437 Scytale Reviews

Scytale brought structure and clarity to what initially felt like an overwhelming process. Their approach was hands-on and pragmatic, they didn’t just hand us templates, but helped tailor everything to our actual workflows. The personal guidance and responsiveness of their consultants made a huge difference, especially when preparing for the audit. Review collected by and hosted on G2.com.
It was a bit more work than anticipated/communicated. But that said, the Scytale team was open to feedback and helped us adjust things quickly. Review collected by and hosted on G2.com.

The best part about working with Scytale is the amazing support from the team. Jess and Nicole are always available, extremely responsive, and make the entire process much easier. Their clear guidance and willingness to help whenever I have questions really simplify what could otherwise be a complicated and overwhelming process. The platform itself is also very intuitive and makes evidence collection organized and efficient. Review collected by and hosted on G2.com.
So far, I haven't encountered any major issues. If I had to mention something, some of the evidence requests can feel a bit overwhelming at first but thanks to the team's guidance and support, it's been very manageable. Review collected by and hosted on G2.com.

This is our 2nd year with Scytale and everything has gone pretty smoothly. The software is intuitive to use and has evolved since we started. But for us, the real value is the combination of service and the software Scytale provides. We use Slack for all internal communication and being able to use Slack with Scytale has been a big bonus. Our key contact from Scytale has been extremely helpful and quick to respond. Currently, we use Scytale to maintain ISO27001:2022 compliance, so we haven't used all the possibilities they offer. Review collected by and hosted on G2.com.
The only thing that comes to my mind is that the tool where policy documents are edited could be better, but it is mostly editing/formatting issues that we've seen, nothing major. Review collected by and hosted on G2.com.
What I like best about Scytale is how it turns the often overwhelming world of security compliance into a streamlined, manageable, and even pleasant experience.
The platform has a clean, intuitive interface that makes it easy to understand where you stand in your compliance journey at any moment. Whether you’re managing ISO 27001, SOC 2, or another framework, Scytale provides clear task breakdowns, automated evidence tracking, and simple dashboards that save time and reduce confusion.
Getting started with Scytale was smoother than expected. The onboarding process is well-guided, and the integrations with systems like G Suite, AWS, and Git repositories are painless to set up. It feels like they built the product with real security and engineering teams in mind — no unnecessary complexity.
Scytale’s support team (shout out to CJ Bergs) is easily one of the best aspects of the platform. They’re responsive, knowledgeable, and genuinely invested in helping you succeed. Whether I’ve had technical questions or needed guidance on control interpretations, their team has always stepped in quickly and helpfully.
Scytale isn’t just a compliance platform — it feels like a collaborative partner that understands the demands of audits and operational security. Whether you’re starting out or optimizing a mature compliance program, it’s a platform I would confidently recommend. Review collected by and hosted on G2.com.
While Scytale offers a strong foundation and easy integrations, there are still gaps in support for several major systems — particularly in the areas of change management, vulnerability scanning, and security monitoring.
For example:
• Some widely used tools in SIEM, SOAR, and DevSecOps pipelines aren’t yet natively supported.
• The vulnerability management integration ecosystem feels limited compared to platforms like Drata or Vanta.
• In change management, integrations beyond the basics (like Jira) are lacking — especially for teams using more complex ITSM workflows (e.g., ServiceNow, IBM Maximo IT).
This means there’s still manual work or workaround configuration needed to keep those areas in sync, which slightly reduces the overall automation promise for more mature or complex environments.
That said, the team seems receptive to feedback, and I hope to see continued expansion in this area soon. Review collected by and hosted on G2.com.
The attention and guidance. Jessica knows the ins and outs, and for particularly unique and difficult situations in our company's situation she is able to get the answers from the Scytale team and keep us moving forward! Overall easy to use and track progress. Review collected by and hosted on G2.com.
The interface is sometimes overwhelming. I sometimes have trouble keeping track of which items need my immediate attention and which can wait. Also uploading evidence is not as streamlined as I had hoped. It still requires a lot of Manual effort, but Jessica helps guide us for all that. Review collected by and hosted on G2.com.

What I appreciate most about Scytale is how it simplified our SOC 2 readiness process through effective automation. The platform's centralized approach eliminated the need for multiple tools, bringing all our compliance requirements into a single hub. Their automated evidence collection capabilities significantly reduced manual documentation work, while the continuous control monitoring gave us real-time visibility into our compliance status. The dedicated compliance expert services provided tailored guidance specific to our SOC 2 journey, helping us interpret requirements and implement appropriate controls. We particularly valued how Scytale's automated user access reviews and vendor risk management features addressed key SOC 2 control areas that would have otherwise been time-consuming to manage manually. The platform helped us approach our SOC 2 audit with confidence rather than anxiety. Review collected by and hosted on G2.com.
There's nothing specific that I've come across. Review collected by and hosted on G2.com.
Scytale made our compliance process incredibly smooth and efficient. The platform’s automation features reduced our manual effort dramatically, and the integrations with our existing tools made onboarding seamless. Most importantly, their support team is world-class—knowledgeable, proactive, and always available to guide us through each step of the journey. Review collected by and hosted on G2.com.
There are a few minor UX quirks that could be improved to make navigation more intuitive, especially when managing multiple frameworks simultaneously. But overall, these are negligible and haven’t impacted the effectiveness or reliability of the platform. Review collected by and hosted on G2.com.

The Scytale team was alway availiable to help, they provided clear guidelines of what we should prepare for each weekly meeting and that made the SoC2 go easy on everyone Review collected by and hosted on G2.com.
The instructors could not always keep up with the platform notifications even when they were tagged in the comments. Sometimes their reply took more than 3-4 days which made the process a bit longer. Review collected by and hosted on G2.com.

Our ISO 27001 certification process is (as of now) smooth and efficient, thanks to Scytale's structured approach and expert guidance. A standout in our experience is Mischa Boddenberg, who not only bridged the language gap seamlessly but also provided deep knowledge of ISO requirements. His pragmatic support, clear explanations, and prompt responses made the process significantly easier. Review collected by and hosted on G2.com.
There isn’t much to dislike. If anything, the certification process itself is inherently complex, but Scytale’s support mitigated many of the typical challenges. Only thing to mention were struggels in initial integration tasks, but these also could be resolved quickly. Review collected by and hosted on G2.com.

Scytale provided an efficient and structured approach to achieving HIPAA compliance for Health Data Works. Their expertise in regulatory frameworks, combined with automated compliance tracking, streamlined the process significantly. The platform’s intuitive dashboard and continuous monitoring features made compliance management more proactive and less time-consuming.
However, the real game-changer was the inclusion of expert consulting services. Ronan Grobler, our assigned consultant, was outstanding—his deep knowledge of HIPAA, hands-on guidance, and strategic approach made all the difference. He not only helped us navigate risk assessments, and gap analysis but also tailored recommendations to our specific healthtech needs. Having this level of personalized expertise alongside the platform was a huge advantage that set Scytale apart from other compliance solutions.
Another major benefit was the pricing structure, which was actually lower than competitors who don’t even include dedicated consulting. The combination of an advanced compliance platform with expert guidance made Scytale a cost-effective and highly valuable solution. Review collected by and hosted on G2.com.
onestly, not much to comment here. The platform works well, and the support team is excellent. If anything, there are some minor UX/UI areas that could be slightly refined for an even smoother experience, but nothing that significantly impacts functionality or value. Review collected by and hosted on G2.com.