Secureframe

Pros: The customer support is top notch. The platform itself is pretty easy to follow. The automation process for sending reminders is helpful.

Cons: The initial workload, but that is part of the equation. Future years will be easier now that we have sysytems established.

Pros: Secureframe made it easy to for our team to work together collaboratively to achieve our SOC2 Compliance. We've been able to manage policies, address risks, and get support through implementation and recertification.

Cons: We haven't hit any major roadblocks. Finance would always be happier if our spend on security was a bit lower, but we've found that Secureframe provided a great value compared to other products we considered.

Pros: It is really easy to use, even if you are not at all familiar with anything surrounding security. Their templates for the policies do the bulk of the heavy lifting for you.

Cons: I thought that it could have auto-filled information a bit easier. The tokens are good, but not as robust as they could be.

Pros: I like that it offers a single source of truth for security reviews and has an easy onboarding, set-up, and log-in experience.

Cons: The AI-generated answers were sometimes incorrect or missing to common security review questions that we would receive.

Pros: I really appreciate the automated tests that run daily and the system integrations. I like knowing that the system is constantly monitoring things, so I don't have to worry about it. The integrations save us from spending human hours digging into our code to ensure we're building our infrastructure securely and in a repeatable manner. The automated tests also give me confidence that we are adhering to our company policies and security best practices. Additionally, it was very easy to set up and configure Secureframe, with nice checklists and very helpful documentation available online whenever we had questions.

Cons: I think there could be better, more granular notification settings and the ability to integrate notifications about test failures into Slack.

Pros: Valued both the support from the Secureframe team and the tool automation in helping our company achieve SOC 2 Type II certification.

Cons: I really do not have anything negative to say about Secureframe. I did at times have difficulty assigning / delegating some control testing to other team members.

Pros: Supplier and vendor management/form creation are really easy to use. Everything is all in one place, and we don't have to worry about manually maintaining documents.

Cons: I don't really have any cons as far as I know. I really like the platform, and I find that it does what I need it to

Pros: -Straight foward UI interface to ensure you meet your SOC 2 (and other) compliance needs and requirements -Great public documentation about SOC 2 and compliance and the process -Responsive customer success support -Pretty seamless SOC 2 audit process using their recommended auditor firms -Lots of potentially add on features/AI if you need them

Cons: -A number of growing pains early on last year as they evolve with bugs in integrations, the UI, and other features over the year of using it -Slower response/fixes for some reported technical bugs/issues -Limited number of integrations compared to Vanta -Auditor still asked for some evidence that the platform never flagged as required before the audit -Same price as competitors despite being less mature

Pros: Automated Controls and monitoring. Ans the ease of use when going thru an audit. Giving access to evidence to the audit team.

Cons: Wish Secureframe has a User Access module that would help with Quarterly reviews. Something I hope they get on their road map.

Pros: As an HR Rep, I've primarily used SecureFrame for our SOC 2 Compliance data. So far, the platform has been remarkably user-friendly. Creating folders and adding necessary documentation - like screenshots and reports - is easy and provides an excellent way to keep everything organized.

Cons: The only minor drawback I've encountered is in the report/doc upload process. When using the dropdown menu to categorize the file, I found that the available options didn't always accurately reflect the type of report/doc I was uploading. It would be highly beneficial if we had the ability to add or customize more choices in that dropdown, perhaps through an Admin function (which I don't currently have).

Pros: Secureframe is easy to use, intuitive, and highly reliable. The platform offers a clean, user-friendly interface that simplifies complex compliance tasks such as evidence collection, policy management, and continuous monitoring. Its automation features reduce manual work, making it easier for teams to maintain compliance with frameworks like SOC 2, ISO 27001, HIPAA, and more. Secureframe also provides real-time system health insights, helping organizations quickly identify and address potential risks. Its strong customer support and reliable performance ensure smooth onboarding and consistent operation, making it an excellent choice for teams seeking a dependable compliance management solution.

Cons: For first-time users or teams new to compliance frameworks, the initial setup and dashboard navigation can feel a bit overwhelming. Fortunately, Secureframe’s onboarding team and knowledge base provide strong guidance to help users get up to speed quickly.

Pros: Secureframe allows us to monitor our SOC2 compliance status with ease and offers helpful insight to solve discrepancies.

Cons: Sometimes their fleetdm agent is not as helpful in reporting as one would expect. How assets need to be assigned only to administrators of the system is annoying. The security awareness course could have been better

Pros: The platform is very user friendly and templatized so it makes policy review and tests straightforward. Our CSM is extremely knowledgeable and quick to respond to questions over email.

Cons: Inviting employees to acknowledge policies can be confusing, however, your CSM will be happy to help over email.

Pros: Intuitiveness of the software and the comprehensive suite of features available to cover the bases needed for cybersecurity & compliance

Cons: Can venture into 4th Party Risk Management and help closing the loop with vendors and their respective subvendors

Pros: Secureframe offers excellent value for money with an easy-to-use interface and strong customer support. It simplifies risk management, form creation, and supplier/vendor management. What I like most is how it brings all these features together, making compliance and security straightforward and efficient.

Cons: Secureframe already offers a solid range of integrations, but expanding them further could enhance flexibility. Some advanced features may take time to learn, but these are minor drawbacks compared to its overall functionality and ease of use.

Pros: Secureframe really stood out in terms of ease of use — the interface is clean, intuitive, and well-organized, even for teams that aren't deeply technical. The value for money was clear from the start, especially considering how much time and stress it saved us during our compliance journey. Their customer support was also top-notch; they were responsive, knowledgeable, and genuinely felt like an extension of our team. From a risk management perspective, the automated alerts and continuous monitoring helped us proactively identify issues before they became problems. The ability to streamline supplier and vendor management in one place was a huge bonus, especially when collecting documentation or assessing third-party risks. Lastly, the form creation tools — while not overly complex — were flexible enough for our team's needs and kept everything centralized and audit-ready.

Cons: While Secureframe covers a lot of ground, there were some areas where it felt slightly rigid — especially when trying to customize workflows beyond the standard use cases. A few of the form creation features could use more flexibility or deeper customization. Also, some integrations for supplier and vendor management required a bit of manual follow-up, which slowed things down.

Pros: $81

Cons: The integration catalog, while comprehensive, doesn't cover every tool we use. We had to handle some evidence collection manually for a few legacy systems, which wasn't ideal but manageable. Some of the automated tests can be overly sensitive, flagging minor configuration changes that don't actually impact compliance. This creates some noise that requires manual review to determine if action is truly needed.

Pros: The UI is intuitive, the automated compliance test coverage is extensive, and it offers clear guidance on how to pass each test, along with real-time feedback on changes and evidence uploads.

Cons: The integration library is more limited compared to competing solutions, with many commonly used tools not yet supported.

Pros: The tools for tracking compliance over all the necessary fields is great and easy to use. It has been a great help while we've been establishing our security framework and will be of great use when we are maintaining and tracking compliance. Support has also been amazing and prompt.

Cons: The integrations can be wonky and sometimes feel superfluous. When getting into integrations things can get more confusing and arcane, requiring support to fix or clear things up.

Pros: Its ease of use and how it simplifies the PCI compliance process. Its been a invaluable resource to use to manage and oversee our compliance journey as well as a fantastic tool for implementing policies and mandatory training for employees. Overall, we could not have completed our PCI compliance without SecureFrame's well thought out UI and access to helpful consultants.

Cons: Only thing I like least about SecureFrame is maybe the amount of time I get to spend with a consultant, which is a hard limit of 30min but even then, its not a huge deal as most of the time 30min is all you really need. Even then, you can book time as often as you like.

Pros: The platform and support have been excellent. It's easy to navigate and when we don't understand the process we have strong resources to help us make solid decisions.

Cons: The platform is great, but still a steep learning curve for non technical roles. The AI questionnaire tool is still in development, but that will be a strong feature once it's fully functioning.

Pros: Pretty straightforward with the tasks you need to do. The UI is pretty simple as well. I get proper reminders for when I have a new task to do.

Cons: I think the text could be displayed different or in a more clear fashion. Something with the color contrast it makes it pretty difficult to read.

Pros: Easy to use and efficient to track compliance issues. There’s also overlap for soc 2 type 2 needs for the future.

Cons: There’s no direct integration into our project management tool to create tickets into the backlog which we manually must create.