SOC 2
Control monitoring and identification of vulnerabilities.
home / compliance
compliance
Penetration testing for compliance: SOC 2, PCI DSS, ISO 27001
Standards require an independent and traceable security test. We produce the evidence. Whoever certifies or audits remains the judge.
PCI DSS
Penetration testing for requirement 11.4 on the cardholder data environment.
ISO 27001
Technical vulnerability management and security testing.
GDPR
Regular testing of technical measures, Article 32.
NIS2
Vulnerability handling and verification of the effectiveness of measures.
at a glance
Who judges, what we produce.
| Standard | Who judges | What we produce |
|---|---|---|
| SOC 2 (CC4.1, CC7.1) | Independent auditor (CPA firm) | Test report, verification of fixes, scope letter |
| PCI DSS (requirement 11.4) | QSA | External and internal tests, segmentation check, confirmation |
| ISO 27001 (A.8.8, A.8.29) | Accredited certification body | Traceable report, fix log |
| GDPR (Article 32) | Supervisory authority | Test report, documented technical measures |
| NIS2 (Article 21) | National authority and auditors | Signed scope, reports for management and technical staff |
Limits. We do not issue certifications or compliance opinions. We do not replace the auditor, the QSA or the certification body.