Thoropass
RECEIPT NO. CP-2609-THO
READ 2026-09-29
PLAN: No plan published
Not published
TOTALQuote required Price not published, quote required
Thoropass pricing 2026: plans, limits and what is published
Short answer
Thoropass does not publish prices or plans; its /pricing URL shows no prices. What sets it apart for budgeting is that automation and the audit come from one company, with penetration testing and vulnerability scanning on the same platform, so ask for the platform and audit prices together in writing.
By The Cost Desk, Compliance Pricing · Published 2026-09-29 · Prices and plans as published on vendor pages, read 2026-09-29.
Does Thoropass publish a price?
Not published
The /pricing URL shows no prices and no plan list; it redirects to home page content.
CTA on the pricing page: Not applicable: pricing URL shows no prices
Source: Thoropass pricing URL · read 2026-09-29
What does each Thoropass plan include?
We list only the items recorded for each tier on the vendor's pricing page, read 2026-09-29. A tier may include more than shown here; check the vendor page.
What else affects the Thoropass bill?
- Frameworks stated
- No total count published; lists SOC 1, SOC 2, ISO 27001, GDPR, PCI DSS, HITRUST e1/i1/r2, HIPAA, CMMC L1, NIST CSF 2.0, Cyber Essentials Thoropass home page
- Integrations stated
- Not published (integrations are described as vetted and approved by auditors) Thoropass integrations page
- Customers stated by vendor
- More than 1,000 organizations Thoropass home page
- Expert services
- Describes itself as auditor-led with in-house auditor support. Thoropass home page
- Audit path
- Automation and audit from the same company; the audit and assessment offering is led by an audit partner. Thoropass home page
- Penetration test
- Penetration testing and vulnerability scanning are part of the platform (PCI DSS work includes certified ASV scans). Thoropass home page
Also on Thoropass's pages
- Thoropass describes itself as "Auditor-Led. AI-Powered." and says it is trusted by more than 1,000 organizations. Thoropass home page
- Frameworks listed: SOC 1, SOC 2, ISO 27001, GDPR, PCI DSS (certified ASV scans, pentesting), HITRUST e1/i1/r2, HIPAA, CMMC L1, NIST CSF 2.0, Cyber Essentials. Thoropass home page
How does Thoropass score on price clarity?
What the price buys: rank 5 of 7
4.90
Price transparency ranking: rank 6 of 7
3.20
The table shows the six criteria at the price transparency weights.
| Criterion (weight) | Score | Reason | Source links |
|---|---|---|---|
| Pricing transparency (25%) | 1 | The /pricing URL shows no prices and no plan list. | Thoropass pricing URL |
| Entry plan contents (20%) | 1 | No plan is published. | Thoropass pricing URL |
| Stated plan limits (10%) | 1 | No plan limits are published. | Thoropass pricing URL |
| Expert services in a plan (20%) | 6 | Describes an auditor-led model with in-house auditor support; plan inclusion is not published. | Thoropass home page |
| Questionnaire allowance (10%) | 1 | No questionnaire allowance is published. | Thoropass pricing URL |
| Audit and pen test path (15%) | 9 | Automation and audit come from one company, with pen testing and vulnerability scanning on the platform; plan pricing is not published. | Thoropass home page |
Thoropass scores highest in this census on: audit and pen test path.
Rivals score higher on: pricing transparency (Scytale, Vanta, Drata, Secureframe, Sprinto, Scrut); entry plan contents (Scytale, Vanta, Drata, Secureframe, Sprinto); stated plan limits (Scytale, Vanta, Drata, Secureframe, Sprinto); expert services in a plan (Scytale); questionnaire allowance (Scytale, Vanta, Drata, Secureframe, Sprinto).
What should you ask Thoropass sales?
- Is the audit fee quoted together with the platform, or separately?
- Which frameworks does your audit team cover for us (SOC 1, SOC 2, ISO 27001, HITRUST, PCI DSS)?
- Is the penetration test part of the same contract?
- How is the audit team kept separate from the team that runs the automation?
- Which integrations are available for our stack?
How does Thoropass compare on price?
Questions buyers ask
How much does Thoropass cost?
Thoropass does not publish prices. Its /pricing URL shows no prices and no plan list.
Does Thoropass include the audit?
Thoropass describes automation and audit from one company, with an audit and assessment offering led by an audit partner. Whether a given quote bundles both is not published.
Does Thoropass do penetration testing?
Yes. Its home page lists penetration testing and vulnerability scanning as part of the platform, and certified ASV scans for PCI DSS.