SOC2C

Sprig penetration test

Sprig undergoes third-party penetration testing as part of its SOC 2 Type II program. Below is who performed it and when — the testing firm changes year to year.

Pen-test vendor by year

Unknown. The firm that pen-tested Sprig isn't listed yet.

Claim this profile to add it.

Frequently asked

Is Sprig penetration tested?
Yes — Sprig undergoes third-party penetration testing as part of its security program. The pen-test vendor is listed on its SOC2C profile.
How often is a SOC 2 penetration test done?
For SOC 2 Type II, a third-party penetration test is typically performed at least annually, and after significant changes to the system. The testing firm often changes year to year.
Does Sprig share its penetration test report?
Sprig publishes a penetration test summary on its trust center. You can request access through SOC2C.

See Sprig's full SOC 2 profile →