delve fabricated 494 reports. but even the "real" SOC 2 pentests are mostly theater. (opens in new tab)

--- title: "SOC 2 Penetration Testing Requirements: The Complete Technical Guide for 2026" description: Learn SOC 2 penetration testing requirements, including CC7.1 controls, audit evidence, scoping, and retest expectations for Type I and Type II. published: "Apr 8, 2026, 11:07 AM UTC" --- The auditor sits across from your engineering lead. The SOC 2 Type II audit is in its third day. The auditor pulls up the penetration testing section of the audit program. "Can you show me evidence that ...