G2

David B.

Lead Developer (Remote)

Mid-Market (51-1000 emp.)

7/2/2026

"Clear Communication with Well-Written Reviews, Repro Steps, and Mitigations"

4.5/5

What do you like best about Thoropass Pentesting?

Thoropass scheduled setup calls so we could meet with the pentest team and talk through the process. While they were reviewing, they kept us informed with in-progress updates, and then provided a review document after the initial test. The findings were well written and included detailed reproduction steps along with the mitigations we needed. The turnaround time for the retest was also quick. Review collected by and hosted on G2.com.

What do you dislike about Thoropass Pentesting?

The lead time can be a bit long, so it’s important to schedule well ahead of time. Review collected by and hosted on G2.com.

Recommendations to others considering Thoropass Pentesting:

There’s a fair amount of setup required to create an effective test surface. In our case, we needed to provide multiple tenants, each with multiple users and roles. Because of that, it’s worth planning enough time up front to configure a well-rounded testing environment when scheduling a pentest. Also, there are strict timelines for addressing critical and high-risk findings, so make sure you have the capacity to resolve any issues that come up (fortunately, we didn’t have any of these). Review collected by and hosted on G2.com.

What problems is Thoropass Pentesting solving and how is that benefiting you?

We are releasing a new AI-focused product in several worldwide regions, and needed to make sure that we were following best practices in securing our site and data. Thoropass Pentesting tested through the site, uncovered some issues we missed (thankfully nothing high risk), and re-tested once we had resolved. Review collected by and hosted on G2.com.