The Thoropass platform for SOC2 compliance is quite robust and really helped with planning and tracking progress on SOC2 compliance items. The auditors seemed knowledgeable and were a pleasure to deal with, and Thoropass provides a lot of assistance in understanding the audit process.

Thoropass penetration testing includes free retesting for 90 days which I haven't seen other pen testers offer and which I found quite valuable. Plus having the results available within the same platform (as the SOC2 compliance) was nice. Review collected by and hosted on G2.com.

Transitioning from our SOC2 type 1 audit to our first type 2 audit with 6 month observation period didn't entirely match up with annually-scheduled compliance items. Strictly speaking our fault entirely, but maybe Thoropass could have provided clearer guidance for these scenarios. Review collected by and hosted on G2.com.

I am not a technologist and I don't know SOC 2 compliance issues at all. Laika has an easy to follow framework and other tools that make it more convenient to complete the required tasks on our way towards compliance. We don't have enough staff to allow us to put all of our attention on the SOC 2 process. Engaging the process with Laika allows me to complete the required tasks and also continue to operate our daily business obligations. Review collected by and hosted on G2.com.

I haven't found any downside to working with Laika. All the necessary materials, resources and organization are right at hand. Review collected by and hosted on G2.com.

Thoropass framework provides a guided step-by-step pathway to achieving SOC/ISO 27001, GDPR compliance readiness aligned with your company's current state of information security.

Thoropass assigns an account manager and a technology consultant to provide timely support during the compliance implementation process.

Thoropass supplies security policy and procedures documentation templates that can be used as a head start or to validate your existing materials.

Thoropass automates collection of evidence via its numerous 3rd party integrations.

It streamlines security audit process as evidence, policies, and documentation are in a single location, which auditors can access directly through the platform. Review collected by and hosted on G2.com.

It takes time to get accustomed to the documentation editing interface.

While the number of integrations is decent and growing, it does not cover all key services that a typical enterprise would require. Review collected by and hosted on G2.com.

Thoropass is very attentive to their customers. We have received more than a dozen features that were highly requested by us specifically. Customer service got even more personalised which is great both from care and staying on track perspective. We are in for a long run. Review collected by and hosted on G2.com.

Thoropass is improving gradually compared to next year and nothing to report about as of now in terms of improvement. Review collected by and hosted on G2.com.

Relationship - helping us through the process, especially with us being a new start-up business

Customer support - immediately answering any questions we may have and frequent check-ins

Ease of implementation - setting up was an easy process for us. Review collected by and hosted on G2.com.

Getting access to the portal for some people, especially those who are non-tech savvy, requiring them to use an authenticator which they are not familiar with.

Security Awareness training wasn't appealing nor interactive. Didn't feel it was beneficial as anyone can just speedily go through the slides without reading anything. Review collected by and hosted on G2.com.

Thoropass truly moved our company into the future. Prior, we were still using an in-person firm that would take months of time to prepare for our SOC audit. With Thoropass, not only has their system been an absolute breeze, but it has saved us countless hours of time. By the time we were ready to undergo our SOC 2, everything had already been filled in and ready to go with all the systems we have integrated. It makes the process such a breeze! We love having a dedicated rep to help answer any questions we have at any point, they are always so friendly and helpful. Review collected by and hosted on G2.com.

It's honestly hard to find a downside, because we love Thoropass so much! I believe we may have had one system that wasn't available to integrate when we initially signed up, but they are constantly improving their system to add additional integrations and make the process seamless and we now have everything integrated that we need. Review collected by and hosted on G2.com.

Been using Thoropass for over a year now. Really love the support and guidance throughout the whole process. Dedicated customer support rep has been great, they also have a SOC2 tuesdays webinar and that has also been really good. I also really like the connection between the customer support and audit team, multiple occasions where we weren't quite sure if that's what the auditor would want so they can ask the auditor directly. Other products don't have that luxury but thoropass has all that built in. Very nice. Been a great partner and the interface is really great to work with. Review collected by and hosted on G2.com.

Everything can be improved and I think they listen to the customers to keep adding the most requested features. They have been rolling out new features like a trust center that pulls compliance data from their app. Also, just implemented AI within the app to determine if the evidence collected passes an AI test. I couldn't think of anything else that they need for me. Seems to have just the right amount of everything. Review collected by and hosted on G2.com.

Thoropass guided our company through the process of becoming SOC 2 compliant and in preparing for our Type 2 Audit and we are grateful for the guidance. While our team members had prior SOC 2 experience, this was a first for the Company. We got prompt, accurate, and useful advice every time we needed it and this enabled us to easily implement policies and procedures that we developed or augmented for compliance. We use the thoropass frequently and so we are pleased that we are able to easily sign in and get to work. Review collected by and hosted on G2.com.

The software interface is not as intuitive as we would like but Thoropass promptly responded to our questions and we now have functional ability to use the software. Review collected by and hosted on G2.com.

Structured Compliance Frameworks – Thoropass provides pre-mapped controls for SOC 2, ISO 27001, and other frameworks, significantly reducing time spent on manual control mapping and cross-referencing.

Integrated Evidence Collection – The automated integrations with tools like AWS, Google Workspace, and HRIS systems streamline evidence gathering, helping maintain audit readiness year-round.

Guided Audit Experience – The platform not only organizes compliance work but also connects directly with experienced auditors, ensuring a seamless transition from preparation to certification.

Clear Task Management & Tracking – Its dashboard and workflow tools allow for easy assignment, monitoring, and closure of tasks, which keeps teams accountable and eliminates confusion.

Responsive Support Team – Thoropass provides prompt, informed support and advisory guidance, which is invaluable when navigating complex compliance requirements. Review collected by and hosted on G2.com.

Limited Customization for Unique Controls – While the platform covers major frameworks well, adding company-specific controls or tailoring workflows sometimes requires workarounds or external documentation.

Occasional Integration Gaps – Some integrations (e.g., niche HRIS or ticketing systems) are not fully supported, which means certain evidence must still be uploaded manually.

Reporting Limitations – Standard reports are functional but could benefit from more flexibility and export options for board-level or regulator presentations.

Learning Curve for First-Time Users – Although intuitive once familiar, the platform’s terminology and structure can initially feel overwhelming to teams new to compliance automation.

Audit Coordination Bottlenecks – Scheduling and coordination with auditors through the platform is efficient most of the time, but peak periods can result in slower response times. Review collected by and hosted on G2.com.

Very thorough and the tool made the process very easy. The account manager is very responsive and explained the entire process very well. With regards to the Pentest, the tool helped us identify a few issues ahead of the actual pentest, saving time for us and the pen-testers. Review collected by and hosted on G2.com.

Some of our documentation tools are not yet supported by the tools. Review collected by and hosted on G2.com.