Harvey penetration test
Harvey undergoes third-party penetration testing as part of its SOC 2 Type II program. Below is who performed it and when — the testing firm changes year to year.
Pen-test vendor by year
Unknown. The firm that pen-tested Harvey isn't listed yet.
Frequently asked
- Is Harvey penetration tested?
- Yes — Harvey undergoes third-party penetration testing as part of its security program. The pen-test vendor is listed on its SOC2C profile.
- How often is a SOC 2 penetration test done?
- For SOC 2 Type II, a third-party penetration test is typically performed at least annually, and after significant changes to the system. The testing firm often changes year to year.
- Does Harvey share its penetration test report?
- Harvey hasn't listed a penetration test report on SOC2C. Pen-test summaries are usually shared with customers under NDA.