Thoropass pricing: what Thoropass costs per year for the platform and the SOC 2 audit

Thoropass starts at $8,700 a year for the Compliance Platform with your first framework, plus $5,800 a year for a SOC 2 Audit subscription, according to its AWS Marketplace listing read in September 2026. That makes about $14,500 the floor for a first SOC 2 year. Vendr's brokered data puts the median Thoropass contract at $25,000 a year, with a range from $1,145 to $50,880.

Not on its own website. The thoropass.com/pricing URL redirects to the homepage and there is no rate card. The AWS Marketplace listing is the exception: it publishes starting prices for two 12-month subscriptions, the Compliance Platform at $8,700 and the SOC 2 Audit at $5,800. Everything above those floors is set in a scoping call.

It is a separate subscription from the same vendor. The Compliance Platform covers the readiness software and your first framework. The Audit subscription covers a SOC 2 audit performed by Thoropass's in-house auditors, starting at $5,800 a year. The two bill independently but work together, so you do not hire an outside CPA firm when you buy both.

For a small SaaS company doing a first SOC 2, the published floor is about $14,500 a year for the platform and the audit together. Where you land above that depends on the Trust Services Criteria, Type 1 or Type 2, the review period and the systems in scope. Vendr's median across all Thoropass deals is $25,000 a year, which includes larger and multi-framework buyers.

It is worth it when coordination is your bottleneck: nobody on the team has run an audit, and you want the vendor that prepared you to audit you. It is less compelling when you already know a CPA firm or want to shop the audit on price. In that case, a software-only platform plus your own auditor can come in below the bundle, and the software cost stays fixed.

Thoropass does not publish a per-framework price. The AWS listing says you can add frameworks to the platform later and reuse controls and evidence across them, which is how the platform line grows. Ask for the framework-two price in writing before you sign, and ask separately about the ISO 27001 certification audit, which is a different engagement from SOC 2.

They price different things. Vanta sells software only and does not publish a price; Vendr reports a median of about $20,000 a year across 372 contracts, with the CPA firm billed separately. Thoropass bundles the audit, starting at about $14,500 a year for platform plus SOC 2 audit on AWS Marketplace. Add an audit fee to the Vanta number before you compare them.

Yes. Thoropass is listed on AWS Marketplace with 12-month contracts for the Compliance Platform and the SOC 2 Audit subscription, and the listing offers private offers and custom pricing on request. Buying through the marketplace can draw down committed AWS spend, which is a real consideration if your company has an enterprise discount program with AWS.

If you want the bundle, Scytale's AWS listing starts at $7,500 for the platform with a $4,200 third-party audit add-on. If you are fine hiring your own auditor, Secureframe publishes $7,000 a year for Fundamentals, and Complies publishes $79 to $499 a month with evidence collection and five cross-mapped frameworks from $199. Add a CPA audit to software-only options.

Get the platform and the audit as separate lines, fix the SOC 2 scope in writing, and ask for the price of a second framework and the renewal uplift before you sign. Then compare against the two public anchors: the $14,500 published floor and the $25,000 brokered median. A quote far above the median for one framework usually has a scope item you can remove.