Reviews from AWS customer
0 AWS reviews
-
5 star0
-
4 star0
-
3 star0
-
2 star0
-
1 star0
External reviews
1,182 reviews
from
External reviews are not included in the AWS star rating for the product.
Safeguarding Medical Records in Today’s Retail Climate
What do you like best about the product?
Just so we’re clear here, as an OD supporting a retail brand I am ethically responsible to protect all patient health information (PHI), meaning any eye and Rx records. It’s a clear and easy to follow framework that really brings the digital side of our business into compliance with HIPAA. It’s one less thing for me to worry about when a patient tries our home try-on service or shares their prescription information on our site that they are using the best digital security model. The product makes complicated set of needs simple for our whole team.
What do you dislike about the product?
The clinical staff educational packages, albeit comprehensive are in need of ways to make them more interesting and for all types of learning styles to understand Extensive training modules were delivered.
What problems is the product solving and how is that benefiting you?
It addresses the key issue of how to facilitate healthcare compliance and retail consumer experience. It maintains that we are in compliance with our ethical and legal responsibilities without compromising the ease, convenience and innovation our patients have come to expect. This does a disservice to our practice because we cannot safely provide the kind of services patients want, while at the same time protecting their PHI.
Secureframe Makes Cloud Compliance Simple and Stress Free
What do you like best about the product?
The Platform is super easy to use and packed with helpful features. we love how it connects with our cloud tools and keeps everything organized. Their support team is always helpful, and the policy templates saved us tones of time. We check it almost daily it's become a key part of our workflow.
What do you dislike about the product?
Some alerts can be a little noisy and a few integrations needed extra setup. Turing things just right takes some time, and for teams with a complex cloud setup, Onboarding can feel a bit slow. it's not the cheapest tool out there, but it's worth it for what we get,
What problems is the product solving and how is that benefiting you?
Secureframe takes the chaos Out of staying compliant in the cloud. for a retail business like ours, it automates evidence collection, monitors configs and helps us stay audit ready without wasting. it's cut down our manual work and k=lets us focus more on running the business.
Secureframe Simplifies Audit Management For Our Healthcare Team.
What do you like best about the product?
The Platform is user friendly, even for non tech staff, we use it daily to monitor controls, check reports and stay audit ready. Their templates, real time dashboards and integrations with our systems [ Like HR and Cloud Tools} are very helpful. Customer support has also been responsive and knowledgeable throughout.
What do you dislike about the product?
Some integrations took extra setup, especially with our customer systems. It also takes time for new users to understand all the audit terms and controls. The pricing can feel high if you want advanced reporting features, but overall, it's been worth it for the peace of mind during audits.
What problems is the product solving and how is that benefiting you?
Secureframe helps us manage audits with less stress. Before, audit prep was messy lots of manual work and chasing documents. Now, we track everything in one place, automate evidence collection and get ahead of issues before audits time. it's saved our team time and improved compliance visibility.
Our supply chain and customer trust in eyewear retailing are paramount to us.
What do you like best about the product?
As a CEO operating in the eyewear retail industry, where we work with sensitive customer information (facial measurements for virtual try-on) and vast networks of suppliers, Secureframe’s Third-Party Risk Management tool is invaluable to us. It's also in a class of its own when it comes to the user-friendliness of supplier evaluation and monitoring - whether your suppliers are lensmakers or logistics partners. It was easy to set up, with pre-made questionnaires and automations that fit in well with how we worked. Archer staff customize a retail-specific list of questions, real-time risk scoring and collection of evidence make sure we do not overlook a compliance gap. Integration was straightforward with our ERP and e-commerce systems.
What do you dislike about the product?
The CAPEX was an important one time cost but a small consideration in the overall risk reduction and efficiencies that it provided. I’d also love to see templates for niche suppliers (like opticalrtners) since other suppliers just don’t fit in most instances.
What problems is the product solving and how is that benefiting you?
Secureframe addresses one of the biggest challenges to securing, our extended supply chain. We have home try-on services and virtual try-on technology, and need to ensure that we put every third-party partner through rigorous security and privacy criteria. Secureframe automates vendor security questionnaires, collects SYS and risk assessments on autopilot, monitors your vendors continuously for risks, and makes it easy to provide auditable evidence of your cybersecurity efforts. This is a win-win for us; we protect our customers’ personal data, reduce operational risk and build brand confidence--three factors that underpin GDPR, CCPA and SOC 2.
Turning Compliance Chaos Into Calm With Secureframe
What do you like best about the product?
Secureframe didn't just plug into GitLab it understood it. Setup was intuitive and the UI actually made audit tracking feel manageable. Their reminders, dashboards and workflows reduced fire drills before audits. It blended into our existing tools without breaking anything.
What do you dislike about the product?
If I had to nitpick, initial policy templates templates felt generic until we customized the,. Also while support was quick, the in app help docs could go deeper for some niche GitLab CI/CD scenarios. But nothing slowed us down just a few bumps during onboarding,
What problems is the product solving and how is that benefiting you?
We Needed a clear way to manage audits for our GitLab Workflows without adding overhead to our dev team. Secureframe helped us centralize evidence collection, flag audits risks early and maintain real time compliance posture freeing us from messy spreadsheet tracking.
A Reliable Partner in Navigating Third Party Risk with Confidence
What do you like best about the product?
Secureframe is a easy to use platform, and their team has been incredibly helpful whenever we had questions.
What do you dislike about the product?
The setup had a few hiccups, especially connecting with some internal tools, but once it was running, things smoothed out. it's been a reliable tools that's taken a big load off our compliance and security teams.
What problems is the product solving and how is that benefiting you?
Working with Secureframe made managing third party and supplier risk at sorcero so much easier. Before, it felt like we were constantly scrambling to vet vendors and track down security documentations. Now everything's in one place and their system helps us spot risk early without all the manual work.
Extends Our Compliance Oversight to the Entire Software SupplyChain
What do you like best about the product?
We like Secureframe’s software supply chain and vendor risk functionalities a lot. We do not just write our own code – we have a huge number of third-party libraries and services we rely on. So managing that risk is critical. Secureframe automates the security questionnaires for our vendors and provides insights into their compliance posture.
It easily integrates with our GitHub organizations and then monitors for vulnerabilities in our dependencies. This holistic view is very helpful for a financial services company like ours, where a breach in a third-party tool could be as devastating as in our own core platform.
It easily integrates with our GitHub organizations and then monitors for vulnerabilities in our dependencies. This holistic view is very helpful for a financial services company like ours, where a breach in a third-party tool could be as devastating as in our own core platform.
What do you dislike about the product?
While the vendor risk database is pretty extensive, some newer, niche blockchain infrastructure providers can have very little data in it. This puts the onus back on us to do detailed assessments in some cases.
What problems is the product solving and how is that benefiting you?
It resolves the blind spot of third-party and open-source risk.
In DeFi sector, there is a saying, that you have to trust but verify. Secureframe gives us the framework for that verification. That is, every link in our technical chain is secure certified. This protects our platform from upstream vulnerabilities and gives regulators an excellent clear view of how we manage our full software supply chain.
In DeFi sector, there is a saying, that you have to trust but verify. Secureframe gives us the framework for that verification. That is, every link in our technical chain is secure certified. This protects our platform from upstream vulnerabilities and gives regulators an excellent clear view of how we manage our full software supply chain.
Slashed Our Third-Party Vendor Onboarding from Weeks to Days.
What do you like best about the product?
The vendor risk management module alone is worth the price of admission. Any retail project that requires us to bring in a new supplier, payment processor, marketing tool, we now have a standardized automated security assessment process to kick off. It’s so easy to use! I launch a detailed security questionnaire to a vendor in a few clicks and track progress in real-time. This has really sped up our onboarding timelines. The customer support team helped us customize these assessments for the unique risks in retail. It was very easy to integrate into our procurement workflow.
What do you dislike about the product?
The platform is so powerful that it’s probably overkill for assessing very low-risk vendors (like a one-time event caterer). A lite assessment path would be useful.
What problems is the product solving and how is that benefiting you?
We had a massive project bottleneck — security reviews of new vendors. This was manual and slow and was holding up critical projects. Now, we have a fast, rigorous and documented process that meets all our compliance needs and allows projects to get off the ground faster — this fits into our overall time-to-market metric for new initiatives.
We Built In Compliance Right Down to Our DevOps Pipeline
What do you like best about the product?
It was its evolution / design as API-first and extreme ease of automation into our CI/CD tools first and foremost (Jenkins, GitLab). We’ve even gone so far as to bake compliance checks into our deployment pipelines. Now, a pull request cannot be merged if it introduces a security misconfiguration that would have broken a SOC 2 control. This “shift-left” has been revolutionary. The usability for my team is great; it speaks our language with IaC scanning as well as real time alerts. Our AWS environment is now silently being collected, automatically updating with our evidence to avoid this being a "4 x year" process.
What do you dislike about the product?
The Terraform provider is also still a bit green. We can work around with some resources but we’d love to have all available feature parity with Web UI ( in this case Dashboard ) so that hey, we could truly manage our compliance posture as code.
What problems is the product solving and how is that benefiting you?
It removes the “audit panic” that jangles around our sprint cycles. We have a system in which there is always on, always audit-ready data and never a need to go through the laborious process of collecting evidence for auditors. This is perfect for our blockchain lending platform since every deployment is by default complaint (a must-have when dealing with financial data and crypto collateral).
Easy to use, SOC2 complains fast
What do you like best about the product?
Easy to use, follow the Security complains in a easier way. Integration with AWS, GitHub, ClickUp and other tools is smooth
What do you dislike about the product?
Some of the AWS test are not 100% accurate but they keep improved
What problems is the product solving and how is that benefiting you?
Speed up product compliance to be SOC2 Type 1 and Type 2 tests
showing 191 - 200