Thoropass review

Thoropass now describes itself as an end-to-end cybersecurity auditor rather than a pure software vendor, and the former Laika website redirects to it. The company is a licensed auditor that performs SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS and HIPAA assessments, supported by its Audit Lifecycle Platform, which organizes evidence and readiness work and reuses evidence across overlapping framework requirements. Evidence can be linked through an API or an MCP server, and the firm also sells CREST-accredited penetration testing and vulnerability scanning, which SOC 2 and PCI auditors often ask for. For a startup, the appeal is one relationship from readiness to final report. The cost is choice: you cannot shop the audit separately if prep and audit sit with one firm, and the platform's automation is narrower than Vanta's or Drata's. Prices are not published.

Who it is for

Startups that want the auditor and the evidence platform from one firm

Price

See vendor pricing (USD check pending).

US price check pending. See the vendor pricing page.

Key features

• Licensed auditor that delivers SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS and HIPAA assessments
• Audit Lifecycle Platform organizes evidence and readiness work
• Evidence reused across frameworks, matched to overlapping requirements
• Evidence links via API or MCP server
• CREST-accredited penetration testing and vulnerability scanning

Strengths and weaknesses

• Strength: Readiness work and the audit happen with one firm
• Strength: Covers PCI DSS and HITRUST assessments as well as SOC 2 and ISO 27001
• Strength: Pen testing available from the same vendor
• Weakness: No published prices
• Weakness: Positioned as an audit firm, so automation depth is narrower than pure software platforms
• Weakness: Using the same firm for prep and audit limits auditor choice

Key facts

• Type: Licensed auditor plus platform
• Organizations: More than 2,000 (vendor figure)
• Frameworks audited: SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS, HIPAA, GDPR
• Published price: No, quote only

Where it ranks

Thoropass is No. 9 in our Best Compliance Automation Software verdict.