Product Avatar Image

Thoropass

Show rating breakdown
609 reviews
  • 3 profiles
  • 8 categories
Average star rating
4.7
#1 in 1 categories
Grid® leader
Serving customers since
2019
Profile Filters

All Products & Services

Product Avatar Image
Thoropass

580 reviews

Thoropass is an all-in-one compliance automation platform that streamlines the entire compliance and audit process by integrating advanced technology with expert guidance. Designed to eliminate the complexities associated with traditional compliance methods, Thoropass offers a seamless solution for achieving and maintaining certifications such as SOC 2, ISO 27001, HITRUST, PCI DSS, and HIPAA. By automating evidence collection, policy creation, and continuous monitoring, Thoropass significantly reduces manual effort, accelerates audit timelines, and enhances overall security posture. Key Features and Functionality: - Automated Evidence Collection and AI Validation: Streamlines the audit preparation process by automatically gathering and validating evidence, reducing manual workload and minimizing errors. - Continuous Monitoring and Alerts: Provides real-time tracking of compliance status and promptly notifies users of any issues, ensuring ongoing adherence to regulatory requirements. - Risk Assessment and Management: Offers tools to identify, assess, and mitigate security risks, helping organizations proactively manage their compliance landscape. - Security Questionnaire Automation: Simplifies the process of responding to security questionnaires by automating responses, saving time and ensuring consistency. - Integrated Audit Services: Combines compliance automation with in-house audit services, offering a cohesive and efficient audit experience without the need for third-party auditors. - Pentesting Services: Provides penetration testing to identify vulnerabilities, ensuring robust security measures are in place. Primary Value and Problem Solved: Thoropass addresses the challenges of traditional compliance processes, which often involve extensive manual effort, fragmented tools, and prolonged audit cycles. By offering a unified platform that automates key compliance tasks and integrates expert audit services, Thoropass reduces compliance and audit overhead by up to 80%, accelerates time-to-audit by 62%, and eliminates over 950 annual work hours for its customers. This comprehensive approach allows organizations to focus on their core business activities while maintaining a strong security and compliance posture.

Product Avatar Image
Thoropass Audit

18 reviews

Thoropass delivers high-quality, expert-led IT audits that help growing and enterprise organizations achieve and maintain compliance with frameworks like SOC 2, SOC 1, HITRUST, PCI, and ISO 27001. Our auditors bring deep technical and industry expertise, ensuring consistent, defensible results and a smooth, predictable audit experience. With a modern workflow, clear guidance, and responsive support, Thoropass helps teams streamline evidence collection, reduce friction, and demonstrate trust to customers and partners with confidence.

Product Avatar Image
Thoropass Pentesting

11 reviews

Thoropass offers expert-led, audit-ready penetration testing with tailored scoping, thorough manual testing, and clear remediation guidance. Backed by CREST-accredited specialists, Thoropass delivers high-quality reports and unlimited retesting to help teams improve security and meet compliance requirements efficiently. Ideal for organizations needing reliable testing across web, mobile, API, network, cloud, and AI/LLM environments.

Profile Name

Star Rating

498
103
5
1
2

Thoropass Reviews

Review Filters
Profile Name
Star Rating
498
103
5
1
2
Xavier L.
XL
Xavier L.
Customer Service | Medical Scheduling Experience | Epic Systems | Bilingual
05/14/2026
Validated Reviewer
Review source: G2 invite
Incentivized Review

Streamlined Compliance for HIPAA and PCI Coordination

I like that Thoropass Audit helps keep documentation and audit tasks organized, especially when coordinating across different departments. It's great for supporting compliance-related processes connected to HIPAA and PCI requirements in our call center environment. The centralized approach makes it easier to organize documentation, review internal processes, and keep track of security tasks, improving coordination and reducing manual follow-up. I find it incredibly helpful that compliance-related information and audit tasks are centralized instead of being spread across emails or multiple spreadsheets. The visibility across tasks and review processes makes coordination more efficient and reduces confusion during audit preparation. The most valuable aspect for me is how Thoropass simplifies compliance tracking and organizes it in a structured workflow. This organized approach to compliance and audit preparation smoothens coordination, especially in an environment with HIPAA requirements.
PL
Pete L.
05/14/2026
Validated Reviewer
Review source: G2 invite on behalf of seller

Streamlined SOC 2 Audit with Exceptional Support

I appreciate the dedicated customer success manager who works with us during the process. Thoropass keeps us on track with reminders for recurring tasks and handles policy and security training tracking efficiently. I'm happy with the product and their addition of new features like the access review to enhance our experience. The setup was simple too. The platform let us get everything set up and validated for SOC 2 Type 1 and move right into the monitoring period for the Type 2 audit.
Verified User in Consulting
AC
Verified User in Consulting
05/13/2026
Validated Reviewer
Review source: G2 invite
Incentivized Review

Essential for SOC 2 Compliance, Needs Report Customization

I find Thoropass Audit incredibly supportive for my business as they provide an auditor to help with obtaining SOC 2 Type 2 certification, which is a significant help since none of us are CPAs. I appreciate the deliverables and the reporting, along with the centralized location for storing evidence needed for an audit. The checklist and roadmap they provide are clear and straightforward, which is very helpful for meeting certification requirements. I also value the platform where we create a risk register and develop samples of business continuity or disaster recovery plans. The tabletop incident exercises and samples they provide are quite beneficial, and the overall service encourages us to continue and expand our partnership.

About

Contact

HQ Location:
New York

Social

@thoropass

What is Thoropass?

We’re compliance experts, so you don’t have to be. Through easy software and hands-on services, we embed in your process to prepare you to pass any audit, every year, with flying colors. Thoropass makes it as easy to do the right thing as it is to check a box—because we want to build a world where compliance is never a barrier to progress.

Details

Year Founded
2019
Website
thoropass.com