Scrut Automation

Score8.6 out of 10

14 Reviews and Ratings

What is Scrut Automation?

Scrut Automation helps early-stage and growth-stage startups which struggle to identify and manage risks to their security posture, jeopardizing their ability to either achieve or maintain compliance with their key frameworks. Their application achieves this by automating risk assessment and monitoring, drive continuous monitoring of controls with the help of 75+ pre-built integrations, and enabling organizations to continuously stay compliant with 20+ compliance frameworks, and manage multiple compliance audits all through a single window.

Categories & Use Cases

Videos

GRC policy management
Support for policy lifestyle changes including creation, approval, communication etc.
Category average: 7
Common repository of GRC items
A common repository linking all GRC elements such as policies, risks, regulations, etc.) to give a 360 degree view
Category average: 7.4
Incident management
System captures risk-related incidents, including cause and result
Category average: 6.8

Risk management
Risk management capabilities including alert engine to warn of trending risk exposure and risk visualizations like heat maps, dashboards, etc.
Category average: 7.4

Most Frequent Users

Top 3 industries using Scrut Automation.

Based on HG Insights installation data

View all Reviews

#1 most frequent

Information

38.5%

5 installations of 13

#2 most frequent

Manufacturing

23.1%

3 installations of 13

#3 most frequent

Finance and Insurance

15.4%

2 installations of 13

Pros

Streamlining compliance processes
Automated evidence collection
Providing pre-drafted policies

Cons

Limited scope of automated evidence validation
Reliance on manual evidence collection for some tasks
Desire for expanded auto-validation features

Verified User

Engineer in Engineering (1-10 employees employees)

Use Cases and Deployment Scope

We use Scrut for SOC2 compliance, for ongoing compliance needs.

Pros

Scan the infrastructure to find any vulnerabilities
Detailed policy definitions and tracking
Support for ensuring that SOC 2 compliance requirements are understood and met

Cons

Scrut does auto-validation for some policies, that can be expanded so we do not have to manually update evidence that can be gathered automaticalls
More reminders for ongoing monitoring would be great

Return on Investment

Positive as SOC2 compliance is a necessary requirement

Usability

Verified User

Administrator in Legal (11-50 employees employees)

Use Cases and Deployment Scope

Scrut streamlined all of the requirements in order to be compliant in accordance with GDPR and CCPA. The automated evidences helped a lot, also the pre-drafted policies were very helpful. We rely on them for SOC and ISO certifications as well. Their features to organize company trainings and assess vendors are really useful and helped the overall processes within the company.

Pros

evidence collection
trainings
vendor assessment
policy storage

Cons

risk assessment
some manual evidence descriptions

Return on Investment

overall compliance - positive
better structured processes - positive
alignment between departments - positive

Usability

Verified User

Director in Engineering (11-50 employees employees)

Use Cases and Deployment Scope

We use Scrut Automation as our primary GRC platform to achieve and maintain certifications such as SOC 2 and ISO. It solves the problem of manual evidence collection and gives us continuous visibility into our cloud security posture.

Pros

Ability to manage Policies, Evidence tasks
Easy to add custom frameworks / org specific requirements

Cons

The stability of the overall website. At times there were situations when sessions would logout and then it wouldn't allow logging in for 5-10 mins

Return on Investment

Difficult to measure but it provided a framework and expert guidance to tackle the certification requirements.

Usability

Albert Foster, MHR, SPHR View profile

CEO in Corporate at Express Evaluations (1-10 employees employees)

Use Cases and Deployment Scope

We have used Scrut Automation for the past two years for our Soc2 and GDPR audits. Last year we just did the Soc2 audit, and this year we added GDPR and 27001. Very easy process and the team did a great job of keeping me on task.

Pros

Easy to use software
Friendly team
Easy policy creation

Cons

In places where I had to populate the name of my company on documents, it would have been helpful to have the name already populated.

Return on Investment

We have been able to work with larger and more complex clients.

Usability

Verified User

Executive in Engineering (501-1000 employees employees)

Use Cases and Deployment Scope

Scrut Automation is an invaluable platform and partner to keep your compliance on track. Their software is designed to guide you through the compliance process in great detail and their team of experts will fill in any gaps or provide any clarifications you need. Thr constamt feedback cycle is perfect for getting and keeping your company compliant.

Pros

Intuitive UI
Expert Support
Detailed documentation

Cons

Dynamic variables sometimes had strange behaviors

Return on Investment

We reached our compliance goals without issue.

Usability

Vanta

Drata

Sprinto

Scrut Automation

What is Scrut Automation?

Categories & Use Cases

Videos