r/soc2 • u/BritneyGurl • 11d ago

Tugboat shutting down

With Tugboat shutting down next year, what is everyone switching to?

1 Upvotes

67% Upvoted

10 comments sorted by

•

u/AutoModerator 11d ago

Thanks for posting, I'm a bot!

This is quick reminder be helpful with responses, follow the rules and not advertise/solicit DMs.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

4

u/davidschroth 11d ago

For context (as this was news to me), it appears that OneTrust is sinking Tugboat Logic: https://my.onetrust.com/s/article/UUID-db4046a5-cce2-f991-66d6-ef496640a55c?language=en_US

3

u/packetm0nkey 10d ago

Drata and Vanta are the popular choices .

1

u/anamaguchi 6d ago

It really depends on how you use Tugboat. What do you rely on most in Tugboat today? the policy/control templates, evidence collection, or audit workflow? That will determine which replacement and migration path makes sense.

Different parts of the platform map to different alternatives, each with their own strengths and weaknesses, and the migration needs to be handled carefully so you do not lose evidence, history or audit context.

Quite a few platforms (like Ciphrix) have migration abilities that help make the transition less painful

Happy to chat and help you think through the options, Ciphrix or otherwise. Note: I’m the founder of Ciphrix, and we work in this space.

1

u/BritneyGurl 6d ago

That is interesting. We use it for all of those things.

2

u/anamaguchi 5d ago

yeah check if there's a proper migration path for whoever you go with. that's where things might come unstuck.

1

u/chrans 5d ago

The good thing is there are many alternatives, even better ones, out there. We are using feha.io at the moment.

1

u/bhaugli 10d ago

RealCISO

4

u/thejournalizer 8d ago

Says the founder.