Secureframe Scorecard

Score by criterion

• Framework coverage15% of total

  5/5

  Around 33 named frameworks, including NIST 800-53 High, FedRAMP and CMMC 2.0, with a dedicated defense product line.

  Level 5: All of level 3, plus three or more of ISO 42001, NIST CSF, NIST 800-53, FedRAMP or CMMC.

• Automated evidence20% of total

  5/5

  300+ integrations, continuous control monitoring with a test library, and API documentation.

  Level 5: 300 or more published integrations, continuous tests, and a public API or custom integration builder.

• Audit path15% of total

  2/5

  Access to the Secureframe Audit Partner Network. Auditor review inside the platform was not confirmed.

  Level 2: A named partner network of audit firms, or auditors can review evidence inside the platform.

• Pricing transparency10% of total

  2/5

  The Fundamentals plan starts at $7,000 a year. Higher plans show no price.

  Level 2: A single starting price is published.

• Trust and questionnaires10% of total

  4/5

  A trust center with a custom domain, and AI questionnaire automation.

  Level 4: Both, with AI-assisted questionnaire answering.

• Vendor risk management10% of total

  1/5

  Vendor management on the base plan. The advanced third-party risk module sits on the Complete plan and its features were not detailed on the pages we read.

  Level 1: A vendor inventory only.

• Customisation10% of total

  4/5

  Custom frameworks, controls and tests are included on the base plan.

  Level 4: Custom frameworks, plus custom automated tests.

• User sentiment10% of total

  5/5

  4.7 out of 5 from 814 reviews on G2.

  Level 5: Average 4.5 or higher with 200 or more reviews.