Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Excellent audit experience and support!
What do you like best about the product?
Thoropass has been great to work with from their initial outreach through our most recent SOC 2 Type I and II audits. The journey to compliance can be feel imtimidating, but the Thoropass platform did a great job of managing steps and milestones. Even more helpful have been the individuals that helped us through the audits. The technical team was helpful and transparent, and our Customer Success Manager, Darren Zarandi, has done a terrific job supporting our team and guiding us along the way. The built-in integrations have also been a great help to streamline some of the work and evidence gathering.
What do you dislike about the product?
There have been a few small buggy issues in the platform's UI. Entering notes for evidence was touchy as well as updating documents. As we get through more audits, having an easy reference to our past evidence notes, etc. would be greatly beneficial and this has not been possible. The upside is that our Customer Success Manager has been great at communicating these issues and they have either been addressed or are considered for future product updates.
What problems is the product solving and how is that benefiting you?
Thoropass has helped us guide us through SOC Type 2 compliance, policy management, and security training. Without the Thoropass platform, these items would be difficult to achieve on our own.
- Leave a Comment |
- Mark review as helpful
Compliance made easy
What do you like best about the product?
I come from a DoD background and am used to a compliance management tool (eMASS) like what Thoropass has set-up. However, unlike eMASS, the Thoropass app has a much easier to navigate interface and contains links to templates and examples to show you what the auditors will be looking for in their review. If you get stuck on a particular control, the app makes it easy to leave a comment on the control itself, tag your Thoropass rep, and get a response back quickly. I love that I am teamed-up with a rep from the company that helps make sure we're not getting stuck on any part of the documentation process. Allie has made it so that I have never felt lost even when there have been language in controls that haven't made a lot on sense in our context.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
I love the integrations with 3rd party applications that automatically collect evidence for your audit. This couldn't be easier when it's available for the tools you use.
Bugs are not really a thing you see in a positive review, but I feel like it speaks volumes to say that I've run into bugs, probably more than most people because I'm a digger, while using Thoropass. I've been able to email my findings to my customer rep and she almost always responds back the same day having reported it to the development team, giving me their feedback, and providing a timeframe of when it'll be fixed. I can't speak with authority, but I get the impression that their development team is running a tight Agile shop that prioritizes customer tickets in their sprint planning because the bugs I've reported are usually fixed within a couple of weeks at most.
What do you dislike about the product?
If I have to find something to dislike about Thoropass, I would say that when you have applications that can't be tied-in to the monitors/integrations that they have set-up, it can be time consuming to collect screenshots and confusing to know what to take screenshots of for the auditors. That said, that's not so much a dislike about Thoropass specifically and more a dislike of these audits in general.
What problems is the product solving and how is that benefiting you?
We needed to obtain a SOC2 Type 1 certification so we can sell our cloud training product to University customers.
Thoropass Review
What do you like best about the product?
Having everything integrated (audit, penetration test, evidence submission, etc.) into a single platform is great.
What do you dislike about the product?
The platform has been enhanced quite a bit since we came on as a customer (~2 years ago) and most of the features I wanted are now in the platform, so there is very little to dislike.
What problems is the product solving and how is that benefiting you?
Having a 3rd party security / compliance audit makes diligence during sales conversations much easier / faster.
Thoropass makes easy the compliance certification process.
What do you like best about the product?
They way how Thoropass braks down the activities in to do's makes really easy to track the progress and focus in the action items needed to be completed.
What do you dislike about the product?
There are manu AWS monitors that are highlighted as failed, but not all of them are needed to be sorted and fixed. I would be nice to have a relevancy level of each of the monitors and tasks to do.
What problems is the product solving and how is that benefiting you?
Thoropass helped us to identify the roadmap and action items needed to be ready to the audit.
Thoropass for SOC II Compliance
What do you like best about the product?
You are guided through the necessary areas for compliance and it is clear what needs to be done, or provided, to meet the requirements.
Another benefit is being able to ask questions inside the platform to your Customer Success Manager or other support staff.
It does free up time at the audit stage too as you have provided all the necessary evidence already and all that is required is to answer any follow up questions - again, this is all integrated into the platform.
Another benefit is being able to ask questions inside the platform to your Customer Success Manager or other support staff.
It does free up time at the audit stage too as you have provided all the necessary evidence already and all that is required is to answer any follow up questions - again, this is all integrated into the platform.
What do you dislike about the product?
It would be good to have some form of visibility of the audit progress as it is difficult to know if you're close to the end.
What problems is the product solving and how is that benefiting you?
Helping us to achieve SOC II Type 2 compliance and the platform ensures we are covering all areas and are able to implement key processes and policies more efficiently.
Relatively Painless SOC 2 Type 2 Certification
What do you like best about the product?
The platform is very easy to understand once you get familiar with it. All the interactions with the auditors and customer success managers have only been positive experiences.
In addition, the integrations offered can be easily added into our current tech stack.
In addition, the integrations offered can be easily added into our current tech stack.
What do you dislike about the product?
The platform does have a bit of a learning curve at first. On occasion there are extensive UI design changes that confuses the user but this should be stabilized.
Some of the integrations could do with more documentation so that we can both understand what is being collected and how to fix any issues should they present themselves.
Some of the integrations could do with more documentation so that we can both understand what is being collected and how to fix any issues should they present themselves.
What problems is the product solving and how is that benefiting you?
They are ensuring that we remain SOC 2 Type 2 compliant which is a requirement from some of our existing and future clients. Furthermore, we strive to meet and exceed industry standards and Thoropass have been wonderful partners.
Effective Compliance Management
What do you like best about the product?
The platform is very user-friendly and easy to understand. It takes complex requirements and breaks them down into tasks that and checklists you must fulfill, simplifying the journey to be certificated considerably. In addition, the platform provides you with templates that you can use as a basis for the multiple policies and procedures you are required to have. In other words, you are able to do much of the work yourself - while having Thoropass to assist you if you have any questions. On that note, I'm very happy with support we got from our Customer Success Manager, Alex Scudellari. His proactive involvement and assistance has been a game changer and has genuinely accelerated our navigation through the compliance processes. Since he took over as our CSM, we’ve seen significant progress in our compliance efforts.
I would also like to note that we have observed continual improvements in their template documentation and feature set since our initial adoption, which speaks volumes about their commitment to continuousimprovement. We are also like that the platform includes effective monitoring tools that can be used to maintain our compliance.
I would also like to note that we have observed continual improvements in their template documentation and feature set since our initial adoption, which speaks volumes about their commitment to continuousimprovement. We are also like that the platform includes effective monitoring tools that can be used to maintain our compliance.
What do you dislike about the product?
While Thoropass offers outstanding features, it is on the pricier side, which could be a consideration for smaller companies.
Also, it would be helpful if the references in the audit module evidence requests ("ER-000") were directly connected to the questions in the questionnaire (e.g., "AI-000"), by way of an example, you could easily click the evidence request which would link you to the question. This is due to us opting to document our processes in detail in response to each questionnaire item. This means that navigating between our documented procedures (which we submitted in the questionnaire) and the corresponding evidence requests during audits can be a bit time consuming.
Also, it would be helpful if the references in the audit module evidence requests ("ER-000") were directly connected to the questions in the questionnaire (e.g., "AI-000"), by way of an example, you could easily click the evidence request which would link you to the question. This is due to us opting to document our processes in detail in response to each questionnaire item. This means that navigating between our documented procedures (which we submitted in the questionnaire) and the corresponding evidence requests during audits can be a bit time consuming.
What problems is the product solving and how is that benefiting you?
Thoropass simplifies the journey to get certified, while also ensuring you stay compliant with the standards, by streamlining the process through clear checklists, templates, and monitoring tools. You have to do the work yourself - but the platform helps you get compliant (and maintain compliance) efficiently without excessive resource expenditure.
Thoropass made our SOC2 process so much less intimidating
What do you like best about the product?
Undergoing a SOC2 audit can be intimidating even for the biggest and most resource-rich teams, but as a very small team undertaking this very big project, I'm glad we did it with Thoropass. The management portal is intuitive and easy to use, and great for the collaborative nature of evidence submission and task distribution.
And their team has been great partners throughout the process. They're quick to answer questions provide guidance when needed.
And their team has been great partners throughout the process. They're quick to answer questions provide guidance when needed.
What do you dislike about the product?
I didn't encounter any issues working with Thoropass.
What problems is the product solving and how is that benefiting you?
Thoropass helped us complete our SOC2 evidence submission, review, and audit process.
Clear process which is optimized for long term partnership
What do you like best about the product?
Easy to use platform, great pricing structure, helpful customer success manager.
What do you dislike about the product?
Customer Success is optimized for US time zone, few small bugs here and there
What problems is the product solving and how is that benefiting you?
We are aiming to get SOC2 compliant.
Easy and Affordable SOC 2 Compliance
What do you like best about the product?
The team is very responsive, and the platform is easy to use.
What do you dislike about the product?
There are ocassional bugs with the platform as they roll out new features.
What problems is the product solving and how is that benefiting you?
Thoropass is helping us achieve HIPAa and SOC 2 compliance in an efficient manner, allowing us to be more competitive in bidding for business.
showing 131 - 140