I like that Thoropass features help manage all aspects of compliance for my company, including employee management, policies, training, and vendor management. I also appreciate the audit process transparency. The initial setup was very easy, and our CSM helped migrate all the needed assets from Tugboat Logic. Additionally, we can integrate Thoropass with a few of our tools for vendor management, and the price and platform features were reasons we switched from Tugboat Logic. Review collected by and hosted on G2.com.

During the audit process, the evidence collection template could be customized for a SaaS product like ours. It would be better if the evidence collection template could be tailored to suit different types of workspaces. Review collected by and hosted on G2.com.

I really appreciate Thoropass for their communicative approach, which makes it easy as a leader to know where in the process we are, solve doubts, or get extra information about the findings. They help coordinate the process better with all parties involved. I also like the 90-day unlimited retest after receiving the penetration testing report because it allows us to make code improvements on their findings and reassess whether the fix has the expected impact, which secures solution quality and ensures an effective hardening process. The initial setup was really easy too, thanks to the Thoropass team who provided technical requirements and how-to guides, along with frequent communication from the customer success team to ease any challenges. Review collected by and hosted on G2.com.

I don't have anything in specific on my projects with Thoropass that I dislike. Review collected by and hosted on G2.com.

Integration was very smooth and tasks all had very well defined instructions on how to resolve them. Review collected by and hosted on G2.com.

The initial dashboard UI was a bit complex for me to understand. Took a while to fully grasp how to use them Review collected by and hosted on G2.com.

I really liked the people I worked with, especially Ritu, who was amazing, and the auditors were all super understanding and helpful. They really helped us get to the right spot. The evidence request feature is something I use the most, and I spent a lot of my time working in it and commenting back and forth with the auditors. The setup of Thoropass was very easy. Review collected by and hosted on G2.com.

The interface could maybe be a little bit more directed towards the audit experience. It's a little bit hard to get into all the evidence requests. Just from opening the application, but once you know how to do it, it's not too bad. It's just several clicks to get to it. But an audit, I would assume that that would be front and center. Review collected by and hosted on G2.com.

I like that Thoropass started well with sales support, where we got the relevant team members on board, which was promising for relevant areas. The kickoff was relatively prompt, and the policies in general were of pretty good quality. Review collected by and hosted on G2.com.

The main issue I have is with Thoropass's platform and evidence collection, which are extremely basic and manual. We were promised automated evidence collection, but it simply wasn't delivered. For companies undergoing ISO 27001 and SOC 2 type 2 certifications, the platform requires submitting identical evidence twice, wasting valuable time. It doesn't feel fit for purpose and we might have been oversold during the sales pitch with claims of automation and AI that are overstated. Additionally, ChatGPT provides faster and better responses in some areas compared to Thoropass tools, especially on the AI side, and even the team has confirmed not to rely on Thoropass's AI suggestions. Review collected by and hosted on G2.com.

I really like Thoropass for the personal assistance and the real-time value it provides. The platform walkthroughs and having auditors at my fingertips to ask questions are fantastic. I also appreciate the roadmap and the platform itself for helping with compliance and certification. The 1:1 conversations to understand the controls better and the breakdown of technical controls are hugely beneficial. Setting it up was easy, and I'd definitely use it again for other clients. Review collected by and hosted on G2.com.

The report itself was generic - in which the selected tools my client uses were not within the sections - instead it was listed out in the first 2 sections. Review collected by and hosted on G2.com.

I appreciate Thoropass for its extremely well-thought-out and easy-to-follow process. They are always there through email and phone at every step of the way, offering communication that's both personal and professional. I also found their Roadmap very helpful as it allowed me to prepare all the necessary information before the audit, making the process very straightforward. The initial setup was extremely easy since they guided us through every step. Review collected by and hosted on G2.com.

Their automated metrics have a few problems. They sometimes disconnect from the service and when they do you have to go to each metric and refresh it. It would be nice if all the metrics would refresh when a connection comes back up. Review collected by and hosted on G2.com.

I like the way that Thoropass has an easy to use task based interface that you can easily see what you need to remedy in your cloud platforms to maintain your soc 2 compliance. It also has automated monitors that work with our azure environment to monitor the environment and if anything goes out of compliance it will immediately flag it and give you a task to remediate it. It was easy to implement and integrate with azure. So far the customer support has been great and I use it daily to make sure everything in azure is compliant. Review collected by and hosted on G2.com.

In a couple of interfaces there are sections that require you to click twice but doesn't indicate it. Once you know though its not much of an issue. Review collected by and hosted on G2.com.

I really appreciate Thoropass for its excellent account management and the outstanding human support we receive. Our account manager provides exceptional service, ensuring smooth interaction and assistance, which significantly enhances our overall experience with the platform. In addition to this, the pen test team is truly exceptional, offering expert insights and reliable performance in conducting penetration tests. These aspects of Thoropass greatly contribute to our ability to streamline and manage our compliance efforts effectively, making our work processes more coherent and unified. Review collected by and hosted on G2.com.

I find the actual platform for managing our compliance assets somewhat confusing, which complicates achieving my compliance objectives efficiently. Additionally, I encountered challenges during the initial setup, specifically issues integrating Thoropass with Gusto, which hindered a smooth onboarding process. Review collected by and hosted on G2.com.

The platform is user-friendly and offers a lot of useful automation features. It is a great all in one location for compliance data. Review collected by and hosted on G2.com.

Some questions took a while to get answered, which slowed the overall process. The system is very self-guided, and that can be challenging for users who are new to compliance activities and may need a bit more direction. Review collected by and hosted on G2.com.