Let us match you
Thoropass will do all the work to match you with the best Experts.
Partner
Securis360

Securis360

Securis360 is a boutique cybersecurity firm based in Pittsburgh, PA focusing on data privacy compliance and governance such as ISO 27001, ISO42001, SOC2, HIPAA, GDPR and HITRUST. We have a large offshore team with the senior management having prior experience in large global consulting firms and provide top quality deliverables and round the clock support. We have worked with over a 100 clients in 10 countries and helped them with their audits across all major frameworks. We also have a technical team for pentest and appsec services as well as provide continuous Pentesting as a Service.
Partner
Angel Cybersecurity

Angel Cybersecurity

• Woman-owned cybersecurity consulting company. • Experienced in building security programs for small organizations - anywhere from 2 people and up - through to large organizations of >1000 people. • CISSP, CISM, CCSP, CISA certified • Significant compliance experience with SOC2, ISO 27001, HIPAA and PCI.
Partner
Viridis Security

Viridis Security

Viridus Security = Common sense governance, risk & compliance for growth stage companies. There comes a point when proving security is necessary for closing deals. We can help you make security a competitive advantage. Automated compliance tools help, but there are plenty of decisions to make along the way: 1. How much time can I take away from core work? 2. What tools do I absolutely need immediately and which can wait (ticketing, IAM, HR, SDLC, etc)? 3. Which controls don’t apply to my business, and how to do I convey that to the auditor? 4. What kind of penetration testing makes sense? 5. How the heck do I run and document a tabletop exercise? Whether you need ground up creation of policies, controls, processes and procedure or if already have a great program and are looking for CISO advice without hiring a full-time resource, we can help. Virtual CISO (vCISO) Security Implementation advice and guidance: * Vendor (3rd Party) Assurance programs * Document management * Asset Management * Application Management * Risk Management * IAM Identity Access Management * Information Security outreach, training * SDLC Security Frameworks examples: * SOC2 * GDPR * PCI * ISO27001 * HIPAA
Partner
Prodigy 13

Prodigy 13

Free and Paid Web/API Penetration Testing with up to 50% OFF for ThoroPass customers! Contact us for more information! Prodigy13.com provides a fully managed, seamless solution to compliance management that caters to a myriad of standards, including SOC 2, ISO 27001, NIST, HIPAA, HITRUST, PCI DSS, GDPR, CCPA, and beyond. Startup Discounts of up to 50%: To make top-notch security more affordable for emerging businesses, we are offering generous discounts of up to 50%. Book a Consultation today to learn more. Our primary objective at Prodigy 13 is to unburden you from navigating through the uncertainties of compliance. From auditor selection to infrastructure design and implementation, we engage proactively with your organization, forging the path towards successful compliance! Leveraging our managed compliance services, your organization will not just aim for, but is assured to achieve, triumphant compliance outcomes!
Partner
Vertex11

Vertex11

Vertex11 is a consultancy specializing in Cybersecurity & Risk Management. Our team of experts can leverage their decades of experience to solve your cyber defense and compliance challenges. From enhancing your GRC program to developing a sustainable SOX program to implementing remediation processes, our clients end up smarter and stronger than before.
Partner
ETHOS Technology LLC

ETHOS Technology LLC

ETHOS (n): A technology partner defined by purpose-driven innovation and unwavering integrity. Ethos delivers exceptional, secure solutions that not only solve complex challenges but also create lasting, meaningful impact through service.
Partner
GDPR Local Ltd.

GDPR Local Ltd.

GDPR Local offers GDPR Consultancy and Article 27 Representative services. We are an experienced, professional, proactive company with many years experience in GDPR, ISO27001, and other data protection frameworks. Our services include full GDPR implementation using the LAIKA framework, vDPO services, DPIA production, LIA documentation, ROPA production, training, and ongoing consultancy. We can help with the most complex GDPR requests, SARs, RTEs, and management of data breaches. Contact us anytime to discuss your requirements. https://gdprlocal.com or info@gdprlocal.com Our users have access to our compliance portal which is used to ensure you meet our Article 27 compliance obligations and provides online request management tools, access to our Consultancy team, and access to key documentation or GDPR information. Access to the portal is free for all users. Based in Brighton in the UK and Dublin in Ireland we are well placed to act as your UK or EU Article 27 Representative and will work hard to ensure you meet you compliance obligations and avoid any Regulator involvement. Our team of compliance experts have managed hundreds of requests and understand how to deal with the most complex cases. We have worked with every UK/EU Regulator and have processes in place to manage Regulator investigations and to help companies avoid Regulator sanctions and fines. We have managed the most complex cases including providing legal defense material and representing our clients in court. We can manage an investigation by a Supervisory Authority where necessary. We have a good relationship with the local Regulators the ICO [UK] and DPC [Ireland]. Our team of compliance experts all have a legal background and have experience in a wide range of industries and regions.
Partner
No Name IT, LLC

No Name IT, LLC

No Name I.T. is a veteran owned and founded cybersecurity company. No Name's founder launched the company to provide assistance to SMB's and make them hard targets. Cybersecurity is far too often an afterthought, hidden behind complicated jargon and poorly communicative messengers. No Name's sole purpose is to protect the dreams and hard work of our clients. Your success is our success.
Partner
cyalpha

cyalpha

Cylpha is a North American cyber firm and our team brings cyber experience from • US Department of Defense • Global Military and Intelligence Agencies • Technology Consulting Firms • Big 4 Consulting Firms • CyAlpha’s growing team delivered numerous cyber engagements to various clients around the globe • Our team boasts an average of 13+ years of cybersecurity experience and an average of 21+ years of IT experience per resource • Pentest, vCISO/ vDPO Services and ISO / SOC2 Security & Privacy Consulting are our core service offerings. • Cyber Compliance / Consulting - We helped more than 200 start-up’s / midsize companies with VCISO / vDPO, cyber and privacy consulting services to prepare them for SOC2 and ISO certifications and broader compliance certifications such as CCPA, CMMC, HIPPA and GDPR • Pentests - We delivered more than 700 pen tests (from large enterprise clients to mid-size clients to start-ups) to support SOC2 and ISO certification and also to improve cyber hygiene • Our clients are located throughout the United States, Canada, Middle East and Europe, with new clients partnering with us monthly
Partner
Alpha Epsilon LLC

Alpha Epsilon LLC

We specialize in providing comprehensive compliance consulting services. Our offerings encompass the evaluation and enhancement of compliance documentation, enterprise-wide risk identification, mitigation, and management. We actively engage with client teams to ensure the effective implementation of security controls, both on-premises and in the cloud. It’s our commitment to instill a deep understanding among team members regarding the pivotal role of compliance in achieving business objectives. In close collaboration with our clients, we tailor solutions to meet their unique compliance needs, creating a path to audit readiness. Our proficiency extends across a range of frameworks and standards, including NIST, SOC2, ISO 27xxx, PCI-DSS, GDPR, CCPA/CPRA, HIPAA, PIPEDA, CIS, CMMC, STIGs, and SCF.
Partner
CITSAP

CITSAP

CITSAP is a next-generation cybersecurity compliance professional services firm comprising of industry experts with decades of combined experience spanning various industries including financial services, healthcare, energy, oil & gas industries, etc. We partner with organizations as trusted advisors, helping our clients to address the many unique challenges with meeting compliance requirements such as SOC 1/2, ISO 27001, HITRUST, etc., while also providing advisory and technical support services in the design and implementation of risk-based compliance programs. For small and middle-size businesses (SMBs), we also lower the barrier to gaining accessibility to quality Cybersecurity experts, streamlined processes, and technologies for effective cybersecurity risk management. At CITSAP, we recognize that adequate protection of customer data is a foundational element for companies seeking to build and maintain digital trust. We partner with our clients as trusted advisors with a core goal of helping them to develop a strategic compliance approach for addressing a plethora of risks related to the protection of customer data. CITSAP Consulting’s approach leverages a holistic framework built around highly skilled professionals, a well-defined methodology for process execution, and the use of automation compliance software for proactive management of the client’s cybersecurity and privacy compliance requirements.