Thoropass

Thoropass, formerly known as Laika, is a New York-based company that combines compliance automation software with in-house audit and security services, so organizations can prepare for and complete security audits in one place. Its model is designed to remove the usual hand-off between a readiness tool and a separate audit firm.

The platform connects to cloud providers, identity systems, HR tools and code repositories to collect evidence automatically, monitors controls continuously and maps them across frameworks including SOC 2, ISO 27001, HIPAA, HITRUST, PCI DSS, GDPR and ISO 42001 for AI. Policy templates, vendor risk management, access reviews, a risk register and employee security training help teams close gaps before the audit starts. Thoropass's own licensed auditors then perform the audit inside the platform, and the company also offers CREST-accredited penetration testing, so evidence and findings stay in one system.

Thoropass is used by startups and growing SaaS companies seeking their first SOC 2 report, and by larger organizations managing several frameworks that want faster, less disruptive audits.