codeBeamer ALM vs. Secureframe

In my opinion codeBeamer is well suited for any activity where detailed tracking is needed with teams involved. It can be less suited for small projects which do not last long, or are not continuous, etc

As an early-stage startup venturing into SOC 2 for the first time with no in-house compliance expertise, I'd say Secureframe is well-suited for early startups. They walked us through various parts of the process and recommended how to approach certain configurations and controls appropriate for our situation and size. We can easily see Secureframe working for larger companies as well; they seem to have a solid foundation in place.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Tracing of requirements.
• Tracking of development.
• Tracking of QA.
• Tracking of bugs.
• Tracking of releases.
• Wiki.
• Users and teams.
• Works for teams scattered across the globe.
• Testing and coverage for releases.
• Integration with SVN.

• Centralizes compliance work.
• Controls sensitive document sharing.
• Creates accountability and audit trails.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Search.
• Metric calculation.
• Would be nice that cB is a source of truth, i.e., that say SVN commit is done only from cB; know this is difficult to achieve.

• The new audit module had a few minor bugs during setup on our 2nd pass, but nothing that broke. Confident it'll smooth out the longer it's live in Prod.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Sometimes info in codeBeamer can be lost, in principle, if not well organized by the user, info can never be found, or can be forgotten about, etc

The Questionnaires feature (which assists in RFP's, security questionnaires, etc) could be designed a lot better. I see what they were going for, and based on their track record for improving features I'm sure it will get a refresh, but in it's current state it is the only features that I do not use.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

Excellent support professionally. Also, thanks for giving me for free access to SaaS cB for my hobbyist project.

codeBeamer is by far better.

From purely comparing marketing sites (unable to trial others), Secureframe had better first time SOC 2 audit documentation and explanations for free to ease you into understanding the processes.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info

• Customer tracking.
• Process tracking.
• Workflow framework.
• Can be overhead.

• It is easier and quicker to provide customers access to sensitive materials.

Incentivized

Independently Invited by TrustRadius

A de minimis incentive was given to thank the reviewer for their time. The incentive was not used to bias or drive a particular response, nor was the incentive contingent on a positive endorsement. More Info