When should the pen test occur?

The timing for your pen test may differ depending on your audit type, SOC 2 Type 1 or SOC 2 Type 2, as well as auditor requirements. We'd recommend selecting an auditor before moving forward with your pen test. 

• SOC 2 Type 1: Pen test can have taken place anytime in the prior 12 months from the report date
• SOC 2 Type 2: Pen test has to occur during the audit period 

Does Secureframe have a recommend pen test partner?

More information about our Pen Testing Partners can be found here.