Thoropass
ThoropassReviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
468 reviews
from
External reviews are not included in the AWS star rating for the product.
Great experience
What do you like best about the product?
Thoropass is very fast with updates, responses, and giving feedback on pentest remediation info.
What do you dislike about the product?
Nothing! The entire process was a smooth experience.
What problems is the product solving and how is that benefiting you?
Thoropass detects and analyzes various security risks that our applications may face, allowing us to develop more secure services to protect our workflow and sensitive information.
Penetration testing using Thoropass
What do you like best about the product?
- The process was very easy.
- Very clear instructions about what was required
- Wonderful people who were very helpful in answering questions and proactive in helping out
- Pentest report was thorough and included what I should do to remediate the findings
- Retesting after fixing the findings was easy to request and get done.
- Very clear instructions about what was required
- Wonderful people who were very helpful in answering questions and proactive in helping out
- Pentest report was thorough and included what I should do to remediate the findings
- Retesting after fixing the findings was easy to request and get done.
What do you dislike about the product?
Nothing to add here. May be the cost could have been a little lower.
What problems is the product solving and how is that benefiting you?
Thoropass is helping me get certification including SOC2 Type 2 and HiTrust. This is critical for me since we are in Healthcare industry and these compliance controls are a must-have.
Great value, great team
What do you like best about the product?
I really enjoyed working with Thoropass specifcally on our penetration test, SOC 1 Type 1 and HITRUST audits. They are super responsive when there are problems and helped us get across the finish line ahead of schedule. The penetration testers were very competent and gave great detailed reports of their findings and remediations.
What do you dislike about the product?
Occasionally there are issue with certain evidence requests having very vague requirements, which required some recycle. I know there isn't always a 'one size fits all' answer to every problem, but it would be great to incorporate some of the results of our conversations into the requirements generated for each certification path.
What problems is the product solving and how is that benefiting you?
Thoropass offers a lot of compliance roadmap items for getting certifications such as HITRUST and SOC2. We also leveraged them for penetration testing. We use their new "trust center" feature, which greatly aids in our due diligence process and cuts down on a lot of the time spent filling out vendor questionnaires.
Great Product, Great Partnership
What do you like best about the product?
The benefit of using Thoropass is it's integration to systems for auditing capabilities, it makes it much easier to provide evidence and to ensure needed corrections are addressed immediately. Our account manager, Nat, is super to work with, addresses all of our questions, provides guidance and is quick to respond. We have also used Thoropass for Pen testing which was pretty seamless and offered the same level of professionalism as we have come to know with Thoropass.
What do you dislike about the product?
There are some areas of the program that need enhancement or modifications, such as the risk register, and it would be ideal if some of the objects included sorting and filtering or the ability to customize and add our own fields
What problems is the product solving and how is that benefiting you?
x
Thoropass - Great experiece
What do you like best about the product?
I like that Thoropass has everything you need for audits included in their platform. It was very easy to use and is user friendly.
What do you dislike about the product?
Nothing. It was a great experience. I have nothing negative to say about them.
What problems is the product solving and how is that benefiting you?
SOC 2 compliance
Best company for pentests and compliance!
What do you like best about the product?
Very efficient and powerful platform to track compliance tasks. Pentest process is also very efficient with good pricing.
What do you dislike about the product?
Nothing, I honestly have no complaints!!
What problems is the product solving and how is that benefiting you?
GDPR and SOC2 compliance
PenTest Review
What do you like best about the product?
The comprehensive report is a must for us on addressing each of the findings
What do you dislike about the product?
Nothing outstanding to point out. I'm confortable with the customer service
What problems is the product solving and how is that benefiting you?
It highlights ours opportunities and suggest a path of how to resolve them
Thoropass Team is very professional
What do you like best about the product?
The Thoropass team is incredibly professional and organized. Nat Larson, our customer success manager, has been an outstanding guide throughout the entire process , always helping us focus on the next priority to stay on track with our SOC 2 controls and audit milestones 😎.
The platform itself is truly all-in-one , from policy templates to evidence collection and auditor collaboration, making it an ideal choice for companies pursuing both SOC 2 Type I and Type II compliance.
We also ran Penetration Testing through Thoropass and had a similarly great experience. Their team was efficient, communicative, and made the process smooth from start to finish.
The platform itself is truly all-in-one , from policy templates to evidence collection and auditor collaboration, making it an ideal choice for companies pursuing both SOC 2 Type I and Type II compliance.
We also ran Penetration Testing through Thoropass and had a similarly great experience. Their team was efficient, communicative, and made the process smooth from start to finish.
What do you dislike about the product?
Nothing about Thoropass itself, it’s more that SOC 2 can be a bit overwhelming, especially if it’s your first time going through it. As someone more focused on execution than documentation, it was initially intimidating. But with Thoropass’ support, everything became manageable and far less stressful.
What problems is the product solving and how is that benefiting you?
Thoropass is helping us achieve and maintain SOC 2 compliance with confidence. Before using it, we didn’t have a clear structure for documentation, evidence collection, or audit readiness. Thoropass provided us with a clear roadmap, centralized platform, and expert guidance that made the entire process much smoother.
Thanks to their support, we’ve been able to stay organized, reduce time spent chasing documentation, and focus more on improving our security posture rather than just checking boxes.
Thanks to their support, we’ve been able to stay organized, reduce time spent chasing documentation, and focus more on improving our security posture rather than just checking boxes.
Contantly improving tool with first class support
What do you like best about the product?
This is a big app that wraps around a large process. You need policies, training, monitoring of your infrastructure - and then you need to pass an audit that will include hundreds or thousands of pieces of evidence... And Thoropass can help with all of that!
I love the integrations (Thoropass can tell when my AWS infrastructure falls out of compliance), task reminders and when I'm using a new vendor who needs review) and the automations (I need reminders to stay on top of my compliance tasks).
Three quarters of the year I live in my Dashboard which keeps me up to date on what I need to be doing. And during audit season I live in the audit module which guides me through the audit evidence process.
I should also mention that the support I've gotten from Thoropass customer service reps has been outstanding and very responsive to questions about the product, reporting bugs, or helping me find best practices to improve. My background is not in compliance so the hand-holding with a personal touch has really made a positive difference in my comfort level doing the ongoing work needed to maintain our certification level.
I love the integrations (Thoropass can tell when my AWS infrastructure falls out of compliance), task reminders and when I'm using a new vendor who needs review) and the automations (I need reminders to stay on top of my compliance tasks).
Three quarters of the year I live in my Dashboard which keeps me up to date on what I need to be doing. And during audit season I live in the audit module which guides me through the audit evidence process.
I should also mention that the support I've gotten from Thoropass customer service reps has been outstanding and very responsive to questions about the product, reporting bugs, or helping me find best practices to improve. My background is not in compliance so the hand-holding with a personal touch has really made a positive difference in my comfort level doing the ongoing work needed to maintain our certification level.
What do you dislike about the product?
Lots of improvements and new features during my three years experience but the training module (assigning/tracking required course completions) still isn't great.
What problems is the product solving and how is that benefiting you?
As an enterprise SAAS vendor, SOC2 compliance is table stakes to even have a conversation. Thoropass helps us adopt the processes and policies needed to pass the SOC2 audit. It helps me stay organized and pay regular attention to all those "important but not urgent" things that otherwise might sometimes fall through the cracks.
Easy to use, easy to trust.
What do you like best about the product?
Thoropass has been a solid solution for simplifying our compliance process and helping us scale with confidence. Thoropass makes it easy to create, manage, and update internal policies. New hires can be quickly brought up to speed through automated onboarding flows. Thoropass assigns required policy reviews and security trainings right away, and tracks completion across the team. Thoropass has helped us embed compliance into our culture without making it feel like a burden.
What do you dislike about the product?
While the platform provides templates and guidance, getting everything configured — especially if you're starting from scratch — can still take time. Smaller teams may need help prioritizing what to tackle first.
What problems is the product solving and how is that benefiting you?
Thoropass makes it easy to create, manage, and update internal policies. It comes with pre-built templates aligned to standards like SOC 2, ISO 27001, and HIPAA, which helped us get up and running fast. What I appreciate most is how the platform keeps policies version-controlled and tracks employee acknowledgment, ensuring we stay compliant without manual follow-ups.
showing 1 - 10