G2

Amir E.

Co-Founder

Small-Business (50 or fewer emp.)

5/11/2026

"ISO 27001 without the headache — multiple cycles in"

4.5/5

What do you like best about Secfix?

We've been using Secfix as our ISMS platform for multiple ISO 27001 cycles now, and it has genuinely become a tool we rely on rather than just tolerate. A few things stand out:

The platform itself is intuitive and well-structured. Controls, policies, risks, and assets are all linked in a way that actually reflects how an ISMS should work — not just a checklist tool bolted onto a SharePoint. Onboarding new team members into compliance topics is much easier because the UI guides them through what needs to happen.

The automations and integrations save us a significant amount of time. For a SaaS company without a dedicated full-time compliance team, this is the difference between ISO 27001 being a burden and being manageable.

Speed to certification was a real highlight. The first cycle moved much faster than we expected going in, and each subsequent surveillance audit has been smoother thanks to the audit-ready state the platform keeps us in year-round.

Finally, the customer success deserve a specific mention. Our contact is responsive, knows our setup, and gives pragmatic answers rather than generic compliance theater. When auditor questions come up, we get real guidance, not just "check the documentation." Review collected by and hosted on G2.com.

What do you dislike about Secfix?

Honestly, very little. If I had to name something: as the audit requirements evolve quickly, changes in the platform have to be proven by a number of customers, before they release (naturally). This results in us having to use workarounds, rather than native features for a few weeks. This hasn't been a blocker — and the responsive support more than compensates. Review collected by and hosted on G2.com.

What problems is Secfix solving and how is that benefiting you?

Secfix solves the core problem of running and maintaining an ISO 27001-certified ISMS without needing a dedicated full-time compliance team. As a growing SaaS company, we needed certification to meet customer and enterprise procurement requirements — but we couldn't afford to tie up engineering and leadership capacity in manual evidence collection, policy management, and audit prep every year.

The platform centralizes everything an ISMS actually needs — controls, risks, assets, policies, vendors, and employee training — in one place that stays continuously audit-ready. Automated evidence collection through integrations with our cloud and HR stack means we're not scrambling before surveillance audits. New hires get onboarded into security training and policy acknowledgments without manual chasing.

The concrete benefits: significantly less internal time spent on compliance overhead, faster and smoother audits each cycle, and a credible security posture we can confidently show to enterprise prospects and partners. ISO 27001 has shifted from being an annual project to a continuous, low-friction process — which is exactly what an ISMS should be. Review collected by and hosted on G2.com.