ToolJet
Open-source low-code platform to build internal tools
No reviews yetView product
Compliance automation for SOC 2, ISO 27001 and CMMC
Compliance automation for SOC 2, ISO 27001, CMMC and 45+ frameworks, with 300+ integrations and Comply AI.
A compliance automation platform that collects evidence and monitors controls for SOC 2, ISO 27001, HIPAA, PCI DSS, CMMC and 45+ frameworks, with Comply AI and a dedicated Defense plan.
Secureframe is a compliance automation platform. It connects to cloud, HR and identity systems through 300+ integrations, continuously tests controls, and prepares evidence for audits.
Secureframe automates the work of getting and staying compliant. Integrations pull evidence from infrastructure and business tools, continuous control monitoring flags failing tests, and the Secureframe Agent checks employee devices. Personnel management covers onboarding and offboarding, policy acceptance tracking and security awareness training, and asset inventory keeps track of in-scope systems.
Comply AI helps write policies and suggests remediation steps for failing controls. Companies can build custom frameworks, controls and tests, and the Audit Partner Network connects them with audit firms. A Trust Center and questionnaire automation support customer security reviews, with the advanced versions in the Complete plan.
Secureframe supports 45+ pre-built frameworks, including SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIS2 and CMMC. Plans are Fundamentals, Complete and Defense, the last built for defense contractors pursuing CMMC. Pricing is quote-based and depends on headcount and number of frameworks.
Automated evidence collection across cloud, HR and identity tools.
AI assistance for writing policies and remediating failing controls.
A dedicated package for defense contractors.
SOC 2, ISO 27001, HIPAA, PCI DSS, GDPR, NIS2, CMMC and more.
Best for
Company
Subscription
Web
Evidence gathered from connected systems.
Ongoing tests with alerts on failures.
Build your own frameworks, controls and tests.
Onboarding, offboarding and policy acceptance tracking.
Built-in employee training.
Device agent for endpoint compliance checks.
Quote-based; third-party reports put starting prices around $7,500 per year for one framework.
Quote-based. Adds advanced automation for larger programmes.
Quote-based. Built for defense contractors pursuing CMMC.
Pricing model: Subscription
Pricing last verified September 2026
View current pricingStructured information about this product, for people and AI systems.
Secureframe is a compliance automation platform with 300+ integrations, continuous monitoring, personnel and training workflows, a device agent, Comply AI and a Trust Center, supporting 45+ frameworks including SOC 2, ISO 27001, HIPAA, PCI DSS and CMMC.
Plans are Fundamentals, Complete and Defense (for CMMC), all quote-based. Third-party reports put entry pricing around $7,500 per year for one framework.
0.0
Based on 0 reviews
Be the first to review Secureframe.
Write a review
VantaAutomated SOC 2, ISO 27001 and HIPAA complianceTrust management platform with AWS Marketplace pricing and an AI agent.
0WingsViewGRC automation with 30+ frameworks and no per-seat pricing.
0WingsViewCompliance automation with no seat-based pricing and bundled training.
0WingsViewPublished and publicly listed on SecondWing.
© 2026 SecondWing. All rights reserved.
Discover · Build · Grow
Open-source low-code platform to build internal tools
The GTM AI platform
HR software for records, onboarding and hiring