Return
-
Title
Penetration Testing Policy for One Identity Hosted Products -
Description
One Identity does not permit customers to perform penetration testing on its hosted or cloud-based services and infrastructure.
-
Cause
One Identity maintains a robust, centralized security program that includes annual third-party penetration testing on applicable products and services. These tests are conducted by independent security firms and follow industry best practices.
-
Resolution
- One Identity performs penetration testing on an annual basis.
- Executive summary reports (and other relevant security documentation) are made available through the Trust Center
- Customers can request access to the Trust Center to review these penetration testing executive summaries along with additional security and compliance artifacts (such as SOC reports, ISO certifications, etc.).
If you require further details or have specific compliance needs, please contact your One Identity account representative or submit a support case.