Thoropass
Compliance automation platform combined with in-house auditors for SOC 2, ISO 27001, HIPAA and other frameworks.
Visit Website ↗ + Add to Compare Claim This CompanyOverview
Thoropass pairs software for evidence collection and control monitoring with its own audit team, so customers can run compliance and audit in one place. It supports more than 30 frameworks including SOC 2, ISO 27001 and HIPAA.
Founded in 2019 and rebranded in 2023, the New York company has raised roughly $98 million, including a $50 million Series C in November 2022.
Innovation Matrix Assessment
Integrates audit delivery with automation; incremental relative to rivals but a distinct operating model.
Reduces the coordination cost between tooling and external auditors.
About $98M raised from investors including J.P. Morgan and PayPal Ventures; employee and funding figures vary by aggregator.
A crowded category; the bundled-auditor model is the main differentiator.
No independent efficacy evidence beyond audit-completion claims.
Compliance demand persists, though automation commoditizes the category.
Why CISOs Should Care
Consolidates tooling and audit for teams that need attestations to close enterprise deals.
What Makes It Different
Employs its own auditors alongside the platform instead of leaving the audit to a third party.
The Matrix Verdict
50/100 — INCREMENTAL INNOVATOR
Thoropass scores as an Incremental Innovator. Solid funding and a differentiated delivery model, but limited evidence of deeper disruption.
Editorial Note: Claims vs. Verified Findings
Time-saving claims are vendor-stated. Funding totals come from aggregators and should be checked.
Sources
Alternatives to Thoropass
Chainalysis
The dominant, decade-plus incumbent in blockchain analytics, tracing illicit crypto flows and screening sanctions/AML risk for exchanges, banks,…
Vanta
Continuous automated compliance monitoring platform that replaces manual audit evidence-gathering with live, integration-based control checks.
Arcova
Cybersecurity advisory and managed services firm, rebranded from MorganFranklin Cyber, offering GRC, IAM, OT security, and a cloud-based…
Credo AI
AI governance platform that discovers, assesses, and continuously monitors enterprise AI systems and agents against regulations like the…
Level 6 Cyber
CISO ReviewedContinuous decision-intelligence platform (LISN) that replaces point-in-time security audits with a live digital twin of a CISO's program.
Coalition
A San Francisco 'active insurance' pioneer pairing cyber insurance with continuous attack-surface monitoring, having raised ~$860M total.