Thoropass Pricing, Plans & Alternatives (2026)

Overview

Thoropass dates its origins to 2019 and operates its audit business through Laika Compliance, LLC, doing business as Thoropass Assurance, which indicates the company’s former Laika identity^[10]. Its distinguishing model is that the same company sells the compliance platform and performs the audit: Thoropass says its in-house auditors conduct thousands of audits a year and that more than 50 Fortune 500 companies have requested and accepted its reports^[10]. Services listed on its pricing page are the Thoropass Audit, run on its Audit Lifecycle Platform; audit-ready penetration testing by CREST-accredited testers; and vulnerability scanning with exportable evidence^[11]. Supported frameworks include SOC 1, SOC 2, ISO 27001, ISO 42001, PCI DSS, HIPAA, three HITRUST assessment types (e1, i1, r2), CMMC Level 1, NIST CSF 2.0, NIS2, Cyber Essentials, GDPR, BSI C5, NYCRR Part 500 and CIS Controls v8^[11]. Pricing is quoted according to frameworks, audit scope, company size and services^[11]. The single-vendor model reduces hand-offs between tool and auditor, but some buyers prefer to keep the audit firm separate from the readiness vendor for independence reasons, and Thoropass does not publish a headquarters location on its about page.

Thoropass features

In-house audit team on an Audit Lifecycle Platform
CREST-accredited penetration testing
On-demand and scheduled vulnerability scanning
HITRUST e1, i1 and r2 support
ISO 42001 AI management system audits

Thoropass pricing

No plans or prices are published. The FAQ says pricing depends on frameworks pursued, audit scope, company size and required services, with a tailored quote.