Really everything. It's been a great experience beginning with the sales cycle. The team spent time to understand our drivers and timelines for achieving SOC 2 Type 2 and developed a plan to get us there. Having everything (compliance platform, pen test and auditors) from the same company was a big plus, and it has made the process much smoother. The project team was engaged and diligent and moving us through the process. We highly recommend working with Thoropass. Review collected by and hosted on G2.com.

Again, not much. The transition of data from the platform to the auditors was a bit clunky, but not overly burdensome. Review collected by and hosted on G2.com.

Keeps us prepared for SOC 2. Great customer support manager and auditors. Review collected by and hosted on G2.com.

Learning the platform was a little difficult for a new learner to the SOC 2 topic. However, this could be to just that. New environment for me. Review collected by and hosted on G2.com.

Managing evidence requests are much easier in the tool than in legacy ways of working with auditors during this process. They ability to chat/comment, have that saved on the evidence request and all the data in one place took away a lot of the churn/back and forth that adds stress and takes time when actually doing the audit.

The integrations are also very useful to automate a bunch of the monitors/controls/evidence data collection. Review collected by and hosted on G2.com.

I wish there was a on-demand process to trigger integrations to re-run.

Also, an integration with the "new" AWS Vulnerability Management tools (not just classic) and the Microsoft Defender for Endpoint and Vulnerability Management would have made the most time intensive part of the process easier. Review collected by and hosted on G2.com.

This is a big app that wraps around a large process. You need policies, training, monitoring of your infrastructure - and then you need to pass an audit that will include hundreds or thousands of pieces of evidence... And Thoropass can help with all of that!

I love the integrations (Thoropass can tell when my AWS infrastructure falls out of compliance), task reminders and when I'm using a new vendor who needs review) and the automations (I need reminders to stay on top of my compliance tasks).

Three quarters of the year I live in my Dashboard which keeps me up to date on what I need to be doing. And during audit season I live in the audit module which guides me through the audit evidence process.

I should also mention that the support I've gotten from Thoropass customer service reps has been outstanding and very responsive to questions about the product, reporting bugs, or helping me find best practices to improve. My background is not in compliance so the hand-holding with a personal touch has really made a positive difference in my comfort level doing the ongoing work needed to maintain our certification level. Review collected by and hosted on G2.com.

Lots of improvements and new features during my three years experience but the training module (assigning/tracking required course completions) still isn't great. Review collected by and hosted on G2.com.

Thoropass was instrumental in helping us gain our SOC2 certification. Review collected by and hosted on G2.com.

The annual renewal process is a bit of a burden to go through. Review collected by and hosted on G2.com.

The integrations with our cloud provider and HR systems make it easy to automatically import evidence. Overall, the system is user-friendly and straightforward to navigate. The Thoropass team is great to work with and our monthly meetings keep us on track. Review collected by and hosted on G2.com.

Setting up custom reviews can be confusing and not as flexible. Review collected by and hosted on G2.com.

One Stop Shop for Compliance reporting and Auditing Review collected by and hosted on G2.com.

Need more integrations with other platforms and tools. Review collected by and hosted on G2.com.

A great tool that helps manage compliance efforts. I have helped manage compliance activities at multiple companies through the years and we finally decided to use Thoropass as a tool to help with this process. Having everything centralized and managed for you via tool has been VERY helpful. In addition the support is good in that our contacts understand the nuances of audits and compliance frameworks. Review collected by and hosted on G2.com.

Small gripe but for some admin accounts you get all the warnings about needing to do training etc. It would be nice to have an account that manages the system that is not a employee account. Review collected by and hosted on G2.com.

I use Thoropass for penetration test and find it very useful. I appreciate receiving the report emails that show vulnerabilities categorized as Low, High, Medium, etc., which helps me find vulnerabilities easily. The initial setup was also very easy. Review collected by and hosted on G2.com.

Nothing Review collected by and hosted on G2.com.

Implementation process was easy and the team was great. They were always available to answer my questions and walk through the process step by step. Review collected by and hosted on G2.com.

Navigating the platform can be challenging at times. Some actions like performing access reviews require a lot of clicks that seem unnecessary. The workflows could be cleaned up a bit. Review collected by and hosted on G2.com.