delve fabricated 494 reports. but even the "real" SOC 2 pentests are mostly theater. (opens in new tab)

SOC 2 auditors don't just ask if you ran a pentest, they ask if exploitable vulnerabilities were found, fixed, and independently verified. Here's the complete evidence package you need for Type I and Type II.

A reddit dedicated to the profession of Computer System Administration.