# Aptible vs Thoropass

| Attribute | Aptible | Thoropass |
|---|---|---|
| **Vioscale score** | 61.2 (75% (high)) | 56.3 (71% (medium)) |
| deployment.options | `{"cloud":true,"self_hosted":true}` | `{"cloud":true}` |
| description.long | A cloud infrastructure service enabling development teams to deploy applications, databases, and AI workloads in regulated environments with built-in enforcement of frameworks like HIPAA and SOC2, eliminating the need for manual compliance configuration. | A centralized audit management system that combines artificial intelligence with embedded expert auditors to help organizations prepare for and manage compliance assessments across multiple frameworks, automating evidence collection and streamlining the audit process. |
| features.capabilities | - | `{"iso_27001":false,"soc2_type_ii":true,"pricing_model":"quote","policy_template_library":false,"custom_framework_authoring":false,"public_trust_center_hosting":false,"direct_auditor_portal_access":true,"endpoint_mdm_agent_monitoring":false,"automated_api_evidence_collection":true,"bundled_vendor_risk_questionnaires":false,"bundled_security_awareness_training":false,"continuous_cloud_control_monitoring":false}` |
| integrations.count | 8 | 10 |
| integrations.list | `[{"name":"Langfuse"},{"name":"Datadog"},{"name":"ELK"},{"name":"Grafana"},{"name":"S3"},{"name":"Anthropic"},{"name":"OpenAI"},{"name":"AWS Bedrock"}]` | `[{"name":"AWS"},{"name":"Google Cloud"},{"name":"Microsoft Azure"},{"name":"GitHub"},{"name":"Atlassian Bitbucket"},{"name":"Azure DevOps"},{"name":"Jira"},{"name":"Asana"},{"name":"Clickup"},{"name":"Linear"}]` |
| market.availability | `{"primaryMarkets":["US"],"availabilityScope":"global","availableCountries":[],"notAvailableCountries":[]}` | - |
| platform.support | `{"cli":true,"web":true}` | `{"web":true}` |
| pricing | `{"type":"hybrid","plans":[{"free":true,"name":"Development","summary":"Free base fee + usage costs","features":["Zero-downtime deployments","Deploy managed databases","Scale without limits","CI/CD","Powerful CLI & Terraform","Log & Metric Drains","Role-based Access Control","24/7 Site Reliability & Incident Response"],"components":[{"kind":"fixed","amount":0,"period":"month","currency":"USD"}],"description":"For prototypes and early development","contactSales":false},{"free":false,"name":"Production","summary":"$499/month base fee + usage costs","features":["1 Dedicated Stack","HIPAA and SOC2 Compliance Frameworks","Modifiable Container Profiles","Horizontal Autoscaling for Apps","VPNs and VPC Peering","SSO/SAML","Host Intrusion Detection","Zero-downtime deployments","Deploy managed databases","Scale without limits","CI/CD","Powerful CLI & Terraform","Log & Metric Drains","Role-based Access Control","24/7 Site Reliability & Incident Response"],"components":[{"kind":"fixed","amount":499,"period":"month","currency":"USD"}],"description":"For running production workloads","contactSales":false},{"free":false,"name":"Enterprise","summary":"Custom pricing","features":["HITRUST and PCI Compliance Frameworks","Self-Hosting Option","Custom Unit Pricing Available","Container Sizing Autoscaling for Apps","99.95% Uptime SLA"],"description":"For large scale deployments","contactSales":true}],"addOns":[{"name":"LLM Gateway","components":[{"kind":"fixed","amount":400,"period":"month","currency":"USD"}]}],"summary":"From free (Development) to $499/month (Production) base fee, plus usage costs. Enterprise with custom pricing.","currency":"USD","freeTier":true,"sourceUrl":"https://www.aptible.com/pricing","retrievedAt":"2026-08-18T12:55:15.668Z","startingPrice":{"amount":499,"period":"month","currency":"USD"},"billingPeriods":["month"]}` | - |
| pricing.free_tier | yes | - |
| pricing.model | freemium | commercial |
| pricing.price_level | high | - |
| pricing.transparent | yes | - |
| reliability.sla_pct | 99.95 | - |
| security.disclosure_policy | yes | - |
| security.gdpr | yes | yes |
| security.hipaa | yes | - |
| security.iso27001 | - | yes |
| security.pci | yes | - |
| security.soc2 | yes | yes |

## Capabilities (Compliance Automation)

| Capability | Aptible | Thoropass |
|---|:--:|:--:|
| **Capabilities** |  |  |
| Automated API evidence collection | - | ✓ |
| Continuous cloud control monitoring | - | ✗ |
| Endpoint MDM agent monitoring | - | ✗ |
| Bundled security awareness training | - | ✗ |
| Bundled vendor risk questionnaires | - | ✗ |
| Public trust center hosting | - | ✗ |
| Custom framework authoring | - | ✗ |
| Direct auditor portal access | - | ✓ |
| Policy template library | - | ✗ |
| SOC2 type ii | - | ✓ |
| ISO 27001 | - | ✗ |
| Pricing model | - | Quote |

*Source: Vioscale. Generated 2026-09-01T14:31:20.177Z. "-" = undocumented, not absent.*