Secureframe Reviews & Product Details

I like the easy use of Secureframe when working with audit firms. It's great that the team we partnered with can pull the evidence straight down from us, making the whole process smoother. I find the automated testing feature easy to use, which the DevOps team was able to implement efficiently. The ability to tie controls directly into GCP or AWS environments and receive warnings when controls aren't passing makes compliance checks a lot easier. Providing access to the tool for auditors, allowing them to pull down the evidence they need, simplifies the process significantly. Review collected by and hosted on G2.com.

I would like to see a better user access review program. That would help with one of our controls and is something that could definitely be improved. Review collected by and hosted on G2.com.

Honestly, before we started using SecureFrame, just thinking about SOC 2 made me anxious. As someone handling the process, I was dreading drowning in spreadsheets, chasing down documents and constantly worrying about missing deadlines. But SecureFrame turned all of that around.

What really stood out was how intuitive and guided the whole experience felt. The platform is so easy to use, it takes something as overwhelming as compliance and breaks it down into simple, bite-sized steps. Instead of getting lost in dense regulatory jargon, I had a clear checklist to follow. And the setup was smooth. We connected tools like Google Workspace and AWS in minutes, and SecureFrame automatically started gathering the evidence we needed. That alone saved me hours of manual work, no more digging through files or writing policies from scratch or follow ups on multiple fronts with different teams.

I also can’t say enough good things about their support team. They were quick to respond, super knowledgeable and always gave me practical advice. It never felt like I was dealing with some faceless vendor, they were more like partners, genuinely invested in helping us succeed. There’s so much packed in policy management, security training tracking, vendor assessments, onboarding checklists. It’s like having a compliance command center. Review collected by and hosted on G2.com.

At times, the number of features can feel overwhelming, especially for new admins learning the platform. There aren't many downsides but some access reviews still require a bit of manual oversight, like verifying user permissions across systems and asset inventory.

Additionally, in terms of Frequency of Use, I found the bulk of my active time was during the initial setup and preparing for the audit. After the initial heavy lifting, the ongoing maintenance is so streamlined that I sometimes found myself needing to actively remind myself to check in on the dashboard. This is, of course, a testament to how well the platform automates things, but it could benefit from even more prominent ongoing prompts for regular check-ins to ensure nothing is missed between major audit milestones. Review collected by and hosted on G2.com.

There are quite a few features i liked about secureframe.

1. Seamless integrations with a number of apps, tools and platforms.

2. Well documemnted and structured application format. Every aspect of the compliance audit readiness tasks are very clearly presented with instructions.

3. The controls and tests are also structured in a very precise format.

4. There tests post integrations are always updated and can help with the state of the environment.

5. They have AI validations which are very helpful.

6. Secureframe themselves are very helpful and respond immediately. Review collected by and hosted on G2.com.

There are a few features I haven't yet found on the platform, but since I haven't explored the documentation, I'm confident I'll find the answers there. At this point, there's really nothing that I dislike. Review collected by and hosted on G2.com.

I really appreciate the automated tests that run daily and the system integrations. I like knowing that the system is constantly monitoring things, so I don't have to worry about it. The integrations save us from spending human hours digging into our code to ensure we're building our infrastructure securely and in a repeatable manner. The automated tests also give me confidence that we are adhering to our company policies and security best practices. Additionally, it was very easy to set up and configure Secureframe, with nice checklists and very helpful documentation available online whenever we had questions. Review collected by and hosted on G2.com.

I think there could be better, more granular notification settings and the ability to integrate notifications about test failures into Slack. Review collected by and hosted on G2.com.

As a security-focused startup building authentication infrastructure, achieving SOC 2 Type II was non-negotiable. Secureframe made the process far less daunting, especially given this was our first SOC2 rodeo! The platform gives us a clear, user-friendly dashboard for tracking compliance progress and ongoing control health, which makes board and investor updates simple and credible. Their automated vendor security assessments and seamless integrations with our cloud environment saved countless hours. Most importantly, their team felt like an extension of ours, guiding us through policy creation, evidence collection, and auditor prep with remarkable responsiveness. Review collected by and hosted on G2.com.

A very tiny nitpick: GitHub branch rule tracking sometimes flags “failures” on brand new repos before any files or rules exist. Tweaking the logic for repo setup timing would smooth this out. Review collected by and hosted on G2.com.

I like using Secureframe for its user-friendly interface, which makes it easy to work with. The customer support service is also great, providing assistance when needed. I really value the dozens of integrations it offers, especially for monitoring and evidence collection. The vendor risk assessment module streamlines the questionnaire process, and the integration ecosystem covers major enterprise tools like Microsoft 365, Google Workspace, JumpCloud, Atlassian, and Falcon. Secureframe also assists with policy development, the security training annual program, and preparation for different frameworks like SOC 2, ISO 27001, and GDPR. The initial setup was easy, with support from Secureframe's customer success team. Review collected by and hosted on G2.com.

N/A Review collected by and hosted on G2.com.

Secureframe has been a solid partner in our compliance journey. The platform is intuitive and covers a wide range of frameworks, making it easier to manage SOC 2, ISO 27001, and vendor risk assessments in one place.

- The automation of evidence collection and control testing is a huge time-saver.

- Dashboards are clean and easy to navigate.

- Customer Success Managers are responsive and knowledgeable, they’ve been great at helping us troubleshoot and stay on track. Review collected by and hosted on G2.com.

System Glitches: Like many SaaS platforms, occasional bugs or glitches occur. However, these are typically resolved quickly by the support team.

Questionnaire Upload Limitations: The questionnaire upload feature could use improvement, it doesn’t always read the uploaded content accurately, which can be time-consuming to fix manually. Review collected by and hosted on G2.com.

Secureframe has been very helpful for our small team's compliance efforts. We use it for SOC II Type 1 and Type 2 audits, and it's made what would have been a complex, time-consuming process very manageable. The platform streamlines our compliance workflows and gives us confidence that we're staying on top of all the necessary requirements. The automated monitoring and evidence collection features have saved us countless hours compared to manual tracking. What really stands out is how the platform seems designed to scale with growing companies - as we expand, we can see Secureframe growing with us rather than becoming a limitation. Review collected by and hosted on G2.com.

There's not much to complain about. I sometimes find the navigation a bit confusing and have to hunt to find something I know is in the system somewhere but as far as covering our needs we haven't run into any issues. Review collected by and hosted on G2.com.

How it integrates with our infrastructure and detects the drifts that affects our compliance status. And also, it has a very good structure for the task we had to complete towards our compliance journey. Grouping tests into controls and other structure that is really helpful to tackle the request and track accordingly. Review collected by and hosted on G2.com.

It take a long time to refresh when it is trying to sync with the infrastructure and sometimes even freezes. Review collected by and hosted on G2.com.

I really like how Secureframe makes it easier to collect all the necessary documents and integrates with the platforms we need for audits. The ease of use is a big plus, as the interface is clear and intuitive, so I never have to dig around to find what I'm looking for. It's great that Secureframe has integrations with everything we need, so we don't have to manually copy over data, which saves us a lot of effort. Also, the initial setup was very easy, which was a relief. Review collected by and hosted on G2.com.

Everything worked as needed Review collected by and hosted on G2.com.