My org is in a position where we'll need to get SOC II or ISO 27001 certified in the next year. I've been doing some research on the easiest way to go about this, and discovered secureframe (https://secureframe.com/). It looks like it is a platform that helps you automate/track some of the compliance tasks, but doesn't actually do the audit (they have partners that work through the platform). I'm wondering if... Source: over 1 year ago

Hi, founder of Secureframe (https://secureframe.com) here. Secureframe helps streamline compliance across SOC 2, ISO 27001, HIPAA, PCI DSS, and more. There are so many accurate responses in this thread. Like many have mentioned, SOC 2 is indeed not a prescriptive framework. Much of the confusion behind SOC 2 stems from that fact. It allows you to customize your InfoSec program to your company's needs. As we know,... - Source: Hacker News / over 2 years ago

Hi we want to decrease our cost of saas tools and thinking of buying saas manmagement platform. Short list is zylo and torri. https://zylo.com. - Source: Hacker News / about 1 year ago

Something similar to this already exists. Source: almost 2 years ago

It's also called "SaaS management" or "software asset management" e.g. zylo.com bettercloud.com or blissfully.com. Source: over 2 years ago

I'm coming from the perspective of a smaller-medium sized business, so something really comprehensive/expensive like Zylo or Bettercloud might be overkill or simply not affordable unless you are enterprise-sized. For bigger companies though, it's the perfect solution and there are a lot of helpful features for big orgs. Source: over 2 years ago