SOC2C

SSAE 16 penetration test

SSAE 16's penetration testing isn't listed on SOC2C yet. A SOC 2 Type II program typically includes periodic third-party penetration tests.

Pen-test vendor by year

Unknown. The firm that pen-tested SSAE 16 isn't listed yet.

Claim this profile to add it.

Frequently asked

Is SSAE 16 penetration tested?
SSAE 16 hasn't listed its penetration testing on SOC2C yet. SOC 2 Type II programs typically include periodic third-party penetration tests.
How often is a SOC 2 penetration test done?
For SOC 2 Type II, a third-party penetration test is typically performed at least annually, and after significant changes to the system. The testing firm often changes year to year.
Does SSAE 16 share its penetration test report?
SSAE 16 hasn't listed a penetration test report on SOC2C. Pen-test summaries are usually shared with customers under NDA.

See SSAE 16's full SOC 2 profile →