Thoropass

What do you like best about the product?

Good communication with the team, speedy response and completion of deliverables

What do you dislike about the product?

Price as a small business is always a factor

What problems is the product solving and how is that benefiting you?

Pen Testing and Audit for SOC II

What do you like best about the product?

With Thoropass, you have hands-on help to get over the audit hump. The pre-provided reports are great if you've never had a SOC audit before, the testing coverage is broad and the team is extraordinarily helpful. You get the distinct feeling that these folks were auditors first, and software developers second, rather than the other way around.

We arrived having already established our procedures and controls from a traditional audit and had built our engineering processes around those controls. Some of them did not align with the default policies, so we worked with the team to adjust the controls to match making sure the SOC standard was adhered to. This allowed us to stick with our original policy docs that our team was already trained around.

Further, the team continues to meet with you throughout the year so that the Type 2 audit is a breeze and virtually all the materials have been collected over the period already.

Major distinction from Vanta/Drata: they don't insert expensive systems into your AWS or Azure environment for continuous monitoring. I've heard those folks end up costing their customers a lot just in increased AWS costs.

Also, the price is exceptional.

What do you dislike about the product?

We ran into some issues with the actual auditors not wanting to find a policy in our documents because our documents weren't their default standard documents. The tool asks you to link the policy for the auditor to review and many times the auditor came back asking us to screenshot the exact place in the documents where the policy existed rather than reading it themselves. I would have preferred that they reviewed our documents thoroughly before asking for assistance.

What problems is the product solving and how is that benefiting you?

Helps us stay SOC compliant without a huge annual auditor headache

What do you like best about the product?

Thoropass has had the best communication for the pentest process compared to any other vendor we've used. They make everything simple and easy by offering options for communication based on what works best for you. Retest scheduling was beyond easy and very fast.

What do you dislike about the product?

We haven't had any issues or dislikes occur with Thoropass yet.

What problems is the product solving and how is that benefiting you?

Thoropass performs our pentest annually and keeps the process simple by providing timely communication and customization of how you receive these updates.

What do you like best about the product?

Thoropass Staff were able to work with us to guide our growing company through the SOC 2 Type 1 Process to help us acheive a completed Audit by our tight deadline. Their staff were friendly, responsive, professional, and very competent. Thank you very much, Thoropass!

What do you dislike about the product?

There were a few times when the site was marginally slow, but it wasn't a very big deal. It was easy to work around.

What problems is the product solving and how is that benefiting you?

We needed to complete a SOC 2 Type 1 Authorization within a tight deadline, and their system and team guided us through the process.

What do you like best about the product?

Thoropass provides an easy-to-use portal, well-architected policies and procedures, and an excellent success plan that makes adoption and maintenance easy. The success team is quick to address questions and provide documentation to help with education and navigating compliance.

Thoropass has become our main portal for all compliance documentation and training, they even helps with our on boarding and off-boarding checklists.

What do you dislike about the product?

Downsides are occasional integration breaks between systems that require reauthentication.

What problems is the product solving and how is that benefiting you?

Thoropass provides consistency in our process managment and eases our system audits. As a compliance partner, they are instrumental in validating our commitment to customers in data security.