Reviews from AWS Marketplace
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
External reviews are not included in the AWS star rating for the product.
Super platform
What do you like best about the product?
I worked with Thoropass since it was originally Laika.
This siginificantly reduced the time to implement SOC2 audit for my platform.
I highly recommend Thoropass to everyone.
This siginificantly reduced the time to implement SOC2 audit for my platform.
I highly recommend Thoropass to everyone.
What do you dislike about the product?
Overall I am happy with using Thoropass.
What problems is the product solving and how is that benefiting you?
It guided me step by step when processing audit management.
- Leave a Comment |
- Mark review as helpful
Solid platform for collecting evidence for SOC-2 Auditing
What do you like best about the product?
The notification system, and corresponding emails, made it very easy to quickly react and update comments and/or evidence files when undergoing the preparatory work for our SOC-2 audits. This drastically cut down on the amount of required phone-calls and back-and-forth. Additionally, AWS direct monitoring allowed for massive time savings as evidence was 'automatically' collected -- with no human work required!
What do you dislike about the product?
It can be hard to find evidence you have previously submitted to the platform, once an aduit period has concluded. There are scenarios where it took longer to find the item in the nested UI than to just re-gather the materials.
What problems is the product solving and how is that benefiting you?
Our primary use-case is in Audit-management, and as a hub for all our vendor security questionaire responses. Having this information in a centralized location, helps improve response time to security assessments and maintaining certain compliance standards helps in making the company more attractive as a vendor.
SOC2 made easy
What do you like best about the product?
Using Thoropass made SOC2 Type 1 certification possible in just about 3 months for our company. Their tool helped immensily to ensure we had the right processes in place, that we were covering all the requirements for the certification and whenever we had questions we always had someone in their team to help us out. What was believed to be a painful and long process when we decided to chase SOC2 compliance became a resoanably short and painless process with Thoropass.
What do you dislike about the product?
Based on our experience with Thoropass it is hard to say what I disliked about them. Maybe the fact Thoropass was rebranded half way through our process has created some confusion and we still have people in our company calling them Laika.
What problems is the product solving and how is that benefiting you?
SOC2 Certification. Much easier to talk about security with our customers after being SOC2 certified than it was before. Their tool makes our job much easier by highlighting areas that require attention saving time for our team to focus in actually developing our own product.
Thoropass lines up the boxes, you check them off
What do you like best about the product?
They have a dashboard with about 100 checkboxes related to my platform's security. For each box, all I have to do is upload a screenshot and 1-2 sentences. Thoropass took care of everything else, even writing my infosec policy and employee handbook. I also had a dedicated cybersecurity expert I met with every four weeks to go over any controls I wasn't sure about.
What do you dislike about the product?
Some of the workflow is redundant. For example, I had to check off all my pre-audit controls and then I had to do the same thing with the audit controls. Some of the instructions appear to have been copied directly from the official SOC2 guidelines without a plain explanation. Also, it's difficult to navigate between different sets of controls on the dashboard without opening multiple tabs. I believe Thoropass is still developing their platform and saw substantial improvement over the 6 months I've been using it.
What problems is the product solving and how is that benefiting you?
I used Thoropass to complete a SOC1 and SOC2 cybersecurity audit. We're an early-stage biotech company (2 employees) and the audit is part of the MVP that gets us into pharamaceutical companies.
Thoropass SOC2 Process Review
What do you like best about the product?
Easy to use platform that really hit the mark. We onboarded Thoropass to help guide us through our compliance journey and it really provided everything we needed and educated our team along the way. The layout and roadmap are intuitive and you see how your compliance program is documented easily by following their process.
What do you dislike about the product?
The platform underwent a rebranding and had some UI updates. In the end I think they were all good updates there was just some change management during that time and understanding how my use of the platform changed with the updates.
What problems is the product solving and how is that benefiting you?
Thoropass is helping us document that we adhear to our documented policies and procedures. The automation of evidence collection and an intuitive guide that walks you through the necessary evidence for each step was worth it.
Easy to use compliance platform
What do you like best about the product?
Thoropass contained everything needed to get SOC 2 certified in one low cost platform.
What do you dislike about the product?
The all inclusive nature of Thoropass made it difficult to have alternate options and meant only their method was valid.
What problems is the product solving and how is that benefiting you?
SOC 2 certification
Great SOC2 partner for small startups!
What do you like best about the product?
In no particular order, here is what I really liked about Thoropass:
* CSM at Thoropass seem to have audit/compliance background, which helps significantly when going through the certification process - like quick turnaround on certain questions, etc.
* Platform isn't perfect, but having something to keep track of progress is really useful
* Breaking down the mountain of work you have to do to achieve SOC2 into dividable tasks
* The auditor we've worked was very prompt, professional and very knowledgeable!
* I found the offering to be pretty affordable compare to the competiton which is important for the company of our size (small startup)
* CSM at Thoropass seem to have audit/compliance background, which helps significantly when going through the certification process - like quick turnaround on certain questions, etc.
* Platform isn't perfect, but having something to keep track of progress is really useful
* Breaking down the mountain of work you have to do to achieve SOC2 into dividable tasks
* The auditor we've worked was very prompt, professional and very knowledgeable!
* I found the offering to be pretty affordable compare to the competiton which is important for the company of our size (small startup)
What do you dislike about the product?
Again, in no particular order here is where Thoropass can improve:
* On the tasks side, get more explicit about what is being asked in the description. I had to routinely get on a meeting with CSMs to cover milestones ahead of where I was working and take notes to understand what is exactly being asked for. This worked well, but I wish the Milestones were more self-documenting.
* On the platform side, there are little bugs/issues like % completion not miving for certain views. Also I can't deep link to certain pages. Also, I wish there was more options to connect to external training vendors (or API to automate it).
* Sometime when I ask a question in the platform I had to follow up via email to get it answered. We did go through a couple of CSMs in our time, so some of it might be attributed to handoffs.
* On the tasks side, get more explicit about what is being asked in the description. I had to routinely get on a meeting with CSMs to cover milestones ahead of where I was working and take notes to understand what is exactly being asked for. This worked well, but I wish the Milestones were more self-documenting.
* On the platform side, there are little bugs/issues like % completion not miving for certain views. Also I can't deep link to certain pages. Also, I wish there was more options to connect to external training vendors (or API to automate it).
* Sometime when I ask a question in the platform I had to follow up via email to get it answered. We did go through a couple of CSMs in our time, so some of it might be attributed to handoffs.
What problems is the product solving and how is that benefiting you?
We were using Thoropass to help us obtain SOC2 Type 1 and Type 2 reviews. This meant using both the platform as well as CSM and eventually auditors provided by Thoropass
Simple way of aquiring SOC2 Type1
What do you like best about the product?
Very simple system that quickly shows you what you're missing on your certificate.
What do you dislike about the product?
Sometimes I get lost on what exactly are my next steps, then I can just talk to the online chat or dedicated CSM.
What problems is the product solving and how is that benefiting you?
Simplifying our Audit process to get SOC2 Type1 and 2.
Good for teams lacking security professionals, but requires commitment
What do you like best about the product?
Thoropass did a good job breaking down the basics for people who had never gone through a certification effort before and their platform was straightforward to use.
What do you dislike about the product?
Don't think that this will solve compliance overnight, it requires a lot of effort from your team to make changes, submit documentation, etc. Certification efforts are going to be a sizable commitment not matter what platform you use.
What problems is the product solving and how is that benefiting you?
The business problem that Thoropass is helping with is having all our security components in a single place for our audits. It is certainly faster than trying to track all this manually.
Head of Product
What do you like best about the product?
The team was insightful and extremely helpful in guiding our team through the SOC 2 process.
What do you dislike about the product?
The dashboard can be a little clunky but truly everything was amazing.
What problems is the product solving and how is that benefiting you?
They are helping us go from 0 to completing SOC 2 type 1 in 6 months.
showing 201 - 210