Security
at GhostEye

We protect customer information through security controls, regular testing, and independent assessments. Explore our security program and request supporting documentation through our Trust Center.

Visit our Trust Center

How we approach security.

  1. Protect customer information

  2. Test and improve our platform

  3. Document our security practices

Compliance and Accreditation

Our security program combines external assessments with regular testing of our platform.

SOC 2 Type II

GhostEye has completed a SOC 2 Type II examination, covering the design and operating effectiveness of controls over the assessment period.

Annual Penetration Testing

We conduct annual penetration tests of our SaaS platform to identify vulnerabilities and guide security improvements.

Request Security Documentation ↗

Ongoing Compliance Initiatives

We are pursuing the following standards and regulatory requirements:

  • ISO 27001
  • GDPR
  • HIPAA
  • FedRAMP 20x

Our federal readiness work includes evaluating applicable NIST SP 800-53 controls and the requirements of the selected FedRAMP certification path.

Penetration Testing

GhostEye conducts annual penetration tests of its SaaS platform. These assessments identify vulnerabilities and help guide improvements to platform security.

Request penetration testing documentation through our Trust Center to support your assessment of GhostEye.

Request Security Documentation ↗

Security Review

Our Trust Center brings together the security documentation you need to evaluate GhostEye. Request access to our SOC 2 report, penetration testing documentation, and supporting security materials in one place.

Request Security Documentation ↗

For questions specific to your organization’s security review, contact our team. Let us know the security requirements your organization needs to assess.