Secfix is a European-based security and compliance automation platform made for startups and SMBs. The platform automates up to 90% of the effort to achieve ISO 27001, SOC 2, GDPR, NIS2 and other certifications through deep integrations to AWS cloud, SSO, ticketing and HR systems. With direct access to European auditors and multilingual support, Secfix makes the audit experience smooth and stress-free.
Secfix provides a centralized security and compliance automation platform designed to assist startups and SMBs in achieving and maintaining compliance with standards such as ISO 27001, SOC 2, NIS 2, GDPR, the EU AI Act, and more. The platform integrates with existing tools such as AWS, Google Cloud, Microsoft Azure, Google Workspace, and Office 365, enabling seamless data synchronization and monitoring.
Secfix GRC helps hundreds of customers, including WorkMotion, Zinc, Operations1, and Kombo (YC), automate compliance, improve visibility, and reduce manual work while they scale.
Key benefits include
Wide EU auditor network and local support: Get direct access to European auditors and multilingual support of compliance experts with over 10 years of experience.
Automated evidence collection: Over 250 real-time security checks keep you continuously audit-ready.
Continuous monitoring and real-time alerts: Stay ahead of threats with automated scans in your AWS environment and instant notifications, enabling proactive security management.
Mobile device compliance: Run hourly checks of your employee devices and get real-time alerts about disk encryption, screen lock, password-manager, antivirus status and more (supported for Windows, MacOS and Linux).
Policy management: Access to 20+ customizable, audit-ready templates aligned with industry standards.
Vendor management: Automatically discover and assess risks of new vendors through integrations with Google Workspace or Office365 SSO.
Risk management: Conduct guided risk assessments linked to over 100 pre-mapped controls, facilitating efficient risk tracking and review.
Employee onboarding and offboarding: Automated workflows to manage employee access and training, ensuring compliance throughout the employee lifecycle.
Secfix also offers a Trust Center, allowing companies to showcase their compliance status in real-time, thereby building trust with clients and stakeholders.
Pricing is tiered based on company size and program complexity. Preview pricing for 1-25 employees under the pricing section. For custom pricing, EULA, or a private contract, please contact partners@secfix.com, for a private offer.
Highlights
Made in (and for) Europe: Built to navigate European compliance complexity, achieving 100% audit success in record time. Trained local auditor network EU-wide including TUV, Dekra and modern startup auditors.
Framework Cross-Mapping: Maps controls across ISO 27001, SOC 2, GDPR and more for scalable compliance.
Centralized and Automated Compliance: Covers key Cloud, IDP, Ticketing, HR integrations for seamless evidence collection, as well as key compliance modules from Inventory to Risk and Vendor Management to Policy Templates out of the box.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on the duration and terms of your contract with the vendor. This entitles you to a specified quantity of use for the contract duration. If you choose not to renew or replace your contract before it ends, access to these entitlements will expire.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Everything your need to scale and operate a compliance and security program for ISO 27001 to show trust to customers. It includes all core platform features up to 25 employees, with in built automation for evidence collection, policy templates, risk management, vendor management, employee on- and offboarding, Secfix agent, basic trust center, integrations to SSO, cloud, ticketing, HRIS, and more.
$10,000.00
SOC 2 Advanced Package for 1-25 FTE companies
Everything your need to scale and operate a compliance and security program for SOC 2 to show trust to customers. It includes all core platform features up to 25 employees, with in built automation for evidence collection, policy templates, risk management, vendor management, employee on- and offboarding, Secfix agent, basic trust center, integrations to SSO, cloud, ticketing, HRIS, and more.
$10,000.00
Add-on frameworks for 1-25 FTE companies
Choice of one additional framework including GDPR, NIS2, TISAX, ISO 27701, ISO 27017, ISO 27018, DORA, EU AI Act, and more, starting at $5000 each. This is an add-on to the Secfix Advanced Package
Pricing centers on two base packages, each sized for companies with 1 to 25 full-time employees. You pick the Advanced Package that matches your target framework: one for ISO 27001, one for SOC 2. Both cover the same core platform capabilities up to 25 employees. If you need coverage beyond one framework, you add the Add-on frameworks option, which lets you attach one more framework such as GDPR, NIS2, or TISAX. That add-on stacks onto an Advanced Package rather than replacing it, so pricing grows as you add frameworks.
Top-of-mind questions for buyers
What counts as a full-time employee for the 1 to 25 FTE limit?
Each package covers up to 25 full-time employees on the platform. Employees are counted through built-in on- and offboarding workflows and connected HR system integrations. If your headcount grows past 25, you would move beyond this package size and should confirm the next step with the vendor.
How do the ISO 27001 and SOC 2 packages differ in what I pay for?
Both packages share the same core platform capabilities for up to 25 employees, including evidence collection, policy templates, risk management, and integrations. The difference is the target framework each supports. You pick the package matching the certification you need. Each is billed as a separate contract package.
How does adding a second framework change my total cost?
The Add-on frameworks option attaches one extra framework, such as GDPR, NIS2, or TISAX, to your chosen Advanced Package. It stacks on top rather than replacing the base package. Pricing starts at a set amount per added framework, so each framework you attach increases your total.
Request a private offer to receive a custom quote.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
SaaS delivers cloud-based software applications directly to customers over the internet. You can access these applications through a subscription model. You will pay recurring monthly usage fees through your AWS bill, while AWS handles deployment and infrastructure management, ensuring scalability, reliability, and seamless integration with other AWS services.
Support
Vendor support
Included in the offering, Secfix provides onboarding, live chat with compliance support (on the platform), vCISO AI agent and continuous enablement. Onboarding includes integration setup, assistance configuring compliance policies and controls in the platform, and guidance on utilizing our network of auditors and technology/service partners to serve you in your compliance journey. You can reach us at or support@secfix.com.
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.