# SOC 2 Startup Guide

> A decision guide for a startup's first SOC 2 audit: expert-guided vs self-serve, the first 90 days, and which of five tools (Scytale, Vanta, Secureframe, Thoropass, Comp AI) fits which situation. Editorial assessment from public vendor material, last reviewed 2026-09-29.

## Start here
- [First-audit ranking](https://soc2startups.com/first-soc-2): five tools scored 0 to 5 on seven weighted criteria.
- [Path finder](https://soc2startups.com/path-finder): five questions and a re-weighting calculator.
- [How we score](https://soc2startups.com/how-we-score): criteria, weights, limitations.

## Tool fit profiles
- [Scytale](https://soc2startups.com/tool-fit/scytale)
- [Vanta](https://soc2startups.com/tool-fit/vanta)
- [Secureframe](https://soc2startups.com/tool-fit/secureframe)
- [Thoropass](https://soc2startups.com/tool-fit/thoropass)
- [Comp AI](https://soc2startups.com/tool-fit/comp-ai)

## Compare
- [Matchups and multi-compare](https://soc2startups.com/matchup)
- [Alternatives](https://soc2startups.com/instead-of)

## Learn
- [Playbook: 10 lessons](https://soc2startups.com/playbook)
- [Glossary](https://soc2startups.com/words)
- [FAQ](https://soc2startups.com/faq)
- [Journal](https://soc2startups.com/journal)

## Site
- [Contact](https://soc2startups.com/contact)
- [Privacy Policy](https://soc2startups.com/privacy-policy)
- [Cookie Policy](https://soc2startups.com/cookie-policy)
- [Terms of Use](https://soc2startups.com/terms-of-use)
- [Copyright and DMCA policy](https://soc2startups.com/dmca)

## Key facts (as published by vendors, read 2026-09-29)
- Only Secureframe publishes a price among the five: Fundamentals starting at $7,500/year (one framework).
- Stated integrations: Comp AI 580+, Vanta 400+, Secureframe 300+, Scytale 100+ on its integrations page; Thoropass publishes no count.
- Scytale describes a dedicated compliance expert with weekly meetings who manages audit readiness and the audit process.
- A SOC 2 report can only be issued by a licensed CPA firm.