What's great
Finally a compliance/risk platform that doesn't feel like a spreadsheet! I created an account and tested the main features (SOC upload and the risk scoring dashboard). The UI is genuinely clean and intuitive. My report was processed and scored within minutes of signing up, with no onboarding friction. What impressed me most was the accuracy of the control extraction, although I still need to go through everything. This easily would have taken me the better part of an afternoon to do. Solid product!
What needs improvement
Would love to see a few more integrations out of the box, like slack notifications when a vendor's risk score changes, or a direct Jira/ServiceNow connector for flagged exceptions. I understand this has just launched, and overall the core analysis is excellent. Without the additional integrations, teams would have to manually copy findings into a ticketing system. A bulk re-assessment scheduler would also be useful for annual review cycles. I guess these could natural next steps rather than gaps. The foundation is strong.
vs Alternatives
I'm open to trying out alternatives if there's any. I use a lot of compliance tools, and VouchVendor seems to be covering the basics when it comes to SOC review from the start.