G2

Dor H.

ML infra

Small-Business (50 or fewer emp.)

9/17/2026

"SOC 2 in one place, with an owner on every control"

4/5

What do you like best about Scytale?

The integrations are the standout. It pulls evidence straight from GCP and GitHub, so most controls stay current without anyone having to upload screenshots.<br><br>What’s left is the small handful that genuinely needs a human touch, and those are clearly marked with an owner and a due date. Auditor questions also come back as concrete action items instead of a vague request, which is what keeps the program moving.<br><br>Kamran Naicker works through those items with us directly and flags a weak answer before it ever reaches the auditor. Review collected by and hosted on G2.com.

What do you dislike about Scytale?

Because we ship on-premise, things like production uptime reporting don’t map cleanly to our setup and usually require some back-and-forth to scope correctly. Review collected by and hosted on G2.com.

What problems is Scytale solving and how is that benefiting you?

We’re a small team, and SOC 2 touches everyone. Before Scytale, the work was scattered across docs and Slack, and nobody had a clear view of what was still open. Now each control has an owner, a status, and its evidence all in one place, and the integrations keep most of it up to date on their own. The practical benefit is that engineering only gets pulled in for the items that truly need us, and the auditor’s questions come in as a straightforward list we can work through, rather than a thread we have to piece back together. Review collected by and hosted on G2.com.