Compare · Audit firm + platform
Screenata vs Thoropass
Thoropass is an audit firm with a platform: it runs its own AICPA-registered CPA practice and sells the software, the readiness work, and the audit together. Screenata sells no audit. Vera produces evidence any CPA firm can verify outside the platform, and the firm you choose stays yours. $5,988/year per framework, published; the audit is a separate engagement with the auditor you pick.
Side by side
Thoropass audits. Vera records.
Where Screenata is different
Three things Thoropass doesn’t do.
The auditor is yours
Thoropass's convenience is one vendor for platform and audit. The AICPA's 2026 guidance asks CPA firms to watch arrangements where the platform vendor sets the audit fee or the timeline, and the question a buyer's security reviewer now asks is who chose the auditor. Screenata sells no audit and takes no referral fee: you bring the firm you have, or pick one, and the relationship stays yours if you ever change platforms.
Evidence any firm can verify
Vera records evidence while your team does the work, with a capture-time timestamp badge and a signed manifest carrying an RFC 3161 timestamp. Any CPA firm verifies it with a free CLI, without a Screenata login. Evidence built for one firm's review process is evidence built for that firm.
A published price, and the audit priced by the auditor
Thoropass is quote-based with the audit inside the number; Vendr's transaction data puts under-50-employee companies at $20–40K a year for a single SOC 2 Type II, with renewals 20–40% lower. Screenata is $5,988 a year per framework, published. The audit is a separate engagement with the firm you choose, at that firm's price.
The operational layer
Where the evidence comes from.
Detect
Scheduled agents scan your cloud, repos, and identity provider continuously, the same signals Thoropass reads.
Do
Vera runs 650+ native checks nightly, records the evidence integrations can't reach while your team does the task, chases the attestations a dashboard can't, and when she finds a gap she opens the finding and drafts the fix.
Verify & sign
After a human applies the change, Vera re-verifies and files a signed, traceable artifact. She escalates judgment calls rather than acting unattended, which is what keeps auditors comfortable.
Thoropass
Collect → upload → in-house firm reviews
Screenata
Detect → collect & remediate → re-verify → sign
Thoropass, in detail
The questions people ask about Thoropass.
Thoropass pricing
What Thoropass costs
Thoropass does not publish a rate card; every contract is a tailored quote, and because it runs its own CPA firm the audit is inside the number rather than a separate line. Vendr's anonymized transaction data reports $20–40K a year for companies under 50 employees pursuing a single SOC 2 Type II, $40–70K for 50–200 employees, and renewals 20–40% lower than the first year. Screenata is $5,988 a year per framework, published. The audit is a separate engagement with the auditor you choose; specialist SOC 2 firms typically quote small companies in the low five figures for a Type II.
- Thoropass: platform + readiness + audit in one quote, from its own CPA firm
- Screenata: $5,988/year per framework, published; you pick and pay your auditor
- Vendr data: renewals on Thoropass run 20–40% below year one
One vendor, two seats
The platform and the opinion
Thoropass sits in both seats: the platform that helps you prepare and the CPA firm that issues the opinion. That is a legitimate model — Thoropass is a registered CPA firm subject to peer review — and it is the simplest procurement for a company that just wants the report. It also means the platform, the timeline, and the auditor are one decision, and leaving one later means leaving all three. The AICPA's April 2026 ethics guidance lists tool-provider-driven fees and deadlines among the independence threats CPA firms must evaluate. Screenata keeps the seats separate on purpose: we prepare the evidence, your auditor judges it, and neither of us pays the other.
Moving from Thoropass
Bring your policies; choose or keep an auditor
Bring the policies you already own as PDF or DOCX and Screenata maps them to claims and tests. Bring the control list your last audit accepted to set scope. Reconnect your integrations and the native checks re-run overnight; the non-API evidence is recorded again while your team works, this time with provenance. Then choose an auditor — any registered CPA firm — and give them the read-only Auditor Center for the next cycle.
The honest version
When Thoropass is the better fit.
- You want one vendor to handle the platform and the audit itself
- You'd rather not source or manage a separate CPA firm
- You need SOC 1 or HITRUST alongside SOC 2
Screenata is built for the 5–50 person team that needs SOC 2 to close a deal, wants policies grounded in real infrastructure, and would rather operate compliance from Slack and the terminal than a dashboard. More on who we’re for.
Screenata
$5,988/year per framework ($499/mo), published; audit paid separately to the auditor you choose
Every module included, per framework. Published, not sales-gated. The audit is priced by the auditor you choose; we sell no audit and take no referral fee.
Thoropass
Quote, audit included. Vendr data: $20–40K/yr, under 50 employees
Third-party figure, not a vendor list price. Ranges scale with frameworks and headcount; see the pricing section above for the full breakdown.
Source: Vendr marketplace: Thoropass pricing (anonymized transaction data), fetched 2026-09-03.
Year one, all in
What year one actually costs.
Sources: Vendr marketplace pages (anonymized transaction data, fetched 2026-09-03); vendors’ own pricing pages and documentation where published; Vanta’s August 2026 screenshot figure; Drata “SOC 2 By the Numbers” 2026. Ranges scale with headcount and framework count; none is a vendor list price unless the vendor publishes one.
Questions
Screenata vs Thoropass, answered.
Is Screenata a good Thoropass alternative?
For teams that want to choose their own auditor, yes. Thoropass bundles its platform with its own CPA firm, so platform and audit come from one vendor. Screenata sells no audit: Vera records evidence while your team works, signed and verifiable outside the platform, and any registered CPA firm can audit it. $5,988 a year per framework, published.
Does Screenata include the audit like Thoropass?
No, deliberately. Screenata prepares evidence any CPA firm can verify and gives your auditor a read-only Auditor Center. The audit is a separate engagement at the auditor's price, and we take no referral fee, so the firm you choose is your decision.
What does Thoropass cost?
Thoropass is quote-based with the audit included. Vendr's anonymized transaction data reports $20–40K a year for companies under 50 employees on a single SOC 2 Type II, $40–70K for 50–200 employees, with renewals 20–40% lower than the first year. Screenata is $5,988 a year per framework, published, plus whatever the auditor you choose charges.
Can I keep my Thoropass auditor and use Screenata?
Thoropass's audit practice reviews evidence inside Thoropass, so in practice moving platforms means choosing an auditor for the next cycle. Any registered CPA firm can audit a Screenata program; several firms already do, and your evidence is verifiable by any of them with a free CLI.
What can Screenata do that Thoropass can't?
Record evidence while your team does the actual work, with a capture-time timestamp and a signed manifest; trace a policy sentence to a claim, a test, and a signed artifact; write policies from infrastructure scans; and hand the result to any auditor, not one firm's process.
Connect and see
Compare on your own systems, not a feature grid.
Connect GitHub and cloud read-only. Vera generates policies and a control matrix from your real infrastructure in minutes, and we ship new capabilities every week.