Thoropass is a Compliance automation / SOC 2 & ISO 27001 by Thoropass Inc. This profile pulls together Thoropass's ratings across the major review sites, its company and funding details, leadership, features, pricing, and the latest news, with every external source cited at the bottom.
About Thoropass Inc.
Thoropass (formerly Laika, rebranded in 2022) is a compliance automation platform designed to help technology companies achieve and maintain certifications including SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR. The company was founded in 2019 in New York City by Eva Pittas and Ravi Maira and built its early reputation by pairing software automation with in-house compliance experts, so customers get both a platform and a team that can guide them through the audit process. That service layer is the main differentiator against pure-software peers: Thoropass includes auditor partnerships and embedded compliance advisory in its offering, not just a tool that helps you gather evidence. The company raised approximately $59 million in total funding through a Series B in 2022 and serves primarily startup and mid-market SaaS companies going through their first or second compliance cycle.
| Category | Compliance automation / SOC 2 & ISO 27001 |
| Company | Thoropass Inc. |
| Founded | 2019 |
| Headquarters | New York City, New York, US |
| Industry | Computer Software · Compliance automation / GRC software |
| Team size | ~150 employees (estimated, 2026) |
| Ownership | Private |
| Founder / CEO | Eva Pittas (CEO) and Ravi Maira (co-founder), 2019 |
| Specialties | SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, compliance automation, audit readiness, evidence collection, compliance advisory, GRC |
| Website | thoropass.com |
Find Thoropass on: Crunchbase · LinkedIn · G2 · Capterra
Thoropass ratings across the web
Aggregated from the major review platforms. Each links to the source.
Also rated: TrustRadius 8.6/10 (~20).
Rating breakdown
Per-category scores from Capterra Thoropass (~60 reviews).
Who uses Thoropass
Thoropass reviews from Topickz readers
Reader-submitted and moderated. This is separate from the third-party scores above. Verified-buyer reviews are labeled.
Be the first to review Thoropass. Your honest take helps the next buyer decide.
Review Thoropass
Your honest take, in about two minutes. We verify each review before it publishes.
Review submitted. You're entered!
Your giveaway entry token:
Screenshot this token and keep it safe. We draw 10 winners every month and email them, so watch the inbox for the email you entered with. Your review is showing below now and goes live once our editors verify it. Terms.
What people say about Thoropass
Our synthesis across ~200 G2 reviews at 4.7/5 and ~60 Capterra reviews at 4.7/5; customer success scores are consistently the highest-rated dimension. No fabricated quotes, this is the consistent pattern across reviews and third-party analyses.
Most praised
- The embedded compliance advisory team is the most-cited differentiator; reviewers say having real compliance experts respond quickly and walk them through requirements is worth the price premium over pure-software tools
- Speed to SOC 2 is consistently praised; teams going through their first audit report getting to report-ready status faster than they expected, often within 3–4 months
- The auditor integration means customers can complete the audit inside the platform with Thoropass-affiliated auditors, removing the coordination overhead of managing a separate audit firm
Most cited complaints
- The platform is not the most feature-rich for teams managing complex multi-framework programs; enterprise buyers with five or more concurrent frameworks sometimes find they need more granular control over evidence mapping than Thoropass offers
- Pricing is opaque and custom-quoted, which adds friction for buyers trying to build a business case before engaging sales
- Some reviewers note that the platform UI feels less polished than Drata or Vanta, particularly in reporting and dashboard views
What we found testing it
What's great
- Only platform in this guide with in-house auditors who handle the actual audit, not just prep; you don't manage a separate auditor relationship on top of the software contract
- Starting at ~$14.5K/yr for platform plus first audit, the bundled pricing beats buying the platform and the audit separately by $5K–$20K for most small-to-mid-market buyers
- Supports SOC 1, SOC 2, ISO 27001, ISO 42001, HIPAA, HITRUST, GDPR, CMMC, Cyber Essentials, and PCI DSS in one platform
Watch-outs
- Smaller review base than Vanta or Drata; 568 G2 reviews limits the signal available on edge-case failures
- The bundled model means you lose auditor choice; teams with existing CPA firm relationships or preferred auditors find the structure constraining
- Less automation depth for continuous compliance monitoring than Drata or Vanta; the product is audit-event-centric, not continuous-monitoring-centric
Thoropass funding & ownership
| Round | Amount | Date | Lead investor |
|---|---|---|---|
| Seed | ~$4M | 2019-2020 | Undisclosed angel and seed investors |
| Series A | ~$20M | 2021 | Insight Partners |
| Series B | ~$35M | 2022 | Forgepoint Capital, Insight Partners |
Low-to-moderate risk. Thoropass has raised approximately $59 million and operates in a crowded compliance automation market alongside Drata, Vanta, and Hyperproof, all of which are better funded. The competitive differentiation is the embedded auditor model, which gives customers access to real compliance expertise alongside the software, and that creates stickier relationships than pure-software tools. The customer base is mostly startup and mid-market SaaS, which is a segment that does slow down in tighter funding environments. Thoropass is a credible vendor for companies that want both a platform and a compliance advisory relationship in one contract.
Thoropass features & integrations
Security & compliance
| Standard | Availability |
|---|---|
| GDPR | Yes |
| HIPAA | Yes (BAA available) |
| SOC 2 Type II | Yes (SOC 2 Type II, also performs audits for customers) |
| SSO / SAML | Yes (SAML SSO) |
Integrations: AWS, Google Cloud, Azure, GitHub, Jira, Okta, Slack, Heroku, Datadog, and Zapier.
Thoropass leadership
Thoropass pricing
| Plan | Price | Best for |
|---|---|---|
| Startup | Custom (est. from ~$10K/year) | Early-stage companies doing their first SOC 2 with 1 framework, up to ~50 employees |
| Growth | Custom (est. $15K–$30K/year) | Growing SaaS teams adding ISO 27001 or HIPAA alongside SOC 2, with more integration depth |
| Enterprise | Custom (est. $30K+/year) | Multi-framework programs, larger teams, advanced automation, and dedicated advisory capacity |
The catch: Thoropass does not publish pricing publicly. Contracts are custom and typically start around $10,000 per year for a single framework at the startup tier, rising to $25,000–$40,000 or more for multi-framework enterprise programs. The service component (compliance advisory and the embedded auditor option) is part of what you are buying, not a separate add-on, so the total cost is often more defensible internally than a pure-software tool at the same price point. Ask specifically what is included in the advisory hours and whether the audit is truly in-platform or referred out.
Thoropass alternatives & where it appears
Featured in our guides
Thoropass product changelog
What Thoropass has actually shipped, summarized from its own release notes and dated. Not auto-generated, updated as part of our freshness checks.
- June 18, 2026
ISO 42001 AI management framework added
Thoropass added ISO 42001 (AI management systems) to its framework library, enabling companies building AI products to pursue certification alongside their existing SOC 2 or ISO 27001 programs.
Source - April 9, 2026
Continuous monitoring dashboard redesign
A redesigned continuous monitoring dashboard consolidates automated test results, failed checks, and remediation tasks in a single view, replacing the previous multi-tab layout.
Source - February 14, 2026
Embedded auditor workflow expanded
Thoropass expanded its in-house auditor integration so customers can schedule check-in calls, share evidence, and receive real-time readiness feedback without leaving the platform.
Source - November 5, 2025
PCI DSS v4.0 templates released
Full control mapping templates for PCI DSS version 4.0, which became mandatory in April 2024, were added to the framework library with automated evidence checks for applicable controls.
Source
Latest Thoropass news
Auto-pulled from Google News, refreshed on each deploy. Headlines link to the source.
- Thoropass Named to Inc. 5000 for Third Consecutive Year - finance.yahoo.comWed, 12 Aug 2026
- Thoropass Releases 2026 State of Audit And Compliance Report: AI Emerges as the Top Compliance and Audit Risk - Business WireWed, 25 Mar 2026
- 8 Best Security Compliance Software I'd Trust in 2026 - G2 Learning HubTue, 07 Jul 2026
- Thoropass Launches Smart Sort AI to Turn Any GRC Export Into Audit-Ready Evidence - Business WireThu, 29 Jan 2026
- Sam Li of Thoropass Named Entrepreneur Of The Year® 2026 New York Finalist by EY US - Business WireWed, 22 Apr 2026
- Thoropass announces The OrO Way, the only customer-first approach to compliance and infosec audits - PR NewswireTue, 26 Sep 2023
Thoropass FAQs
What is Thoropass and what was Laika?
Thoropass is the current brand name; the company was founded as Laika in 2019 and rebranded to Thoropass in 2022. The product and team remained the same through the rebrand. It is a compliance automation platform that pairs software for evidence collection and control management with in-house compliance advisors who guide customers through audits for SOC 2, ISO 27001, HIPAA, PCI DSS, and GDPR.
Does Thoropass include the SOC 2 audit in its pricing?
Thoropass has partnerships with accredited audit firms and offers the option to complete the audit through the platform with affiliated auditors. The audit itself is typically either included or available as an add-on depending on the plan and negotiation. This is different from tools like Drata and Vanta, which help you prepare for an audit but do not provide the auditor. Clarify exactly what is included in your contract before signing.
How much does Thoropass cost?
Thoropass does not publish pricing. Based on customer reports, annual contracts start around $10,000 for startups doing a single SOC 2 program and rise to $25,000–$40,000 for multi-framework enterprise deployments. The advisory component is included, which makes the per-framework cost competitive with tools that charge separately for both software and audit support.
How does Thoropass compare to Drata and Vanta?
All three automate compliance evidence collection, but they differ on the service model. Vanta and Drata are primarily software products; they help you prepare and connect to auditors but are not auditors themselves. Thoropass bundles compliance advisory and auditor access into the platform, which can reduce total cost if you factor in what you would otherwise pay a separate audit firm. For pure-software experience and breadth of integrations, Drata and Vanta have an edge. For all-in-one including audit, Thoropass is worth comparing.
Who is Thoropass best suited for?
Thoropass works best for startup and mid-market SaaS companies (10–200 employees) doing their first or second compliance audit, particularly if they do not have an in-house compliance team. The embedded advisory model means they effectively get a compliance team as part of the platform. Larger enterprises with established compliance functions and complex multi-framework programs may prefer a more configurable tool like Hyperproof or a more integration-rich tool like Drata.
Sources
Every external figure on this page traces to a public source, last collected on the dates shown.
- G2: Thoropass reviews — rating 4.7/5, ~200 reviews (accessed 2026-08-30)
- Capterra: Thoropass — rating 4.7/5, ~60 reviews, sub-scores (accessed 2026-08-30)
- Gartner Peer Insights: Thoropass — rating 4.8/5, ~20 reviews (accessed 2026-08-30)
- TrustRadius: Thoropass — score 8.6/10, ~20 reviews (accessed 2026-08-30)
- Crunchbase: Thoropass — funding rounds, investors, founding data, rebrand from Laika (accessed 2026-08-30)
- LinkedIn: Thoropass company page — employee count, HQ, specialties, founding year (accessed 2026-08-30)
- Thoropass: product overview — framework library, feature list, auditor model (accessed 2026-08-30)
- Thoropass: Series B announcement — ~$35M Series B, Forgepoint Capital, 2022 (accessed 2026-08-30)