part of the documentation process. Allie has made it so that I have never felt lost even when there have been language in controls that haven't made a lot on sense in our context. I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use. Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most. **What do you dislike about Thoropass?** If I have to find something to dislike about Thoropass, I would say that when you have applications that can't be tied-in to the monitors/integrations that they have set-up, it can be time consuming to collect screenshots and confusing to know what to take screenshots of for the auditors. That said, that's not so much a dislike about Thoropass specifically and more a dislike of these audits in general. **What problems is Thoropass solving and how is that benefiting you?** We needed to obtain a SOC2 Type 1 certification so we can sell our cloud training product to University customers. ### 34. Seamless Compliance Journey with Thoropass **Rating:** 5.0/5.0 stars **Reviewed by:** Emily I. | Business Engagement and Marketing Manager, Outsourcing/Offshoring, Mid-Market (51-1000 emp.) **Reviewed Date:** May 13, 2024 **What do you like best about Thoropass?** Last year, we had the opportunity to partner with Thoropass to ensure our company met HIPAA compliance standards. Their methodical breakdown of frameworks simplified task assignments across team members and provided clear visibility into the status of each control and policy, streamlining our navigation and execution. Weekly meetings with Grayson were particularly beneficial; his attentiveness and proactive communication about upcoming steps greatly enhanced our experience. Initially, the process appeared daunting for someone unfamiliar with the field, yet Thoropass masterfully simplified the complexities into manageable segments. At no point did they make us feel inexperienced or inadequate for lacking certain procedures. **What do you dislike about Thoropass?** I do recall one cumbersome aspect: the multiple steps required to confirm that all team members had completed their trainings and policy acknowledgements. When I raised this issue with Thoropass, they promptly acknowledged it and assured me that it would be addressed in their next update. **What problems is Thoropass solving and how is that benefiting you?** As a BPO specializing in customer service and backoffice operations for healthcare companies, our partnership with Thoropass has been instrumental. It has enabled us to implement the necessary safeguards for handling private information with the utmost care, thereby assuring our clients of our steadfast HIPAA compliance. ### 35. Solid platform for collecting evidence for SOC-2 Auditing **Rating:** 4.5/5.0 stars **Reviewed by:** Gavin W. | Site Reliability Engineer, Mid-Market (51-1000 emp.) **Reviewed Date:** August 08, 2023 **What do you like best about Thoropass?** The notification system, and corresponding emails, made it very easy to quickly react and update comments and/or evidence files when undergoing the preparatory work for our SOC-2 audits. This drastically cut down on the amount of required phone-calls and back-and-forth. Additionally, AWS direct monitoring allowed for massive time savings as evidence was 'automatically' collected -- with no human work required! **What do you dislike about Thoropass?** It can be hard to find evidence you have previously submitted to the platform, once an aduit period has concluded. There are scenarios where it took longer to find the item in the nested UI than to just re-gather the materials. **What problems is Thoropass solving and how is that benefiting you?** Our primary use-case is in Audit-management, and as a hub for all our vendor security questionaire responses. Having this information in a centralized location, helps improve response time to security assessments and maintaining certain compliance standards helps in making the company more attractive as a vendor. ### 36. Very supportive team **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Computer Software | Small-Business (50 or fewer emp.) **Reviewed Date:** February 25, 2025 **What do you like best about Thoropass?** Thoropass makes compliance easy. It keeps everything organized, so I don’t have to stress about missing anything. The reminders and automation save me time and the support team is super helpful. **What do you dislike about Thoropass?** Sometimes, it takes a bit to get used to the system. Some features could be a little more user-friendly and the setup process felt a bit long. **What problems is Thoropass solving and how is that benefiting you?** We are going through SOC2 Certification and Thoropass is really super helpful and does a lot of hand-holding for our team ### 37. Thoropass Review **Rating:** 2.5/5.0 stars **Reviewed by:** Verified User in Health, Wellness and Fitness | Small-Business (50 or fewer emp.) **Reviewed Date:** May 13, 2025 **What do you like best about Thoropass?** Their process was easy and their customer support was knowledgeable. **What do you dislike about Thoropass?** The review they did was relatively superficial, and not thorough in the details **What problems is Thoropass solving and how is that benefiting you?** They are housing our policies and procedures for SOC and ISO, as well as pen testing our products. ### 38. Great help and easy to get our certifications and be in compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Joel G. | Director of Operations, Small-Business (50 or fewer emp.) **Reviewed Date:** February 18, 2022 **What do you like best about Thoropass?** The whole team is actively involved in the process of getting us prepared and audit the company in order to get our certifications renewed. The tool they have to follow the implementation of a certification as well as for the audit process is very helpful and easy to use as it has all the information needed to understand where we are in the process and what could be missing. It also integrates with some of our systems and monitor compliance. **What do you dislike about Thoropass?** The audit process plan was not updated causing some delays and for us to go through some pain. This situation was talked with the Thoropass team and now was solved for the next audit process. **What problems is Thoropass solving and how is that benefiting you?** Thoropass has a reliable and straightforward compliance process that helps the company get the needed certifications passed without any complications. ### 39. Step by step SOC Compliance **Rating:** 5.0/5.0 stars **Reviewed by:** Fowzy S. | Small-Business (50 or fewer emp.) **Reviewed Date:** May 20, 2024 **What do you like best about Thoropass?** I was plaeased with the level of integrations Thoropass embedded in their system for direct data collection from the sources in the cloud. The use of cloud connectors to collect evidence and real time data has made our job much easier. I was also pleased with the personal support we received, and detailed step by step guidance we got from the CSM or online. **What do you dislike about Thoropass?** The approach requires a company to have certain level of maturity in their technology roadmap. Startups who have gaps between active projects and/or different green fields may have problems getting contiguous streams of acceptable data to complete some of the requirements. **What problems is Thoropass solving and how is that benefiting you?** Working with Thoropass gives us confidence responding to RFPs requiring certifications of compliane an security. This is a fundamental advantage and one that is commonly a hurdle for new entrants in established industrial fields. ### 40. Comprehensive and friendly compliance platform - Saved us hundreds of hours! **Rating:** 4.5/5.0 stars **Reviewed by:** Eric W. | Head of Engineering, Mid-Market (51-1000 emp.) **Reviewed Date:** June 29, 2024 **What do you like best about Thoropass?** In working towards HIPAA compliance, Thoropass made all the requirements and steps required to meet them far more manageable than approaching this on our own. It was easy to implement and the support provided both from Thoropass and the consultancy they referred us to was phenomenal. Integration with our existing platforms was also very simple. **What do you dislike about Thoropass?** There are definitely some aspects that could benefit from little more automation/guidance instead of just screenshots, like configuring AWS IAM or monitoring. **What problems is Thoropass solving and how is that benefiting you?** As a telehealth company, HIPAA compliance is a very important milestone for working alongside larger companies in the space. Becoming HIPAA compliant and staying aware of any potential issues over time would be far more difficult without Thoropass, given our limited resources. ### 41. Thoropass: Remarkable platform, customer service, and outcomes **Rating:** 5.0/5.0 stars **Reviewed by:** Maegan S. | Business Support Analyst, Small-Business (50 or fewer emp.) **Reviewed Date:** May 17, 2024 **What do you like best about Thoropass?** The Thoropass platform is amazing. The entire project plan is created based on your company's desired certification and the corresponding controls. It is easy to set deadlines, assign tasks to team members, track progress, and even monitor security for our software via integrations. Most importantly, the platform ensures our company will be prepared for the audit for certification. The Thoropass team also provides exceptional service. They excel in communication, customer service, experience, and reliability. **What do you dislike about Thoropass?** There aren't really any significant negatives. I have come across a couple of minor bugs in the platform, but their team's speedy response time made up for the issues. **What problems is Thoropass solving and how is that benefiting you?** Thoropass provided our team the project plan and scope of work to obtain certification. This was extraordinarily helpful, since our company had no idea where to start. Working with Thoropass made the certification process simple and attainable. ### 42. Thoropass Training **Rating:** 5.0/5.0 stars **Reviewed by:** Verified User in Legal Services | Mid-Market (51-1000 emp.) **Reviewed Date:** May 21, 2025 **What do you like best about Thoropass?** The steps and content were extremely easy to navigate and read/comprehend. **What do you dislike about Thoropass?** I don't have any issues with Thoropass - very clear instructions. **What problems is Thoropass solving and how is that benefiting you?** Ensuring that we keep our products safe and free from phishers. ### 43. So much less manual work to document processes and evidence **Rating:** 5.0/5.0 stars **Reviewed by:** Tom P. | CTO, Mid-Market (51-1000 emp.) **Reviewed Date:** May 10, 2024 **What do you like best about Thoropass?** I have done HIPAA and Hitrust audits in the past and it required a lot of work to cross reference controls and policies and procedures. Thoropass eliminated the "administrivia" of manually linking documents in Google Docs or MS Word to streamline the process so we can get ti the hear of the issue, compliance. **What do you dislike about Thoropass?** The only thing, I did not like was the short timeout and the two pass login, once for user and another for password. Seemed like I was clicking on my password manager way too frequently! **What problems is Thoropass solving and how is that benefiting you?** We needed to implement SOC 2 Type 1 and Type 2. The Thorpass portal with connections to our cloud infrastructure automated compliance checks. ### 44. Easy to use platform, helpful team members **Rating:** 5.0/5.0 stars **Reviewed by:** Dani J. | Chief of Staff, Small-Business (50 or fewer emp.) **Reviewed Date:** November 26, 2024 **What do you like best about Thoropass?** Provision of standard policies and guidance to achieving initial compliance, platform is easy to use and navigate, stellar customer support **What do you dislike about Thoropass?** Some features can be clunky, such as not being able to edit notes **What problems is Thoropass solving and how is that benefiting you?** Annual SOC2 audit, ongoing compliance and annual penetration tesing ### 45. itopia's experience with Thoropass has been excellent during SOC-2 prep and the actual SOC-2 audit! **Rating:** 4.5/5.0 stars **Reviewed by:** Patrick T. | Mid-Market (51-1000 emp.) **Reviewed Date:** May 10, 2024 **What do you like best about Thoropass?** The entire staff is knowledgeable about their respective areas, flexible with scheduling calls and extremely responsive with questions and concerns. A special shout-out to our CSM at Thoropass - Alex Scudellari. Alex is always available when we need him and stays on top of all processes to ensure speed and efficiency. **What do you dislike about Thoropass?** We have not identified any areas of concern at this point with Thoropass. We are entering Year 3 with their team. We look forward to working with them going forward and establishing a long-term partnership. **What problems is Thoropass solving and how is that benefiting you?** Our SOC-2 report is extremely important to ensure as a Technology/SaaS company that we have all the critical controls and oversight in place. Our customers rely on our technology to deliver mission-critical applications to their employee base, it is absolutely imperative our underlying architecture and security protocols are at the highest standard. ### 46. Helped us much in our first compliance journey! **Rating:** 5.0/5.0 stars **Reviewed by:** Marina B. | CPO, Small-Business (50 or fewer emp.) **Reviewed Date:** May 28, 2024 **What do you like best about Thoropass?** We first met in the end of 2022 and implemented the service into our workstream when we first time passed SOC-2 audit. Our application works closely with Google services, Thoropass has a lot of integrations with them so it's very userful feature for us. The interface is quite easy to understand and to work with. We use the service quite often to maintain some of our daily routine (such as policies, documentation, trainings, etc.). BTW, they have pretty good customer support. **What do you dislike about Thoropass?** Personally for our team the new interface with the Roadmap presentation is less preffarable than the Playbooks were. We would like to have an option to choose between them. **What problems is Thoropass solving and how is that benefiting you?** Without Thoropass, for our team was really challenging to go through all the processes related to SOC-2 audit. ### 47. Speedy response and great communication **Rating:** 5.0/5.0 stars **Reviewed by:** James T. | IT Guy, Small-Business (50 or fewer emp.) **Reviewed Date:** December 18, 2024 **What do you like best about Thoropass?** Good communication with the team, speedy response and completion of deliverables **What do you dislike about Thoropass?** Price as a small business is always a factor **What problems is Thoropass solving and how is that benefiting you?** Pen Testing and Audit for SOC II ### 48. What SOC2 Audits should be like **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Small-Business (50 or fewer emp.) **Reviewed Date:** June 27, 2024 **What do you like best about Thoropass?** I enjoyed that Thoropass had integrations with the cloud provider I use, as then I can hook into their system, and they automate checks. With other providers, you need to send screenshots. This external integration made everything smooth, as I didn't need to manually get all that information. The customer service was also great. They provided a dedicated customer contact that scheduled weekly check-ins to ensure that if I had any questions then I could be promptly assisted. **What do you dislike about Thoropass?** I think that Thoropass should have additional integrations for lesser-used but still popular providers. They seem to be adding more and more, so this isn't as much of a concern, but if you decide to choose Thoropass, check out the list of integrations to see if one you need is missing. They also have alternative methods of providing data needed for the audit should an integration not be there, then you can still use their service. **What problems is Thoropass solving and how is that benefiting you?** Working with Thoropass to complete a SOC2 audit allowed us to increase our trust with new/potential customers who saw that we had a commitment to security. ### 49. Thoropass Made our Audit Easy **Rating:** 4.5/5.0 stars **Reviewed by:** Alex B. | COO, Small-Business (50 or fewer emp.) **Reviewed Date:** December 23, 2024 **What do you like best about Thoropass?** The platform itself is easy to follow and makes the audit process very digestible with examples and templates. We could not have achieved our SOC1 type I in 2months without Thoropass platform and their team helping us. **What do you dislike about Thoropass?** There were a few tiny bugs/nuances with how it works, but there's not much (if anything) bad to say. **What problems is Thoropass solving and how is that benefiting you?** Audit compliance automation ### 50. Thoropass Streamlined Our SOC 2 Compliance Certification Process **Rating:** 5.0/5.0 stars **Reviewed by:** Kyle V. | Co-Founder and Chief Revenue Officer, Small-Business (50 or fewer emp.) **Reviewed Date:** May 31, 2024 **What do you like best about Thoropass?** What truly set Thoropass apart was the exceptional support we received from their team of compliance experts. They guided us through each step, providing valuable insights, best practices, and hands-on assistance to ensure we met all the requirements. Their deep understanding of SOC 2 regulations and ability to translate technical jargon into practical, actionable steps were invaluable. **What do you dislike about Thoropass?** We experienced some general UI issues, but nothing prevented us from moving forward. It's worth pointing out that our concerns were always addressed eventually. **What problems is Thoropass solving and how is that benefiting you?** Achieving SOC 2 compliance can be arduous and time-consuming, especially for organizations without dedicated in-house compliance teams. Thoropass ensured we were developing the numerous controls, policies, and documentation requirements, which kept us ahead of any potential missed deadlines and unnecessary stress. ## Thoropass Discussions - [What is Laika used for?](https://www.g2.com/discussions/what-is-laika-used-for) - 1 comment - [View Thoropass pricing details and edition comparison](https://www.g2.com/products/thoropass/reviews?page=5§ion=pricing&secure%5Bexpires_at%5D=2026-08-04+05%3A34%3A22+-0500&secure%5Bsession_id%5D=edbb6e9e-20bf-45fd-88e5-a4a78399995e&secure%5Btoken%5D=ecdeaa3637e5914438c55328092b1665985d61d6b1bd9d91824186f2a6f0483e&format=llm_user) ## Thoropass Integrations - [Amazon Aurora](https://www.g2.com/products/amazon-aurora/reviews) - [Amazon CloudFront](https://www.g2.com/products/amazon-cloudfront/reviews) - [Amazon DynamoDB](https://www.g2.com/products/amazon-web-services-aws-amazon-dynamodb/reviews) - [Amazon EC2](https://www.g2.com/products/amazon-ec2/reviews) - [Amazon Elastic Container Service (Amazon ECS)](https://www.g2.com/products/amazon-elastic-container-service-amazon-ecs/reviews) - [Amazon Elastic Kubernetes Service (Amazon EKS)](https://www.g2.com/products/amazon-elastic-kubernetes-service-amazon-eks/reviews) - [Amazon QuickSight](https://www.g2.com/products/amazon-quicksight/reviews) - [Amazon Redshift](https://www.g2.com/products/amazon-redshift/reviews) - [Amazon Relational Database Service (RDS)](https://www.g2.com/products/amazon-relational-database-service-rds/reviews) - [Amazon Simple Email Service (Amazon SES)](https://www.g2.com/products/amazon-simple-email-service-amazon-ses/reviews) - [Amazon Simple Storage Service (S3)](https://www.g2.com/products/amazon-simple-storage-service-s3/reviews) - [Amazon Virtual Private Cloud (Amazon VPC)](https://www.g2.com/products/amazon-virtual-private-cloud-amazon-vpc/reviews) - [AWS Amplify](https://www.g2.com/products/aws-amplify/reviews) - [AWS Auto Scaling](https://www.g2.com/products/aws-auto-scaling/reviews) - [AWS Batch](https://www.g2.com/products/aws-batch/reviews) - [AWS Cloud9](https://www.g2.com/products/aws-cloud9/reviews) - [AWS Cloud Development Kit (AWS CDK)](https://www.g2.com/products/aws-cloud-development-kit-aws-cdk/reviews) - [AWS CloudFormation](https://www.g2.com/products/aws-aws-cloudformation/reviews) - [AWS Elastic Beanstalk](https://www.g2.com/products/aws-elastic-beanstalk/reviews) - [AWS Fargate](https://www.g2.com/products/aws-fargate/reviews) - [AWS Glue](https://www.g2.com/products/aws-glue/reviews) - [AWS Identity and Access Management (IAM)](https://www.g2.com/products/aws-identity-and-access-management-iam/reviews) - [AWS Lambda](https://www.g2.com/products/aws-lambda/reviews) - [Azure DevOps Server](https://www.g2.com/products/azure-devops-server/reviews) - [Azure Pipelines](https://www.g2.com/products/azure-pipelines/reviews) - [Azure Portal](https://www.g2.com/products/azure-portal/reviews) - [Azure SQL Database](https://www.g2.com/products/azure-sql-database/reviews) - [BambooHR](https://www.g2.com/products/bamboohr/reviews) - [Checkr](https://www.g2.com/products/checkr/reviews) - [Confluence](https://www.g2.com/products/confluence/reviews) - [DuploCloud](https://www.g2.com/products/duplocloud/reviews) - [GitHub](https://www.g2.com/products/github/reviews) - [GitHub Inc.](https://www.g2.com/products/github-inc/reviews) - [GitLab](https://www.g2.com/products/gitlab/reviews) - [Google Cloud Console](https://www.g2.com/products/google-cloud-console/reviews) - [Google Cloud Foundation Toolkit](https://www.g2.com/products/google-cloud-foundation-toolkit/reviews) - [Google Cloud Identity & Access Management (IAM)](https://www.g2.com/products/google-cloud-identity-access-management-iam/reviews) - [Google Cloud Storage](https://www.g2.com/products/google-cloud-storage/reviews) - [Google Workspace](https://www.g2.com/products/google-workspace/reviews) - [Gusto](https://www.g2.com/products/gusto/reviews) - [Jamf](https://www.g2.com/products/jamf/reviews) - [Jira](https://www.g2.com/products/jira/reviews) - [Justworks](https://www.g2.com/products/justworks/reviews) - [KnowBe4 Security Awareness Training](https://www.g2.com/products/knowbe4-security-awareness-training/reviews) - [Microsoft 365](https://www.g2.com/products/microsoft365/reviews) - [Microsoft Entra ID](https://www.g2.com/products/microsoft-entra-id/reviews) - [Microsoft Intune Enterprise Application Management](https://www.g2.com/products/microsoft-intune-enterprise-application-management/reviews) - [Okta](https://www.g2.com/products/okta/reviews) - [Rippling](https://www.g2.com/products/rippling/reviews) - [Slack](https://www.g2.com/products/slack/reviews) - [Supabase](https://www.g2.com/products/supabase-supabase/reviews) - [TriNet](https://www.g2.com/products/trinet/reviews) - [Vercel](https://www.g2.com/products/vercel/reviews) ## Thoropass Features **Security** - Compliance Monitoring - Data Loss Prevention - Cloud Gap Analytics **Functionality** - Customized Vendor Pages - Centralized Vendor Catalog - Questionnaire Templates - User Access Control **Generative AI** - AI Text Generation **Generative AI** - AI Text Summarization - AI Text Generation **Cloud Visibility** - Data Discovery - Cloud Registry - Cloud Gap Analytics **Compliance** - Governance - Data Governance - Sensitive Data Compliance **Risk assessment** - Risk Scoring - 4th Party Assessments - AI Monitoring **Workflows - Audit Management** - Audit Trail - Recommendations - Collaboration Tools - Integrations - Planning & Scheduling **Generative AI - Security Compliance** - Predictive Risk - Automated Documentation **Monitoring - IT Risk Management** - AI Monitoring **Security** - Data Security - Data loss Prevention - Security Auditing **Administration** - Policy Enforcement - Auditing - Workflow Management **Documentation - Audit Management** - Templates & Forms - Checklists **Generative AI - Vendor Security and Privacy Assessment** - Text Summarization - Text Generation **Agentic AI - IT Risk Management** - Autonomous Task Execution - Multi-step Planning **Identity** - SSO - Governance - User Analytics **Reporting & Analytics - Audit Management** - Dashboard - Audit Performance - Industry Compliance ## Top Thoropass Alternatives - [Vanta](https://www.g2.com/products/vanta/reviews) - 4.6/5.0 (2,661 reviews) - [Drata](https://www.g2.com/products/drata/reviews) - 4.7/5.0 (1,325 reviews) - [Secureframe](https://www.g2.com/products/secureframe/reviews) - 4.7/5.0 (809 reviews)