[tptacek]

SOC2 is definitely not the highest industry standard for security (also: save yourself some money: nobody cares if you have availability attested).

[winstonp]

when I did startups, we had multiple companies who would not sign deals until our SOC2 was complete

[tptacek]

I don't want to do a whole thread about SOC2 here, just wanted to snipe at a bit of marketing messaging. :)

For their market maybe that line works fine. It just trips a security cool kid tripwire.

[dearilos]

Love it :) Thank you!